Edit tour

Windows Analysis Report
https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9

Overview

General Information

Sample URL:	https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9
Analysis ID:	1645557
Infos:

Detection

Score:	2
Range:	0 - 100
Confidence:	100%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML title does not match URL

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2244,i,12547438732382083119,14799488543431638691,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg HTTP/1.1Host: brynnolson-my.sharepoint.comConnection: keep-aliveContent-Length: 1537Cache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Origin: https://brynnolson-my.sharepoint.comContent-Type: application/x-www-form-urlencodedUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_84.3.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_78.3.dr	String found in binary or memory: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/images/256_icone.
Source: chromecache_73.3.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_74.3.dr, chromecache_80.3.dr, chromecache_86.3.dr, chromecache_78.3.dr	String found in binary or memory: https://res-1.cdn.office.net
Source: chromecache_74.3.dr, chromecache_80.3.dr, chromecache_86.3.dr, chromecache_78.3.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.25905.12010/require.js
Source: chromecache_74.3.dr, chromecache_80.3.dr, chromecache_86.3.dr, chromecache_78.3.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-07.002/
Source: chromecache_74.3.dr, chromecache_80.3.dr, chromecache_86.3.dr, chromecache_78.3.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-07.002/spoguestaccesswebpack/spoguestaccess
Source: chromecache_74.3.dr, chromecache_80.3.dr, chromecache_86.3.dr, chromecache_78.3.dr	String found in binary or memory: https://res-2.cdn.office.net/files/odsp-web-prod_2025-03-07.002/
Source: chromecache_74.3.dr, chromecache_80.3.dr, chromecache_86.3.dr, chromecache_78.3.dr	String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49680
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724

Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.6:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.136.10:443 -> 192.168.2.6:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.136.10:443 -> 192.168.2.6:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.136.10:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.235.177:443 -> 192.168.2.6:49740 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir4856_584004825

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir4856_584004825

Jump to behavior

Source: classification engine

Classification label: clean2.win@23/30@8/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2244,i,12547438732382083119,14799488543431638691,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2244,i,12547438732382083119,14799488543431638691,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://brynnolson-my.sharepoint.com/ScriptResource.axd?d=eRJk5DAJoCKnB2UnYx2IEtLj2kZNEY7KlR5gUEL92Bh5OTXjLN3kAkXwcrro8LS1hkJ05RXW0ShuAi9j_NcYpwQkAsvB-w8M-1MTP97zTxQYwvWp9aHf-jWIbj_Dedgfu1rDF0BE74FscA9QLODqnYSrfmGYCYOpNTSoPyX-JshMq_TcPec6eg_X673SkCof0&t=2a9d95e3	0%	Avira URL Cloud	safe
https://brynnolson-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	0%	Avira URL Cloud	safe
https://brynnolson-my.sharepoint.com/WebResource.axd?d=2U5EUaHmI-mMxzWyYkblpnH68_K4zdJutglxUczZZlDuaTYM32kVDMSxfBfGLWskZtLWTjGLN9CkPM_ZDktoEO5k5vo4_hXORY0VMApfSR81&t=638745296777888595	0%	Avira URL Cloud	safe
https://brynnolson-my.sharepoint.com/ScriptResource.axd?d=cbVKQaCZZThYH1DmH3uv0r93xIolfbW_EvH1k3iY_4xgfhZOkb_23bjGyHSytUBFhqCwfmUuiOCJcqWQvqBeIYtcgqvpfH3EH4o5STm16EPGBaDwrYw_uJGLkIc2-Qnrg-jEECNWPS9sm6e4v3wS5l-jq6NGyCIc7JggglkB9fs59pBp57rkhYChMq8gLVUI0&t=2a9d95e3	0%	Avira URL Cloud	safe
https://brynnolson-my.sharepoint.com/_layouts/15/images/microsoft-logo.png	0%	Avira URL Cloud	safe
https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/images/256_icone.	0%	Avira URL Cloud	safe
https://brynnolson-my.sharepoint.com/ScriptResource.axd?d=pLr1_8YCNvKCyOJM-16dJ1r2bc5LuU8n5Tz1FY1QBqNGUJSAjFHc3N-YcBYGExEP4wkgOnT5v-5VqaHDOgePAIfwVhCB6WaXR6PlZi9jm4l8Asjg-lFisSmVKSVOuRW7XamGDP6p3Pu4YXTWNiJgiJrrk4b8XL8d9vwXv0r4e901&t=ffffffffc7a8e318	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	high
a726.dscd.akamai.net	23.206.121.10	true	false	high
www.google.com	142.250.80.100	true	false	high
a1894.dscb.akamai.net	23.55.235.177	true	false	high
brynnolson-my.sharepoint.com	unknown	unknown	false	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://brynnolson-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	false	Avira URL Cloud: safe	unknown
https://brynnolson-my.sharepoint.com/_layouts/15/images/microsoft-logo.png	false	Avira URL Cloud: safe	unknown
https://m365cdn.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=PISCATAWAY&ASN=20940&Country=US&Region=NJ&RequestIdentifier=0.b6f8dc17.1742591068.27406f9b&TotalRTCDNTime=91&CompressionType=&FileSize=215	false		high
https://brynnolson-my.sharepoint.com/ScriptResource.axd?d=pLr1_8YCNvKCyOJM-16dJ1r2bc5LuU8n5Tz1FY1QBqNGUJSAjFHc3N-YcBYGExEP4wkgOnT5v-5VqaHDOgePAIfwVhCB6WaXR6PlZi9jm4l8Asjg-lFisSmVKSVOuRW7XamGDP6p3Pu4YXTWNiJgiJrrk4b8XL8d9vwXv0r4e901&t=ffffffffc7a8e318	false	Avira URL Cloud: safe	unknown
https://brynnolson-my.sharepoint.com/ScriptResource.axd?d=eRJk5DAJoCKnB2UnYx2IEtLj2kZNEY7KlR5gUEL92Bh5OTXjLN3kAkXwcrro8LS1hkJ05RXW0ShuAi9j_NcYpwQkAsvB-w8M-1MTP97zTxQYwvWp9aHf-jWIbj_Dedgfu1rDF0BE74FscA9QLODqnYSrfmGYCYOpNTSoPyX-JshMq_TcPec6eg_X673SkCof0&t=2a9d95e3	false	Avira URL Cloud: safe	unknown
https://brynnolson-my.sharepoint.com/ScriptResource.axd?d=cbVKQaCZZThYH1DmH3uv0r93xIolfbW_EvH1k3iY_4xgfhZOkb_23bjGyHSytUBFhqCwfmUuiOCJcqWQvqBeIYtcgqvpfH3EH4o5STm16EPGBaDwrYw_uJGLkIc2-Qnrg-jEECNWPS9sm6e4v3wS5l-jq6NGyCIc7JggglkB9fs59pBp57rkhYChMq8gLVUI0&t=2a9d95e3	false	Avira URL Cloud: safe	unknown
https://brynnolson-my.sharepoint.com/WebResource.axd?d=2U5EUaHmI-mMxzWyYkblpnH68_K4zdJutglxUczZZlDuaTYM32kVDMSxfBfGLWskZtLWTjGLN9CkPM_ZDktoEO5k5vo4_hXORY0VMApfSR81&t=638745296777888595	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://github.com/jrburke/requirejs	chromecache_84.3.dr	false		high
https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/images/256_icone.	chromecache_78.3.dr	false	Avira URL Cloud: safe	unknown
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js	chromecache_74.3.dr, chromecache_80.3.dr, chromecache_86.3.dr, chromecache_78.3.dr	false		high
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_73.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.80.100	www.google.com	United States	15169	GOOGLEUS	false
23.55.235.177	a1894.dscb.akamai.net	United States	20940	AKAMAI-ASN1EU	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1645557
Start date and time:	2025-03-21 22:02:31 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/30@8/4

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.64.110, 142.251.40.227, 172.253.62.84, 142.251.40.206, 142.250.80.46, 142.250.65.234, 142.250.65.202, 142.250.80.42, 142.251.40.138, 142.251.40.170, 142.250.80.106, 142.250.64.106, 142.251.40.202, 172.217.165.138, 142.250.81.234, 142.250.65.170, 142.251.41.10, 142.250.176.202, 142.250.80.74, 142.251.40.234, 142.250.72.106, 23.210.73.5, 142.250.65.238, 142.251.41.14, 142.250.65.206, 142.251.35.174, 199.232.214.172, 142.250.176.206, 142.250.65.195, 142.251.40.99, 184.31.69.3, 23.206.121.10, 4.245.163.56
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, res-1.cdn.office.net, res-stls-prod.edgesuite.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45032)
Category:	downloaded
Size (bytes):	48023
Entropy (8bit):	5.401828883572592
Encrypted:	false
SSDEEP:	768:Tkv87Oy48mfp21uOFK7t8WYfZuPEdx9vXNxXmWWGjaKE85U2kgqSyc5B:T7O8221Wt86Edx9vXNxXm+5ThqU
MD5:	2F3C7B5C2A78F85326DE7B7E2F735C8B
SHA1:	CD66FC0EC0119A59B3BC4EFBCABE5BF5878472B2
SHA-256:	B9E27F5A69FCE82EB85A33D30DDED8B41949EA98F1E0D6EA677C20E6BF768E0A
SHA-512:	EFED5B3B3480B46567DD61E6ABFF76016021F68CDB48809D75209E4BF5F80C3D661F6B03B6B20F1A1D4171B94F3098D99815742CB84CCC5CCFF1506B5873C65E
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-07.002/spoguestaccesswebpack/spoguestaccess.js
Preview:	/! For license information please see spoguestaccess.js.LICENSE.txt /.document.currentScript,define("@fluentui/react-file-type-icons",[],()=>{var e;return(()=>{"use strict";var t=[e=>{var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.call(o,l)&&(c[l]

Source: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9	HTTP Parser: Number of links: 0
Source: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg	HTTP Parser: Number of links: 0

Source: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9	HTTP Parser: Title: Sharing Link Validation does not match URL
Source: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg	HTTP Parser: Title: Sharing Link Validation does not match URL

Source: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))
Source: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))
Source: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))
Source: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))

Source: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9	HTTP Parser: No <meta name="author".. found
Source: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg	HTTP Parser: No <meta name="author".. found
Source: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg	HTTP Parser: No <meta name="author".. found
Source: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg	HTTP Parser: No <meta name="author".. found

Source: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9	HTTP Parser: No <meta name="copyright".. found
Source: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg	HTTP Parser: No <meta name="copyright".. found
Source: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg	HTTP Parser: No <meta name="copyright".. found
Source: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.40.140
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9 HTTP/1.1Host: brynnolson-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=2U5EUaHmI-mMxzWyYkblpnH68_K4zdJutglxUczZZlDuaTYM32kVDMSxfBfGLWskZtLWTjGLN9CkPM_ZDktoEO5k5vo4_hXORY0VMApfSR81&t=638745296777888595 HTTP/1.1Host: brynnolson-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=pLr1_8YCNvKCyOJM-16dJ1r2bc5LuU8n5Tz1FY1QBqNGUJSAjFHc3N-YcBYGExEP4wkgOnT5v-5VqaHDOgePAIfwVhCB6WaXR6PlZi9jm4l8Asjg-lFisSmVKSVOuRW7XamGDP6p3Pu4YXTWNiJgiJrrk4b8XL8d9vwXv0r4e901&t=ffffffffc7a8e318 HTTP/1.1Host: brynnolson-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=eRJk5DAJoCKnB2UnYx2IEtLj2kZNEY7KlR5gUEL92Bh5OTXjLN3kAkXwcrro8LS1hkJ05RXW0ShuAi9j_NcYpwQkAsvB-w8M-1MTP97zTxQYwvWp9aHf-jWIbj_Dedgfu1rDF0BE74FscA9QLODqnYSrfmGYCYOpNTSoPyX-JshMq_TcPec6eg_X673SkCof0&t=2a9d95e3 HTTP/1.1Host: brynnolson-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=cbVKQaCZZThYH1DmH3uv0r93xIolfbW_EvH1k3iY_4xgfhZOkb_23bjGyHSytUBFhqCwfmUuiOCJcqWQvqBeIYtcgqvpfH3EH4o5STm16EPGBaDwrYw_uJGLkIc2-Qnrg-jEECNWPS9sm6e4v3wS5l-jq6NGyCIc7JggglkB9fs59pBp57rkhYChMq8gLVUI0&t=2a9d95e3 HTTP/1.1Host: brynnolson-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: brynnolson-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: brynnolson-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: brynnolson-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: brynnolson-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: brynnolson-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 21, 2025 22:03:33.617062092 CET	53	49231	1.1.1.1	192.168.2.6
Mar 21, 2025 22:03:33.904896975 CET	53	59948	1.1.1.1	192.168.2.6
Mar 21, 2025 22:03:34.533924103 CET	53	58880	1.1.1.1	192.168.2.6
Mar 21, 2025 22:03:38.059614897 CET	55956	53	192.168.2.6	1.1.1.1
Mar 21, 2025 22:03:38.059937000 CET	49298	53	192.168.2.6	1.1.1.1
Mar 21, 2025 22:03:38.157711983 CET	53	55956	1.1.1.1	192.168.2.6
Mar 21, 2025 22:03:38.158368111 CET	53	49298	1.1.1.1	192.168.2.6
Mar 21, 2025 22:03:39.483516932 CET	50793	53	192.168.2.6	1.1.1.1
Mar 21, 2025 22:03:39.483697891 CET	57220	53	192.168.2.6	1.1.1.1
Mar 21, 2025 22:03:39.624918938 CET	53	57220	1.1.1.1	192.168.2.6
Mar 21, 2025 22:03:39.632368088 CET	53	50793	1.1.1.1	192.168.2.6
Mar 21, 2025 22:03:41.400919914 CET	63048	53	192.168.2.6	1.1.1.1
Mar 21, 2025 22:03:41.401062012 CET	54987	53	192.168.2.6	1.1.1.1
Mar 21, 2025 22:03:41.543247938 CET	53	54987	1.1.1.1	192.168.2.6
Mar 21, 2025 22:03:41.551729918 CET	53	63048	1.1.1.1	192.168.2.6
Mar 21, 2025 22:03:42.170320034 CET	53	62456	1.1.1.1	192.168.2.6
Mar 21, 2025 22:03:51.596134901 CET	53	64585	1.1.1.1	192.168.2.6
Mar 21, 2025 22:03:53.364181995 CET	53	62747	1.1.1.1	192.168.2.6
Mar 21, 2025 22:04:10.560868025 CET	53	58734	1.1.1.1	192.168.2.6
Mar 21, 2025 22:04:30.830375910 CET	138	138	192.168.2.6	192.168.2.255
Mar 21, 2025 22:04:33.458970070 CET	53	51385	1.1.1.1	192.168.2.6
Mar 21, 2025 22:04:33.478360891 CET	53	58437	1.1.1.1	192.168.2.6
Mar 21, 2025 22:04:36.439825058 CET	53	62799	1.1.1.1	192.168.2.6
Mar 21, 2025 22:04:41.952588081 CET	64934	53	192.168.2.6	1.1.1.1
Mar 21, 2025 22:04:41.954301119 CET	62424	53	192.168.2.6	1.1.1.1
Mar 21, 2025 22:04:42.051758051 CET	53	64934	1.1.1.1	192.168.2.6
Mar 21, 2025 22:04:42.053787947 CET	53	62424	1.1.1.1	192.168.2.6

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:03:39 UTC	758	OUT	GET /:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9 HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:03:40 UTC	2041	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 69265 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,0,0,0,0,0,0,0 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 1acb8ca1-6042-8000-4198-9144281f86d5 request-id: 1acb8ca1-6042-8000-4198-9144281f86d5 MS-CV: oYzLGkJgAIBBmJFEKB+G1Q.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=586265bf-5d41-4213-a5eb-ac3185bd2c51&destinationEndpoint=Edge-Prod-EWR31r5d&frontEnd=AFD&RemoteIP=161.77.13.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 627 SPIisLatency: 4 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E306B10E79F94B27A8073677293626A9 Ref B: EWR311000108017 Ref C: 2025-03-21T21:03:40Z Date: Fri, 21 Mar 2025 21:03:39 GMT Connection: close
2025-03-21 21:03:40 UTC	2546	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2025-03-21 21:03:40 UTC	8192	IN	Data Raw: 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e Data Ascii: pe=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-cancel-button,[type=search]::-webkit-search-decoration{-webkit-appearan
2025-03-21 21:03:40 UTC	3727	IN	Data Raw: 32 2e 35 70 78 3b 72 69 67 68 74 3a 31 32 2e 35 70 78 7d 2e 73 68 61 72 69 6e 67 2d 66 6f 72 6d 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 37 29 3b 6d 61 78 2d 77 69 64 74 68 3a 33 36 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 3a 31 33 70 78 20 30 20 31 36 70 78 7d 2e 73 68 61 72 69 6e 67 2d 66 6f 72 6d 20 2e 68 65 61 64 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 31 70 78 3b 68 65 Data Ascii: 2.5px;right:12.5px}.sharing-form{border-radius:6px;box-shadow:0 0 10px 0 rgba(0,0,0,.17);max-width:360px;display:flex;flex-direction:column;margin:13px 0 16px}.sharing-form .header{border-top-left-radius:6px;border-top-right-radius:6px;padding-top:21px;he
2025-03-21 21:03:40 UTC	8192	IN	Data Raw: 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 66 69 6c 65 73 2f 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 35 2d 30 33 2d 30 37 2e 30 30 32 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 77 65 62 70 61 63 6b 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 75 65 4a 2f 57 6d 6e 38 36 43 36 34 57 6a 50 54 44 64 37 59 74 42 6c 4a 36 70 6a 78 34 4e 62 71 5a 33 77 67 35 72 39 32 6a 67 6f 3d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 3c 73 63 72 69 70 74 Data Ascii: crossorigin /><link rel="preload" href="https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-07.002/spoguestaccesswebpack/spoguestaccess.js" as="script" integrity="sha256-ueJ/Wmn86C64WjPTDd7YtBlJ6pjx4NbqZ3wg5r92jgo=" crossorigin="anonymous" /><script
2025-03-21 21:03:40 UTC	8192	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 2e 70 3d 22 22 2c 69 28 69 2e 73 3d 32 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 2c 6e 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: ototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=2);function i(e){if(n[e])return n[e].exports;var t=n[e]={i:e,l:!1,exports:{}};return r[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}var r,n});!function(e,t){"object"==typeof exports&&"undefined"!=typeof
2025-03-21 21:03:40 UTC	8192	IN	Data Raw: 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 73 2e 68 74 6d 6c 23 22 2b 65 29 3b 69 2e 72 65 71 75 69 72 65 54 79 70 65 3d 65 3b 69 2e 72 65 71 75 69 72 65 4d 6f 64 75 6c 65 73 3d 6e 3b 72 26 26 28 69 2e 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3d 72 29 3b 72 65 74 75 72 6e 20 69 7d 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 65 66 69 6e 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 6a 73 29 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 6a 73 29 29 72 65 74 75 72 6e 3b 63 66 67 3d 72 65 71 75 69 72 65 6a 73 3b 72 65 71 75 69 72 65 6a 73 3d 76 6f 69 64 20 30 7d 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 26 26 21 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 29 29 7b 63 66 67 3d 72 65 71 75 69 72 65 3b 72 Data Ascii: org/docs/errors.html#"+e);i.requireType=e;i.requireModules=n;r&&(i.originalError=r);return i}if(void 0===define){if(void 0!==requirejs){if(isFunction(requirejs))return;cfg=requirejs;requirejs=void 0}if(void 0!==require&&!isFunction(require)){cfg=require;r
2025-03-21 21:03:40 UTC	8192	IN	Data Raw: 76 65 6e 74 73 2e 65 72 72 6f 72 26 26 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 7c 7c 72 65 71 2e 6f 6e 45 72 72 6f 72 21 3d 3d 64 65 66 61 75 6c 74 4f 6e 45 72 72 6f 72 29 74 72 79 7b 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 65 7d 65 6c 73 65 20 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 3b 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 28 65 3d 74 68 69 73 2e 6d 6f 64 75 6c 65 29 3f 69 3d 65 2e 65 78 70 6f 72 74 73 3a 74 68 69 73 2e 75 73 69 6e 67 45 78 70 6f 72 74 73 26 26 28 69 3d 74 68 69 73 2e 65 78 70 6f 72 74 73 29 29 3b 69 66 28 74 29 7b 74 2e 72 65 71 75 69 72 65 4d 61 70 3d 74 68 69 73 2e 6d 61 70 3b 74 2e 72 65 71 75 69 Data Ascii: vents.error&&this.map.isDefine\|\|req.onError!==defaultOnError)try{i=d.execCb(r,o,n,i)}catch(e){t=e}else i=d.execCb(r,o,n,i);this.map.isDefine&&void 0===i&&((e=this.module)?i=e.exports:this.usingExports&&(i=this.exports));if(t){t.requireMap=this.map;t.requi
2025-03-21 21:03:40 UTC	8192	IN	Data Raw: 6f 72 69 67 69 6e 73 20 3d 20 62 61 73 65 55 72 6c 73 2e 6d 61 70 28 67 65 74 4f 72 69 67 69 6e 29 3b 0d 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 28 77 69 6e 64 6f 77 2e 5f 5f 63 64 6e 46 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 6d 6f 64 75 6c 65 73 46 61 6c 6c 65 64 42 61 63 6b 3a 20 5b 5d 2c 0d 0a 20 20 20 20 6f 6e 50 61 74 68 46 61 6c 6c 62 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 20 Data Ascii: origins = baseUrls.map(getOrigin); window.__backupBaseUrl = baseUrls[1]; var backupBaseUrl = baseUrls[1]; var failOverState = (window.__cdnFailOverState = { baseUrlFailedOver: false, modulesFalledBack: [], onPathFallback: function
2025-03-21 21:03:40 UTC	8192	IN	Data Raw: 76 30 72 39 33 78 49 6f 6c 66 62 57 5f 45 76 48 31 6b 33 69 59 5f 34 78 67 66 68 5a 4f 6b 62 5f 32 33 62 6a 47 79 48 53 79 74 55 42 46 68 71 43 77 66 6d 55 75 69 4f 43 4a 63 71 57 51 76 71 42 65 49 59 74 63 67 71 76 70 66 48 33 45 48 34 6f 35 53 54 6d 31 36 45 50 47 42 61 44 77 72 59 77 5f 75 4a 47 4c 6b 49 63 32 2d 51 6e 72 67 2d 6a 45 45 43 4e 57 50 53 39 73 6d 36 65 34 76 33 77 53 35 6c 2d 6a 71 36 4e 47 79 43 49 63 37 4a 67 67 67 6c 6b 42 39 66 73 35 39 70 42 70 35 37 72 6b 68 59 43 68 4d 71 38 67 4c 56 55 49 30 26 61 6d 70 3b 74 3d 32 61 39 64 39 35 65 33 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 Data Ascii: v0r93xIolfbW_EvH1k3iY_4xgfhZOkb_23bjGyHSytUBFhqCwfmUuiOCJcqWQvqBeIYtcgqvpfH3EH4o5STm16EPGBaDwrYw_uJGLkIc2-Qnrg-jEECNWPS9sm6e4v3wS5l-jq6NGyCIc7JggglkB9fs59pBp57rkhYChMq8gLVUI0&t=2a9d95e3" type="text/javascript"></script><script type="text/javascript"
2025-03-21 21:03:40 UTC	5648	IN	Data Raw: 4d 61 69 6c 2e 65 72 72 6f 72 6d 65 73 73 61 67 65 20 3d 20 22 59 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 69 6e 20 74 68 65 20 63 6f 72 72 65 63 74 20 65 6d 61 69 6c 20 66 6f 72 6d 61 74 20 28 65 2e 67 2e 20 5c 22 75 73 65 72 40 63 6f 6e 74 6f 73 6f 2e 63 6f 6d 5c 22 29 22 3b 0d 0a 09 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 2e 64 69 73 70 6c 61 79 20 3d 20 22 44 79 6e 61 6d 69 63 22 3b 0d 0a 09 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 2e 65 76 61 6c 75 61 74 69 6f 6e 66 75 6e 63 74 69 6f 6e 20 3d 20 22 52 65 67 75 6c 61 72 45 78 70 72 65 73 73 69 6f 6e 56 61 6c 69 64 61 74 6f 72 45 76 61 6c 75 61 74 65 49 73 56 61 6c 69 64 22 3b 0d 0a 09 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 2e 76 61 Data Ascii: Mail.errormessage = "Your email address must be in the correct email format (e.g. \"user@contoso.com\")";ValidateTOAAEMail.display = "Dynamic";ValidateTOAAEMail.evaluationfunction = "RegularExpressionValidatorEvaluateIsValid";ValidateTOAAEMail.va

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	downloaded
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
URL:	https://brynnolson-my.sharepoint.com/ScriptResource.axd?d=eRJk5DAJoCKnB2UnYx2IEtLj2kZNEY7KlR5gUEL92Bh5OTXjLN3kAkXwcrro8LS1hkJ05RXW0ShuAi9j_NcYpwQkAsvB-w8M-1MTP97zTxQYwvWp9aHf-jWIbj_Dedgfu1rDF0BE74FscA9QLODqnYSrfmGYCYOpNTSoPyX-JshMq_TcPec6eg_X673SkCof0&t=2a9d95e3
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:03:40 UTC	775	OUT	GET /WebResource.axd?d=2U5EUaHmI-mMxzWyYkblpnH68_K4zdJutglxUczZZlDuaTYM32kVDMSxfBfGLWskZtLWTjGLN9CkPM_ZDktoEO5k5vo4_hXORY0VMApfSR81&t=638745296777888595 HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:03:41 UTC	769	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Sat, 21 Mar 2026 18:31:05 GMT Last-Modified: Fri, 07 Feb 2025 20:54:37 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,49,28,652588,1387632,1387632,26817 X-AspNet-Version: 4.0.30319 SPRequestDuration: 3 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 607D94D67CC34A45B5D7F2C3874E155C Ref B: EWR311000105017 Ref C: 2025-03-21T21:03:40Z Date: Fri, 21 Mar 2025 21:03:40 GMT Connection: close
2025-03-21 21:03:41 UTC	3753	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 22 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 61 74 68 20 3d 20 61 63 74 69 6f 6e 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 22 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 71 75 65 72 79 49 6e 64 65 78 20 3d 20 61 63 74 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 71 75 65 72 79 49 6e 64 65 78 20 21 3d 3d 20 2d 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 71 75 65 72 79 20 3d 20 61 63 74 69 6f 6e 2e 73 75 62 73 74 72 28 71 75 65 72 79 49 6e 64 65 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 20 3d 20 61 63 74 69 6f 6e 2e 73 75 62 73 74 Data Ascii: var domain = ""; var path = action; var query = ""; var queryIndex = action.indexOf('?'); if (queryIndex !== -1) { query = action.substr(queryIndex); path = action.subst
2025-03-21 21:03:41 UTC	3792	IN	Data Raw: 20 20 76 61 72 20 66 6f 72 6d 45 6c 65 6d 65 6e 74 73 20 3d 20 74 68 65 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 2c 0d 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 20 3d 20 66 6f 72 6d 45 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0d 0a 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 63 6f 75 6e 74 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 66 6f 72 6d 45 6c 65 6d 65 6e 74 73 5b 69 5d 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 61 67 4e 61 6d 65 20 3d 20 65 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 61 67 4e 61 6d 65 20 3d 3d 20 22 69 6e 70 75 74 22 Data Ascii: var formElements = theForm.elements, count = formElements.length, element; for (var i = 0; i < count; i++) { element = formElements[i]; var tagName = element.tagName.toLowerCase(); if (tagName == "input"
2025-03-21 21:03:41 UTC	7326	IN	Data Raw: 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e Data Ascii: else { defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__non

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:03:41 UTC	840	OUT	GET /ScriptResource.axd?d=pLr1_8YCNvKCyOJM-16dJ1r2bc5LuU8n5Tz1FY1QBqNGUJSAjFHc3N-YcBYGExEP4wkgOnT5v-5VqaHDOgePAIfwVhCB6WaXR6PlZi9jm4l8Asjg-lFisSmVKSVOuRW7XamGDP6p3Pu4YXTWNiJgiJrrk4b8XL8d9vwXv0r4e901&t=ffffffffc7a8e318 HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:03:41 UTC	787	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 26951 Content-Type: application/x-javascript; charset=utf-8 Expires: Sat, 21 Mar 2026 21:03:41 GMT Last-Modified: Fri, 21 Mar 2025 21:03:41 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 1,4194720,1809,128,5832996,8409600,8409600,6869 X-AspNet-Version: 4.0.30319 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A95FA57E4D4247FC827DD412BD33873D Ref B: EWR311000104027 Ref C: 2025-03-21T21:03:41Z Date: Fri, 21 Mar 2025 21:03:41 GMT Connection: close
2025-03-21 21:03:41 UTC	1332	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 6f 6e 74 72 6f 6c 49 44 29 3b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 63 74 72 6c 29 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 26 26 20 28 63 74 72 6c 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 56 61 6c 69 64 61 74 6f 72 48 6f 6f 6b 75 70 43 6f 6e 74 72 6f 6c 28 63 74 72 6c 2c 20 76 61 6c 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 2e 69 73 76 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 2e 65 6e 61 62 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 56 61 6c 69 64 61 74 6f 72 48 6f 6f 6b 75 70 43 6f 6e Data Ascii: ocument.getElementById(controlID); if ((typeof(ctrl) != "undefined") && (ctrl != null)) { ValidatorHookupControl(ctrl, val); } else { val.isvalid = true; val.enabled = false; }}function ValidatorHookupCon
2025-03-21 21:03:41 UTC	6195	IN	Data Raw: 20 22 75 6e 64 65 66 69 6e 65 64 22 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 63 74 72 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 20 21 3d 20 6e 75 6c 6c 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 63 74 72 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 20 21 3d 20 63 74 72 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 49 73 49 6e 56 69 73 69 62 6c 65 43 6f 6e 74 61 69 6e 65 72 28 63 74 72 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 49 73 56 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 4d 61 74 63 68 28 63 6f 6e 74 72 6f 6c 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 Data Ascii: "undefined" && ctrl.parentNode != null && ctrl.parentNode != ctrl) { return IsInVisibleContainer(ctrl.parentNode); } return true;}function IsValidationGroupMatch(control, validationGroup) { if ((typ
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 56 61 6c 69 64 61 74 6f 72 54 72 69 6d 28 76 61 6c 75 65 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 76 61 72 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 22 22 3b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 74 79 70 65 6f 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 20 3d 3d 20 22 75 Data Ascii: alidatorGetValue(val.controltovalidate); if (ValidatorTrim(value).length == 0) return true; var compareTo = ""; if ((typeof(val.controltocompare) != "string") \|\| (typeof(document.getElementById(val.controltocompare)) == "u
2025-03-21 21:03:41 UTC	3040	IN	Data Raw: 73 65 28 73 65 6c 65 63 74 6f 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 6e 67 74 68 20 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 6f 72 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 6e 67 74 68 20 2b 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 79 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 69 65 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 65 6e Data Ascii: se(selector) { var length = parseSpecificAttribute(selector, dataValidationAttribute, Page_Validators); length += parseSpecificAttribute(selector, dataValidationSummaryAttribute, Page_ValidationSummaries); return len

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:03:41 UTC	853	OUT	GET /ScriptResource.axd?d=eRJk5DAJoCKnB2UnYx2IEtLj2kZNEY7KlR5gUEL92Bh5OTXjLN3kAkXwcrro8LS1hkJ05RXW0ShuAi9j_NcYpwQkAsvB-w8M-1MTP97zTxQYwvWp9aHf-jWIbj_Dedgfu1rDF0BE74FscA9QLODqnYSrfmGYCYOpNTSoPyX-JshMq_TcPec6eg_X673SkCof0&t=2a9d95e3 HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:03:41 UTC	784	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 102801 Content-Type: application/x-javascript; charset=utf-8 Expires: Sat, 21 Mar 2026 21:03:41 GMT Last-Modified: Fri, 21 Mar 2025 21:03:41 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,13,863639,2102272,2102272,6686 X-AspNet-Version: 4.0.30319 SPRequestDuration: 7 SPIisLatency: 51 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 9136532EEDAA4D17A391C2BEF7010BFA Ref B: EWR311000103047 Ref C: 2025-03-21T21:03:41Z Date: Fri, 21 Mar 2025 21:03:40 GMT Connection: close
2025-03-21 21:03:41 UTC	3386	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d 65 3d 22 46 75 6e 63 74 69 6f 6e 22 3b 46 75 6e 63 74 69 6f 6e 2e 5f 5f 63 6c 61 73 73 3d Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeName="Function";Function.__class=
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 4e 61 6d 65 2c 61 29 3b 76 61 72 20 64 3d 45 72 72 6f 72 2e 63 72 65 61 74 65 28 62 2c 7b 6e 61 6d 65 3a 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 22 2c 70 61 72 61 6d 4e 61 6d 65 3a 61 7d 29 3b 64 2e 70 6f 70 53 74 61 63 6b 46 72 61 6d 65 28 29 3b 72 65 74 75 72 6e 20 64 7d 3b 45 72 72 6f 72 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 64 29 7b 76 61 72 20 62 3d 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 45 78 63 65 70 74 69 6f 6e 3a 20 22 2b 28 64 3f 64 3a 53 79 73 2e 52 65 73 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 29 3b 69 66 28 63 29 62 2b 3d 22 5c 6e 22 2b 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 52 65 73 Data Ascii: Name,a);var d=Error.create(b,{name:"Sys.ArgumentNullException",paramName:a});d.popStackFrame();return d};Error.argumentOutOfRange=function(c,a,d){var b="Sys.ArgumentOutOfRangeException: "+(d?d:Sys.Res.argumentOutOfRange);if(c)b+="\n"+String.format(Sys.Res
2025-03-21 21:03:41 UTC	4144	IN	Data Raw: 74 73 46 72 6f 6d 28 63 29 7c 7c 61 2e 69 6d 70 6c 65 6d 65 6e 74 73 49 6e 74 65 72 66 61 63 65 26 26 61 2e 69 6d 70 6c 65 6d 65 6e 74 73 49 6e 74 65 72 66 61 63 65 28 63 29 7d 3b 53 79 73 2e 5f 67 65 74 42 61 73 65 4d 65 74 68 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 63 29 7b 76 61 72 20 62 3d 64 2e 67 65 74 42 61 73 65 54 79 70 65 28 29 3b 69 66 28 62 29 7b 76 61 72 20 61 3d 62 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 3f 61 3a 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 53 79 73 2e 5f 69 73 44 6f 6d 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 66 61 6c 73 65 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 54 79 70 65 Data Ascii: tsFrom(c)\|\|a.implementsInterface&&a.implementsInterface(c)};Sys._getBaseMethod=function(d,e,c){var b=d.getBaseType();if(b){var a=b.prototype[c];return a instanceof Function?a:null}return null};Sys._isDomElement=function(a){var c=false;if(typeof a.nodeType
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 6e 74 41 72 67 73 22 2c 53 79 73 2e 45 76 65 6e 74 41 72 67 73 29 3b 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 3b 53 79 73 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 53 79 73 2e 5f 44 65 62 75 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 29 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 3b 69 66 28 77 Data Ascii: ntArgs",Sys.EventArgs);Type.registerNamespace("Sys.UI");Sys._Debug=function(){};Sys._Debug.prototype={_appendConsole:function(a){if(typeof Debug!=="undefined"&&Debug.writeln)Debug.writeln(a);if(window.console&&window.console.log)window.console.log(a);if(w
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 69 6f 6e 2e 72 65 6d 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 62 5d 2c 63 29 29 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 65 6d 6f 76 65 41 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 61 3e 2d 31 26 26 61 3c 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 62 5b 61 5d 3b 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 62 2c 61 29 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 62 2c 6e 65 77 20 53 79 73 2e 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 53 79 73 2e 4e 6f 74 69 66 79 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 41 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 63 5d 2c 61 29 29 Data Ascii: ion.remove,null,-1,[b],c));return true}return false};Sys.Observer.removeAt=function(b,a){if(a>-1&&a<b.length){var c=b[a];Array.removeAt(b,a);Sys.Observer._collectionChange(b,new Sys.CollectionChange(Sys.NotifyCollectionChangedAction.remove,null,-1,[c],a))
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 69 66 28 61 3c 31 30 29 72 65 74 75 72 6e 20 22 30 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 29 72 65 74 75 72 6e 20 22 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 30 29 72 65 74 75 72 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 68 2c 70 2c 74 3d 2f 28 5b 5e 64 5d 7c 5e 29 28 64 7c 64 64 29 28 5b 5e 64 5d 7c 24 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 68 7c 7c 70 29 72 65 74 75 72 6e 20 68 3b 68 3d 74 2e 74 65 73 74 28 65 29 3b 70 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 68 7d 76 61 72 20 71 3d 30 2c 6f 3d 44 61 74 65 2e 5f 67 65 74 54 6f 6b 65 6e 52 65 67 Data Ascii: ;return a.toString()}function v(a){if(a<10)return "000"+a;else if(a<100)return "00"+a;else if(a<1000)return "0"+a;return a.toString()}var h,p,t=/([^d]\|^)(d\|dd)([^d]\|$)/g;function s(){if(h\|\|p)return h;h=t.test(e);p=true;return h}var q=0,o=Date._getTokenReg
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 65 72 41 62 62 72 44 61 79 73 29 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 41 72 72 61 79 28 74 68 69 73 2e 64 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 2e 41 62 62 72 65 76 69 61 74 65 64 44 61 79 4e 61 6d 65 73 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 2c 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 61 29 29 7d 2c 5f 74 6f 55 70 70 65 72 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 61 3c 64 3b 61 2b 2b 29 62 5b 61 5d 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 63 5b 61 5d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 74 6f Data Ascii: erAbbrDays)this._upperAbbrDays=this._toUpperArray(this.dateTimeFormat.AbbreviatedDayNames);return Array.indexOf(this._upperAbbrDays,this._toUpper(a))},_toUpperArray:function(c){var b=[];for(var a=0,d=c.length;a<d;a++)b[a]=this._toUpper(c[a]);return b},_to
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 2e 69 6e 64 65 78 4f 66 28 62 29 21 3d 3d 2d 31 29 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 4f 70 65 72 61 7c 7c 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 46 69 72 65 46 6f 78 29 61 3d 61 2e 73 70 6c 69 74 28 62 29 2e 6a 6f 69 6e 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 3b 65 6c 73 65 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 52 65 67 45 78 73 5b 62 5d 2c 53 79 Data Ascii: .indexOf(b)!==-1)if(Sys.Browser.agent===Sys.Browser.Opera\|\|Sys.Browser.agent===Sys.Browser.FireFox)a=a.split(b).join(Sys.Serialization.JavaScriptSerializer._escapeChars[b]);else a=a.replace(Sys.Serialization.JavaScriptSerializer._charsToEscapeRegExs[b],Sy
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 69 74 68 28 22 6b 65 79 22 29 29 69 66 28 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 58 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 59 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 61 2e 6f 66 66 73 65 74 58 3b 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 61 2e 6f 66 66 73 65 74 59 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 74 61 72 67 65 74 26 26 74 68 69 73 2e 74 61 72 67 65 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 33 26 26 74 79 70 65 6f 66 20 61 2e 63 6c 69 65 6e 74 58 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 63 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 74 68 69 73 2e 74 61 72 67 65 74 29 2c 64 3d 53 79 73 2e Data Ascii: ith("key"))if(typeof a.offsetX!=="undefined"&&typeof a.offsetY!=="undefined"){this.offsetX=a.offsetX;this.offsetY=a.offsetY}else if(this.target&&this.target.nodeType!==3&&typeof a.clientX==="number"){var c=Sys.UI.DomElement.getLocation(this.target),d=Sys.
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 61 79 4d 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7c 7c 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 74 43 75 72 72 65 6e 74 53 74 79 6c 65 28 61 29 3b 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 62 3f 62 2e 64 69 73 70 6c 61 79 3a 6e 75 6c 6c 3b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 7c 7c 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 3d 3d 22 6e 6f 6e 65 22 29 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 20 22 44 49 56 22 3a 63 61 73 65 20 22 50 22 3a 63 61 73 65 20 22 41 44 44 52 45 53 53 22 3a 63 Data Ascii: ayMode=function(a){if(!a._oldDisplayMode){var b=a.currentStyle\|\|Sys.UI.DomElement._getCurrentStyle(a);a._oldDisplayMode=b?b.display:null;if(!a._oldDisplayMode\|\|a._oldDisplayMode==="none")switch(a.tagName.toUpperCase()){case "DIV":case "P":case "ADDRESS":c

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:03:41 UTC	853	OUT	GET /ScriptResource.axd?d=cbVKQaCZZThYH1DmH3uv0r93xIolfbW_EvH1k3iY_4xgfhZOkb_23bjGyHSytUBFhqCwfmUuiOCJcqWQvqBeIYtcgqvpfH3EH4o5STm16EPGBaDwrYw_uJGLkIc2-Qnrg-jEECNWPS9sm6e4v3wS5l-jq6NGyCIc7JggglkB9fs59pBp57rkhYChMq8gLVUI0&t=2a9d95e3 HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:03:41 UTC	783	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 40326 Content-Type: application/x-javascript; charset=utf-8 Expires: Sat, 21 Mar 2026 21:03:41 GMT Last-Modified: Fri, 21 Mar 2025 21:03:41 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,1,20,2868724,1473125,1473125,7157 X-AspNet-Version: 4.0.30319 SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 7DED40A41BC049818C7FBDAA0FE70F68 Ref B: EWR311000104049 Ref C: 2025-03-21T21:03:41Z Date: Fri, 21 Mar 2025 21:03:40 GMT Connection: close
2025-03-21 21:03:41 UTC	1317	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f 72 6d 73 2e 6a 73 0d 0a 54 79 70 65 2e 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 22 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjaxWebForms.jsType._registerScript("MicrosoftAjaxWebFo
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 69 73 2e 5f 65 72 72 6f 72 48 61 6e 64 6c 65 64 7d 2c 73 65 74 5f 65 72 72 6f 72 48 61 6e 64 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 65 72 72 6f 72 48 61 6e 64 6c 65 64 3d 61 7d 2c 67 65 74 5f 72 65 73 70 6f 6e 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 65 73 70 6f 6e 73 65 7d 7d 3b 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 45 6e 64 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 22 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 45 6e 64 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 22 2c 53 79 73 2e 45 76 65 6e 74 41 72 67 73 29 3b 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 49 6e 69 74 69 61 6c 69 7a 65 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 3d 66 Data Ascii: is._errorHandled},set_errorHandled:function(a){this._errorHandled=a},get_response:function(){return this._response}};Sys.WebForms.EndRequestEventArgs.registerClass("Sys.WebForms.EndRequestEventArgs",Sys.EventArgs);Sys.WebForms.InitializeRequestEventArgs=f
2025-03-21 21:03:41 UTC	6214	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 67 65 74 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 28 29 2e 61 64 64 48 61 6e 64 6c 65 72 28 22 70 61 67 65 4c 6f 61 64 69 6e 67 22 2c 61 29 7d 2c 72 65 6d 6f 76 65 5f 70 61 67 65 4c 6f 61 64 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 67 65 74 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 28 29 2e 72 65 6d 6f 76 65 48 61 6e 64 6c 65 72 28 22 70 61 67 65 4c 6f 61 64 69 6e 67 22 2c 61 29 7d 2c 61 62 6f 72 74 50 6f 73 74 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 5f 70 72 6f 63 65 73 73 69 6e 67 52 65 71 75 65 73 74 26 26 74 68 69 73 2e 5f 72 65 71 75 65 73 74 29 7b 74 68 69 73 2e 5f 72 65 71 75 65 73 74 2e 67 65 74 5f 65 78 65 63 75 Data Ascii: :function(a){this._get_eventHandlerList().addHandler("pageLoading",a)},remove_pageLoading:function(a){this._get_eventHandlerList().removeHandler("pageLoading",a)},abortPostBack:function(){if(!this._processingRequest&&this._request){this._request.get_execu
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 3d 50 61 67 65 5f 43 6c 69 65 6e 74 56 61 6c 69 64 61 74 65 28 61 2e 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 3b 69 66 28 64 29 7b 69 66 28 74 79 70 65 6f 66 20 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 6e 75 6c 6c 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 2e 6c 65 6e 67 74 68 3e 30 29 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 3d 61 2e 61 63 74 69 6f 6e 55 72 6c 3b 69 66 28 61 2e 74 72 61 63 6b 46 6f 63 75 73 29 7b 76 61 72 20 63 3d 74 68 65 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 22 5f 5f 4c 41 53 54 46 4f 43 55 53 22 5d 3b 69 66 28 74 79 70 65 6f 66 20 63 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 63 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e Data Ascii: =Page_ClientValidate(a.validationGroup);if(d){if(typeof a.actionUrl!="undefined"&&a.actionUrl!=null&&a.actionUrl.length>0)theForm.action=a.actionUrl;if(a.trackFocus){var c=theForm.elements["__LASTFOCUS"];if(typeof c!="undefined"&&c!=null)if(typeof documen
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 75 65 26 22 29 3b 69 66 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 7b 62 2e 61 70 70 65 6e 64 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 3b 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 3d 6e 75 6c 6c 7d 76 61 72 20 63 3d 6e 65 77 20 53 79 73 2e 4e 65 74 2e 57 65 62 52 65 71 75 65 73 74 2c 61 3d 77 2e 61 63 74 69 6f 6e 3b 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 29 7b 76 61 72 20 72 3d 61 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 69 66 28 72 21 3d 3d 2d 31 29 61 3d 61 2e 73 75 62 73 74 72 28 30 2c 72 29 3b 76 61 72 20 6f 3d 22 22 2c 76 3d 22 22 2c 6d 3d 61 2e 69 6e 64 65 78 4f Data Ascii: ue&");if(this._additionalInput){b.append(this._additionalInput);this._additionalInput=null}var c=new Sys.Net.WebRequest,a=w.action;if(Sys.Browser.agent===Sys.Browser.InternetExplorer){var r=a.indexOf("#");if(r!==-1)a=a.substr(0,r);var o="",v="",m=a.indexO
2025-03-21 21:03:41 UTC	8192	IN	Data Raw: 68 69 73 2e 5f 73 63 72 69 70 74 44 69 73 70 6f 73 65 73 5b 61 5d 2c 62 29 7d 2c 5f 73 63 72 69 70 74 49 6e 63 6c 75 64 65 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 62 29 7b 69 66 28 62 2e 65 78 65 63 75 74 6f 72 2e 67 65 74 5f 77 65 62 52 65 71 75 65 73 74 28 29 21 3d 3d 74 68 69 73 2e 5f 72 65 71 75 65 73 74 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 5f 63 6f 6d 6d 69 74 43 6f 6e 74 72 6f 6c 73 28 62 2e 75 70 64 61 74 65 50 61 6e 65 6c 44 61 74 61 2c 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 3f 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 2e 63 6f 6e 74 65 6e 74 3a 6e 75 6c 6c 29 3b 69 66 28 62 2e 66 6f 72 6d 41 63 74 69 6f 6e 4e 6f 64 65 29 74 68 69 73 2e Data Ascii: his._scriptDisposes[a],b)},_scriptIncludesLoadComplete:function(e,b){if(b.executor.get_webRequest()!==this._request)return;this._commitControls(b.updatePanelData,b.asyncPostBackTimeoutNode?b.asyncPostBackTimeoutNode.content:null);if(b.formActionNode)this.
2025-03-21 21:03:41 UTC	27	IN	Data Raw: 74 69 61 6c 69 7a 65 64 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 2e 22 7d 3b Data Ascii: tialized more than once."};

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:03:41 UTC	725	OUT	GET /_layouts/15/images/microsoft-logo.png HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:03:41 UTC	740	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 3331 Content-Type: image/png Last-Modified: Tue, 18 Mar 2025 07:43:29 GMT Accept-Ranges: bytes ETag: "abe5c570d997db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,6,22,5014631,859712,859712,7445 SPRequestDuration: 4 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 05112A41C522442A9630102CF34FBF38 Ref B: EWR311000108051 Ref C: 2025-03-21T21:03:41Z Date: Fri, 21 Mar 2025 21:03:40 GMT Connection: close
2025-03-21 21:03:41 UTC	1400	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 30 08 06 00 00 00 0c e6 a6 f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c bd 49 44 41 54 78 01 ed 9c 3d 77 1b b9 15 86 47 b6 7a d3 bf c0 4c ca 34 66 4e d2 6b 5c 64 53 9a ee b3 c7 a3 5f 60 fa ab 8d a8 da 1f d2 fe 02 8f 72 d2 9b ee b2 95 c9 7e cf 46 aa dc 65 a9 5f b0 52 5a 7f 30 cf 4b 03 5c 0c 06 43 42 12 87 de 8d 31 e7 8c 81 7b 71 71 2f e6 05 5e 7c 0c 47 de fa 6f ff f7 b3 ac 85 0b a7 3f de 18 fd e7 4f 72 fd f7 ef b3 1f b6 b6 b2 79 7e dd a1 f6 ff 92 5d cb b6 b2 56 9e 61 dd 6d 4d fe 12 02 4d 08 5c 6b 2a 48 fa 84 40 42 60 73 08 24 22 6e 0e eb 14 29 21 d0 88 40 22 62 23 34 a9 20 21 b0 39 04 12 11 37 87 75 8a 94 10 68 44 20 11 b1 11 9a 54 90 10 d8 1c 02 89 88 9b c3 3a 45 4a 08 34 22 b0 dd Data Ascii: PNGIHDR0sRGBIDATx=wGzL4fNk\dS_`r~Fe_RZ0K\CB1{qq/^\|Go?Ory~]VamMM\k*H@B`s$"n)!@"b#4 !97uhD T:EJ4"
2025-03-21 21:03:41 UTC	1931	IN	Data Raw: a7 76 2c 7c 2a 2f 67 db 33 fe b7 b5 85 d7 75 66 66 b3 77 d6 1d 5b fa 77 fc 3f 6b 5b 56 5e 6b da c2 ff e0 46 a7 1f 32 30 2a e7 3d da dc e7 1e 85 da ce 36 c8 76 9c 2d 3e 6d e3 83 6d 43 f8 d0 40 3b 67 10 f7 89 39 b6 0d 70 d2 81 59 25 3a 8e 6e 59 56 04 1c b8 e7 49 0d f0 f7 ef df 9f 89 3c c4 d9 f3 2b 6b 70 b1 0d ef 07 ce 7f 43 33 81 95 d4 b9 61 eb 89 70 22 1e 72 61 75 f8 e8 a1 b7 e2 3c c5 a6 70 5e a4 9c a1 9c 72 8f 84 03 98 f7 e7 46 ce 3f b4 e1 40 be 1d d5 3c 8b ef ca f9 d8 96 eb 79 f0 33 a2 ce 6d ab 33 e9 1e 65 a5 c1 a0 b4 65 3c 0b 74 a9 5e cb ce a9 e0 3e c6 b7 3b b9 65 1a 2b a1 ef 87 b7 ed 7f 79 58 75 bf 5e 69 ff 9b ec db f5 7a 6c d7 9b 06 14 20 4e 3c 10 ef d3 39 03 ca 34 20 fc eb be ab a0 e3 4b 57 5e 57 5e 9d 48 9b fc 81 76 ce c4 d1 53 9b 9b e2 b8 a4 6a b2 Data Ascii: v,\|/g3uffw[w?k[V^kF20=6v->mmC@;g9pY%:nYVI<+kpC3ap"rau<p^rF?@<y3m3ee<t^>;e+yXu^izl N<94 KW^W^HvSj

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:03:41 UTC	429	OUT	GET /_layouts/15/images/microsoft-logo.png HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:03:42 UTC	746	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 3331 Content-Type: image/png Last-Modified: Tue, 18 Mar 2025 07:43:29 GMT Accept-Ranges: bytes ETag: "abe5c570d997db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 1,4193329,1621,106,4557921,8409600,8409600,7023 SPRequestDuration: 4 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F608D1ADF9A14423A25ABB4676BA9EE9 Ref B: EWR311000107009 Ref C: 2025-03-21T21:03:42Z Date: Fri, 21 Mar 2025 21:03:41 GMT Connection: close
2025-03-21 21:03:42 UTC	3331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 30 08 06 00 00 00 0c e6 a6 f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c bd 49 44 41 54 78 01 ed 9c 3d 77 1b b9 15 86 47 b6 7a d3 bf c0 4c ca 34 66 4e d2 6b 5c 64 53 9a ee b3 c7 a3 5f 60 fa ab 8d a8 da 1f d2 fe 02 8f 72 d2 9b ee b2 95 c9 7e cf 46 aa dc 65 a9 5f b0 52 5a 7f 30 cf 4b 03 5c 0c 06 43 42 12 87 de 8d 31 e7 8c 81 7b 71 71 2f e6 05 5e 7c 0c 47 de fa 6f ff f7 b3 ac 85 0b a7 3f de 18 fd e7 4f 72 fd f7 ef b3 1f b6 b6 b2 79 7e dd a1 f6 ff 92 5d cb b6 b2 56 9e 61 dd 6d 4d fe 12 02 4d 08 5c 6b 2a 48 fa 84 40 42 60 73 08 24 22 6e 0e eb 14 29 21 d0 88 40 22 62 23 34 a9 20 21 b0 39 04 12 11 37 87 75 8a 94 10 68 44 20 11 b1 11 9a 54 90 10 d8 1c 02 89 88 9b c3 3a 45 4a 08 34 22 b0 dd Data Ascii: PNGIHDR0sRGBIDATx=wGzL4fNk\dS_`r~Fe_RZ0K\CB1{qq/^\|Go?Ory~]VamMM\k*H@B`s$"n)!@"b#4 !97uhD T:EJ4"

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:03:42 UTC	725	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:03:42 UTC	745	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Tue, 18 Mar 2025 07:43:54 GMT Accept-Ranges: bytes ETag: "77ade97fd997db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,6,45,5557537,4204800,4204800,7297 SPRequestDuration: 4 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: CE159AFDED4D45C9A3868FC24B3B6D39 Ref B: EWR311000105045 Ref C: 2025-03-21T21:03:42Z Date: Fri, 21 Mar 2025 21:03:41 GMT Connection: close
2025-03-21 21:03:42 UTC	3425	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2025-03-21 21:03:42 UTC	4461	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 bf 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 bf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 40 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: plplplplplplplplplplplplplplplplplplpl@plplplplplplplplplplplplplplplplpl@

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:03:42 UTC	429	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:03:43 UTC	742	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Tue, 18 Mar 2025 07:43:54 GMT Accept-Ranges: bytes ETag: "77ade97fd997db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4193329,0,63,230684,904378,904378,6906 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 8325BEEC990F495782DA82EA2B511E12 Ref B: EWR311000103045 Ref C: 2025-03-21T21:03:43Z Date: Fri, 21 Mar 2025 21:03:42 GMT Connection: close
2025-03-21 21:03:43 UTC	3428	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2025-03-21 21:03:43 UTC	4458	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 bf 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 bf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 40 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: plplplplplplplplplplplplplplplplplplpl@plplplplplplplplplplplplplplplplpl@

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:03:54 UTC	1090	OUT	POST /personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive Content-Length: 1537 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://brynnolson-my.sharepoint.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:03:54 UTC	1537	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 45 6d 61 69 6c 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 39 30 35 2e 31 32 30 31 30 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 31 59 75 25 32 46 62 31 58 66 57 25 32 46 37 4a 54 49 43 32 32 76 4c 74 44 51 71 57 49 50 42 74 68 69 37 42 51 68 31 54 58 6d 6f 51 62 45 74 30 49 68 68 72 45 79 4a 66 47 46 47 77 36 58 79 71 4d 63 79 6d 71 52 5a 35 57 6e 36 41 49 41 71 6e 34 55 67 57 55 70 4f 66 62 4c 35 73 54 66 34 6b 4a 32 53 33 79 25 32 46 46 4e 54 4b 58 65 77 44 30 6e 4b 51 30 6f 41 31 45 55 7a 35 62 48 67 48 76 70 34 45 78 62 74 38 58 30 5a 55 69 31 48 56 62 65 56 63 58 31 33 72 76 70 31 76 61 32 72 56 35 53 25 32 Data Ascii: __EVENTTARGET=btnSubmitEmail&__EVENTARGUMENT=&SideBySideToken=16.0.25905.12010&__VIEWSTATE=1Yu%2Fb1XfW%2F7JTIC22vLtDQqWIPBthi7BQh1TXmoQbEt0IhhrEyJfGFGw6XyqMcymqRZ5Wn6AIAqn4UgWUpOfbL5sTf4kJ2S3y%2FFNTKXewD0nKQ0oA1EUz5bHgHvp4Exbt8X0ZUi1HVbeVcX13rvp1va2rV5S%2
2025-03-21 21:03:55 UTC	2070	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 69083 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,89,74,8493803,2102272,2102272,6697 X-SharePointHealthScore: 0 X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 1dcb8ca1-10dc-8000-4198-96a0add18908 request-id: 1dcb8ca1-10dc-8000-4198-96a0add18908 MS-CV: oYzLHdwQAIBBmJagrdGJCA.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=586265bf-5d41-4213-a5eb-ac3185bd2c51&destinationEndpoint=Edge-Prod-EWR31r5c&frontEnd=AFD&RemoteIP=161.77.13.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 456 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F149E1FD86064F7BBBA9BBD7CD241914 Ref B: EWR311000106047 Ref C: 2025-03-21T21:03:54Z Date: Fri, 21 Mar 2025 21:03:54 GMT Connection: close
2025-03-21 21:03:55 UTC	2100	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2025-03-21 21:03:55 UTC	8192	IN	Data Raw: 72 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a Data Ascii: r{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:
2025-03-21 21:03:55 UTC	4144	IN	Data Raw: 61 72 67 69 6e 3a 30 20 38 70 78 7d 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 73 70 61 6e 7b 66 6c 65 78 3a 31 20 31 20 31 30 30 25 7d 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 65 73 6b 74 6f 70 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 35 37 Data Ascii: argin:0 8px}.notification span{flex:1 1 100%}input::-webkit-inner-spin-button,input::-webkit-outer-spin-button{margin:0;-webkit-appearance:none}input[type=number]{-moz-appearance:textfield}input[type=number]::-ms-clear{display:none}.desktop-logo{margin:57
2025-03-21 21:03:55 UTC	8192	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 66 69 6c 65 73 2f 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 35 2d 30 33 2d 30 37 2e 30 30 32 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 77 65 62 70 61 63 6b 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 75 65 4a 2f 57 6d 6e 38 36 43 36 34 57 6a 50 54 44 64 37 59 74 42 6c 4a 36 70 6a 78 34 4e 62 71 5a 33 77 67 35 72 39 32 6a 67 6f 3d 22 20 63 72 6f 73 Data Ascii: https://res-1.cdn.office.net" crossorigin /><link rel="preload" href="https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-07.002/spoguestaccesswebpack/spoguestaccess.js" as="script" integrity="sha256-ueJ/Wmn86C64WjPTDd7YtBlJ6pjx4NbqZ3wg5r92jgo=" cros
2025-03-21 21:03:55 UTC	8192	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 2e 70 3d 22 22 2c 69 28 69 2e 73 3d 32 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 2c 6e 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: unction(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=2);function i(e){if(n[e])return n[e].exports;var t=n[e]={i:e,l:!1,exports:{}};return r[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}var r,n});!function(e,t){"object"==typeof
2025-03-21 21:03:55 UTC	8192	IN	Data Raw: 20 45 72 72 6f 72 28 74 2b 22 5c 6e 68 74 74 70 3a 2f 2f 72 65 71 75 69 72 65 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 73 2e 68 74 6d 6c 23 22 2b 65 29 3b 69 2e 72 65 71 75 69 72 65 54 79 70 65 3d 65 3b 69 2e 72 65 71 75 69 72 65 4d 6f 64 75 6c 65 73 3d 6e 3b 72 26 26 28 69 2e 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3d 72 29 3b 72 65 74 75 72 6e 20 69 7d 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 65 66 69 6e 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 6a 73 29 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 6a 73 29 29 72 65 74 75 72 6e 3b 63 66 67 3d 72 65 71 75 69 72 65 6a 73 3b 72 65 71 75 69 72 65 6a 73 3d 76 6f 69 64 20 30 7d 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 26 26 21 69 73 46 75 6e Data Ascii: Error(t+"\nhttp://requirejs.org/docs/errors.html#"+e);i.requireType=e;i.requireModules=n;r&&(i.originalError=r);return i}if(void 0===define){if(void 0!==requirejs){if(isFunction(requirejs))return;cfg=requirejs;requirejs=void 0}if(void 0!==require&&!isFun
2025-03-21 21:03:55 UTC	8192	IN	Data Raw: 29 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 6f 29 29 7b 69 66 28 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 72 72 6f 72 26 26 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 7c 7c 72 65 71 2e 6f 6e 45 72 72 6f 72 21 3d 3d 64 65 66 61 75 6c 74 4f 6e 45 72 72 6f 72 29 74 72 79 7b 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 65 7d 65 6c 73 65 20 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 3b 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 28 65 3d 74 68 69 73 2e 6d 6f 64 75 6c 65 29 3f 69 3d 65 2e 65 78 70 6f 72 74 73 3a 74 68 69 73 2e 75 73 69 6e 67 45 78 70 6f 72 74 73 26 26 28 69 3d 74 68 69 73 2e 65 78 70 6f 72 74 73 29 29 3b 69 66 28 74 29 7b Data Ascii: ){if(isFunction(o)){if(this.events.error&&this.map.isDefine\|\|req.onError!==defaultOnError)try{i=d.execCb(r,o,n,i)}catch(e){t=e}else i=d.execCb(r,o,n,i);this.map.isDefine&&void 0===i&&((e=this.module)?i=e.exports:this.usingExports&&(i=this.exports));if(t){
2025-03-21 21:03:55 UTC	8192	IN	Data Raw: 74 63 68 20 26 26 20 6d 61 74 63 68 5b 30 5d 3b 0d 0a 20 20 7d 0d 0a 20 20 76 61 72 20 6f 72 69 67 69 6e 73 20 3d 20 62 61 73 65 55 72 6c 73 2e 6d 61 70 28 67 65 74 4f 72 69 67 69 6e 29 3b 0d 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 28 77 69 6e 64 6f 77 2e 5f 5f 63 64 6e 46 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 6d 6f 64 75 6c 65 73 46 61 6c 6c 65 64 42 61 63 6b 3a 20 5b 5d 2c 0d 0a Data Ascii: tch && match[0]; } var origins = baseUrls.map(getOrigin); window.__backupBaseUrl = baseUrls[1]; var backupBaseUrl = baseUrls[1]; var failOverState = (window.__cdnFailOverState = { baseUrlFailedOver: false, modulesFalledBack: [],
2025-03-21 21:03:55 UTC	8192	IN	Data Raw: 70 74 20 73 72 63 3d 22 2f 53 63 72 69 70 74 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 63 62 56 4b 51 61 43 5a 5a 54 68 59 48 31 44 6d 48 33 75 76 30 72 39 33 78 49 6f 6c 66 62 57 5f 45 76 48 31 6b 33 69 59 5f 34 78 67 66 68 5a 4f 6b 62 5f 32 33 62 6a 47 79 48 53 79 74 55 42 46 68 71 43 77 66 6d 55 75 69 4f 43 4a 63 71 57 51 76 71 42 65 49 59 74 63 67 71 76 70 66 48 33 45 48 34 6f 35 53 54 6d 31 36 45 50 47 42 61 44 77 72 59 77 5f 75 4a 47 4c 6b 49 63 32 2d 51 6e 72 67 2d 6a 45 45 43 4e 57 50 53 39 73 6d 36 65 34 76 33 77 53 35 6c 2d 6a 71 36 4e 47 79 43 49 63 37 4a 67 67 67 6c 6b 42 39 66 73 35 39 70 42 70 35 37 72 6b 68 59 43 68 4d 71 38 67 4c 56 55 49 30 26 61 6d 70 3b 74 3d 32 61 39 64 39 35 65 33 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 Data Ascii: pt src="/ScriptResource.axd?d=cbVKQaCZZThYH1DmH3uv0r93xIolfbW_EvH1k3iY_4xgfhZOkb_23bjGyHSytUBFhqCwfmUuiOCJcqWQvqBeIYtcgqvpfH3EH4o5STm16EPGBaDwrYw_uJGLkIc2-Qnrg-jEECNWPS9sm6e4v3wS5l-jq6NGyCIc7JggglkB9fs59pBp57rkhYChMq8gLVUI0&t=2a9d95e3" type="text/java

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:04:06 UTC	1143	OUT	POST /personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive Content-Length: 1577 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://brynnolson-my.sharepoint.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:04:06 UTC	1577	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 45 6d 61 69 6c 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 39 30 35 2e 31 32 30 31 30 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 56 4f 6c 6f 25 32 46 53 43 72 51 31 62 55 69 47 32 4e 4b 73 68 59 6b 65 4b 73 35 49 57 66 76 70 38 4f 71 45 38 32 46 72 54 41 42 25 32 42 48 51 33 6e 70 4a 6d 5a 31 57 6e 59 6a 66 38 4c 38 68 42 79 66 68 6f 53 6d 6e 5a 67 78 31 71 51 6d 42 25 32 46 33 58 71 5a 76 79 35 35 4d 51 6f 43 41 37 41 31 44 25 32 42 6a 32 56 61 65 75 61 52 35 58 42 54 6f 59 42 4a 7a 49 53 75 66 6f 33 72 46 63 61 4d 56 58 72 43 5a 6f 66 33 62 58 41 68 54 51 58 74 58 66 58 6c 47 67 68 75 71 53 4d 66 38 4e 39 4d 67 Data Ascii: __EVENTTARGET=btnSubmitEmail&__EVENTARGUMENT=&SideBySideToken=16.0.25905.12010&__VIEWSTATE=VOlo%2FSCrQ1bUiG2NKshYkeKs5IWfvp8OqE82FrTAB%2BHQ3npJmZ1WnYjf8L8hByfhoSmnZgx1qQmB%2F3XqZvy55MQoCA7A1D%2Bj2VaeuaR5XBToYBJzISufo3rFcaMVXrCZof3bXAhTQXtXfXlGghuqSMf8N9Mg
2025-03-21 21:04:06 UTC	2066	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 69083 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,0,3693507,525568,525568,7040 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 20cb8ca1-e0b3-8000-6644-2b2645e07d7f request-id: 20cb8ca1-e0b3-8000-6644-2b2645e07d7f MS-CV: oYzLILPgAIBmRCsmReB9fw.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=586265bf-5d41-4213-a5eb-ac3185bd2c51&destinationEndpoint=Edge-Prod-EWR31r5d&frontEnd=AFD&RemoteIP=161.77.13.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 455 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: FB3AA31DB4C84BE4ADFD5D54FA496C98 Ref B: EWR311000108009 Ref C: 2025-03-21T21:04:06Z Date: Fri, 21 Mar 2025 21:04:06 GMT Connection: close
2025-03-21 21:04:06 UTC	2104	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2025-03-21 21:04:06 UTC	8192	IN	Data Raw: 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c Data Ascii: rder-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:tabl
2025-03-21 21:04:06 UTC	4144	IN	Data Raw: 6e 3a 30 20 38 70 78 7d 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 73 70 61 6e 7b 66 6c 65 78 3a 31 20 31 20 31 30 30 25 7d 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 65 73 6b 74 6f 70 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 35 37 70 78 20 30 Data Ascii: n:0 8px}.notification span{flex:1 1 100%}input::-webkit-inner-spin-button,input::-webkit-outer-spin-button{margin:0;-webkit-appearance:none}input[type=number]{-moz-appearance:textfield}input[type=number]::-ms-clear{display:none}.desktop-logo{margin:57px 0
2025-03-21 21:04:06 UTC	8192	IN	Data Raw: 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 66 69 6c 65 73 2f 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 35 2d 30 33 2d 30 37 2e 30 30 32 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 77 65 62 70 61 63 6b 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 75 65 4a 2f 57 6d 6e 38 36 43 36 34 57 6a 50 54 44 64 37 59 74 42 6c 4a 36 70 6a 78 34 4e 62 71 5a 33 77 67 35 72 39 32 6a 67 6f 3d 22 20 63 72 6f 73 73 6f 72 69 Data Ascii: s://res-1.cdn.office.net" crossorigin /><link rel="preload" href="https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-07.002/spoguestaccesswebpack/spoguestaccess.js" as="script" integrity="sha256-ueJ/Wmn86C64WjPTDd7YtBlJ6pjx4NbqZ3wg5r92jgo=" crossori
2025-03-21 21:04:07 UTC	8192	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 2e 70 3d 22 22 2c 69 28 69 2e 73 3d 32 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 2c 6e 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f Data Ascii: ion(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=2);function i(e){if(n[e])return n[e].exports;var t=n[e]={i:e,l:!1,exports:{}};return r[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}var r,n});!function(e,t){"object"==typeof expo
2025-03-21 21:04:07 UTC	8192	IN	Data Raw: 6f 72 28 74 2b 22 5c 6e 68 74 74 70 3a 2f 2f 72 65 71 75 69 72 65 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 73 2e 68 74 6d 6c 23 22 2b 65 29 3b 69 2e 72 65 71 75 69 72 65 54 79 70 65 3d 65 3b 69 2e 72 65 71 75 69 72 65 4d 6f 64 75 6c 65 73 3d 6e 3b 72 26 26 28 69 2e 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3d 72 29 3b 72 65 74 75 72 6e 20 69 7d 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 65 66 69 6e 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 6a 73 29 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 6a 73 29 29 72 65 74 75 72 6e 3b 63 66 67 3d 72 65 71 75 69 72 65 6a 73 3b 72 65 71 75 69 72 65 6a 73 3d 76 6f 69 64 20 30 7d 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 26 26 21 69 73 46 75 6e 63 74 69 6f Data Ascii: or(t+"\nhttp://requirejs.org/docs/errors.html#"+e);i.requireType=e;i.requireModules=n;r&&(i.originalError=r);return i}if(void 0===define){if(void 0!==requirejs){if(isFunction(requirejs))return;cfg=requirejs;requirejs=void 0}if(void 0!==require&&!isFunctio
2025-03-21 21:04:07 UTC	8192	IN	Data Raw: 28 69 73 46 75 6e 63 74 69 6f 6e 28 6f 29 29 7b 69 66 28 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 72 72 6f 72 26 26 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 7c 7c 72 65 71 2e 6f 6e 45 72 72 6f 72 21 3d 3d 64 65 66 61 75 6c 74 4f 6e 45 72 72 6f 72 29 74 72 79 7b 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 65 7d 65 6c 73 65 20 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 3b 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 28 65 3d 74 68 69 73 2e 6d 6f 64 75 6c 65 29 3f 69 3d 65 2e 65 78 70 6f 72 74 73 3a 74 68 69 73 2e 75 73 69 6e 67 45 78 70 6f 72 74 73 26 26 28 69 3d 74 68 69 73 2e 65 78 70 6f 72 74 73 29 29 3b 69 66 28 74 29 7b 74 2e 72 65 Data Ascii: (isFunction(o)){if(this.events.error&&this.map.isDefine\|\|req.onError!==defaultOnError)try{i=d.execCb(r,o,n,i)}catch(e){t=e}else i=d.execCb(r,o,n,i);this.map.isDefine&&void 0===i&&((e=this.module)?i=e.exports:this.usingExports&&(i=this.exports));if(t){t.re
2025-03-21 21:04:07 UTC	8192	IN	Data Raw: 26 26 20 6d 61 74 63 68 5b 30 5d 3b 0d 0a 20 20 7d 0d 0a 20 20 76 61 72 20 6f 72 69 67 69 6e 73 20 3d 20 62 61 73 65 55 72 6c 73 2e 6d 61 70 28 67 65 74 4f 72 69 67 69 6e 29 3b 0d 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 28 77 69 6e 64 6f 77 2e 5f 5f 63 64 6e 46 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 6d 6f 64 75 6c 65 73 46 61 6c 6c 65 64 42 61 63 6b 3a 20 5b 5d 2c 0d 0a 20 20 20 20 Data Ascii: && match[0]; } var origins = baseUrls.map(getOrigin); window.__backupBaseUrl = baseUrls[1]; var backupBaseUrl = baseUrls[1]; var failOverState = (window.__cdnFailOverState = { baseUrlFailedOver: false, modulesFalledBack: [],
2025-03-21 21:04:07 UTC	8192	IN	Data Raw: 72 63 3d 22 2f 53 63 72 69 70 74 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 63 62 56 4b 51 61 43 5a 5a 54 68 59 48 31 44 6d 48 33 75 76 30 72 39 33 78 49 6f 6c 66 62 57 5f 45 76 48 31 6b 33 69 59 5f 34 78 67 66 68 5a 4f 6b 62 5f 32 33 62 6a 47 79 48 53 79 74 55 42 46 68 71 43 77 66 6d 55 75 69 4f 43 4a 63 71 57 51 76 71 42 65 49 59 74 63 67 71 76 70 66 48 33 45 48 34 6f 35 53 54 6d 31 36 45 50 47 42 61 44 77 72 59 77 5f 75 4a 47 4c 6b 49 63 32 2d 51 6e 72 67 2d 6a 45 45 43 4e 57 50 53 39 73 6d 36 65 34 76 33 77 53 35 6c 2d 6a 71 36 4e 47 79 43 49 63 37 4a 67 67 67 6c 6b 42 39 66 73 35 39 70 42 70 35 37 72 6b 68 59 43 68 4d 71 38 67 4c 56 55 49 30 26 61 6d 70 3b 74 3d 32 61 39 64 39 35 65 33 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: rc="/ScriptResource.axd?d=cbVKQaCZZThYH1DmH3uv0r93xIolfbW_EvH1k3iY_4xgfhZOkb_23bjGyHSytUBFhqCwfmUuiOCJcqWQvqBeIYtcgqvpfH3EH4o5STm16EPGBaDwrYw_uJGLkIc2-Qnrg-jEECNWPS9sm6e4v3wS5l-jq6NGyCIc7JggglkB9fs59pBp57rkhYChMq8gLVUI0&t=2a9d95e3" type="text/javascri

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

Windows Analysis Report
https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:04:27 UTC	1143	OUT	POST /personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg HTTP/1.1 Host: brynnolson-my.sharepoint.com Connection: keep-alive Content-Length: 1593 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://brynnolson-my.sharepoint.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://brynnolson-my.sharepoint.com/personal/mmcnamara_brynnolson_com/_layouts/15/guestaccess.aspx?e=5%3aVI0XpV&at=9&share=EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:04:27 UTC	1593	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 45 6d 61 69 6c 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 39 30 35 2e 31 32 30 31 30 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 53 39 65 72 4a 67 36 63 6f 47 65 32 54 6e 53 65 59 61 61 46 37 5a 79 65 25 32 46 79 52 52 48 66 4d 35 67 74 6b 6a 46 35 73 46 55 68 48 38 39 37 49 46 32 38 31 43 62 6d 4d 53 47 62 4c 53 4f 6b 58 4d 63 66 31 4a 59 57 6a 74 6f 32 4d 6d 25 32 42 4f 54 59 25 32 46 51 59 43 64 79 62 77 76 35 66 4b 5a 73 77 55 6f 53 67 63 4d 6d 72 73 55 71 25 32 46 6b 37 65 66 42 79 66 72 61 37 25 32 46 79 35 57 38 44 45 55 6c 51 58 6c 4f 6a 42 39 30 51 79 50 6a 63 52 39 6a 7a 4f 7a 6a 52 43 25 32 42 4e 46 75 Data Ascii: __EVENTTARGET=btnSubmitEmail&__EVENTARGUMENT=&SideBySideToken=16.0.25905.12010&__VIEWSTATE=S9erJg6coGe2TnSeYaaF7Zye%2FyRRHfM5gtkjF5sFUhH897IF281CbmMSGbLSOkXMcf1JYWjto2Mm%2BOTY%2FQYCdybwv5fKZswUoSgcMmrsUq%2Fk7efByfra7%2Fy5W8DEUlQXlOjB90QyPjcR9jzOzjRC%2BNFu
2025-03-21 21:04:28 UTC	2062	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 69083 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,0,40702,55672,55672,7342 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 25cb8ca1-d0e5-8000-4198-913b4cda5cc1 request-id: 25cb8ca1-d0e5-8000-4198-913b4cda5cc1 MS-CV: oYzLJeXQAIBBmJE7TNpcwQ.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=586265bf-5d41-4213-a5eb-ac3185bd2c51&destinationEndpoint=Edge-Prod-EWR31r5d&frontEnd=AFD&RemoteIP=161.77.13.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 536 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25905 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F9556BB7E9B54945A54AC0E68F0A2CB2 Ref B: EWR311000108011 Ref C: 2025-03-21T21:04:27Z Date: Fri, 21 Mar 2025 21:04:27 GMT Connection: close
2025-03-21 21:04:28 UTC	2593	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2025-03-21 21:04:28 UTC	8192	IN	Data Raw: 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 Data Ascii: ber]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-cancel-button,[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-ap
2025-03-21 21:04:28 UTC	3659	IN	Data Raw: 36 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 37 29 3b 6d 61 78 2d 77 69 64 74 68 3a 33 36 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 3a 31 33 70 78 20 30 20 31 36 70 78 7d 2e 73 68 61 72 69 6e 67 2d 66 6f 72 6d 20 2e 68 65 61 64 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 31 70 78 3b 68 65 69 67 68 74 3a 37 32 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d Data Ascii: 6px;box-shadow:0 0 10px 0 rgba(0,0,0,.17);max-width:360px;display:flex;flex-direction:column;margin:13px 0 16px}.sharing-form .header{border-top-left-radius:6px;border-top-right-radius:6px;padding-top:21px;height:72px;border-bottom-width:1px;border-bottom
2025-03-21 21:04:28 UTC	8192	IN	Data Raw: 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 66 69 6c 65 73 2f 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 35 2d 30 33 2d 30 37 2e 30 30 32 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 77 65 62 70 61 63 6b 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 75 65 4a 2f 57 6d 6e 38 36 43 36 34 57 6a 50 54 44 64 37 59 74 42 6c 4a 36 70 6a 78 34 4e 62 71 5a 33 77 67 35 72 39 32 6a 67 6f 3d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d Data Ascii: res-1.cdn.office.net" crossorigin /><link rel="preload" href="https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-07.002/spoguestaccesswebpack/spoguestaccess.js" as="script" integrity="sha256-ueJ/Wmn86C64WjPTDd7YtBlJ6pjx4NbqZ3wg5r92jgo=" crossorigin=
2025-03-21 21:04:28 UTC	8192	IN	Data Raw: 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 2e 70 3d 22 22 2c 69 28 69 2e 73 3d 32 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 2c 6e 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 Data Ascii: e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=2);function i(e){if(n[e])return n[e].exports;var t=n[e]={i:e,l:!1,exports:{}};return r[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}var r,n});!function(e,t){"object"==typeof exports&
2025-03-21 21:04:28 UTC	8192	IN	Data Raw: 2b 22 5c 6e 68 74 74 70 3a 2f 2f 72 65 71 75 69 72 65 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 73 2e 68 74 6d 6c 23 22 2b 65 29 3b 69 2e 72 65 71 75 69 72 65 54 79 70 65 3d 65 3b 69 2e 72 65 71 75 69 72 65 4d 6f 64 75 6c 65 73 3d 6e 3b 72 26 26 28 69 2e 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3d 72 29 3b 72 65 74 75 72 6e 20 69 7d 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 65 66 69 6e 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 6a 73 29 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 6a 73 29 29 72 65 74 75 72 6e 3b 63 66 67 3d 72 65 71 75 69 72 65 6a 73 3b 72 65 71 75 69 72 65 6a 73 3d 76 6f 69 64 20 30 7d 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 26 26 21 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 Data Ascii: +"\nhttp://requirejs.org/docs/errors.html#"+e);i.requireType=e;i.requireModules=n;r&&(i.originalError=r);return i}if(void 0===define){if(void 0!==requirejs){if(isFunction(requirejs))return;cfg=requirejs;requirejs=void 0}if(void 0!==require&&!isFunction(re
2025-03-21 21:04:28 UTC	8192	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6f 29 29 7b 69 66 28 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 72 72 6f 72 26 26 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 7c 7c 72 65 71 2e 6f 6e 45 72 72 6f 72 21 3d 3d 64 65 66 61 75 6c 74 4f 6e 45 72 72 6f 72 29 74 72 79 7b 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 65 7d 65 6c 73 65 20 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 3b 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 28 65 3d 74 68 69 73 2e 6d 6f 64 75 6c 65 29 3f 69 3d 65 2e 65 78 70 6f 72 74 73 3a 74 68 69 73 2e 75 73 69 6e 67 45 78 70 6f 72 74 73 26 26 28 69 3d 74 68 69 73 2e 65 78 70 6f 72 74 73 29 29 3b 69 66 28 74 29 7b 74 2e 72 65 71 75 69 72 Data Ascii: unction(o)){if(this.events.error&&this.map.isDefine\|\|req.onError!==defaultOnError)try{i=d.execCb(r,o,n,i)}catch(e){t=e}else i=d.execCb(r,o,n,i);this.map.isDefine&&void 0===i&&((e=this.module)?i=e.exports:this.usingExports&&(i=this.exports));if(t){t.requir
2025-03-21 21:04:28 UTC	8192	IN	Data Raw: 61 74 63 68 5b 30 5d 3b 0d 0a 20 20 7d 0d 0a 20 20 76 61 72 20 6f 72 69 67 69 6e 73 20 3d 20 62 61 73 65 55 72 6c 73 2e 6d 61 70 28 67 65 74 4f 72 69 67 69 6e 29 3b 0d 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 28 77 69 6e 64 6f 77 2e 5f 5f 63 64 6e 46 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 6d 6f 64 75 6c 65 73 46 61 6c 6c 65 64 42 61 63 6b 3a 20 5b 5d 2c 0d 0a 20 20 20 20 6f 6e 50 61 Data Ascii: atch[0]; } var origins = baseUrls.map(getOrigin); window.__backupBaseUrl = baseUrls[1]; var backupBaseUrl = baseUrls[1]; var failOverState = (window.__cdnFailOverState = { baseUrlFailedOver: false, modulesFalledBack: [], onPa
2025-03-21 21:04:28 UTC	8192	IN	Data Raw: 2f 53 63 72 69 70 74 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 63 62 56 4b 51 61 43 5a 5a 54 68 59 48 31 44 6d 48 33 75 76 30 72 39 33 78 49 6f 6c 66 62 57 5f 45 76 48 31 6b 33 69 59 5f 34 78 67 66 68 5a 4f 6b 62 5f 32 33 62 6a 47 79 48 53 79 74 55 42 46 68 71 43 77 66 6d 55 75 69 4f 43 4a 63 71 57 51 76 71 42 65 49 59 74 63 67 71 76 70 66 48 33 45 48 34 6f 35 53 54 6d 31 36 45 50 47 42 61 44 77 72 59 77 5f 75 4a 47 4c 6b 49 63 32 2d 51 6e 72 67 2d 6a 45 45 43 4e 57 50 53 39 73 6d 36 65 34 76 33 77 53 35 6c 2d 6a 71 36 4e 47 79 43 49 63 37 4a 67 67 67 6c 6b 42 39 66 73 35 39 70 42 70 35 37 72 6b 68 59 43 68 4d 71 38 67 4c 56 55 49 30 26 61 6d 70 3b 74 3d 32 61 39 64 39 35 65 33 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e Data Ascii: /ScriptResource.axd?d=cbVKQaCZZThYH1DmH3uv0r93xIolfbW_EvH1k3iY_4xgfhZOkb_23bjGyHSytUBFhqCwfmUuiOCJcqWQvqBeIYtcgqvpfH3EH4o5STm16EPGBaDwrYw_uJGLkIc2-Qnrg-jEECNWPS9sm6e4v3wS5l-jq6NGyCIc7JggglkB9fs59pBp57rkhYChMq8gLVUI0&t=2a9d95e3" type="text/javascript">

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:04:42 UTC	602	OUT	OPTIONS /api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=PISCATAWAY&ASN=20940&Country=US&Region=NJ&RequestIdentifier=0.b6f8dc17.1742591068.27406f9b&TotalRTCDNTime=91&CompressionType=&FileSize=215 HTTP/1.1 Host: m365cdn.nel.measure.office.net Connection: keep-alive Origin: https://res-1.cdn.office.net Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:04:42 UTC	319	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7 Date: Fri, 21 Mar 2025 21:04:42 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *
2025-03-21 21:04:42 UTC	7	IN	Data Raw: 4f 50 54 49 4f 4e 53 Data Ascii: OPTIONS

Timestamp	Bytes transferred	Direction	Data
2025-03-21 21:04:42 UTC	578	OUT	POST /api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=PISCATAWAY&ASN=20940&Country=US&Region=NJ&RequestIdentifier=0.b6f8dc17.1742591068.27406f9b&TotalRTCDNTime=91&CompressionType=&FileSize=215 HTTP/1.1 Host: m365cdn.nel.measure.office.net Connection: keep-alive Content-Length: 2085 Content-Type: application/reports+json Origin: https://res-1.cdn.office.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 21:04:42 UTC	2085	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 34 32 35 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 34 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 72 79 6e 6e 6f 6c 73 6f 6e 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 32 33 2e 32 30 36 2e 31 32 31 2e 31 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f Data Ascii: [{"age":34256,"body":{"elapsed_time":340,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://brynnolson-my.sharepoint.com/","sampling_fraction":1.0,"server_ip":"23.206.121.10","status_code":404,"type":"http.error"},"type":"netwo
2025-03-21 21:04:42 UTC	399	IN	HTTP/1.1 429 Too Many Requests Content-Length: 0 x-ms-middleware-request-id: 00000000-0000-0000-0000-000000000000 Request-Context: appId=cid-v1:0df9f0fa-2b61-4bcc-8864-10ea6079c765 Date: Fri, 21 Mar 2025 21:04:42 GMT Connection: close Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *

Target ID:	0
Start time:	17:03:28
Start date:	21/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	17:03:32
Start date:	21/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2244,i,12547438732382083119,14799488543431638691,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	10
Start time:	17:03:38
Start date:	21/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://brynnolson-my.sharepoint.com/:o:/p/mmcnamara/EurOgI9votFGm763hW1zOewB1DlSq-71LGD9OfLufDm4bg?e=5%3aVI0XpV&at=9"
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre