Play interactive tourEdit tour

Windows Analysis Report
http://algestconsulting20-my.sharepoint.com/:f:/g/personal/jacques_cangah_algest-consulting_com/EkolIGllKGRKhe-gd4i73uMBzF46oqcv00d-WXGnz9D-Fw

Overview

General Information

Sample URL:	http://algestconsulting20-my.sharepoint.com/:f:/g/personal/jacques_cangah_algest-consulting_com/EkolIGllKGRKhe-gd4i73uMBzF46oqcv00d-WXGnz9D-Fw
Analysis ID:	1497974
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Downloads suspicious files via Chrome

HTML page contains obfuscated javascript

Phishing site or detected (based on various text indicators)

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

HTTP GET or POST without a user agent

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

HTML page contains obfuscated javascript

Source: https://zznma8rcuw.dancingseahorses.com/

HTTP Parser: var _0x17d0bb=_0x4400;function _0x4400(_0x33d568,_0x56aee1){var _0x28f930=_0x1e42();return _0x4

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.3	OCR Text: OneDrive T Upload + New Download Sort v El Details My files > Young Engineering Consultancy Services Activity Name v Modified Modified By File size Sharing JACQUES CANGAH - ACCESS HERE TO REVIEW DOCUMENT.url 2 hours ago 64 bytes shared
Source: Chrome DOM: 0.2	OCR Text: New Upload Dawnloed Sart Details My files Young Engineering Consultancy Services c Activity Name Modified Modified By File size Sharing JACQUES CANGAH ACCESS HERE TO REVIEW DOCUMENT.url 2 hours ago 64 bytes Shared
Source: Chrome DOM: 60.4	OCR Text: OneDrive T Upload + New Download Sort v El Details My files > Young Engineering Consultancy Services Activity Name v Modified Modified By File size Sharing o JACQUES CANGAH - ACCESS HERE TO REVIEW DOCUMENT.url 2 hours ago 64 bytes shared

HTML page contains hidden javascript code

Source: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1

HTTP Parser: Base64 decoded: \.\d+))/.test(navigator.userAgent) || /[?&]env=TeamsWebView/.test(location.search) || /Teams\/((?:(\d+)\.)?(?:(\d+)\.)?(?:(\d+)\.\d+))(?:\/(\\d+))?/.test(navigator.userAgent) || window.name ==...

HTML page is missing a favicon

Source: about:blank

HTTP Parser: No favicon

Compliance

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:50054 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.42.65.93:443 -> 192.168.2.4:50696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.4:50734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.71:443 -> 192.168.2.4:50735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.71:443 -> 192.168.2.4:50741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.231.128.59:443 -> 192.168.2.4:50743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.4:50744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.4:50746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.4:50747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.4:50748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.4:50749 version: TLS 1.2

Networking

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.4:56070 -> 1.1.1.1:53

HTTP GET or POST without a user agent

Source: global traffic

HTTP traffic detected: POST /OneCollector/1.0/ HTTP/1.1Accept: */*APIKey: cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521AuthMsaDeviceTicket: t=GwAWAbuEBAAU2qcZHJoKGNizGOeyqM4OaIoSZ0MOZgAAEJanOM/f8BEauEo6GRqguxLgAJt0LBh1uWaBD08sPTthnLouxyOeqq8UXC40zxYtXUeuLL3jc98oc4sgTt8Qg5RgpVyPUGOqQCdIMU+jHj5jPNgpCOYLzgjk7/68jQbYqRpL5buJGDaKHJUU4Qzi5sjC1iwUwrkBZLfklCNSWdGai+iykzR0ELnFD4lJb88vZch+TXuihcRzjbZvJG6mFONQPa3ignNQpsSbQgkMM4xuASI/kaIM+YTU5dBQE1SH8k0CwZj5Yc3H1S94NyGSn+DeuALqccEE8gt3uchW9hnkYs9tmlAQt7GBc9BBk/kSpz+oHgE=&p=Client-Id: NO_AUTHContent-Encoding: deflateContent-Type: application/bond-compact-binaryExpect: 100-continueSDK-Version: EVT-Windows-C++-No-3.4.15.1Upload-Time: 1724407019187Host: self.events.data.microsoft.comContent-Length: 7976Connection: Keep-AliveCache-Control: no-cache

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /personal/jacques_cangah_algest-consulting_com/_layouts/15/guestaccess.aspx?share=EkolIGllKGRKhe-gd4i73uMBzF46oqcv00d-WXGnz9D-Fw HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/jacques_cangah_algest-consulting_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom%2FDocuments%2FYoung%20Engineering%20Consultancy%20Services&ga=1 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg4MTVkMjIzYTYxOGU4MWQyMDU5NjFlYjg5OThjNDcwZjI5OTRjNmZiN2JiMzA4ZDc3NjhmZTUzZjAzYTU0YjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODgxNWQyMjNhNjE4ZTgxZDIwNTk2MWViODk5OGM0NzBmMjk5NGM2ZmI3YmIzMDhkNzc2OGZlNTNmMDNhNTRiMywxMzM2ODg4MDYzMjAwMDAwMDAsMCwxMzM2ODk2NjczMzA0NDI1MTEsMC4wLjAuMCwyNTgsZDBjODVmMDYtMjgzMS00ZWZmLTk1ZmUtYTNhMTkxMzg4MzlmLCwsMzcwZDQ5YTEtODAwNC05MDAwLWMxYjQtMTRkY2I0NDAzYjFjLDM3MGQ0OWExLTgwMDQtOTAwMC1jMWI0LTE0ZGNiNDQwM2IxYyxWUjU4angxcm5VZTZ2V0xTWWlXRmFnLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxODgyMDcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLFN4K2ZxNzV4U21CYmQzRk9FMmZVUWJONnhyVmJGd2dXcm5MdXhiTEhCVEgxZUVrNU5Za2dTSk82MFdzTTFMZG0vcGdFVk12Qk1yWEY4Y1BheG5kcXdkRDV4VXErZzk3d00xZHhxUlAvM0RjdDEwVGY0T3V2WGVOVitScjg1R0plZm1XMXRtczdWMUJTdlBndXo5blpnMlFURHc1cW9wb005TkV3MjUydm9iVW0wRWpsTFM1MXhBV0pLbGtmc1VxNEUrK0o4SHpBKzRKdjZJK3ZlNThFTUZWcE4rYUlLdjFLazc2NlpKNlg2NFVzRnE4eGxoaXEzbFFRNjZWMUtwYXRBVCtzSTB0aTNOKys0UnZJaThFemFHOTh5bkkvT1Z5cGd0WmVBZjNvTXcrQ1N6L1F4Q1BMbVVzelB3YzFvcDZoVWNla05JNHdVOEVsSW5XRHJWNmp4UT09PC9TUD4=
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /personal/jacques_cangah_algest-consulting_com/_api/v2.1/graphql HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zvU84N5Ct6eFW+L&MD=PPmEvP7G HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom%2FDocuments%2FYoung%20Engineering%20Consultancy%20Services&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /personal/jacques_cangah_algest-consulting_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /personal/jacques_cangah_algest-consulting_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom%2FDocuments%27&RootFolder=%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom%2FDocuments%2FYoung%20Engineering%20Consultancy%20Services&TryNewExperienceSingle=TRUE HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /personal/jacques_cangah_algest-consulting_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=true HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveCache-Control: max-age=0Accept: */*Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom%2FDocuments%2FYoung%20Engineering%20Consultancy%20Services&ga=1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg4MTVkMjIzYTYxOGU4MWQyMDU5NjFlYjg5OThjNDcwZjI5OTRjNmZiN2JiMzA4ZDc3NjhmZTUzZjAzYTU0YjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODgxNWQyMjNhNjE4ZTgxZDIwNTk2MWViODk5OGM0NzBmMjk5NGM2ZmI3YmIzMDhkNzc2OGZlNTNmMDNhNTRiMywxMzM2ODg4MDYzMjAwMDAwMDAsMCwxMzM2ODk2NjczMzA0NDI1MTEsMC4wLjAuMCwyNTgsZDBjODVmMDYtMjgzMS00ZWZmLTk1ZmUtYTNhMTkxMzg4MzlmLCwsMzcwZDQ5YTEtODAwNC05MDAwLWMxYjQtMTRkY2I0NDAzYjFjLDM3MGQ0OWExLTgwMDQtOTAwMC1jMWI0LTE0ZGNiNDQwM2IxYyxWUjU4angxcm5VZTZ2V0xTWWlXRmFnLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxODgyMDcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLFN4K2ZxNzV4U21CYmQzRk9FMmZVUWJONnhyVmJGd2dXcm5MdXhiTEhCVEgxZUVrNU5Za2dTSk82MFdzTTFMZG0vcGdFVk12Qk1yWEY4Y1BheG5kcXdkRDV4VXErZzk3d00xZHhxUlAvM0RjdDEwVGY0T3V2WGVOVitScjg1R0plZm1XMXRtczdWMUJTdlBndXo5blpnMlFURHc1cW9wb005TkV3MjUydm9iVW0wRWpsTFM1MXhBV0pLbGtmc1VxNEUrK0o4SHpBKzRKdjZJK3ZlNThFTUZWcE4rYUlLdjFLazc2NlpKNlg2NFVzRnE4eGxoaXEzbFFRNjZWMUtwYXRBVCtzSTB0aTNOKys0UnZJaThFemFHOTh5bkkvT1Z5cGd0WmVBZjNvTXcrQ1N6L1F4Q1BMbVVzelB3YzFvcDZoVWNla05JNHdVOEVsSW5XRHJWNmp4UT09PC9TUD4=; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_vti_bin/afdcache.ashx/_userprofile/userphoto.jpg?_oat_=1724440708_798bc2b0b870a976dfe4c3e8da3f43953d19471b4d22a9ea4e82dc3906c307f0&P1=1724412087&P2=2073235389&P3=1&P4=dWzDvpCaY3UwkaoykWAYy252n6Hhd6Zouz258ioHgq6U%2F2DoyKr0pe4cv5XzFIX1z%2F6Ti2rkx4iAKheFc701eUuK65nGBw%2B8bB3fHlcrAw6OoUXS3%2BhEKCf1kxQeAHLNf69JlT76jXbW4wDE69%2FY7JYROwZBG8HsnNG52%2FYFn0bo9w6ac%2BZmexe7U1EqUQxm0gd14QdJgbq07sxkx3DY7lccNQ22klbdbwwGgJQ%2BlIyhEGOZ5RTQjbfls%2Fm78pb20E56de4yCSCNu1DGsTGVACKVaJwR7BdVzkMbUrEhaz%2FIRbKCFfXJaXCxJCmSe0HWit0LxMi1NfDcZPPAvHAzHA%3D%3D&size=M&accountname=jacques.cangah%40algest-consulting.com HTTP/1.1Host: algestconsulting20.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://algestconsulting20-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_vti_bin/afdcache.ashx/_userprofile/userphoto.jpg?_oat_=1724440708_798bc2b0b870a976dfe4c3e8da3f43953d19471b4d22a9ea4e82dc3906c307f0&P1=1724412087&P2=2073235389&P3=1&P4=dWzDvpCaY3UwkaoykWAYy252n6Hhd6Zouz258ioHgq6U%2F2DoyKr0pe4cv5XzFIX1z%2F6Ti2rkx4iAKheFc701eUuK65nGBw%2B8bB3fHlcrAw6OoUXS3%2BhEKCf1kxQeAHLNf69JlT76jXbW4wDE69%2FY7JYROwZBG8HsnNG52%2FYFn0bo9w6ac%2BZmexe7U1EqUQxm0gd14QdJgbq07sxkx3DY7lccNQ22klbdbwwGgJQ%2BlIyhEGOZ5RTQjbfls%2Fm78pb20E56de4yCSCNu1DGsTGVACKVaJwR7BdVzkMbUrEhaz%2FIRbKCFfXJaXCxJCmSe0HWit0LxMi1NfDcZPPAvHAzHA%3D%3D&size=M&accountname=jacques.cangah%40algest-consulting.com HTTP/1.1Host: algestconsulting20.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22spfx%22]&languages=%5B%5D HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: zznma8rcuw.dancingseahorses.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://algestconsulting20-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/jacques_cangah_algest-consulting_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_layouts/15/1033/styles/corev15.css?rev=h9vFyUYAyhgZCsT0jbIsLA%3D%3DTAG487 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG487 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=CA1RzHCa2LP9T3XLYDFd-6cOUa7xg1ClsoWq2gRUgCUoqyl6DYt3XYZquxfF9ju0wVx94QyTZPo4bTP-Y-OAhCTxvLvQpESSghbmp7Y2obTwOz2KCFx5Ym3_rQiT1VDFqS-9kbHhf6KltDXcFCJG_8lPjIXYl28xYLEgQKpXZ7KLx2c3XF-4jzJnIjwcS5MR0&t=7a0cc936 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=VnSK21rsXyYAAjtU7l6p9Lhac2AAGDAFgpN6YvOujzQDE5YlKEYWNwqmZ5DHVrWkk_HusT5JmQThPjMFIa4otLXrBAO1KMjUTEUvLo0pn94cH3rsLiQa8RpxsDqfZWqMKdoew5N4OBUQttwARd19BiCjL-L0HkD-q2g2jKrntwKCKS7ERyA45_-sSph3xOCQ0&t=7a0cc936 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=mgEKmgTTrta1siETEPJ10r3RyJLHgn5LrsHdzqDT6ahf6RO684360hWbVdvjleIf7CjEg35G10CqxcMyt4Aakvuz9VseoAEcuKa6ckYLdgc1&t=638588829843638381 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=mgEKmgTTrta1siETEPJ10r3RyJLHgn5LrsHdzqDT6ahf6RO684360hWbVdvjleIf7CjEg35G10CqxcMyt4Aakvuz9VseoAEcuKa6ckYLdgc1&t=638588829843638381 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=CA1RzHCa2LP9T3XLYDFd-6cOUa7xg1ClsoWq2gRUgCUoqyl6DYt3XYZquxfF9ju0wVx94QyTZPo4bTP-Y-OAhCTxvLvQpESSghbmp7Y2obTwOz2KCFx5Ym3_rQiT1VDFqS-9kbHhf6KltDXcFCJG_8lPjIXYl28xYLEgQKpXZ7KLx2c3XF-4jzJnIjwcS5MR0&t=7a0cc936 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?9bc2d24a230a1ff9e6e648952ae34746 HTTP/1.1Host: 5b326e053493e095ae1d14c8fbcd2b2f.fp.measure.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://algestconsulting20-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?50224977dc5f6bd8a940a4aabaf3a76e HTTP/1.1Host: 5b326e053493e095ae1d14c8fbcd2b2f.fp.measure.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://algestconsulting20-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?9bc2d24a230a1ff9e6e648952ae34746 HTTP/1.1Host: 5b326e053493e095ae1d14c8fbcd2b2f.fp.measure.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?50224977dc5f6bd8a940a4aabaf3a76e HTTP/1.1Host: 5b326e053493e095ae1d14c8fbcd2b2f.fp.measure.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?5ebb6121c5098b9dcd2a8dc83daa7dda HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://algestconsulting20-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?9f6d87312cd296a936c053471b00027a HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://algestconsulting20-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?5ebb6121c5098b9dcd2a8dc83daa7dda HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?9f6d87312cd296a936c053471b00027a HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?7c593201886e8d906f9dbaff265c11e9 HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://algestconsulting20-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?f2716665f51ae88e3664d6442269ca39 HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://algestconsulting20-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?7c593201886e8d906f9dbaff265c11e9 HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?f2716665f51ae88e3664d6442269ca39 HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/jacques_cangah_algest-consulting_com HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg4MTVkMjIzYTYxOGU4MWQyMDU5NjFlYjg5OThjNDcwZjI5OTRjNmZiN2JiMzA4ZDc3NjhmZTUzZjAzYTU0YjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODgxNWQyMjNhNjE4ZTgxZDIwNTk2MWViODk5OGM0NzBmMjk5NGM2ZmI3YmIzMDhkNzc2OGZlNTNmMDNhNTRiMywxMzM2ODg4MDYzMjAwMDAwMDAsMCwxMzM2ODk2NjczMzA0NDI1MTEsMC4wLjAuMCwyNTgsZDBjODVmMDYtMjgzMS00ZWZmLTk1ZmUtYTNhMTkxMzg4MzlmLCwsMzcwZDQ5YTEtODAwNC05MDAwLWMxYjQtMTRkY2I0NDAzYjFjLDM3MGQ0OWExLTgwMDQtOTAwMC1jMWI0LTE0ZGNiNDQwM2IxYyxWUjU4angxcm5VZTZ2V0xTWWlXRmFnLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxODgyMDcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLFN4K2ZxNzV4U21CYmQzRk9FMmZVUWJONnhyVmJGd2dXcm5MdXhiTEhCVEgxZUVrNU5Za2dTSk82MFdzTTFMZG0vcGdFVk12Qk1yWEY4Y1BheG5kcXdkRDV4VXErZzk3d00xZHhxUlAvM0RjdDEwVGY0T3V2WGVOVitScjg1R0plZm1XMXRtczdWMUJTdlBndXo5blpnMlFURHc1cW9wb005TkV3MjUydm9iVW0wRWpsTFM1MXhBV0pLbGtmc1VxNEUrK0o4SHpBKzRKdjZJK3ZlNThFTUZWcE4rYUlLdjFLazc2NlpKNlg2NFVzRnE4eGxoaXEzbFFRNjZWMUtwYXRBVCtzSTB0aTNOKys0UnZJaThFemFHOTh5bkkvT1Z5cGd0WmVBZjNvTXcrQ1N6L1F4Q1BMbVVzelB3YzFvcDZoVWNla05JNHdVOEVsSW5XRHJWNmp4UT09PC9TUD4=; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /personal/jacques_cangah_algest-consulting_com/_layouts/15/AccessDenied.aspx?Source=https%3A%2F%2Falgestconsulting20%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom&correlation=420d49a1%2Db0a2%2D9000%2Dd0af%2D70051ed8ef5b HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg4MTVkMjIzYTYxOGU4MWQyMDU5NjFlYjg5OThjNDcwZjI5OTRjNmZiN2JiMzA4ZDc3NjhmZTUzZjAzYTU0YjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODgxNWQyMjNhNjE4ZTgxZDIwNTk2MWViODk5OGM0NzBmMjk5NGM2ZmI3YmIzMDhkNzc2OGZlNTNmMDNhNTRiMywxMzM2ODg4MDYzMjAwMDAwMDAsMCwxMzM2ODk2NjczMzA0NDI1MTEsMC4wLjAuMCwyNTgsZDBjODVmMDYtMjgzMS00ZWZmLTk1ZmUtYTNhMTkxMzg4MzlmLCwsMzcwZDQ5YTEtODAwNC05MDAwLWMxYjQtMTRkY2I0NDAzYjFjLDM3MGQ0OWExLTgwMDQtOTAwMC1jMWI0LTE0ZGNiNDQwM2IxYyxWUjU4angxcm5VZTZ2V0xTWWlXRmFnLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxODgyMDcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLFN4K2ZxNzV4U21CYmQzRk9FMmZVUWJONnhyVmJGd2dXcm5MdXhiTEhCVEgxZUVrNU5Za2dTSk82MFdzTTFMZG0vcGdFVk12Qk1yWEY4Y1BheG5kcXdkRDV4VXErZzk3d00xZHhxUlAvM0RjdDEwVGY0T3V2WGVOVitScjg1R0plZm1XMXRtczdWMUJTdlBndXo5blpnMlFURHc1cW9wb005TkV3MjUydm9iVW0wRWpsTFM1MXhBV0pLbGtmc1VxNEUrK0o4SHpBKzRKdjZJK3ZlNThFTUZWcE4rYUlLdjFLazc2NlpKNlg2NFVzRnE4eGxoaXEzbFFRNjZWMUtwYXRBVCtzSTB0aTNOKys0UnZJaThFemFHOTh5bkkvT1Z5cGd0WmVBZjNvTXcrQ1N6L1F4Q1BMbVVzelB3YzFvcDZoVWNla05JNHdVOEVsSW5XRHJWNmp4UT09PC9TUD4=; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /_layouts/15/1033/styles/errordisplay.css?rev=0exfFR1nIzLRO1bRiOlTVA%3D%3DTAG487 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/AccessDenied.aspx?Source=https%3A%2F%2Falgestconsulting20%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom&correlation=420d49a1%2Db0a2%2D9000%2Dd0af%2D70051ed8ef5bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=CA1RzHCa2LP9T3XLYDFd-6cOUa7xg1ClsoWq2gRUgCUoqyl6DYt3XYZquxfF9ju0wVx94QyTZPo4bTP-Y-OAhCTxvLvQpESSghbmp7Y2obTwOz2KCFx5Ym3_rQiT1VDFqS-9kbHhf6KltDXcFCJG_8lPjIXYl28xYLEgQKpXZ7KLx2c3XF-4jzJnIjwcS5MR0&t=74258c30 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/AccessDenied.aspx?Source=https%3A%2F%2Falgestconsulting20%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom&correlation=420d49a1%2Db0a2%2D9000%2Dd0af%2D70051ed8ef5bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg4MTVkMjIzYTYxOGU4MWQyMDU5NjFlYjg5OThjNDcwZjI5OTRjNmZiN2JiMzA4ZDc3NjhmZTUzZjAzYTU0YjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODgxNWQyMjNhNjE4ZTgxZDIwNTk2MWViODk5OGM0NzBmMjk5NGM2ZmI3YmIzMDhkNzc2OGZlNTNmMDNhNTRiMywxMzM2ODg4MDYzMjAwMDAwMDAsMCwxMzM2ODk2NjczMzA0NDI1MTEsMC4wLjAuMCwyNTgsZDBjODVmMDYtMjgzMS00ZWZmLTk1ZmUtYTNhMTkxMzg4MzlmLCwsMzcwZDQ5YTEtODAwNC05MDAwLWMxYjQtMTRkY2I0NDAzYjFjLDM3MGQ0OWExLTgwMDQtOTAwMC1jMWI0LTE0ZGNiNDQwM2IxYyxWUjU4angxcm5VZTZ2V0xTWWlXRmFnLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxODgyMDcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLFN4K2ZxNzV4U21CYmQzRk9FMmZVUWJONnhyVmJGd2dXcm5MdXhiTEhCVEgxZUVrNU5Za2dTSk82MFdzTTFMZG0vcGdFVk12Qk1yWEY4Y1BheG5kcXdkRDV4VXErZzk3d00xZHhxUlAvM0RjdDEwVGY0T3V2WGVOVitScjg1R0plZm1XMXRtczdWMUJTdlBndXo5blpnMlFURHc1cW9wb005TkV3MjUydm9iVW0wRWpsTFM1MXhBV0pLbGtmc1VxNEUrK0o4SHpBKzRKdjZJK3ZlNThFTUZWcE4rYUlLdjFLazc2NlpKNlg2NFVzRnE4eGxoaXEzbFFRNjZWMUtwYXRBVCtzSTB0aTNOKys0UnZJaThFemFHOTh5bkkvT1Z5cGd0WmVBZjNvTXcrQ1N6L1F4Q1BMbVVzelB3YzFvcDZoVWNla05JNHdVOEVsSW5XRHJWNmp4UT09PC9TUD4=; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=VnSK21rsXyYAAjtU7l6p9Lhac2AAGDAFgpN6YvOujzQDE5YlKEYWNwqmZ5DHVrWkk_HusT5JmQThPjMFIa4otLXrBAO1KMjUTEUvLo0pn94cH3rsLiQa8RpxsDqfZWqMKdoew5N4OBUQttwARd19BiCjL-L0HkD-q2g2jKrntwKCKS7ERyA45_-sSph3xOCQ0&t=74258c30 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/AccessDenied.aspx?Source=https%3A%2F%2Falgestconsulting20%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom&correlation=420d49a1%2Db0a2%2D9000%2Dd0af%2D70051ed8ef5bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=mgEKmgTTrta1siETEPJ10r3RyJLHgn5LrsHdzqDT6ahf6RO684360hWbVdvjleIf7CjEg35G10CqxcMyt4Aakvuz9VseoAEcuKa6ckYLdgc1&t=638555714997292641 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/AccessDenied.aspx?Source=https%3A%2F%2Falgestconsulting20%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom&correlation=420d49a1%2Db0a2%2D9000%2Dd0af%2D70051ed8ef5bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/BlueArrow.gif HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/AccessDenied.aspx?Source=https%3A%2F%2Falgestconsulting20%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom&correlation=420d49a1%2Db0a2%2D9000%2Dd0af%2D70051ed8ef5bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=VnSK21rsXyYAAjtU7l6p9Lhac2AAGDAFgpN6YvOujzQDE5YlKEYWNwqmZ5DHVrWkk_HusT5JmQThPjMFIa4otLXrBAO1KMjUTEUvLo0pn94cH3rsLiQa8RpxsDqfZWqMKdoew5N4OBUQttwARd19BiCjL-L0HkD-q2g2jKrntwKCKS7ERyA45_-sSph3xOCQ0&t=74258c30 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=CA1RzHCa2LP9T3XLYDFd-6cOUa7xg1ClsoWq2gRUgCUoqyl6DYt3XYZquxfF9ju0wVx94QyTZPo4bTP-Y-OAhCTxvLvQpESSghbmp7Y2obTwOz2KCFx5Ym3_rQiT1VDFqS-9kbHhf6KltDXcFCJG_8lPjIXYl28xYLEgQKpXZ7KLx2c3XF-4jzJnIjwcS5MR0&t=74258c30 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=mgEKmgTTrta1siETEPJ10r3RyJLHgn5LrsHdzqDT6ahf6RO684360hWbVdvjleIf7CjEg35G10CqxcMyt4Aakvuz9VseoAEcuKa6ckYLdgc1&t=638555714997292641 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/BlueArrow.gif HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zvU84N5Ct6eFW+L&MD=PPmEvP7G HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /personal/jacques_cangah_algest-consulting_com/_layouts/15/AccessDenied.aspx?correlation=490d49a1%2De0ee%2D9000%2Dc1b4%2D11e265fe48b5 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /_layouts/15/userphoto.aspx?size=S HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /_layouts/15/userphoto.aspx?size=M HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /_layouts/15/userphoto.aspx?size=L HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg4MTVkMjIzYTYxOGU4MWQyMDU5NjFlYjg5OThjNDcwZjI5OTRjNmZiN2JiMzA4ZDc3NjhmZTUzZjAzYTU0YjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODgxNWQyMjNhNjE4ZTgxZDIwNTk2MWViODk5OGM0NzBmMjk5NGM2ZmI3YmIzMDhkNzc2OGZlNTNmMDNhNTRiMywxMzM2ODg4MDYzMjAwMDAwMDAsMCwxMzM2ODk2NjczMzA0NDI1MTEsMC4wLjAuMCwyNTgsZDBjODVmMDYtMjgzMS00ZWZmLTk1ZmUtYTNhMTkxMzg4MzlmLCwsMzcwZDQ5YTEtODAwNC05MDAwLWMxYjQtMTRkY2I0NDAzYjFjLDM3MGQ0OWExLTgwMDQtOTAwMC1jMWI0LTE0ZGNiNDQwM2IxYyxWUjU4angxcm5VZTZ2V0xTWWlXRmFnLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxODgyMDcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLFN4K2ZxNzV4U21CYmQzRk9FMmZVUWJONnhyVmJGd2dXcm5MdXhiTEhCVEgxZUVrNU5Za2dTSk82MFdzTTFMZG0vcGdFVk12Qk1yWEY4Y1BheG5kcXdkRDV4VXErZzk3d00xZHhxUlAvM0RjdDEwVGY0T3V2WGVOVitScjg1R0plZm1XMXRtczdWMUJTdlBndXo5blpnMlFURHc1cW9wb005TkV3MjUydm9iVW0wRWpsTFM1MXhBV0pLbGtmc1VxNEUrK0o4SHpBKzRKdjZJK3ZlNThFTUZWcE4rYUlLdjFLazc2NlpKNlg2NFVzRnE4eGxoaXEzbFFRNjZWMUtwYXRBVCtzSTB0aTNOKys0UnZJaThFemFHOTh5bkkvT1Z5cGd0WmVBZjNvTXcrQ1N6L1F4Q1BMbVVzelB3YzFvcDZoVWNla05JNHdVOEVsSW5XRHJWNmp4UT09PC9TUD4=; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx?odsp-web-prod_2024-08-16.004 HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg4MTVkMjIzYTYxOGU4MWQyMDU5NjFlYjg5OThjNDcwZjI5OTRjNmZiN2JiMzA4ZDc3NjhmZTUzZjAzYTU0YjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODgxNWQyMjNhNjE4ZTgxZDIwNTk2MWViODk5OGM0NzBmMjk5NGM2ZmI3YmIzMDhkNzc2OGZlNTNmMDNhNTRiMywxMzM2ODg4MDYzMjAwMDAwMDAsMCwxMzM2ODk2NjczMzA0NDI1MTEsMC4wLjAuMCwyNTgsZDBjODVmMDYtMjgzMS00ZWZmLTk1ZmUtYTNhMTkxMzg4MzlmLCwsMzcwZDQ5YTEtODAwNC05MDAwLWMxYjQtMTRkY2I0NDAzYjFjLDM3MGQ0OWExLTgwMDQtOTAwMC1jMWI0LTE0ZGNiNDQwM2IxYyxWUjU4angxcm5VZTZ2V0xTWWlXRmFnLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxODgyMDcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLFN4K2ZxNzV4U21CYmQzRk9FMmZVUWJONnhyVmJGd2dXcm5MdXhiTEhCVEgxZUVrNU5Za2dTSk82MFdzTTFMZG0vcGdFVk12Qk1yWEY4Y1BheG5kcXdkRDV4VXErZzk3d00xZHhxUlAvM0RjdDEwVGY0T3V2WGVOVitScjg1R0plZm1XMXRtczdWMUJTdlBndXo5blpnMlFURHc1cW9wb005TkV3MjUydm9iVW0wRWpsTFM1MXhBV0pLbGtmc1VxNEUrK0o4SHpBKzRKdjZJK3ZlNThFTUZWcE4rYUlLdjFLazc2NlpKNlg2NFVzRnE4eGxoaXEzbFFRNjZWMUtwYXRBVCtzSTB0aTNOKys0UnZJaThFemFHOTh5bkkvT1Z5cGd0WmVBZjNvTXcrQ1N6L1F4Q1BMbVVzelB3YzFvcDZoVWNla05JNHdVOEVsSW5XRHJWNmp4UT09PC9TUD4=; FeatureOverrides_experiments=[]; WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /teams-js/2.0.0/js/MicrosoftTeams.min.js HTTP/1.1Host: res.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Origin: https://algestconsulting20-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /:f:/g/personal/jacques_cangah_algest-consulting_com/EkolIGllKGRKhe-gd4i73uMBzF46oqcv00d-WXGnz9D-Fw HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: algestconsulting20-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: spo.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: northeurope0-0.pushnp.svc.ms
Source: global traffic	DNS traffic detected: DNS query: algestconsulting20.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com
Source: global traffic	DNS traffic detected: DNS query: config.fp.measure.office.com
Source: global traffic	DNS traffic detected: DNS query: northeurope1-mediap.svc.ms
Source: global traffic	DNS traffic detected: DNS query: zznma8rcuw.dancingseahorses.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: 5b326e053493e095ae1d14c8fbcd2b2f.fp.measure.office.com
Source: global traffic	DNS traffic detected: DNS query: tr-ooc-acdc.office.com
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: upload.fp.measure.office.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /personal/jacques_cangah_algest-consulting_com/_api/v2.1/graphql HTTP/1.1Host: algestconsulting20-my.sharepoint.comConnection: keep-aliveContent-Length: 507sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/json;odata=verboseContent-Type: application/json;odata=verboseX-ServiceWorker-Strategy: CacheFirstsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://algestconsulting20-my.sharepoint.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://algestconsulting20-my.sharepoint.com/personal/jacques_cangah_algest-consulting_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fjacques%5Fcangah%5Falgest%2Dconsulting%5Fcom%2FDocuments%2FYoung%20Engineering%20Consultancy%20Services&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg4MTVkMjIzYTYxOGU4MWQyMDU5NjFlYjg5OThjNDcwZjI5OTRjNmZiN2JiMzA4ZDc3NjhmZTUzZjAzYTU0YjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODgxNWQyMjNhNjE4ZTgxZDIwNTk2MWViODk5OGM0NzBmMjk5NGM2ZmI3YmIzMDhkNzc2OGZlNTNmMDNhNTRiMywxMzM2ODg4MDYzMjAwMDAwMDAsMCwxMzM2ODk2NjczMzA0NDI1MTEsMC4wLjAuMCwyNTgsZDBjODVmMDYtMjgzMS00ZWZmLTk1ZmUtYTNhMTkxMzg4MzlmLCwsMzcwZDQ5YTEtODAwNC05MDAwLWMxYjQtMTRkY2I0NDAzYjFjLDM3MGQ0OWExLTgwMDQtOTAwMC1jMWI0LTE0ZGNiNDQwM2IxYyxWUjU4angxcm5VZTZ2V0xTWWlXRmFnLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxODgyMDcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLFN4K2ZxNzV4U21CYmQzRk9FMmZVUWJONnhyVmJGd2dXcm5MdXhiTEhCVEgxZUVrNU5Za2dTSk82MFdzTTFMZG0vcGdFVk12Qk1yWEY4Y1BheG5kcXdkRDV4VXErZzk3d00xZHhxUlAvM0RjdDEwVGY0T3V2WGVOVitScjg1R0plZm1XMXRtczdWMUJTdlBndXo5blpnMlFURHc1cW9wb005TkV3MjUydm9iVW0wRWpsTFM1MXhBV0pLbGtmc1VxNEUrK0o4SHpBKzRKdjZJK3ZlNThFTUZWcE4rYUlLdjFLazc2NlpKNlg2NFVzRnE4eGxoaXEzbFFRNjZWMUtwYXRBVCtzSTB0aTNOKys0UnZJaThFemFHOTh5bkkvT1Z5cGd0WmVBZjNvTXcrQ1N6L1F4Q1BMbVVzelB3YzFvcDZoVWNla05JNHdVOEVsSW5XRHJWNmp4UT09PC9TUD4=

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic

HTTP traffic detected: HTTP/1.1 503 Service UnavailableCache-Control: no-storeContent-Length: 8062Content-Type: text/htmlX-Azure-ExternalError: 0x800705b4,DNSTimeoutX-MSEdge-Ref: Ref A: 999427F9125642D69216D3EA9214AFCA Ref B: EWR311000107047 Ref C: 2024-08-23T09:52:47ZDate: Fri, 23 Aug 2024 09:52:49 GMTConnection: close

URLs found in memory or binary data

Source: e7938de8-addb-477c-bb93-407e80c257a3.tmp.0.dr

String found in binary or memory: https://zznma8rcuw.dancingseahorses.com/

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50691
Source: unknown	Network traffic detected: HTTP traffic on port 50749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50696
Source: unknown	Network traffic detected: HTTP traffic on port 50741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 50744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 50742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50669
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50668
Source: unknown	Network traffic detected: HTTP traffic on port 50691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50670
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 50737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:50054 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.42.65.93:443 -> 192.168.2.4:50696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.4:50734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.71:443 -> 192.168.2.4:50735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.71:443 -> 192.168.2.4:50741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.231.128.59:443 -> 192.168.2.4:50743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.4:50744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.4:50746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.4:50747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.4:50748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.4:50749 version: TLS 1.2

System Summary

Downloads suspicious files via Chrome

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File dump: C:\Users\user\Downloads\OneDrive_2024-08-23.zip (copy)

Jump to dropped file

Classification label

Source: classification engine

Classification label: mal52.phis.win@28/3@68/12

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\e7938de8-addb-477c-bb93-407e80c257a3.tmp

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2400 --field-trial-handle=2288,i,12900799888845782979,13107224967221357842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://algestconsulting20-my.sharepoint.com/:f:/g/personal/jacques_cangah_algest-consulting_com/EkolIGllKGRKhe-gd4i73uMBzF46oqcv00d-WXGnz9D-Fw"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2400 --field-trial-handle=2288,i,12900799888845782979,13107224967221357842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected