Edit tour

Windows Analysis Report
https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9

Overview

General Information

Sample URL:	https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9
Analysis ID:	1667169
Infos:

Detection

Score:	1
Range:	0 - 100
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2932,i,13301453156867561865,13080001017303664051,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2960 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q HTTP/1.1Host: metromechanicalservice-my.sharepoint.comConnection: keep-aliveContent-Length: 1621Cache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Origin: https://metromechanicalservice-my.sharepoint.comContent-Type: application/x-www-form-urlencodedUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 215x-ms-request-id: d0c347cb-e01e-004c-4c60-aff830000000Date: Thu, 17 Apr 2025 06:20:38 GMTAlt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43"Connection: closeAkamai-Request-BC: [a=23.0.175.12,b=15850259,c=g,n=US_GA_ATLANTA,o=20940],[c=c,n=US_GA_LITHIASPRINGS,o=20940],[a=4,c=o]AK-Network: FFReport-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ATLANTA&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.0caf0017.1744870838.f1db13&TotalRTCDNTime=106&CompressionType=&FileSize=215"}],"include_subdomains ":true}NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Server-Timing: clientrtt; dur=106, clienttt; dur=61, origin; dur=56 , cdntime; dur=5Akamai-Cache-Status: Miss from child, Miss from parentX-Content-Type-Options: nosniffTiming-Allow-Origin: Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-IdAccess-Control-Allow-Origin: Strict-Transport-Security: max-age=31536000; includeSubDomainsContent-Type: application/javascriptX-CDN-Provider: Akamai
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 215x-ms-request-id: d0c347cb-e01e-004c-4c60-aff830000000Date: Thu, 17 Apr 2025 06:21:03 GMTAlt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43"Connection: closeAkamai-Request-BC: [a=23.0.175.38,b=75749613,c=g,n=US_GA_ATLANTA,o=20940],[c=c,n=US_GA_LITHIASPRINGS,o=20940]AK-Network: FFReport-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ATLANTA&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.26af0017.1744870863.483d8ed&TotalRTCDNTime=106&CompressionType=&FileSize=215"}],"include_subdomains ":true}NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Server-Timing: clientrtt; dur=106, clienttt; dur=4, origin; dur=0 , cdntime; dur=4Akamai-Cache-Status: Miss from child, Hit from parentX-Content-Type-Options: nosniffTiming-Allow-Origin: Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-IdAccess-Control-Allow-Origin: Strict-Transport-Security: max-age=31536000; includeSubDomainsContent-Type: application/javascriptX-CDN-Provider: Akamai
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 215x-ms-request-id: d0c38ca3-e01e-004c-3b60-aff830000000Date: Thu, 17 Apr 2025 06:21:15 GMTAlt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43"Connection: closeAkamai-Request-BC: [a=23.0.175.38,b=75751560,c=g,n=US_GA_ATLANTA,o=20940]AK-Network: FFReport-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ATLANTA&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.26af0017.1744870875.483e088&TotalRTCDNTime=106&CompressionType=&FileSize=215"}],"include_subdomains ":true}NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Server-Timing: clientrtt; dur=106, clienttt; dur=, origin; dur=0 , cdntime; dur=0Akamai-Cache-Status: Hit from childX-Content-Type-Options: nosniffTiming-Allow-Origin: Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-IdAccess-Control-Allow-Origin: Strict-Transport-Security: max-age=31536000; includeSubDomainsContent-Type: application/javascriptX-CDN-Provider: Akamai
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 215x-ms-request-id: d0c38ca3-e01e-004c-3b60-aff830000000Date: Thu, 17 Apr 2025 06:21:25 GMTAlt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43"Connection: closeAkamai-Request-BC: [a=23.0.175.12,b=15858649,c=g,n=US_GA_ATLANTA,o=20940],[c=c,n=US_GA_LITHIASPRINGS,o=20940]AK-Network: FFReport-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ATLANTA&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.0caf0017.1744870885.f1fbd9&TotalRTCDNTime=106&CompressionType=&FileSize=215"}],"include_subdomains ":true}NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Server-Timing: clientrtt; dur=106, clienttt; dur=5, origin; dur=0 , cdntime; dur=5Akamai-Cache-Status: Miss from child, Hit from parentX-Content-Type-Options: nosniffTiming-Allow-Origin: Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-IdAccess-Control-Allow-Origin: Strict-Transport-Security: max-age=31536000; includeSubDomainsContent-Type: application/javascriptX-CDN-Provider: Akamai

Source: chromecache_79.3.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_81.3.dr	String found in binary or memory: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/i
Source: chromecache_84.3.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_74.3.dr, chromecache_85.3.dr, chromecache_76.3.dr, chromecache_81.3.dr	String found in binary or memory: https://res-1.public.onecdn.static.microsoft
Source: chromecache_74.3.dr, chromecache_85.3.dr, chromecache_76.3.dr, chromecache_81.3.dr	String found in binary or memory: https://res-1.public.onecdn.static.microsoft/bld/_layouts/15/16.0.26002.12007/require.js
Source: chromecache_74.3.dr, chromecache_85.3.dr, chromecache_76.3.dr, chromecache_81.3.dr	String found in binary or memory: https://res-1.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/
Source: chromecache_74.3.dr, chromecache_85.3.dr, chromecache_76.3.dr, chromecache_81.3.dr	String found in binary or memory: https://res-1.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/spoguestaccesswebpac
Source: chromecache_74.3.dr, chromecache_85.3.dr, chromecache_76.3.dr, chromecache_81.3.dr	String found in binary or memory: https://res-2.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/
Source: chromecache_74.3.dr, chromecache_85.3.dr, chromecache_76.3.dr, chromecache_81.3.dr	String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 192.178.50.68:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.136.10:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.136.10:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.0.175.16:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.0.175.16:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.136.10:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.223.44.236:443 -> 192.168.2.4:49765 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@21/30@10/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2932,i,13301453156867561865,13080001017303664051,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2960 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2932,i,13301453156867561865,13080001017303664051,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2960 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://metromechanicalservice-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	0%	Avira URL Cloud	safe
https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/i	0%	Avira URL Cloud	safe
https://metromechanicalservice-my.sharepoint.com/ScriptResource.axd?d=-ZISJ79NKGo8xxvs6gqoO59b9LJX0MA_sPUzky0kgH17GM8gkUQj6ozrHkcUDwPca1Dw_eNeJuEaruqGV5aKkLyHGkIvpDRmBJ1sLSL4uSi9WZj5QXuJSU05tibu0vVXt8ows6DH2eM8_jc1kd0Sk8TfznTBU4S4qxxwXz3-L0s1&t=ffffffffc7a8e318	0%	Avira URL Cloud	safe
https://metromechanicalservice-my.sharepoint.com/WebResource.axd?d=SGsUv3Fqky0K3tWJgppAy17jqQ2RRlCE0adNNhOGuR00hH1Sqfta5vE4tQ3GO7ybRh6TjDztXtLSg_oBKPpbm2jjpvqNl81qLg_zzy8yTqA1&t=638768124586963462	0%	Avira URL Cloud	safe
https://metromechanicalservice-my.sharepoint.com/_layouts/15/images/microsoft-logo.png	0%	Avira URL Cloud	safe
https://metromechanicalservice-my.sharepoint.com/ScriptResource.axd?d=QbmwPYOeeF6QRUHQY0GoVpIND93behZafZjB6oPRQNv1yqR2ofF5SQ_hyzTY8jEaiSD78NBRsIYaCPTRYhwc8HejUXeGcmIFPQxjfIKDiC3sI2wqVTfQsmZnsxRO4sn6If1GKx44-b3ltJG2Ksp2RQGvKOJZUoQBpCcR2nlYZixrYuBcCbRC6fIT_G1fBJJU0&t=2a9d95e3	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a434.dscd.akamai.net	23.0.175.16	true	false	unknown
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	high
www.google.com	192.178.50.68	true	false	high
a1894.dscb.akamai.net	23.223.44.236	true	false	high
res-1.public.onecdn.static.microsoft	unknown	unknown	false	high
metromechanicalservice-my.sharepoint.com	unknown	unknown	false	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://metromechanicalservice-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	false	Avira URL Cloud: safe	unknown
https://metromechanicalservice-my.sharepoint.com/ScriptResource.axd?d=-ZISJ79NKGo8xxvs6gqoO59b9LJX0MA_sPUzky0kgH17GM8gkUQj6ozrHkcUDwPca1Dw_eNeJuEaruqGV5aKkLyHGkIvpDRmBJ1sLSL4uSi9WZj5QXuJSU05tibu0vVXt8ows6DH2eM8_jc1kd0Sk8TfznTBU4S4qxxwXz3-L0s1&t=ffffffffc7a8e318	false	Avira URL Cloud: safe	unknown
https://metromechanicalservice-my.sharepoint.com/WebResource.axd?d=SGsUv3Fqky0K3tWJgppAy17jqQ2RRlCE0adNNhOGuR00hH1Sqfta5vE4tQ3GO7ybRh6TjDztXtLSg_oBKPpbm2jjpvqNl81qLg_zzy8yTqA1&t=638768124586963462	false	Avira URL Cloud: safe	unknown
https://metromechanicalservice-my.sharepoint.com/_layouts/15/images/microsoft-logo.png	false	Avira URL Cloud: safe	unknown
https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	false		unknown
https://metromechanicalservice-my.sharepoint.com/ScriptResource.axd?d=QbmwPYOeeF6QRUHQY0GoVpIND93behZafZjB6oPRQNv1yqR2ofF5SQ_hyzTY8jEaiSD78NBRsIYaCPTRYhwc8HejUXeGcmIFPQxjfIKDiC3sI2wqVTfQsmZnsxRO4sn6If1GKx44-b3ltJG2Ksp2RQGvKOJZUoQBpCcR2nlYZixrYuBcCbRC6fIT_G1fBJJU0&t=2a9d95e3	false	Avira URL Cloud: safe	unknown
https://res-1.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/spoguestaccesswebpack/spoguestaccess.js	false		high
https://res-1.public.onecdn.static.microsoft/bld/_layouts/15/16.0.26002.12007/require.js	false		high
https://res-1.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js	false		high
http://c.pki.goog/r/r4.crl	false		high
https://m365cdn.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ATLANTA&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.0caf0017.1744870885.f1fbd9&TotalRTCDNTime=106&CompressionType=&FileSize=215	false		high
https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://res-1.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/	chromecache_74.3.dr, chromecache_85.3.dr, chromecache_76.3.dr, chromecache_81.3.dr	false		high
https://res-1.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/spoguestaccesswebpac	chromecache_74.3.dr, chromecache_85.3.dr, chromecache_76.3.dr, chromecache_81.3.dr	false		high
http://github.com/jrburke/requirejs	chromecache_79.3.dr	false		high
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_84.3.dr	false		high
https://res-1.public.onecdn.static.microsoft	chromecache_74.3.dr, chromecache_85.3.dr, chromecache_76.3.dr, chromecache_81.3.dr	false		high
https://res-2.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/	chromecache_74.3.dr, chromecache_85.3.dr, chromecache_76.3.dr, chromecache_81.3.dr	false		high
https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/i	chromecache_81.3.dr	false	Avira URL Cloud: safe	unknown
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js	chromecache_74.3.dr, chromecache_85.3.dr, chromecache_76.3.dr, chromecache_81.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.50.68	www.google.com	United States	15169	GOOGLEUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.0.175.16	a434.dscd.akamai.net	United States	20940	AKAMAI-ASN1EU	false
23.223.44.236	a1894.dscb.akamai.net	United States	16625	AKAMAI-ASUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1667169
Start date and time:	2025-04-17 08:19:26 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@21/30@10/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 108.177.122.94, 172.217.215.139, 172.217.215.100, 172.217.215.101, 172.217.215.102, 172.217.215.113, 172.217.215.138, 64.233.177.102, 64.233.177.101, 64.233.177.100, 64.233.177.139, 64.233.177.138, 64.233.177.113, 142.250.105.84, 74.125.138.101, 74.125.138.139, 74.125.138.113, 74.125.138.138, 74.125.138.100, 74.125.138.102, 64.233.185.138, 64.233.185.100, 64.233.185.113, 64.233.185.102, 64.233.185.139, 64.233.185.101, 142.250.105.95, 64.233.176.95, 64.233.177.95, 74.125.138.95, 172.217.215.95, 64.233.185.95, 108.177.122.95, 173.194.219.95, 74.125.21.95, 74.125.136.95, 142.250.9.95, 172.253.124.95, 23.4.43.62, 199.232.214.172, 142.250.9.139, 142.250.9.101, 142.250.9.100, 142.250.9.138, 142.250.9.113, 142.250.9.102, 142.251.15.101, 142.251.15.102, 142.251.15.100, 142.251.15.113, 142.251.15.138, 142.251.15.139, 173.194.219.94, 173.194.219.102, 173.194.219.139, 173.194.219.101, 173.194.219.100, 173.194.219.138, 173.194.219.113, 184.28.213.193, 4.245.163.56
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	downloaded
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
URL:	https://metromechanicalservice-my.sharepoint.com/ScriptResource.axd?d=ZnRaRptUWNasDqRD-c7ijNYS0G_3wQSnfr1tsEzwAdZ-XhDREBc0oYkNL5oFowpseSW2h8k9WKVlV5bLkQ8RFZqzInNpNVA8JbJWyJ6B74B0mxvTDKmHOGTW18s-ZjMfgyDLT_Vn5a12IUSvo0qKMvV9sGFr2A4QLbjtSGSXpjFCuPrXgAvIUNyyDgTZmN4l0&t=2a9d95e3
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Source: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9	HTTP Parser: Number of links: 0
Source: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	HTTP Parser: Number of links: 0

Source: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9	HTTP Parser: Title: Sharing Link Validation does not match URL
Source: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	HTTP Parser: Title: Sharing Link Validation does not match URL

Source: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))
Source: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))
Source: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))
Source: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))
Source: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))

Source: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9	HTTP Parser: No <meta name="author".. found
Source: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9	HTTP Parser: No <meta name="author".. found
Source: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	HTTP Parser: No <meta name="author".. found
Source: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	HTTP Parser: No <meta name="author".. found
Source: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	HTTP Parser: No <meta name="author".. found

Source: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9	HTTP Parser: No <meta name="copyright".. found
Source: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9	HTTP Parser: No <meta name="copyright".. found
Source: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	HTTP Parser: No <meta name="copyright".. found
Source: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	HTTP Parser: No <meta name="copyright".. found
Source: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.215.94
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.215.94
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.215.94
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.215.94
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.215.94
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.215.94
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9 HTTP/1.1Host: metromechanicalservice-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=SGsUv3Fqky0K3tWJgppAy17jqQ2RRlCE0adNNhOGuR00hH1Sqfta5vE4tQ3GO7ybRh6TjDztXtLSg_oBKPpbm2jjpvqNl81qLg_zzy8yTqA1&t=638768124586963462 HTTP/1.1Host: metromechanicalservice-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=-ZISJ79NKGo8xxvs6gqoO59b9LJX0MA_sPUzky0kgH17GM8gkUQj6ozrHkcUDwPca1Dw_eNeJuEaruqGV5aKkLyHGkIvpDRmBJ1sLSL4uSi9WZj5QXuJSU05tibu0vVXt8ows6DH2eM8_jc1kd0Sk8TfznTBU4S4qxxwXz3-L0s1&t=ffffffffc7a8e318 HTTP/1.1Host: metromechanicalservice-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bld/_layouts/15/16.0.26002.12007/require.js HTTP/1.1Host: res-1.public.onecdn.static.microsoftConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://metromechanicalservice-my.sharepoint.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/odsp-web-prod_2025-04-04.007/spoguestaccesswebpack/spoguestaccess.js HTTP/1.1Host: res-1.public.onecdn.static.microsoftConnection: keep-aliveOrigin: https://metromechanicalservice-my.sharepoint.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://metromechanicalservice-my.sharepoint.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=ZnRaRptUWNasDqRD-c7ijNYS0G_3wQSnfr1tsEzwAdZ-XhDREBc0oYkNL5oFowpseSW2h8k9WKVlV5bLkQ8RFZqzInNpNVA8JbJWyJ6B74B0mxvTDKmHOGTW18s-ZjMfgyDLT_Vn5a12IUSvo0qKMvV9sGFr2A4QLbjtSGSXpjFCuPrXgAvIUNyyDgTZmN4l0&t=2a9d95e3 HTTP/1.1Host: metromechanicalservice-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=QbmwPYOeeF6QRUHQY0GoVpIND93behZafZjB6oPRQNv1yqR2ofF5SQ_hyzTY8jEaiSD78NBRsIYaCPTRYhwc8HejUXeGcmIFPQxjfIKDiC3sI2wqVTfQsmZnsxRO4sn6If1GKx44-b3ltJG2Ksp2RQGvKOJZUoQBpCcR2nlYZixrYuBcCbRC6fIT_G1fBJJU0&t=2a9d95e3 HTTP/1.1Host: metromechanicalservice-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: metromechanicalservice-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/odsp-web-prod_2025-04-04.007/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js HTTP/1.1Host: res-1.public.onecdn.static.microsoftConnection: keep-aliveOrigin: https://metromechanicalservice-my.sharepoint.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://metromechanicalservice-my.sharepoint.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: metromechanicalservice-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: metromechanicalservice-my.sharepoint.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: metromechanicalservice-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/odsp-web-prod_2025-04-04.007/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js HTTP/1.1Host: res-1.public.onecdn.static.microsoftConnection: keep-aliveOrigin: https://metromechanicalservice-my.sharepoint.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://metromechanicalservice-my.sharepoint.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/odsp-web-prod_2025-04-04.007/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js HTTP/1.1Host: res-1.public.onecdn.static.microsoftConnection: keep-aliveOrigin: https://metromechanicalservice-my.sharepoint.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://metromechanicalservice-my.sharepoint.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/odsp-web-prod_2025-04-04.007/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js HTTP/1.1Host: res-1.public.onecdn.static.microsoftConnection: keep-aliveOrigin: https://metromechanicalservice-my.sharepoint.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://metromechanicalservice-my.sharepoint.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: metromechanicalservice-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: res-1.public.onecdn.static.microsoft
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 17, 2025 08:20:30.342834949 CEST	53	60719	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:30.435256958 CEST	53	60422	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:31.179302931 CEST	53	58404	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:31.359988928 CEST	53	53433	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:34.101450920 CEST	53456	53	192.168.2.4	1.1.1.1
Apr 17, 2025 08:20:34.101650000 CEST	51081	53	192.168.2.4	1.1.1.1
Apr 17, 2025 08:20:34.208489895 CEST	53	53456	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:34.209073067 CEST	53	51081	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:35.265902996 CEST	53446	53	192.168.2.4	1.1.1.1
Apr 17, 2025 08:20:35.266140938 CEST	59146	53	192.168.2.4	1.1.1.1
Apr 17, 2025 08:20:35.419821024 CEST	53	59146	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:35.430681944 CEST	53	53446	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:36.516436100 CEST	53856	53	192.168.2.4	1.1.1.1
Apr 17, 2025 08:20:36.517705917 CEST	58351	53	192.168.2.4	1.1.1.1
Apr 17, 2025 08:20:36.625505924 CEST	53	53856	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:36.665435076 CEST	53	58351	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:37.694559097 CEST	62713	53	192.168.2.4	1.1.1.1
Apr 17, 2025 08:20:37.694786072 CEST	49707	53	192.168.2.4	1.1.1.1
Apr 17, 2025 08:20:37.801628113 CEST	53	62713	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:37.849522114 CEST	53	49707	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:38.015333891 CEST	53	50184	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:48.464446068 CEST	53	53553	1.1.1.1	192.168.2.4
Apr 17, 2025 08:20:49.050060034 CEST	53	58890	1.1.1.1	192.168.2.4
Apr 17, 2025 08:21:07.380381107 CEST	53	61605	1.1.1.1	192.168.2.4
Apr 17, 2025 08:21:29.788722038 CEST	53	63422	1.1.1.1	192.168.2.4
Apr 17, 2025 08:21:30.120069027 CEST	53	60144	1.1.1.1	192.168.2.4
Apr 17, 2025 08:21:31.052380085 CEST	53	58415	1.1.1.1	192.168.2.4
Apr 17, 2025 08:21:34.683278084 CEST	138	138	192.168.2.4	192.168.2.255
Apr 17, 2025 08:21:37.788388014 CEST	63578	53	192.168.2.4	1.1.1.1
Apr 17, 2025 08:21:37.788537979 CEST	62047	53	192.168.2.4	1.1.1.1
Apr 17, 2025 08:21:37.896007061 CEST	53	62047	1.1.1.1	192.168.2.4
Apr 17, 2025 08:21:37.896323919 CEST	53	63578	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
Apr 17, 2025 08:20:42.043311119 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 17, 2025 08:20:42.149823904 CEST	1242	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 530 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 17 Apr 2025 06:12:10 GMT Expires: Thu, 17 Apr 2025 07:02:10 GMT Cache-Control: public, max-age=3000 Age: 512 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 02 0e 30 82 01 93 02 01 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 34 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 81 e9 30 2f 02 10 6e 47 a9 ce 4f 46 c2 3d e2 49 ea cc 38 94 53 73 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 9c 5b 70 05 a6 dc 86 e2 f9 9e f3 17 0d 32 30 30 31 33 31 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 fe a5 81 44 7e 3b fd 3b b8 1c 24 98 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 16 68 25 e1 70 04 40 61 24 91 f5 40 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 00 8e b2 58 e7 b5 94 0c 1f f9 00 44 17 0d 32 35 30 [TRUNCATED] Data Ascii: 000H=0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R4250403080000Z260228075959Z00/nGOF=I8Ss190930000000Z00U0,[p200131000000Z00U0,D~;;$230613000000Z00U0,h%p@a$@250403080000Z00U0,XD250403080000Z00U/0-0U0U#0LtI6>j0H=i0f1>2en:IN@g=;bQZ~`NX1?^4y[$\4{;$zDeU6O

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://metromechanicalservice-my.sharepoint.com/ScriptResource.axd?d=-ZISJ79NKGo8xxvs6gqoO59b9LJX0MA_sPUzky0kgH17GM8gkUQj6ozrHkcUDwPca1Dw_eNeJuEaruqGV5aKkLyHGkIvpDRmBJ1sLSL4uSi9WZj5QXuJSU05tibu0vVXt8ows6DH2eM8_jc1kd0Sk8TfznTBU4S4qxxwXz3-L0s1&t=ffffffffc7a8e318
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	69338
Entropy (8bit):	5.668427809477973
Encrypted:	false
SSDEEP:	1536:PlgguS3chhSWXBOxSPSW8N6fGNNKilrJs2wVXFoHx:PLuLCGeTKiKVXFU
MD5:	71C7BE4A3666BF41E0D243A3C84C5406
SHA1:	84FBEF64756E968EA8A9D4889AA7CBA45E1B477F
SHA-256:	C6B5913D3691A59257A0947C617133AED92A5C932199E3F3A94AC48355A3C8C6
SHA-512:	A0C27F2FF5D713EF3E2A113D9D220B6E36000DAB518443826055A6E2080AD52DEE5CB2DC443B120D6FEBC47049FA2BE97BD793663F9C634F4618E720034F9DC8
Malicious:	false
Reputation:	low
URL:	https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:20:35 UTC	798	OUT	GET /:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9 HTTP/1.1 Host: metromechanicalservice-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:20:36 UTC	2017	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 69514 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,0,0,0,0,0,0,0 X-SharePointHealthScore: 0 X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 4d4995a1-40fd-c000-6040-44427fd47587 request-id: 4d4995a1-40fd-c000-6040-44427fd47587 MS-CV: oZVJTf1AAMBgQERCf9R1hw.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=36abecd9-c76b-4cfd-b9f9-1b1264839c0d&destinationEndpoint=Edge-Prod-ATL33r5a&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 123 SPIisLatency: 4 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 7E76A56193134A49BF5BB37474040385 Ref B: ATL331000102031 Ref C: 2025-04-17T06:20:35Z Date: Thu, 17 Apr 2025 06:20:35 GMT Connection: close
2025-04-17 06:20:36 UTC	2153	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2025-04-17 06:20:36 UTC	8192	IN	Data Raw: 73 72 69 6e 67 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 70 72 6f Data Ascii: sring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}pro
2025-04-17 06:20:36 UTC	4144	IN	Data Raw: 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 65 73 6b 74 6f 70 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 35 37 70 78 20 30 20 32 30 70 78 7d 2e 6d 6f 62 69 6c 65 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 7d 2e 6d 69 63 72 6f 73 6f 66 74 2d 6c 6f 67 Data Ascii: webkit-inner-spin-button,input::-webkit-outer-spin-button{margin:0;-webkit-appearance:none}input[type=number]{-moz-appearance:textfield}input[type=number]::-ms-clear{display:none}.desktop-logo{margin:57px 0 20px}.mobile-logo{margin-top:24px}.microsoft-log
2025-04-17 06:20:36 UTC	8192	IN	Data Raw: 69 67 69 6e 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 70 75 62 6c 69 63 2e 6f 6e 65 63 64 6e 2e 73 74 61 74 69 63 2e 6d 69 63 72 6f 73 6f 66 74 2f 66 69 6c 65 73 2f 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 35 2d 30 34 2d 30 34 2e 30 30 37 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 77 65 62 70 61 63 6b 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 6a 57 4d 58 4d 77 79 6a 56 50 4a 2f 75 77 35 44 35 6c 4b 36 32 59 69 56 72 59 6b 4b 64 43 32 54 72 48 34 79 5a 70 48 4d 6a 38 49 3d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f Data Ascii: igin /><link rel="preload" href="https://res-1.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/spoguestaccesswebpack/spoguestaccess.js" as="script" integrity="sha256-jWMXMwyjVPJ/uw5D5lK62YiVrYkKdC2TrH4yZpHMj8I=" crossorigin="anonymous" /
2025-04-17 06:20:36 UTC	8192	IN	Data Raw: 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 2e 70 3d 22 22 2c 69 28 69 2e 73 3d 32 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 2c 6e 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 Data Ascii: bject.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=2);function i(e){if(n[e])return n[e].exports;var t=n[e]={i:e,l:!1,exports:{}};return r[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}var r,n});!function(e,t){"object"==typeof exports&&"undefined"!
2025-04-17 06:20:36 UTC	8192	IN	Data Raw: 71 75 69 72 65 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 73 2e 68 74 6d 6c 23 22 2b 65 29 3b 69 2e 72 65 71 75 69 72 65 54 79 70 65 3d 65 3b 69 2e 72 65 71 75 69 72 65 4d 6f 64 75 6c 65 73 3d 6e 3b 72 26 26 28 69 2e 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3d 72 29 3b 72 65 74 75 72 6e 20 69 7d 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 65 66 69 6e 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 6a 73 29 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 6a 73 29 29 72 65 74 75 72 6e 3b 63 66 67 3d 72 65 71 75 69 72 65 6a 73 3b 72 65 71 75 69 72 65 6a 73 3d 76 6f 69 64 20 30 7d 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 26 26 21 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 29 29 7b 63 66 67 3d 72 Data Ascii: quirejs.org/docs/errors.html#"+e);i.requireType=e;i.requireModules=n;r&&(i.originalError=r);return i}if(void 0===define){if(void 0!==requirejs){if(isFunction(requirejs))return;cfg=requirejs;requirejs=void 0}if(void 0!==require&&!isFunction(require)){cfg=r
2025-04-17 06:20:36 UTC	8192	IN	Data Raw: 66 28 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 72 72 6f 72 26 26 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 7c 7c 72 65 71 2e 6f 6e 45 72 72 6f 72 21 3d 3d 64 65 66 61 75 6c 74 4f 6e 45 72 72 6f 72 29 74 72 79 7b 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 65 7d 65 6c 73 65 20 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 3b 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 28 65 3d 74 68 69 73 2e 6d 6f 64 75 6c 65 29 3f 69 3d 65 2e 65 78 70 6f 72 74 73 3a 74 68 69 73 2e 75 73 69 6e 67 45 78 70 6f 72 74 73 26 26 28 69 3d 74 68 69 73 2e 65 78 70 6f 72 74 73 29 29 3b 69 66 28 74 29 7b 74 2e 72 65 71 75 69 72 65 4d 61 70 3d 74 68 69 73 2e 6d 61 70 Data Ascii: f(this.events.error&&this.map.isDefine\|\|req.onError!==defaultOnError)try{i=d.execCb(r,o,n,i)}catch(e){t=e}else i=d.execCb(r,o,n,i);this.map.isDefine&&void 0===i&&((e=this.module)?i=e.exports:this.usingExports&&(i=this.exports));if(t){t.requireMap=this.map
2025-04-17 06:20:36 UTC	8192	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 6d 61 74 63 68 20 26 26 20 6d 61 74 63 68 5b 30 5d 3b 0d 0a 20 20 7d 0d 0a 20 20 76 61 72 20 6f 72 69 67 69 6e 73 20 3d 20 62 61 73 65 55 72 6c 73 2e 6d 61 70 28 67 65 74 4f 72 69 67 69 6e 29 3b 0d 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 28 77 69 6e 64 6f 77 2e 5f 5f 63 64 6e 46 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 6d 6f 64 75 6c 65 73 46 61 6c 6c 65 64 Data Ascii: return match && match[0]; } var origins = baseUrls.map(getOrigin); window.__backupBaseUrl = baseUrls[1]; var backupBaseUrl = baseUrls[1]; var failOverState = (window.__cdnFailOverState = { baseUrlFailedOver: false, modulesFalled
2025-04-17 06:20:36 UTC	8192	IN	Data Raw: 56 39 73 47 46 72 32 41 34 51 4c 62 6a 74 53 47 53 58 70 6a 46 43 75 50 72 58 67 41 76 49 55 4e 79 79 44 67 54 5a 6d 4e 34 6c 30 26 61 6d 70 3b 74 3d 32 61 39 64 39 35 65 33 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 53 63 72 69 70 74 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 51 62 6d 77 50 59 4f 65 65 46 36 51 52 55 48 51 59 30 47 6f 56 70 49 4e 44 39 33 62 65 68 5a 61 66 5a 6a 42 36 6f 50 52 51 4e 76 31 79 71 52 32 6f 66 46 35 53 51 5f 68 79 7a 54 59 38 6a 45 61 69 53 44 37 38 4e 42 52 73 49 59 61 43 50 54 52 59 68 77 63 38 48 65 6a 55 58 65 47 63 6d 49 46 50 51 78 6a 66 49 4b 44 69 43 33 73 49 32 77 71 56 54 66 51 73 6d 5a 6e 73 78 52 4f 34 73 Data Ascii: V9sGFr2A4QLbjtSGSXpjFCuPrXgAvIUNyyDgTZmN4l0&t=2a9d95e3" type="text/javascript"></script><script src="/ScriptResource.axd?d=QbmwPYOeeF6QRUHQY0GoVpIND93behZafZjB6oPRQNv1yqR2ofF5SQ_hyzTY8jEaiSD78NBRsIYaCPTRYhwc8HejUXeGcmIFPQxjfIKDiC3sI2wqVTfQsmZnsxRO4s
2025-04-17 06:20:36 UTC	5873	IN	Data Raw: 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 22 5d 20 3a 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 22 29 3b 0d 0a 09 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 20 3d 20 22 74 78 74 54 4f 41 41 45 6d 61 69 6c 22 3b 0d 0a 09 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 2e 66 6f 63 75 73 4f 6e 45 72 72 6f 72 20 3d 20 22 74 22 3b 0d 0a 09 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 2e 65 72 72 6f 72 6d 65 73 73 61 67 65 20 3d 20 22 59 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 69 6e 20 74 68 65 20 63 6f 72 72 65 63 74 20 65 6d 61 69 6c 20 66 6f 72 6d 61 74 20 Data Ascii: ValidateTOAAEMail"] : document.getElementById("ValidateTOAAEMail");ValidateTOAAEMail.controltovalidate = "txtTOAAEmail";ValidateTOAAEMail.focusOnError = "t";ValidateTOAAEMail.errormessage = "Your email address must be in the correct email format

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:20:36 UTC	827	OUT	GET /WebResource.axd?d=SGsUv3Fqky0K3tWJgppAy17jqQ2RRlCE0adNNhOGuR00hH1Sqfta5vE4tQ3GO7ybRh6TjDztXtLSg_oBKPpbm2jjpvqNl81qLg_zzy8yTqA1&t=638768124586963462 HTTP/1.1 Host: metromechanicalservice-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:20:36 UTC	762	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Fri, 17 Apr 2026 02:58:03 GMT Last-Modified: Thu, 06 Mar 2025 07:00:58 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,75,1058,52344,52344,79134 X-AspNet-Version: 4.0.30319 SPRequestDuration: 2 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 14D551CC7B384C3C8EF11C5CC8C499B8 Ref B: ATL331000104017 Ref C: 2025-04-17T06:20:36Z Date: Thu, 17 Apr 2025 06:20:36 GMT Connection: close
2025-04-17 06:20:36 UTC	3408	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2025-04-17 06:20:36 UTC	8192	IN	Data Raw: 46 6f 72 6d 5f 43 61 6c 6c 62 61 63 6b 43 6f 6d 70 6c 65 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 2e 78 6d 6c 52 65 71 75 65 73 74 20 3d 20 78 6d 6c 52 65 71 75 65 73 74 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 65 2e 67 2e 20 68 74 74 70 3a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 63 74 69 6f 6e 20 3d 20 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2c 20 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 20 3d 20 61 63 74 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 20 21 3d 3d 20 2d 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 20 3d 20 61 63 Data Ascii: Form_CallbackComplete; callback.xmlRequest = xmlRequest; // e.g. http: var action = theForm.action \|\| document.location.pathname, fragmentIndex = action.indexOf('#'); if (fragmentIndex !== -1) { action = ac
2025-04-17 06:20:36 UTC	4144	IN	Data Raw: 0a 76 61 72 20 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 20 3d 20 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 78 70 6c 6f 72 65 72 27 29 20 3d 3d 20 2d 31 29 3b 0d 0a 76 61 72 20 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 44 61 74 61 20 3d 20 22 22 3b 0d 0a 76 61 72 20 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 43 6f 6c 6c 65 63 74 69 6f 6e 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 5f 5f 63 61 6c 6c 62 61 63 6b 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 68 69 64 64 65 6e 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f Data Ascii: var __nonMSDOMBrowser = (window.navigator.appName.toLowerCase().indexOf('explorer') == -1);var __theFormPostData = "";var __theFormPostCollection = new Array();var __callbackTextTypes = /^(text\|password\|hidden\|search\|tel\|url\|email\|number\|range\|colo
2025-04-17 06:20:36 UTC	7319	IN	Data Raw: 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 Data Ascii: e { defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__nonMSDOMBr

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:20:36 UTC	892	OUT	GET /ScriptResource.axd?d=-ZISJ79NKGo8xxvs6gqoO59b9LJX0MA_sPUzky0kgH17GM8gkUQj6ozrHkcUDwPca1Dw_eNeJuEaruqGV5aKkLyHGkIvpDRmBJ1sLSL4uSi9WZj5QXuJSU05tibu0vVXt8ows6DH2eM8_jc1kd0Sk8TfznTBU4S4qxxwXz3-L0s1&t=ffffffffc7a8e318 HTTP/1.1 Host: metromechanicalservice-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:20:37 UTC	777	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 26951 Content-Type: application/x-javascript; charset=utf-8 Expires: Fri, 17 Apr 2026 06:20:37 GMT Last-Modified: Thu, 17 Apr 2025 06:20:37 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,0,38216,28464,28464,88471 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 87DD6F560FD1450C956FFF1ED5D5B020 Ref B: ATL331000105023 Ref C: 2025-04-17T06:20:37Z Date: Thu, 17 Apr 2025 06:20:37 GMT Connection: close
2025-04-17 06:20:37 UTC	1397	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 65 66 69 6e 65 64 22 29 20 26 26 20 28 63 74 72 6c 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 56 61 6c 69 64 61 74 6f 72 48 6f 6f 6b 75 70 43 6f 6e 74 72 6f 6c 28 63 74 72 6c 2c 20 76 61 6c 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 2e 69 73 76 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 2e 65 6e 61 62 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 56 61 6c 69 64 61 74 6f 72 48 6f 6f 6b 75 70 43 6f 6e 74 72 6f 6c 28 63 6f 6e 74 72 6f 6c 2c 20 76 61 6c 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 63 6f 6e 74 72 6f 6c 2e 74 61 67 4e 61 6d 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 Data Ascii: efined") && (ctrl != null)) { ValidatorHookupControl(ctrl, val); } else { val.isvalid = true; val.enabled = false; }}function ValidatorHookupControl(control, val) { if (typeof(control.tagName) != "string"
2025-04-17 06:20:37 UTC	6140	IN	Data Raw: 20 20 20 20 20 20 63 74 72 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 20 21 3d 20 63 74 72 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 49 73 49 6e 56 69 73 69 62 6c 65 43 6f 6e 74 61 69 6e 65 72 28 63 74 72 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 49 73 56 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 4d 61 74 63 68 28 63 6f 6e 74 72 6f 6c 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 20 28 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 20 3d 3d 20 6e 75 6c 6c 29 Data Ascii: ctrl.parentNode != ctrl) { return IsInVisibleContainer(ctrl.parentNode); } return true;}function IsValidationGroupMatch(control, validationGroup) { if ((typeof(validationGroup) == "undefined") \|\| (validationGroup == null)
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 74 56 61 6c 75 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 56 61 6c 69 64 61 74 6f 72 54 72 69 6d 28 76 61 6c 75 65 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 76 61 72 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 22 22 3b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 74 79 70 65 6f 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 Data Ascii: tValue(val.controltovalidate); if (ValidatorTrim(value).length == 0) return true; var compareTo = ""; if ((typeof(val.controltocompare) != "string") \|\| (typeof(document.getElementById(val.controltocompare)) == "undefined")
2025-04-17 06:20:37 UTC	3030	IN	Data Raw: 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 6e 67 74 68 20 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 6f 72 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 6e 67 74 68 20 2b 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 79 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 69 65 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 Data Ascii: r) { var length = parseSpecificAttribute(selector, dataValidationAttribute, Page_Validators); length += parseSpecificAttribute(selector, dataValidationSummaryAttribute, Page_ValidationSummaries); return length;

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:20:36 UTC	644	OUT	GET /bld/_layouts/15/16.0.26002.12007/require.js HTTP/1.1 Host: res-1.public.onecdn.static.microsoft Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://metromechanicalservice-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:20:37 UTC	1307	IN	HTTP/1.1 200 OK Last-Modified: Wed, 16 Apr 2025 04:36:33 GMT x-ms-request-id: 7fcf2ae8-f01e-0022-45d9-aead1f000000 Cache-Control: max-age=630720000 Date: Thu, 17 Apr 2025 06:20:37 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43" Content-Length: 17672 Connection: close Akamai-Request-BC: [a=23.0.175.38,b=75745602,c=g,n=US_GA_ATLANTA,o=20940] AK-Network: FF Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ATLANTA&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.26af0017.1744870837.483c942&TotalRTCDNTime=105&CompressionType=gzip&FileSize=6643"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=105, clienttt; dur=, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/javascript X-CDN-Provider: Akamai
2025-04-17 06:20:37 UTC	15077	IN	Data Raw: 2f 2a 2a 20 76 69 6d 3a 20 65 74 3a 74 73 3d 34 3a 73 77 3d 34 3a 73 74 73 3d 34 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 32 32 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 35 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 20 2a 2f 0a 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e Data Ascii: /** vim: et:ts=4:sw=4:sts=4 * @license RequireJS 2.1.22 Copyright (c) 2010-2015, The Dojo Foundation All Rights Reserved. * Available via the MIT or new BSD license. * see: http://github.com/jrburke/requirejs for details */var requirejs,require,defin
2025-04-17 06:20:37 UTC	2595	IN	Data Raw: 2c 34 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 29 7d 2c 72 65 71 75 69 72 65 7c 7c 28 72 65 71 75 69 72 65 3d 72 65 71 29 2c 72 65 71 2e 76 65 72 73 69 6f 6e 3d 76 65 72 73 69 6f 6e 2c 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 3d 2f 5e 5c 2f 7c 3a 7c 5c 3f 7c 5c 2e 6a 73 24 2f 2c 72 65 71 2e 69 73 42 72 6f 77 73 65 72 3d 69 73 42 72 6f 77 73 65 72 2c 73 3d 72 65 71 2e 73 3d 7b 63 6f 6e 74 65 78 74 73 3a 63 6f 6e 74 65 78 74 73 2c 6e 65 77 43 6f 6e 74 65 78 74 3a 6e 65 77 43 6f 6e 74 65 78 74 7d 2c 72 65 71 28 7b 7d 29 2c 65 61 63 68 28 5b 22 74 6f 55 72 6c 22 2c 22 75 6e 64 65 66 22 2c 22 64 65 66 69 6e 65 64 22 2c 22 73 70 65 63 69 66 69 65 64 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 71 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ,4)}:function(e){e()},require\|\|(require=req),req.version=version,req.jsExtRegExp=/^\/\|:\|\?\|\.js$/,req.isBrowser=isBrowser,s=req.s={contexts:contexts,newContext:newContext},req({}),each(["toUrl","undef","defined","specified"],function(e){req[e]=function(){

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:20:36 UTC	696	OUT	GET /files/odsp-web-prod_2025-04-04.007/spoguestaccesswebpack/spoguestaccess.js HTTP/1.1 Host: res-1.public.onecdn.static.microsoft Connection: keep-alive Origin: https://metromechanicalservice-my.sharepoint.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://metromechanicalservice-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:20:37 UTC	1493	IN	HTTP/1.1 200 OK Last-Modified: Thu, 10 Apr 2025 19:13:07 GMT x-ms-request-id: dd6cc74c-601e-0030-383d-add6cf000000 x-ms-meta-Sourcebuild: odsp-web-prod_2025-04-04.007 x-ms-meta-Sourceid: CD1B36A4EB52FA160AEEBBC79D84322287E59982217EFC940D927E60FBC3571900 Cache-Control: public, max-age=630720000 Date: Thu, 17 Apr 2025 06:20:37 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43" Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.0.175.12,b=15850097,c=g,n=US_GA_ATLANTA,o=20940] AK-Network: FF Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ATLANTA&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.0caf0017.1744870837.f1da71&TotalRTCDNTime=105&CompressionType=gzip&FileSize=16897"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=105, clienttt; dur=, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/javascript X-CDN-Provider: Akamai
2025-04-17 06:20:37 UTC	14891	IN	Data Raw: 30 30 30 30 42 37 35 35 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2c 64 65 66 69 6e 65 28 22 40 66 6c 75 65 6e 74 75 69 2f 72 65 61 63 74 2d 66 69 6c 65 2d 74 79 70 65 2d 69 63 6f 6e 73 22 2c 5b 5d 2c 28 29 3d 3e 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 5b 65 3d 3e 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 Data Ascii: 0000B755/! For license information please see spoguestaccess.js.LICENSE.txt /document.currentScript,define("@fluentui/react-file-type-icons",[],()=>{var e;return(()=>{"use strict";var t=[e=>{var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOw
2025-04-17 06:20:37 UTC	16220	IN	Data Raw: 74 68 3b 6e 2b 2b 29 74 5b 6e 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 76 61 72 20 61 3d 5b 5d 2c 69 3d 5b 5d 2c 72 3d 65 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 65 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 73 3d 6e 5b 74 5d 3b 69 66 28 73 26 26 21 5f 28 73 29 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 29 69 66 28 73 2e 69 6e 64 65 78 4f 66 28 22 20 22 29 3e 3d 30 29 6f 28 73 2e 73 70 6c 69 74 28 22 20 22 29 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 72 2e 61 72 67 73 46 72 6f 6d 43 6c 61 73 73 4e 61 6d 65 28 73 29 3b 63 3f 6f 28 63 29 3a 2d 31 3d 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 73 29 26 26 61 2e 70 75 73 68 28 73 29 7d 65 6c 73 65 20 41 72 72 61 79 2e 69 Data Ascii: th;n++)t[n-1]=arguments[n];var a=[],i=[],r=e;function o(e){for(var t=0,n=e;t<n.length;t++){var s=n[t];if(s&&!_(s))if("string"==typeof s)if(s.indexOf(" ")>=0)o(s.split(" "));else{var c=r.argsFromClassName(s);c?o(c):-1===a.indexOf(s)&&a.push(s)}else Array.i
2025-04-17 06:20:37 UTC	15834	IN	Data Raw: 74 29 2c 78 78 4c 61 72 67 65 50 6c 75 73 3a 49 74 28 68 74 2e 78 78 4c 61 72 67 65 50 6c 75 73 2c 62 74 2e 73 65 6d 69 62 6f 6c 64 2c 43 74 29 2c 73 75 70 65 72 4c 61 72 67 65 3a 49 74 28 68 74 2e 73 75 70 65 72 4c 61 72 67 65 2c 62 74 2e 73 65 6d 69 62 6f 6c 64 2c 43 74 29 2c 6d 65 67 61 3a 49 74 28 68 74 2e 6d 65 67 61 2c 62 74 2e 73 65 6d 69 62 6f 6c 64 2c 43 74 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 74 2c 6e 2c 61 29 7b 4b 28 7b 66 6f 6e 74 46 61 6d 69 6c 79 3a 65 3d 22 27 22 2e 63 6f 6e 63 61 74 28 65 2c 22 27 22 29 2c 73 72 63 3a 28 76 6f 69 64 20 30 21 3d 3d 61 3f 22 6c 6f 63 61 6c 28 27 22 2e 63 6f 6e 63 61 74 28 61 2c 22 27 29 2c 22 29 3a 22 22 29 2b 22 75 72 6c 28 27 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2e 77 6f 66 66 32 27 29 20 Data Ascii: t),xxLargePlus:It(ht.xxLargePlus,bt.semibold,Ct),superLarge:It(ht.superLarge,bt.semibold,Ct),mega:It(ht.mega,bt.semibold,Ct)});function wt(e,t,n,a){K({fontFamily:e="'".concat(e,"'"),src:(void 0!==a?"local('".concat(a,"'),"):"")+"url('".concat(t,".woff2')
2025-04-17 06:20:37 UTC	1340	IN	Data Raw: 30 30 30 30 30 35 33 30 0d 0a 3d 22 70 6c 61 79 6c 69 73 74 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 52 74 2e 6c 6f 6f 70 77 6f 72 6b 73 70 61 63 65 3a 6e 3d 22 6c 6f 6f 70 77 6f 72 6b 73 70 61 63 65 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 52 74 2e 70 6c 61 6e 6e 65 72 3a 6e 3d 22 70 6c 61 6e 6e 65 72 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 52 74 2e 74 6f 64 6f 49 74 65 6d 3a 6e 3d 22 74 6f 64 6f 69 74 65 6d 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 52 74 2e 70 6f 72 74 66 6f 6c 69 6f 3a 6e 3d 22 70 6f 72 74 66 6f 6c 69 6f 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 52 74 2e 61 6c 62 75 6d 3a 6e 3d 22 61 6c 62 75 6d 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 52 74 2e 6c 69 73 74 46 6f 72 6d 3a 6e 3d 22 6c 69 73 74 66 6f 72 6d 22 7d 72 65 74 75 72 6e 20 6e 7c 7c 4b 74 7d Data Ascii: 00000530="playlist";break;case Rt.loopworkspace:n="loopworkspace";break;case Rt.planner:n="planner";break;case Rt.todoItem:n="todoitem";break;case Rt.portfolio:n="portfolio";break;case Rt.album:n="album";break;case Rt.listForm:n="listform"}return n\|\|Kt}
2025-04-17 06:20:37 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:20:37 UTC	905	OUT	GET /ScriptResource.axd?d=ZnRaRptUWNasDqRD-c7ijNYS0G_3wQSnfr1tsEzwAdZ-XhDREBc0oYkNL5oFowpseSW2h8k9WKVlV5bLkQ8RFZqzInNpNVA8JbJWyJ6B74B0mxvTDKmHOGTW18s-ZjMfgyDLT_Vn5a12IUSvo0qKMvV9sGFr2A4QLbjtSGSXpjFCuPrXgAvIUNyyDgTZmN4l0&t=2a9d95e3 HTTP/1.1 Host: metromechanicalservice-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:20:37 UTC	777	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 102801 Content-Type: application/x-javascript; charset=utf-8 Expires: Fri, 17 Apr 2026 06:20:37 GMT Last-Modified: Thu, 17 Apr 2025 06:20:37 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,0,188,26343,26343,88636 X-AspNet-Version: 4.0.30319 SPRequestDuration: 21 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0F675592F6C644309AB7D9476150D825 Ref B: ATL331000108017 Ref C: 2025-04-17T06:20:37Z Date: Thu, 17 Apr 2025 06:20:37 GMT Connection: close
2025-04-17 06:20:37 UTC	3393	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d 65 3d 22 46 75 6e 63 74 69 6f 6e 22 3b 46 75 6e 63 74 69 6f 6e 2e 5f 5f 63 6c 61 73 73 3d Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeName="Function";Function.__class=
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 3b 76 61 72 20 64 3d 45 72 72 6f 72 2e 63 72 65 61 74 65 28 62 2c 7b 6e 61 6d 65 3a 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 22 2c 70 61 72 61 6d 4e 61 6d 65 3a 61 7d 29 3b 64 2e 70 6f 70 53 74 61 63 6b 46 72 61 6d 65 28 29 3b 72 65 74 75 72 6e 20 64 7d 3b 45 72 72 6f 72 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 64 29 7b 76 61 72 20 62 3d 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 45 78 63 65 70 74 69 6f 6e 3a 20 22 2b 28 64 3f 64 3a 53 79 73 2e 52 65 73 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 29 3b 69 66 28 63 29 62 2b 3d 22 5c 6e 22 2b 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 52 65 73 2e 70 61 72 61 6d 4e Data Ascii: ;var d=Error.create(b,{name:"Sys.ArgumentNullException",paramName:a});d.popStackFrame();return d};Error.argumentOutOfRange=function(c,a,d){var b="Sys.ArgumentOutOfRangeException: "+(d?d:Sys.Res.argumentOutOfRange);if(c)b+="\n"+String.format(Sys.Res.paramN
2025-04-17 06:20:37 UTC	4144	IN	Data Raw: 63 29 7c 7c 61 2e 69 6d 70 6c 65 6d 65 6e 74 73 49 6e 74 65 72 66 61 63 65 26 26 61 2e 69 6d 70 6c 65 6d 65 6e 74 73 49 6e 74 65 72 66 61 63 65 28 63 29 7d 3b 53 79 73 2e 5f 67 65 74 42 61 73 65 4d 65 74 68 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 63 29 7b 76 61 72 20 62 3d 64 2e 67 65 74 42 61 73 65 54 79 70 65 28 29 3b 69 66 28 62 29 7b 76 61 72 20 61 3d 62 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 3f 61 3a 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 53 79 73 2e 5f 69 73 44 6f 6d 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 66 61 6c 73 65 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 22 6e 75 6d Data Ascii: c)\|\|a.implementsInterface&&a.implementsInterface(c)};Sys._getBaseMethod=function(d,e,c){var b=d.getBaseType();if(b){var a=b.prototype[c];return a instanceof Function?a:null}return null};Sys._isDomElement=function(a){var c=false;if(typeof a.nodeType!=="num
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 2c 53 79 73 2e 45 76 65 6e 74 41 72 67 73 29 3b 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 3b 53 79 73 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 53 79 73 2e 5f 44 65 62 75 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 29 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6f Data Ascii: ,Sys.EventArgs);Type.registerNamespace("Sys.UI");Sys._Debug=function(){};Sys._Debug.prototype={_appendConsole:function(a){if(typeof Debug!=="undefined"&&Debug.writeln)Debug.writeln(a);if(window.console&&window.console.log)window.console.log(a);if(window.o
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 62 5d 2c 63 29 29 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 65 6d 6f 76 65 41 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 61 3e 2d 31 26 26 61 3c 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 62 5b 61 5d 3b 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 62 2c 61 29 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 62 2c 6e 65 77 20 53 79 73 2e 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 53 79 73 2e 4e 6f 74 69 66 79 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 41 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 63 5d 2c 61 29 29 7d 7d 3b 53 79 73 2e Data Ascii: ove,null,-1,[b],c));return true}return false};Sys.Observer.removeAt=function(b,a){if(a>-1&&a<b.length){var c=b[a];Array.removeAt(b,a);Sys.Observer._collectionChange(b,new Sys.CollectionChange(Sys.NotifyCollectionChangedAction.remove,null,-1,[c],a))}};Sys.
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 69 66 28 61 3c 31 30 29 72 65 74 75 72 6e 20 22 30 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 29 72 65 74 75 72 6e 20 22 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 30 29 72 65 74 75 72 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 68 2c 70 2c 74 3d 2f 28 5b 5e 64 5d 7c 5e 29 28 64 7c 64 64 29 28 5b 5e 64 5d 7c 24 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 68 7c 7c 70 29 72 65 74 75 72 6e 20 68 3b 68 3d 74 2e 74 65 73 74 28 65 29 3b 70 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 68 7d 76 61 72 20 71 3d 30 2c 6f 3d 44 61 74 65 2e 5f 67 65 74 54 6f 6b 65 6e 52 65 67 45 78 70 28 29 2c 66 Data Ascii: a.toString()}function v(a){if(a<10)return "000"+a;else if(a<100)return "00"+a;else if(a<1000)return "0"+a;return a.toString()}var h,p,t=/([^d]\|^)(d\|dd)([^d]\|$)/g;function s(){if(h\|\|p)return h;h=t.test(e);p=true;return h}var q=0,o=Date._getTokenRegExp(),f
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 61 79 73 29 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 41 72 72 61 79 28 74 68 69 73 2e 64 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 2e 41 62 62 72 65 76 69 61 74 65 64 44 61 79 4e 61 6d 65 73 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 2c 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 61 29 29 7d 2c 5f 74 6f 55 70 70 65 72 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 61 3c 64 3b 61 2b 2b 29 62 5b 61 5d 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 63 5b 61 5d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 74 6f 55 70 70 65 72 3a 66 Data Ascii: ays)this._upperAbbrDays=this._toUpperArray(this.dateTimeFormat.AbbreviatedDayNames);return Array.indexOf(this._upperAbbrDays,this._toUpper(a))},_toUpperArray:function(c){var b=[];for(var a=0,d=c.length;a<d;a++)b[a]=this._toUpper(c[a]);return b},_toUpper:f
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 66 28 62 29 21 3d 3d 2d 31 29 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 4f 70 65 72 61 7c 7c 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 46 69 72 65 46 6f 78 29 61 3d 61 2e 73 70 6c 69 74 28 62 29 2e 6a 6f 69 6e 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 3b 65 6c 73 65 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 52 65 67 45 78 73 5b 62 5d 2c 53 79 73 2e 53 65 72 69 61 Data Ascii: f(b)!==-1)if(Sys.Browser.agent===Sys.Browser.Opera\|\|Sys.Browser.agent===Sys.Browser.FireFox)a=a.split(b).join(Sys.Serialization.JavaScriptSerializer._escapeChars[b]);else a=a.replace(Sys.Serialization.JavaScriptSerializer._charsToEscapeRegExs[b],Sys.Seria
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 79 22 29 29 69 66 28 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 58 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 59 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 61 2e 6f 66 66 73 65 74 58 3b 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 61 2e 6f 66 66 73 65 74 59 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 74 61 72 67 65 74 26 26 74 68 69 73 2e 74 61 72 67 65 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 33 26 26 74 79 70 65 6f 66 20 61 2e 63 6c 69 65 6e 74 58 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 63 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 74 68 69 73 2e 74 61 72 67 65 74 29 2c 64 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 Data Ascii: y"))if(typeof a.offsetX!=="undefined"&&typeof a.offsetY!=="undefined"){this.offsetX=a.offsetX;this.offsetY=a.offsetY}else if(this.target&&this.target.nodeType!==3&&typeof a.clientX==="number"){var c=Sys.UI.DomElement.getLocation(this.target),d=Sys.UI.DomE
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7c 7c 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 74 43 75 72 72 65 6e 74 53 74 79 6c 65 28 61 29 3b 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 62 3f 62 2e 64 69 73 70 6c 61 79 3a 6e 75 6c 6c 3b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 7c 7c 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 3d 3d 22 6e 6f 6e 65 22 29 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 20 22 44 49 56 22 3a 63 61 73 65 20 22 50 22 3a 63 61 73 65 20 22 41 44 44 52 45 53 53 22 3a 63 61 73 65 20 22 42 4c Data Ascii: function(a){if(!a._oldDisplayMode){var b=a.currentStyle\|\|Sys.UI.DomElement._getCurrentStyle(a);a._oldDisplayMode=b?b.display:null;if(!a._oldDisplayMode\|\|a._oldDisplayMode==="none")switch(a.tagName.toUpperCase()){case "DIV":case "P":case "ADDRESS":case "BL

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:20:37 UTC	905	OUT	GET /ScriptResource.axd?d=QbmwPYOeeF6QRUHQY0GoVpIND93behZafZjB6oPRQNv1yqR2ofF5SQ_hyzTY8jEaiSD78NBRsIYaCPTRYhwc8HejUXeGcmIFPQxjfIKDiC3sI2wqVTfQsmZnsxRO4sn6If1GKx44-b3ltJG2Ksp2RQGvKOJZUoQBpCcR2nlYZixrYuBcCbRC6fIT_G1fBJJU0&t=2a9d95e3 HTTP/1.1 Host: metromechanicalservice-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:20:37 UTC	778	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 40326 Content-Type: application/x-javascript; charset=utf-8 Expires: Fri, 17 Apr 2026 06:20:37 GMT Last-Modified: Thu, 17 Apr 2025 06:20:37 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,0,114665,28464,28464,88844 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B7963099FEC9490D9E8DDF4E1F70E7FD Ref B: ATL331000105011 Ref C: 2025-04-17T06:20:37Z Date: Thu, 17 Apr 2025 06:20:36 GMT Connection: close
2025-04-17 06:20:37 UTC	1396	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f 72 6d 73 2e 6a 73 0d 0a 54 79 70 65 2e 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 22 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjaxWebForms.jsType._registerScript("MicrosoftAjaxWebFo
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 65 73 70 6f 6e 73 65 7d 7d 3b 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 45 6e 64 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 22 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 45 6e 64 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 22 2c 53 79 73 2e 45 76 65 6e 74 41 72 67 73 29 3b 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 49 6e 69 74 69 61 6c 69 7a 65 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 62 2c 61 29 7b 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 49 6e 69 74 69 61 6c 69 7a 65 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 2e 69 6e 69 74 69 61 6c 69 7a 65 42 61 73 65 28 74 68 69 73 29 3b 74 68 69 Data Ascii: se:function(){return this._response}};Sys.WebForms.EndRequestEventArgs.registerClass("Sys.WebForms.EndRequestEventArgs",Sys.EventArgs);Sys.WebForms.InitializeRequestEventArgs=function(c,b,a){Sys.WebForms.InitializeRequestEventArgs.initializeBase(this);thi
2025-04-17 06:20:37 UTC	6140	IN	Data Raw: 61 67 65 4c 6f 61 64 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 67 65 74 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 28 29 2e 72 65 6d 6f 76 65 48 61 6e 64 6c 65 72 28 22 70 61 67 65 4c 6f 61 64 69 6e 67 22 2c 61 29 7d 2c 61 62 6f 72 74 50 6f 73 74 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 5f 70 72 6f 63 65 73 73 69 6e 67 52 65 71 75 65 73 74 26 26 74 68 69 73 2e 5f 72 65 71 75 65 73 74 29 7b 74 68 69 73 2e 5f 72 65 71 75 65 73 74 2e 67 65 74 5f 65 78 65 63 75 74 6f 72 28 29 2e 61 62 6f 72 74 28 29 3b 74 68 69 73 2e 5f 72 65 71 75 65 73 74 3d 6e 75 6c 6c 7d 7d 2c 62 65 67 69 6e 41 73 79 6e 63 50 6f 73 74 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 66 2c 64 2c 65 29 7b 69 66 28 64 26 Data Ascii: ageLoading:function(a){this._get_eventHandlerList().removeHandler("pageLoading",a)},abortPostBack:function(){if(!this._processingRequest&&this._request){this._request.get_executor().abort();this._request=null}},beginAsyncPostBack:function(c,a,f,d,e){if(d&
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 5f 43 6c 69 65 6e 74 56 61 6c 69 64 61 74 65 28 61 2e 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 3b 69 66 28 64 29 7b 69 66 28 74 79 70 65 6f 66 20 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 6e 75 6c 6c 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 2e 6c 65 6e 67 74 68 3e 30 29 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 3d 61 2e 61 63 74 69 6f 6e 55 72 6c 3b 69 66 28 61 2e 74 72 61 63 6b 46 6f 63 75 73 29 7b 76 61 72 20 63 3d 74 68 65 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 22 5f 5f 4c 41 53 54 46 4f 43 55 53 22 5d 3b 69 66 28 74 79 70 65 6f 66 20 63 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 63 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 Data Ascii: _ClientValidate(a.validationGroup);if(d){if(typeof a.actionUrl!="undefined"&&a.actionUrl!=null&&a.actionUrl.length>0)theForm.action=a.actionUrl;if(a.trackFocus){var c=theForm.elements["__LASTFOCUS"];if(typeof c!="undefined"&&c!=null)if(typeof document.act
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 3b 69 66 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 7b 62 2e 61 70 70 65 6e 64 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 3b 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 3d 6e 75 6c 6c 7d 76 61 72 20 63 3d 6e 65 77 20 53 79 73 2e 4e 65 74 2e 57 65 62 52 65 71 75 65 73 74 2c 61 3d 77 2e 61 63 74 69 6f 6e 3b 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 29 7b 76 61 72 20 72 3d 61 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 69 66 28 72 21 3d 3d 2d 31 29 61 3d 61 2e 73 75 62 73 74 72 28 30 2c 72 29 3b 76 61 72 20 6f 3d 22 22 2c 76 3d 22 22 2c 6d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3f 22 Data Ascii: ;if(this._additionalInput){b.append(this._additionalInput);this._additionalInput=null}var c=new Sys.Net.WebRequest,a=w.action;if(Sys.Browser.agent===Sys.Browser.InternetExplorer){var r=a.indexOf("#");if(r!==-1)a=a.substr(0,r);var o="",v="",m=a.indexOf("?"
2025-04-17 06:20:37 UTC	8192	IN	Data Raw: 73 63 72 69 70 74 44 69 73 70 6f 73 65 73 5b 61 5d 2c 62 29 7d 2c 5f 73 63 72 69 70 74 49 6e 63 6c 75 64 65 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 62 29 7b 69 66 28 62 2e 65 78 65 63 75 74 6f 72 2e 67 65 74 5f 77 65 62 52 65 71 75 65 73 74 28 29 21 3d 3d 74 68 69 73 2e 5f 72 65 71 75 65 73 74 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 5f 63 6f 6d 6d 69 74 43 6f 6e 74 72 6f 6c 73 28 62 2e 75 70 64 61 74 65 50 61 6e 65 6c 44 61 74 61 2c 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 3f 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 2e 63 6f 6e 74 65 6e 74 3a 6e 75 6c 6c 29 3b 69 66 28 62 2e 66 6f 72 6d 41 63 74 69 6f 6e 4e 6f 64 65 29 74 68 69 73 2e 5f 66 6f 72 6d Data Ascii: scriptDisposes[a],b)},_scriptIncludesLoadComplete:function(e,b){if(b.executor.get_webRequest()!==this._request)return;this._commitControls(b.updatePanelData,b.asyncPostBackTimeoutNode?b.asyncPostBackTimeoutNode.content:null);if(b.formActionNode)this._form
2025-04-17 06:20:37 UTC	22	IN	Data Raw: 7a 65 64 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 2e 22 7d 3b Data Ascii: zed more than once."};

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:20:37 UTC	777	OUT	GET /_layouts/15/images/microsoft-logo.png HTTP/1.1 Host: metromechanicalservice-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:20:37 UTC	734	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 3331 Content-Type: image/png Last-Modified: Sat, 12 Apr 2025 08:21:27 GMT Accept-Ranges: bytes ETag: "6aa9cee283abdb1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,0,189,26343,26343,88749 SPRequestDuration: 4 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4E91915F85494F50A88DFC6DF7170D77 Ref B: ATL331000107025 Ref C: 2025-04-17T06:20:37Z Date: Thu, 17 Apr 2025 06:20:36 GMT Connection: close
2025-04-17 06:20:37 UTC	3331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 30 08 06 00 00 00 0c e6 a6 f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c bd 49 44 41 54 78 01 ed 9c 3d 77 1b b9 15 86 47 b6 7a d3 bf c0 4c ca 34 66 4e d2 6b 5c 64 53 9a ee b3 c7 a3 5f 60 fa ab 8d a8 da 1f d2 fe 02 8f 72 d2 9b ee b2 95 c9 7e cf 46 aa dc 65 a9 5f b0 52 5a 7f 30 cf 4b 03 5c 0c 06 43 42 12 87 de 8d 31 e7 8c 81 7b 71 71 2f e6 05 5e 7c 0c 47 de fa 6f ff f7 b3 ac 85 0b a7 3f de 18 fd e7 4f 72 fd f7 ef b3 1f b6 b6 b2 79 7e dd a1 f6 ff 92 5d cb b6 b2 56 9e 61 dd 6d 4d fe 12 02 4d 08 5c 6b 2a 48 fa 84 40 42 60 73 08 24 22 6e 0e eb 14 29 21 d0 88 40 22 62 23 34 a9 20 21 b0 39 04 12 11 37 87 75 8a 94 10 68 44 20 11 b1 11 9a 54 90 10 d8 1c 02 89 88 9b c3 3a 45 4a 08 34 22 b0 dd Data Ascii: PNGIHDR0sRGBIDATx=wGzL4fNk\dS_`r~Fe_RZ0K\CB1{qq/^\|Go?Ory~]VamMM\k*H@B`s$"n)!@"b#4 !97uhD T:EJ4"

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:20:38 UTC	713	OUT	GET /files/odsp-web-prod_2025-04-04.007/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js HTTP/1.1 Host: res-1.public.onecdn.static.microsoft Connection: keep-alive Origin: https://metromechanicalservice-my.sharepoint.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://metromechanicalservice-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:20:38 UTC	1294	IN	HTTP/1.1 404 Not Found Content-Length: 215 x-ms-request-id: d0c347cb-e01e-004c-4c60-aff830000000 Date: Thu, 17 Apr 2025 06:20:38 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43" Connection: close Akamai-Request-BC: [a=23.0.175.12,b=15850259,c=g,n=US_GA_ATLANTA,o=20940],[c=c,n=US_GA_LITHIASPRINGS,o=20940],[a=4,c=o] AK-Network: FF Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ATLANTA&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.0caf0017.1744870838.f1db13&TotalRTCDNTime=106&CompressionType=&FileSize=215"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=106, clienttt; dur=61, origin; dur=56 , cdntime; dur=5 Akamai-Cache-Status: Miss from child, Miss from parent X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/javascript X-CDN-Provider: Akamai
2025-04-17 06:20:38 UTC	215	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 64 30 63 33 34 37 63 62 2d 65 30 31 65 2d 30 30 34 63 2d 34 63 36 30 2d 61 66 66 38 33 30 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 35 2d 30 34 2d 31 37 54 30 36 3a 32 30 3a 33 38 2e 33 33 34 31 30 39 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:d0c347cb-e01e-004c-4c60-aff830000000Time:2025-04-17T06:20:38.3341097Z</Message></Error>

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:20:38 UTC	777	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: metromechanicalservice-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:20:38 UTC	737	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sat, 12 Apr 2025 08:21:51 GMT Accept-Ranges: bytes ETag: "f51f1df183abdb1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,0,187,26343,26343,88684 SPRequestDuration: 8 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D6D90E57B3394DC689B21DFCB3162A1A Ref B: ATL331000108053 Ref C: 2025-04-17T06:20:38Z Date: Thu, 17 Apr 2025 06:20:37 GMT Connection: close
2025-04-17 06:20:38 UTC	3433	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2025-04-17 06:20:38 UTC	4453	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 bf 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 bf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 40 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: plplplplplplplplplplplplplplplplplplpl@plplplplplplplplplplplplplplplplpl@

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Windows Analysis Report
https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:20:39 UTC	441	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: metromechanicalservice-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:20:39 UTC	737	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sat, 12 Apr 2025 08:21:51 GMT Accept-Ranges: bytes ETag: "f51f1df183abdb1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,0,191,26343,26343,88792 SPRequestDuration: 3 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F2918C082FF246D0951645C98AFB934B Ref B: ATL331000104039 Ref C: 2025-04-17T06:20:39Z Date: Thu, 17 Apr 2025 06:20:39 GMT Connection: close
2025-04-17 06:20:39 UTC	3433	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2025-04-17 06:20:39 UTC	4453	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 bf 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 bf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 40 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: plplplplplplplplplplplplplplplplplplpl@plplplplplplplplplplplplplplplplpl@

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:21:02 UTC	1158	OUT	POST /personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q HTTP/1.1 Host: metromechanicalservice-my.sharepoint.com Connection: keep-alive Content-Length: 1621 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://metromechanicalservice-my.sharepoint.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:21:02 UTC	1621	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 45 6d 61 69 6c 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 36 30 30 32 2e 31 32 30 30 37 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 58 4e 65 39 49 72 6f 7a 72 50 4c 4e 58 66 4b 43 6d 77 59 6f 51 70 65 6e 53 30 61 75 47 6e 74 39 4f 4b 68 33 68 41 6d 6a 57 61 4c 6c 52 73 6f 39 58 30 49 6e 4f 6f 30 36 4e 74 58 36 31 32 42 59 4a 58 6a 52 38 4e 4d 4d 68 5a 30 6c 78 41 25 32 46 59 36 70 62 6c 59 33 4e 7a 52 58 51 55 54 38 57 31 6e 4a 6c 78 68 55 4e 73 67 41 4b 51 65 45 69 33 71 34 75 46 44 45 34 5a 43 59 6a 70 4d 25 32 46 56 62 43 5a 6f 39 6b 6b 50 79 25 32 42 77 47 36 71 33 71 72 4c 57 72 53 77 73 6e 75 74 61 75 38 38 71 Data Ascii: __EVENTTARGET=btnSubmitEmail&__EVENTARGUMENT=&SideBySideToken=16.0.26002.12007&__VIEWSTATE=XNe9IrozrPLNXfKCmwYoQpenS0auGnt9OKh3hAmjWaLlRso9X0InOo06NtX612BYJXjR8NMMhZ0lxA%2FY6pblY3NzRXQUT8W1nJlxhUNsgAKQeEi3q4uFDE4ZCYjpM%2FVbCZo9kkPy%2BwG6q3qrLWrSwsnutau88q
2025-04-17 06:21:03 UTC	2037	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 69338 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,0,186,26343,26343,88624 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 544995a1-e07c-c000-4c8b-29f6ac4462af request-id: 544995a1-e07c-c000-4c8b-29f6ac4462af MS-CV: oZVJVHzgAMBMiyn2rERirw.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=36abecd9-c76b-4cfd-b9f9-1b1264839c0d&destinationEndpoint=Edge-Prod-ATL33r5a&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 484 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1C36F9228C444DF3B2FDC28B8F3BDDDF Ref B: ATL331000101053 Ref C: 2025-04-17T06:21:02Z Date: Thu, 17 Apr 2025 06:21:02 GMT Connection: close
2025-04-17 06:21:03 UTC	2133	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2025-04-17 06:21:03 UTC	8192	IN	Data Raw: 70 65 3d 62 75 74 74 6f 6e 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 77 68 Data Ascii: pe=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;wh
2025-04-17 06:21:03 UTC	4144	IN	Data Raw: 65 78 3a 31 20 31 20 31 30 30 25 7d 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 65 73 6b 74 6f 70 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 35 37 70 78 20 30 20 32 30 70 78 7d 2e 6d 6f 62 69 6c 65 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 Data Ascii: ex:1 1 100%}input::-webkit-inner-spin-button,input::-webkit-outer-spin-button{margin:0;-webkit-appearance:none}input[type=number]{-moz-appearance:textfield}input[type=number]::-ms-clear{display:none}.desktop-logo{margin:57px 0 20px}.mobile-logo{margin-top
2025-04-17 06:21:03 UTC	8192	IN	Data Raw: 63 2e 6d 69 63 72 6f 73 6f 66 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 70 75 62 6c 69 63 2e 6f 6e 65 63 64 6e 2e 73 74 61 74 69 63 2e 6d 69 63 72 6f 73 6f 66 74 2f 66 69 6c 65 73 2f 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 35 2d 30 34 2d 30 34 2e 30 30 37 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 77 65 62 70 61 63 6b 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 6a 57 4d 58 4d 77 79 6a 56 50 4a 2f 75 77 35 44 35 6c 4b 36 32 59 69 56 72 59 6b 4b 64 43 32 54 72 48 34 79 5a 70 48 4d 6a 38 49 3d 22 20 63 72 6f 73 73 Data Ascii: c.microsoft" crossorigin /><link rel="preload" href="https://res-1.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/spoguestaccesswebpack/spoguestaccess.js" as="script" integrity="sha256-jWMXMwyjVPJ/uw5D5lK62YiVrYkKdC2TrH4yZpHMj8I=" cross
2025-04-17 06:21:03 UTC	8192	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 2e 70 3d 22 22 2c 69 28 69 2e 73 3d 32 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 2c 6e 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 Data Ascii: nction(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=2);function i(e){if(n[e])return n[e].exports;var t=n[e]={i:e,l:!1,exports:{}};return r[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}var r,n});!function(e,t){"object"==typeof e
2025-04-17 06:21:03 UTC	8192	IN	Data Raw: 45 72 72 6f 72 28 74 2b 22 5c 6e 68 74 74 70 3a 2f 2f 72 65 71 75 69 72 65 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 73 2e 68 74 6d 6c 23 22 2b 65 29 3b 69 2e 72 65 71 75 69 72 65 54 79 70 65 3d 65 3b 69 2e 72 65 71 75 69 72 65 4d 6f 64 75 6c 65 73 3d 6e 3b 72 26 26 28 69 2e 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3d 72 29 3b 72 65 74 75 72 6e 20 69 7d 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 65 66 69 6e 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 6a 73 29 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 6a 73 29 29 72 65 74 75 72 6e 3b 63 66 67 3d 72 65 71 75 69 72 65 6a 73 3b 72 65 71 75 69 72 65 6a 73 3d 76 6f 69 64 20 30 7d 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 26 26 21 69 73 46 75 6e 63 Data Ascii: Error(t+"\nhttp://requirejs.org/docs/errors.html#"+e);i.requireType=e;i.requireModules=n;r&&(i.originalError=r);return i}if(void 0===define){if(void 0!==requirejs){if(isFunction(requirejs))return;cfg=requirejs;requirejs=void 0}if(void 0!==require&&!isFunc
2025-04-17 06:21:03 UTC	8192	IN	Data Raw: 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 6f 29 29 7b 69 66 28 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 72 72 6f 72 26 26 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 7c 7c 72 65 71 2e 6f 6e 45 72 72 6f 72 21 3d 3d 64 65 66 61 75 6c 74 4f 6e 45 72 72 6f 72 29 74 72 79 7b 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 65 7d 65 6c 73 65 20 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 3b 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 28 65 3d 74 68 69 73 2e 6d 6f 64 75 6c 65 29 3f 69 3d 65 2e 65 78 70 6f 72 74 73 3a 74 68 69 73 2e 75 73 69 6e 67 45 78 70 6f 72 74 73 26 26 28 69 3d 74 68 69 73 2e 65 78 70 6f 72 74 73 29 29 3b 69 66 28 74 29 7b 74 Data Ascii: {if(isFunction(o)){if(this.events.error&&this.map.isDefine\|\|req.onError!==defaultOnError)try{i=d.execCb(r,o,n,i)}catch(e){t=e}else i=d.execCb(r,o,n,i);this.map.isDefine&&void 0===i&&((e=this.module)?i=e.exports:this.usingExports&&(i=this.exports));if(t){t
2025-04-17 06:21:03 UTC	8192	IN	Data Raw: 3a 5c 2f 5c 2f 5b 5e 5c 2f 5d 2b 5c 2f 2f 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 6d 61 74 63 68 20 26 26 20 6d 61 74 63 68 5b 30 5d 3b 0d 0a 20 20 7d 0d 0a 20 20 76 61 72 20 6f 72 69 67 69 6e 73 20 3d 20 62 61 73 65 55 72 6c 73 2e 6d 61 70 28 67 65 74 4f 72 69 67 69 6e 29 3b 0d 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 28 77 69 6e 64 6f 77 2e 5f 5f 63 64 6e 46 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 3a 20 66 61 6c 73 65 Data Ascii: :\/\/[^\/]+\//); return match && match[0]; } var origins = baseUrls.map(getOrigin); window.__backupBaseUrl = baseUrls[1]; var backupBaseUrl = baseUrls[1]; var failOverState = (window.__cdnFailOverState = { baseUrlFailedOver: false
2025-04-17 06:21:03 UTC	8192	IN	Data Raw: 42 30 6d 78 76 54 44 4b 6d 48 4f 47 54 57 31 38 73 2d 5a 6a 4d 66 67 79 44 4c 54 5f 56 6e 35 61 31 32 49 55 53 76 6f 30 71 4b 4d 76 56 39 73 47 46 72 32 41 34 51 4c 62 6a 74 53 47 53 58 70 6a 46 43 75 50 72 58 67 41 76 49 55 4e 79 79 44 67 54 5a 6d 4e 34 6c 30 26 61 6d 70 3b 74 3d 32 61 39 64 39 35 65 33 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 53 63 72 69 70 74 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 51 62 6d 77 50 59 4f 65 65 46 36 51 52 55 48 51 59 30 47 6f 56 70 49 4e 44 39 33 62 65 68 5a 61 66 5a 6a 42 36 6f 50 52 51 4e 76 31 79 71 52 32 6f 66 46 35 53 51 5f 68 79 7a 54 59 38 6a 45 61 69 53 44 37 38 4e 42 52 73 49 59 61 43 50 54 52 59 68 Data Ascii: B0mxvTDKmHOGTW18s-ZjMfgyDLT_Vn5a12IUSvo0qKMvV9sGFr2A4QLbjtSGSXpjFCuPrXgAvIUNyyDgTZmN4l0&t=2a9d95e3" type="text/javascript"></script><script src="/ScriptResource.axd?d=QbmwPYOeeF6QRUHQY0GoVpIND93behZafZjB6oPRQNv1yqR2ofF5SQ_hyzTY8jEaiSD78NBRsIYaCPTRYh

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:21:14 UTC	1187	OUT	POST /personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q HTTP/1.1 Host: metromechanicalservice-my.sharepoint.com Connection: keep-alive Content-Length: 1629 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://metromechanicalservice-my.sharepoint.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:21:14 UTC	1629	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 45 6d 61 69 6c 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 36 30 30 32 2e 31 32 30 30 37 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 76 25 32 46 25 32 46 6d 6d 64 4f 25 32 42 61 7a 76 66 45 43 49 53 4c 37 6f 6e 4d 54 57 51 70 30 4a 64 6d 31 48 63 36 38 56 78 76 6c 68 79 56 55 71 56 25 32 46 6a 41 45 44 42 48 7a 36 35 36 75 6c 54 66 73 35 49 38 52 52 64 65 33 42 48 4d 25 32 42 39 4d 61 63 4c 63 77 58 34 41 34 4f 4e 4e 70 4c 48 6c 53 59 35 58 32 67 50 59 53 53 65 7a 55 49 6d 63 55 79 6f 43 5a 66 71 30 48 4a 74 46 45 6e 69 44 42 30 70 34 43 5a 33 68 32 36 44 7a 56 55 76 31 4e 47 49 57 66 52 69 4c 56 6d 78 31 6f 76 49 42 Data Ascii: __EVENTTARGET=btnSubmitEmail&__EVENTARGUMENT=&SideBySideToken=16.0.26002.12007&__VIEWSTATE=v%2F%2FmmdO%2BazvfECISL7onMTWQp0Jdm1Hc68VxvlhyVUqV%2FjAEDBHz656ulTfs5I8RRde3BHM%2B9MacLcwX4A4ONNpLHlSY5X2gPYSSezUImcUyoCZfq0HJtFEniDB0p4CZ3h26DzVUv1NGIWfRiLVmx1ovIB
2025-04-17 06:21:15 UTC	2037	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 69338 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,0,189,26343,26343,88656 X-SharePointHealthScore: 0 X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 574995a1-f052-c000-a6f5-c271ea8d6576 request-id: 574995a1-f052-c000-a6f5-c271ea8d6576 MS-CV: oZVJV1LwAMCm9cJx6o1ldg.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=36abecd9-c76b-4cfd-b9f9-1b1264839c0d&destinationEndpoint=Edge-Prod-ATL33r5d&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 550 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AAB7CC7E1FA842DEBFE8DC83DF36D319 Ref B: ATL331000107045 Ref C: 2025-04-17T06:21:14Z Date: Thu, 17 Apr 2025 06:21:14 GMT Connection: close
2025-04-17 06:21:15 UTC	2133	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2025-04-17 06:21:15 UTC	8192	IN	Data Raw: 70 65 3d 62 75 74 74 6f 6e 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 77 68 Data Ascii: pe=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;wh
2025-04-17 06:21:15 UTC	4144	IN	Data Raw: 65 78 3a 31 20 31 20 31 30 30 25 7d 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 65 73 6b 74 6f 70 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 35 37 70 78 20 30 20 32 30 70 78 7d 2e 6d 6f 62 69 6c 65 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 Data Ascii: ex:1 1 100%}input::-webkit-inner-spin-button,input::-webkit-outer-spin-button{margin:0;-webkit-appearance:none}input[type=number]{-moz-appearance:textfield}input[type=number]::-ms-clear{display:none}.desktop-logo{margin:57px 0 20px}.mobile-logo{margin-top
2025-04-17 06:21:15 UTC	8192	IN	Data Raw: 63 2e 6d 69 63 72 6f 73 6f 66 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 70 75 62 6c 69 63 2e 6f 6e 65 63 64 6e 2e 73 74 61 74 69 63 2e 6d 69 63 72 6f 73 6f 66 74 2f 66 69 6c 65 73 2f 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 35 2d 30 34 2d 30 34 2e 30 30 37 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 77 65 62 70 61 63 6b 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 6a 57 4d 58 4d 77 79 6a 56 50 4a 2f 75 77 35 44 35 6c 4b 36 32 59 69 56 72 59 6b 4b 64 43 32 54 72 48 34 79 5a 70 48 4d 6a 38 49 3d 22 20 63 72 6f 73 73 Data Ascii: c.microsoft" crossorigin /><link rel="preload" href="https://res-1.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/spoguestaccesswebpack/spoguestaccess.js" as="script" integrity="sha256-jWMXMwyjVPJ/uw5D5lK62YiVrYkKdC2TrH4yZpHMj8I=" cross
2025-04-17 06:21:15 UTC	8192	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 2e 70 3d 22 22 2c 69 28 69 2e 73 3d 32 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 2c 6e 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 Data Ascii: nction(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=2);function i(e){if(n[e])return n[e].exports;var t=n[e]={i:e,l:!1,exports:{}};return r[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}var r,n});!function(e,t){"object"==typeof e
2025-04-17 06:21:15 UTC	8192	IN	Data Raw: 45 72 72 6f 72 28 74 2b 22 5c 6e 68 74 74 70 3a 2f 2f 72 65 71 75 69 72 65 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 73 2e 68 74 6d 6c 23 22 2b 65 29 3b 69 2e 72 65 71 75 69 72 65 54 79 70 65 3d 65 3b 69 2e 72 65 71 75 69 72 65 4d 6f 64 75 6c 65 73 3d 6e 3b 72 26 26 28 69 2e 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3d 72 29 3b 72 65 74 75 72 6e 20 69 7d 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 65 66 69 6e 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 6a 73 29 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 6a 73 29 29 72 65 74 75 72 6e 3b 63 66 67 3d 72 65 71 75 69 72 65 6a 73 3b 72 65 71 75 69 72 65 6a 73 3d 76 6f 69 64 20 30 7d 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 26 26 21 69 73 46 75 6e 63 Data Ascii: Error(t+"\nhttp://requirejs.org/docs/errors.html#"+e);i.requireType=e;i.requireModules=n;r&&(i.originalError=r);return i}if(void 0===define){if(void 0!==requirejs){if(isFunction(requirejs))return;cfg=requirejs;requirejs=void 0}if(void 0!==require&&!isFunc
2025-04-17 06:21:15 UTC	8192	IN	Data Raw: 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 6f 29 29 7b 69 66 28 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 72 72 6f 72 26 26 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 7c 7c 72 65 71 2e 6f 6e 45 72 72 6f 72 21 3d 3d 64 65 66 61 75 6c 74 4f 6e 45 72 72 6f 72 29 74 72 79 7b 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 65 7d 65 6c 73 65 20 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 3b 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 28 65 3d 74 68 69 73 2e 6d 6f 64 75 6c 65 29 3f 69 3d 65 2e 65 78 70 6f 72 74 73 3a 74 68 69 73 2e 75 73 69 6e 67 45 78 70 6f 72 74 73 26 26 28 69 3d 74 68 69 73 2e 65 78 70 6f 72 74 73 29 29 3b 69 66 28 74 29 7b 74 Data Ascii: {if(isFunction(o)){if(this.events.error&&this.map.isDefine\|\|req.onError!==defaultOnError)try{i=d.execCb(r,o,n,i)}catch(e){t=e}else i=d.execCb(r,o,n,i);this.map.isDefine&&void 0===i&&((e=this.module)?i=e.exports:this.usingExports&&(i=this.exports));if(t){t
2025-04-17 06:21:15 UTC	8192	IN	Data Raw: 3a 5c 2f 5c 2f 5b 5e 5c 2f 5d 2b 5c 2f 2f 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 6d 61 74 63 68 20 26 26 20 6d 61 74 63 68 5b 30 5d 3b 0d 0a 20 20 7d 0d 0a 20 20 76 61 72 20 6f 72 69 67 69 6e 73 20 3d 20 62 61 73 65 55 72 6c 73 2e 6d 61 70 28 67 65 74 4f 72 69 67 69 6e 29 3b 0d 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 28 77 69 6e 64 6f 77 2e 5f 5f 63 64 6e 46 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 3a 20 66 61 6c 73 65 Data Ascii: :\/\/[^\/]+\//); return match && match[0]; } var origins = baseUrls.map(getOrigin); window.__backupBaseUrl = baseUrls[1]; var backupBaseUrl = baseUrls[1]; var failOverState = (window.__cdnFailOverState = { baseUrlFailedOver: false
2025-04-17 06:21:15 UTC	8192	IN	Data Raw: 42 30 6d 78 76 54 44 4b 6d 48 4f 47 54 57 31 38 73 2d 5a 6a 4d 66 67 79 44 4c 54 5f 56 6e 35 61 31 32 49 55 53 76 6f 30 71 4b 4d 76 56 39 73 47 46 72 32 41 34 51 4c 62 6a 74 53 47 53 58 70 6a 46 43 75 50 72 58 67 41 76 49 55 4e 79 79 44 67 54 5a 6d 4e 34 6c 30 26 61 6d 70 3b 74 3d 32 61 39 64 39 35 65 33 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 53 63 72 69 70 74 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 51 62 6d 77 50 59 4f 65 65 46 36 51 52 55 48 51 59 30 47 6f 56 70 49 4e 44 39 33 62 65 68 5a 61 66 5a 6a 42 36 6f 50 52 51 4e 76 31 79 71 52 32 6f 66 46 35 53 51 5f 68 79 7a 54 59 38 6a 45 61 69 53 44 37 38 4e 42 52 73 49 59 61 43 50 54 52 59 68 Data Ascii: B0mxvTDKmHOGTW18s-ZjMfgyDLT_Vn5a12IUSvo0qKMvV9sGFr2A4QLbjtSGSXpjFCuPrXgAvIUNyyDgTZmN4l0&t=2a9d95e3" type="text/javascript"></script><script src="/ScriptResource.axd?d=QbmwPYOeeF6QRUHQY0GoVpIND93behZafZjB6oPRQNv1yqR2ofF5SQ_hyzTY8jEaiSD78NBRsIYaCPTRYh

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:21:23 UTC	1187	OUT	POST /personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q HTTP/1.1 Host: metromechanicalservice-my.sharepoint.com Connection: keep-alive Content-Length: 1637 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://metromechanicalservice-my.sharepoint.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://metromechanicalservice-my.sharepoint.com/personal/shannon_wickens_metcor_co_uk/_layouts/15/guestaccess.aspx?e=5%3aQKM3xW&at=9&share=EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:21:23 UTC	1637	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 45 6d 61 69 6c 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 36 30 30 32 2e 31 32 30 30 37 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 6a 73 54 78 6c 47 6d 70 4a 59 66 25 32 46 6c 74 47 30 4e 61 74 63 7a 4e 35 74 39 4a 53 75 42 6f 58 46 67 68 57 50 77 35 69 33 36 72 72 4a 4e 69 6c 79 4a 79 41 54 4b 65 77 58 4b 66 64 70 6d 31 37 41 25 32 42 62 6d 34 62 38 44 65 6a 36 47 46 7a 32 4c 36 46 59 37 76 6e 66 6c 37 72 61 6f 50 6d 4a 78 32 46 43 34 25 32 46 65 75 25 32 46 7a 45 53 54 63 57 65 69 79 36 69 64 4b 30 4b 59 74 50 6c 51 6b 71 57 44 6f 31 34 42 43 4b 4e 4a 32 54 61 4b 56 58 38 58 75 4b 79 30 72 48 43 6d 4b 34 49 72 65 Data Ascii: __EVENTTARGET=btnSubmitEmail&__EVENTARGUMENT=&SideBySideToken=16.0.26002.12007&__VIEWSTATE=jsTxlGmpJYf%2FltG0NatczN5t9JSuBoXFghWPw5i36rrJNilyJyATKewXKfdpm17A%2Bbm4b8Dej6GFz2L6FY7vnfl7raoPmJx2FC4%2Feu%2FzESTcWeiy6idK0KYtPlQkqWDo14BCKNJ2TaKVX8XuKy0rHCmK4Ire
2025-04-17 06:21:24 UTC	2040	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 69338 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194720,0,88,45545,42574,42574,88359 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 594995a1-50b4-c000-82de-811c4bbd1419 request-id: 594995a1-50b4-c000-82de-811c4bbd1419 MS-CV: oZVJWbRQAMCC3oEcS70UGQ.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=36abecd9-c76b-4cfd-b9f9-1b1264839c0d&destinationEndpoint=Edge-Prod-ATL33r5b&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 473 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B3E5170DA82947988A50B888F613BE47 Ref B: ATL331000104035 Ref C: 2025-04-17T06:21:23Z Date: Thu, 17 Apr 2025 06:21:24 GMT Connection: close
2025-04-17 06:21:24 UTC	2130	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2025-04-17 06:21:24 UTC	8192	IN	Data Raw: 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 Data Ascii: [type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0
2025-04-17 06:21:24 UTC	4144	IN	Data Raw: 7b 66 6c 65 78 3a 31 20 31 20 31 30 30 25 7d 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 65 73 6b 74 6f 70 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 35 37 70 78 20 30 20 32 30 70 78 7d 2e 6d 6f 62 69 6c 65 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 2d Data Ascii: {flex:1 1 100%}input::-webkit-inner-spin-button,input::-webkit-outer-spin-button{margin:0;-webkit-appearance:none}input[type=number]{-moz-appearance:textfield}input[type=number]::-ms-clear{display:none}.desktop-logo{margin:57px 0 20px}.mobile-logo{margin-
2025-04-17 06:21:24 UTC	8192	IN	Data Raw: 61 74 69 63 2e 6d 69 63 72 6f 73 6f 66 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 70 75 62 6c 69 63 2e 6f 6e 65 63 64 6e 2e 73 74 61 74 69 63 2e 6d 69 63 72 6f 73 6f 66 74 2f 66 69 6c 65 73 2f 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 35 2d 30 34 2d 30 34 2e 30 30 37 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 77 65 62 70 61 63 6b 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 6a 57 4d 58 4d 77 79 6a 56 50 4a 2f 75 77 35 44 35 6c 4b 36 32 59 69 56 72 59 6b 4b 64 43 32 54 72 48 34 79 5a 70 48 4d 6a 38 49 3d 22 20 63 72 Data Ascii: atic.microsoft" crossorigin /><link rel="preload" href="https://res-1.public.onecdn.static.microsoft/files/odsp-web-prod_2025-04-04.007/spoguestaccesswebpack/spoguestaccess.js" as="script" integrity="sha256-jWMXMwyjVPJ/uw5D5lK62YiVrYkKdC2TrH4yZpHMj8I=" cr
2025-04-17 06:21:24 UTC	8192	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 2e 70 3d 22 22 2c 69 28 69 2e 73 3d 32 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 2c 6e 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f Data Ascii: =function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=2);function i(e){if(n[e])return n[e].exports;var t=n[e]={i:e,l:!1,exports:{}};return r[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}var r,n});!function(e,t){"object"==typeo
2025-04-17 06:21:24 UTC	8192	IN	Data Raw: 65 77 20 45 72 72 6f 72 28 74 2b 22 5c 6e 68 74 74 70 3a 2f 2f 72 65 71 75 69 72 65 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 73 2e 68 74 6d 6c 23 22 2b 65 29 3b 69 2e 72 65 71 75 69 72 65 54 79 70 65 3d 65 3b 69 2e 72 65 71 75 69 72 65 4d 6f 64 75 6c 65 73 3d 6e 3b 72 26 26 28 69 2e 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3d 72 29 3b 72 65 74 75 72 6e 20 69 7d 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 65 66 69 6e 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 6a 73 29 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 6a 73 29 29 72 65 74 75 72 6e 3b 63 66 67 3d 72 65 71 75 69 72 65 6a 73 3b 72 65 71 75 69 72 65 6a 73 3d 76 6f 69 64 20 30 7d 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 26 26 21 69 73 46 Data Ascii: ew Error(t+"\nhttp://requirejs.org/docs/errors.html#"+e);i.requireType=e;i.requireModules=n;r&&(i.originalError=r);return i}if(void 0===define){if(void 0!==requirejs){if(isFunction(requirejs))return;cfg=requirejs;requirejs=void 0}if(void 0!==require&&!isF
2025-04-17 06:21:24 UTC	8192	IN	Data Raw: 65 64 29 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 6f 29 29 7b 69 66 28 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 72 72 6f 72 26 26 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 7c 7c 72 65 71 2e 6f 6e 45 72 72 6f 72 21 3d 3d 64 65 66 61 75 6c 74 4f 6e 45 72 72 6f 72 29 74 72 79 7b 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 65 7d 65 6c 73 65 20 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 3b 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 28 65 3d 74 68 69 73 2e 6d 6f 64 75 6c 65 29 3f 69 3d 65 2e 65 78 70 6f 72 74 73 3a 74 68 69 73 2e 75 73 69 6e 67 45 78 70 6f 72 74 73 26 26 28 69 3d 74 68 69 73 2e 65 78 70 6f 72 74 73 29 29 3b 69 66 28 74 Data Ascii: ed){if(isFunction(o)){if(this.events.error&&this.map.isDefine\|\|req.onError!==defaultOnError)try{i=d.execCb(r,o,n,i)}catch(e){t=e}else i=d.execCb(r,o,n,i);this.map.isDefine&&void 0===i&&((e=this.module)?i=e.exports:this.usingExports&&(i=this.exports));if(t
2025-04-17 06:21:24 UTC	8192	IN	Data Raw: 74 70 73 3a 5c 2f 5c 2f 5b 5e 5c 2f 5d 2b 5c 2f 2f 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 6d 61 74 63 68 20 26 26 20 6d 61 74 63 68 5b 30 5d 3b 0d 0a 20 20 7d 0d 0a 20 20 76 61 72 20 6f 72 69 67 69 6e 73 20 3d 20 62 61 73 65 55 72 6c 73 2e 6d 61 70 28 67 65 74 4f 72 69 67 69 6e 29 3b 0d 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 28 77 69 6e 64 6f 77 2e 5f 5f 63 64 6e 46 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 3a 20 66 61 Data Ascii: tps:\/\/[^\/]+\//); return match && match[0]; } var origins = baseUrls.map(getOrigin); window.__backupBaseUrl = baseUrls[1]; var backupBaseUrl = baseUrls[1]; var failOverState = (window.__cdnFailOverState = { baseUrlFailedOver: fa
2025-04-17 06:21:24 UTC	8192	IN	Data Raw: 42 37 34 42 30 6d 78 76 54 44 4b 6d 48 4f 47 54 57 31 38 73 2d 5a 6a 4d 66 67 79 44 4c 54 5f 56 6e 35 61 31 32 49 55 53 76 6f 30 71 4b 4d 76 56 39 73 47 46 72 32 41 34 51 4c 62 6a 74 53 47 53 58 70 6a 46 43 75 50 72 58 67 41 76 49 55 4e 79 79 44 67 54 5a 6d 4e 34 6c 30 26 61 6d 70 3b 74 3d 32 61 39 64 39 35 65 33 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 53 63 72 69 70 74 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 51 62 6d 77 50 59 4f 65 65 46 36 51 52 55 48 51 59 30 47 6f 56 70 49 4e 44 39 33 62 65 68 5a 61 66 5a 6a 42 36 6f 50 52 51 4e 76 31 79 71 52 32 6f 66 46 35 53 51 5f 68 79 7a 54 59 38 6a 45 61 69 53 44 37 38 4e 42 52 73 49 59 61 43 50 54 Data Ascii: B74B0mxvTDKmHOGTW18s-ZjMfgyDLT_Vn5a12IUSvo0qKMvV9sGFr2A4QLbjtSGSXpjFCuPrXgAvIUNyyDgTZmN4l0&t=2a9d95e3" type="text/javascript"></script><script src="/ScriptResource.axd?d=QbmwPYOeeF6QRUHQY0GoVpIND93behZafZjB6oPRQNv1yqR2ofF5SQ_hyzTY8jEaiSD78NBRsIYaCPT

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:21:25 UTC	713	OUT	GET /files/odsp-web-prod_2025-04-04.007/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js HTTP/1.1 Host: res-1.public.onecdn.static.microsoft Connection: keep-alive Origin: https://metromechanicalservice-my.sharepoint.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://metromechanicalservice-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:21:25 UTC	1281	IN	HTTP/1.1 404 Not Found Content-Length: 215 x-ms-request-id: d0c38ca3-e01e-004c-3b60-aff830000000 Date: Thu, 17 Apr 2025 06:21:25 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43" Connection: close Akamai-Request-BC: [a=23.0.175.12,b=15858649,c=g,n=US_GA_ATLANTA,o=20940],[c=c,n=US_GA_LITHIASPRINGS,o=20940] AK-Network: FF Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ATLANTA&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.0caf0017.1744870885.f1fbd9&TotalRTCDNTime=106&CompressionType=&FileSize=215"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=106, clienttt; dur=5, origin; dur=0 , cdntime; dur=5 Akamai-Cache-Status: Miss from child, Hit from parent X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/javascript X-CDN-Provider: Akamai
2025-04-17 06:21:25 UTC	215	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 64 30 63 33 38 63 61 33 2d 65 30 31 65 2d 30 30 34 63 2d 33 62 36 30 2d 61 66 66 38 33 30 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 35 2d 30 34 2d 31 37 54 30 36 3a 32 31 3a 30 39 2e 31 33 37 37 36 32 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:d0c38ca3-e01e-004c-3b60-aff830000000Time:2025-04-17T06:21:09.1377628Z</Message></Error>

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:21:38 UTC	614	OUT	OPTIONS /api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ATLANTA&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.0caf0017.1744870885.f1fbd9&TotalRTCDNTime=106&CompressionType=&FileSize=215 HTTP/1.1 Host: m365cdn.nel.measure.office.net Connection: keep-alive Origin: https://res-1.public.onecdn.static.microsoft Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:21:38 UTC	319	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7 Date: Thu, 17 Apr 2025 06:21:38 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *
2025-04-17 06:21:38 UTC	7	IN	Data Raw: 4f 50 54 49 4f 4e 53 Data Ascii: OPTIONS

Timestamp	Bytes transferred	Direction	Data
2025-04-17 06:21:38 UTC	590	OUT	POST /api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ATLANTA&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.0caf0017.1744870885.f1fbd9&TotalRTCDNTime=106&CompressionType=&FileSize=215 HTTP/1.1 Host: m365cdn.nel.measure.office.net Connection: keep-alive Content-Length: 2189 Content-Type: application/reports+json Origin: https://res-1.public.onecdn.static.microsoft User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 06:21:38 UTC	2189	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 32 35 36 35 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 39 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 72 6f 6d 65 63 68 61 6e 69 63 61 6c 73 65 72 76 69 63 65 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 32 33 2e 30 2e 31 37 35 2e 31 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 Data Ascii: [{"age":12565,"body":{"elapsed_time":294,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://metromechanicalservice-my.sharepoint.com/","sampling_fraction":1.0,"server_ip":"23.0.175.16","status_code":404,"type":"http.error"},"ty
2025-04-17 06:21:43 UTC	426	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 x-ms-middleware-request-id: 00000000-0000-0000-0000-000000000000 Request-Context: appId=cid-v1:43ccb73c-0dfb-456b-9d4c-ddf7f5584002 Date: Thu, 17 Apr 2025 06:21:43 GMT Content-Length: 53 Connection: close Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *
2025-04-17 06:21:43 UTC	53	IN	Data Raw: 4e 45 4c 20 41 67 67 72 65 67 61 74 6f 72 20 68 61 73 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 70 72 6f 63 65 73 73 65 64 20 74 68 65 20 72 65 71 75 65 73 74 Data Ascii: NEL Aggregator has successfully processed the request

Target ID:	1
Start time:	02:20:24
Start date:	17/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	02:20:28
Start date:	17/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2932,i,13301453156867561865,13080001017303664051,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2960 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	5
Start time:	02:20:34
Start date:	17/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metromechanicalservice-my.sharepoint.com/:o:/g/personal/shannon_wickens_metcor_co_uk/EulCGHYLdz9Dp5VaSYAXgvABpMlcMQUtwpDsr_ESCmbO3Q?e=5%3aQKM3xW&at=9"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true