Create Interactive Tour

Windows Analysis Report
https://irisindiacloud-my.sharepoint.com/:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc

Overview

General Information

Sample URL:	https://irisindiacloud-my.sharepoint.com/:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc
Analysis ID:	1667600
Infos:

Detection

Score:	0
Range:	0 - 100
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,16051653147721521405,11200063392564300186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2000 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://irisindiacloud-my.sharepoint.com/:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=LITHIASPRINGS&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.4a7d2f17.1744898516.5e2d7cd&TotalRTCDNTime=105&CompressionType=gzip&FileSize=42642 HTTP/1.1Host: m365cdn.nel.measure.office.netConnection: keep-aliveContent-Length: 499Content-Type: application/reports+jsonOrigin: https://res-1.cdn.office.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_1366.1.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_1308.1.dr	String found in binary or memory: http://linkless.header/
Source: chromecache_976.1.dr, chromecache_1217.1.dr, chromecache_1363.1.dr	String found in binary or memory: http://www.contoso.com
Source: chromecache_1073.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_992.1.dr, chromecache_971.1.dr, chromecache_1340.1.dr	String found in binary or memory: https://1drv.com/
Source: chromecache_1086.1.dr	String found in binary or memory: https://apps.test.powerapps.com/sdk/preload
Source: chromecache_992.1.dr, chromecache_971.1.dr, chromecache_1340.1.dr	String found in binary or memory: https://centralus1-mediad.svc.ms
Source: chromecache_1057.1.dr, chromecache_1040.1.dr, chromecache_1276.1.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/web/policies
Source: chromecache_986.1.dr, chromecache_1175.1.dr	String found in binary or memory: https://esign.svc.cloud.dev.microsoft
Source: chromecache_986.1.dr, chromecache_1175.1.dr	String found in binary or memory: https://esign.svc.cloud.microsoft
Source: chromecache_1360.1.dr, chromecache_1312.1.dr	String found in binary or memory: https://facebook.github.io/react/docs/more-about-refs.html#the-ref-callback-attribute
Source: chromecache_1345.1.dr	String found in binary or memory: https://github.com/microsoft/griffel/issues
Source: chromecache_1289.1.dr	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: chromecache_1023.1.dr	String found in binary or memory: https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com
Source: chromecache_1023.1.dr	String found in binary or memory: https://irisindiacloud-my.sharepoint.com:443/_api/v2.0/drives/b
Source: chromecache_1204.1.dr	String found in binary or memory: https://lists.live.com/
Source: chromecache_992.1.dr, chromecache_971.1.dr, chromecache_1340.1.dr	String found in binary or memory: https://livefilestore.com/
Source: chromecache_1148.1.dr	String found in binary or memory: https://loki.delve.office.com
Source: chromecache_1350.1.dr, chromecache_1304.1.dr, chromecache_1162.1.dr	String found in binary or memory: https://make.powerautomate.com
Source: chromecache_1350.1.dr, chromecache_1162.1.dr	String found in binary or memory: https://make.preprod.powerautomate.com
Source: chromecache_1350.1.dr, chromecache_1162.1.dr	String found in binary or memory: https://make.test.powerautomate.com
Source: chromecache_992.1.dr, chromecache_1147.1.dr, chromecache_971.1.dr, chromecache_1340.1.dr	String found in binary or memory: https://media.cloudapp.net
Source: chromecache_992.1.dr, chromecache_1147.1.dr, chromecache_1085.1.dr, chromecache_1249.1.dr, chromecache_1175.1.dr, chromecache_971.1.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: chromecache_992.1.dr, chromecache_1147.1.dr, chromecache_971.1.dr, chromecache_1340.1.dr	String found in binary or memory: https://northcentralus1-medias.svc.ms
Source: chromecache_1040.1.dr, chromecache_1276.1.dr	String found in binary or memory: https://office.visualstudio.com/OC/_git/M365AdminUX?path=%2Fmodules%2Fhvc-loader
Source: chromecache_1040.1.dr, chromecache_1276.1.dr	String found in binary or memory: https://office.visualstudio.com/OC/_workitems/edit/2364251
Source: chromecache_1147.1.dr, chromecache_1340.1.dr	String found in binary or memory: https://onedrive.cloud.microsoft
Source: chromecache_1147.1.dr, chromecache_1340.1.dr	String found in binary or memory: https://onedrive.dev.cloud.microsoft
Source: chromecache_1085.1.dr, chromecache_1249.1.dr	String found in binary or memory: https://onedrive.live.com
Source: chromecache_1023.1.dr, chromecache_1332.1.dr	String found in binary or memory: https://onedrive.live.com/?gologin=1
Source: chromecache_1239.1.dr, chromecache_1182.1.dr, chromecache_1116.1.dr, chromecache_1311.1.dr, chromecache_1350.1.dr, chromecache_1276.1.dr, chromecache_1320.1.dr, chromecache_998.1.dr, chromecache_1138.1.dr	String found in binary or memory: https://outlook.office.com/search
Source: chromecache_986.1.dr, chromecache_1175.1.dr, chromecache_1289.1.dr, chromecache_971.1.dr	String found in binary or memory: https://portal.office.com/
Source: chromecache_1325.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_1147.1.dr	String found in binary or memory: https://res-1-sdf.cdn.office.net
Source: chromecache_1023.1.dr, chromecache_1147.1.dr, chromecache_1332.1.dr	String found in binary or memory: https://res-1.cdn.office.net
Source: chromecache_1175.1.dr, chromecache_1225.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets
Source: chromecache_1023.1.dr, chromecache_1181.1.dr, chromecache_1266.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-28.009/
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-28.009/oneuplightspeedwebpack/en-us/initial
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-28.009/oneuplightspeedwebpack/oneuplightspe
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-28.009/oneuplightspeedwebpack/plt.items-vie
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-28.009/oneuplightspeedwebpack/plt.odsp-comm
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-28.009/oneuplightspeedwebpack/plt.office-ui
Source: chromecache_1266.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-28.009/spserviceworker.js
Source: chromecache_1181.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-28.009/spwebworker.js
Source: chromecache_1266.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-04-04.005/
Source: chromecache_1266.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2025-04-04.005/stsserviceworkerprefetch/stsservicew
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp-media-b3a8dd05
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.1ds/odsp.1ds.lib-32ba9a8f
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.fluentui.core/fui.core-a9c0b34b
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.fluentui.core/fui.core-a9c0b34b.js
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.fluentui.utilities/fui.util-1604ed53
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.fluentui.utilities/fui.util-1604ed53.js
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-b7123889
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-b7123889.js
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.tslib/tslib-64fc1efb
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.tslib/tslib-64fc1efb.js
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.utilities/odsp.util-2bc1c9c3
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.utilities/odsp.util-2bc1c9c3.js
Source: chromecache_1023.1.dr	String found in binary or memory: https://res-2.cdn.office.net/files/odsp-web-prod_2025-03-28.009/
Source: chromecache_1175.1.dr, chromecache_1201.1.dr	String found in binary or memory: https://res.cdn.office.net/teams-js/validDomains/json/validDomains.json
Source: chromecache_1147.1.dr, chromecache_1308.1.dr	String found in binary or memory: https://sharepoint.uservoice.com/forums/329214-sites-and-collaboration
Source: chromecache_1023.1.dr	String found in binary or memory: https://shell.cdn.office.net
Source: chromecache_1023.1.dr, chromecache_1266.1.dr	String found in binary or memory: https://shell.cdn.office.net/api/ShellBootstrapper/business/OneShell
Source: chromecache_1147.1.dr	String found in binary or memory: https://shellppe.msocdn.com
Source: chromecache_1147.1.dr	String found in binary or memory: https://shellprod.msocdn.com
Source: chromecache_1023.1.dr	String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js
Source: chromecache_1340.1.dr	String found in binary or memory: https://substrate.office.com
Source: chromecache_1314.1.dr	String found in binary or memory: https://support.office.com/en-us/article/Manage-lists-and-libraries-with-many-items-b8588dae-9387-48
Source: chromecache_1332.1.dr	String found in binary or memory: https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2F$
Source: chromecache_1023.1.dr	String found in binary or memory: https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2Fonedrive
Source: chromecache_1332.1.dr	String found in binary or memory: https://www.office.com/login?ru=%2Flaunch%2F$
Source: chromecache_1023.1.dr	String found in binary or memory: https://www.office.com/login?ru=%2Flaunch%2Fonedrive

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705

Source: unknown	HTTPS traffic detected: 173.194.219.106:443 -> 192.168.2.7:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.136.10:443 -> 192.168.2.7:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.136.10:443 -> 192.168.2.7:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.45.13.144:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.136.10:443 -> 192.168.2.7:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.138.10:443 -> 192.168.2.7:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.136.10:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.47.218.164:443 -> 192.168.2.7:50049 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@21/769@16/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,16051653147721521405,11200063392564300186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2000 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://irisindiacloud-my.sharepoint.com/:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,16051653147721521405,11200063392564300186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2000 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_1110.1.dr, chromecache_1260.1.dr, chromecache_1159.1.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_1110.1.dr, chromecache_1260.1.dr, chromecache_1159.1.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://irisindiacloud-my.sharepoint.com/:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://irisindiacloud-my.sharepoint.com:443/_api/v2.0/drives/b	0%	Avira URL Cloud	safe
https://esign.svc.cloud.dev.microsoft	0%	Avira URL Cloud	safe
https://irisindiacloud-my.sharepoint.com/_layouts/15/spwebworkerproxy.ashx?odsp-web-prod_2025-03-28.009	0%	Avira URL Cloud	safe
https://facebook.github.io/react/docs/more-about-refs.html#the-ref-callback-attribute	0%	Avira URL Cloud	safe
https://irisindiacloud-my.sharepoint.com/_layouts/15/images/odbfavicon.ico?rev=47	0%	Avira URL Cloud	safe
https://make.preprod.powerautomate.com	0%	Avira URL Cloud	safe
http://linkless.header/	0%	Avira URL Cloud	safe
https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_api/SP.OAuth.Token/Acquire()	0%	Avira URL Cloud	safe
https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_api/sp.FavoriteItemCollection.GetFavoriteItems?top=500	0%	Avira URL Cloud	safe
https://irisindiacloud-my.sharepoint.com/_layouts/15/images/BLANK.gif	0%	Avira URL Cloud	safe
https://make.test.powerautomate.com	0%	Avira URL Cloud	safe
https://esign.svc.cloud.microsoft	0%	Avira URL Cloud	safe
https://apps.test.powerapps.com/sdk/preload	0%	Avira URL Cloud	safe
https://irisindiacloud-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D	0%	Avira URL Cloud	safe
https://lists.live.com/	0%	Avira URL Cloud	safe
https://irisindiacloud-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&spartanOneDriveWireframe=true&enableVHSourceOriginRedirect=true&streamViewServerLoad=true&streamInlineScript=true&compWWFlow=true&atomic=true&g=0&l2=true	0%	Avira URL Cloud	safe
https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	high
a726.dscd.akamai.net	23.48.246.142	true	false	high
www.google.com	173.194.219.106	true	false	high
a1894.dscb.akamai.net	23.45.13.144	true	false	high
irisindiacloud-my.sharepoint.com	unknown	unknown	false	unknown
southindia1-mediap.svc.ms	unknown	unknown	false	high
m365cdn.nel.measure.office.net	unknown	unknown	false	high
spo.nel.measure.office.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://c.pki.goog/r/r4.crl	false		high
https://irisindiacloud-my.sharepoint.com/_layouts/15/spwebworkerproxy.ashx?odsp-web-prod_2025-03-28.009	false	Avira URL Cloud: safe	unknown
https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_api/sp.FavoriteItemCollection.GetFavoriteItems?top=500	false	Avira URL Cloud: safe	unknown
https://irisindiacloud-my.sharepoint.com/:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc	false		unknown
https://spo.nel.measure.office.net/api/report?tenantId=06e84b96-907a-4418-ae29-211bfd190e84&destinationEndpoint=Edge-Prod-ATL33r5a&frontEnd=AFD&RemoteIP=89.187.171.0	false		high
https://irisindiacloud-my.sharepoint.com/_layouts/15/images/BLANK.gif	false	Avira URL Cloud: safe	unknown
https://irisindiacloud-my.sharepoint.com/_layouts/15/images/odbfavicon.ico?rev=47	false	Avira URL Cloud: safe	unknown
https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_api/SP.OAuth.Token/Acquire()	false	Avira URL Cloud: safe	unknown
https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024%2F549300EOHIZUJWKQ3G67%2D2024%2D12%2D31%2D0%2Dnl%2Ezip&parent=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024&ga=1	false		unknown
https://southindia1-mediap.svc.ms/transform/zipmetadata?provider=spo&inputFormat=zip&cs=fFNQTw&docid=https%3A%2F%2Firisindiacloud-my.sharepoint.com%3A443%2F_api%2Fv2.0%2Fdrives%2Fb!muee7D1UoUaKMB6Hyn7oSP4q9wZBdZ5MuGcL1i6ESsnqi4CRzdWzQLJ8zCX0FLAO%2Fitems%2F014YKULSI74UR5M6PBIREKVRBEHEHTP756%3Fversion%3DPublished&access_token=v1.eyJzaXRlaWQiOiJlYzllZTc5YS01NDNkLTQ2YTEtOGEzMC0xZTg3Y2E3ZWU4NDgiLCJhdWQiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAvaXJpc2luZGlhY2xvdWQtbXkuc2hhcmVwb2ludC5jb21AMDZlODRiOTYtOTA3YS00NDE4LWFlMjktMjExYmZkMTkwZTg0IiwiZXhwIjoiMTc0NDkxMjgwMCJ9.CiMKCXNoYXJpbmdpZBIWUGZ4S1pjanI5MG1OY2lkT2ZtSGhldwoICgNzdHASAXQKCgoEc25pZBICMzMSBgiolTsQARoOODkuMTg3LjE3MS4xNjEiFG1pY3Jvc29mdC5zaGFyZXBvaW50KixRWml5UTE5ME0rMFExQnAvQTJ3cVRqVHExcGxaNmN3NXNRejdiMjJocHFZPTB8OAFKEGhhc2hlZHByb29mdG9rZW5iBHRydWVyYTBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg5NmY2NTBkMjI5ODUzYmZmYmVkYzk2YzU0NmNiYjU2MzJjMzg1NGJlN2QyNjRiMDc5YWJmMTU4MjhmZmI5Mjd6ATDCAWEwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiM4OTZmNjUwZDIyOTg1M2JmZmJlZGM5NmM1NDZjYmI1NjMyYzM4NTRiZTdkMjY0YjA3OWFiZjE1ODI4ZmZiOTI3.BXJ1C-XWi5ki7hc9i7OmXxShy5BBk4tEncf2jWAinHo&cTag=%22c%3A%7BD623E51F-E179-4844-AAC4-24390F37FFBE%7D%2C2%22	false		high
https://irisindiacloud-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&spartanOneDriveWireframe=true&enableVHSourceOriginRedirect=true&streamViewServerLoad=true&streamInlineScript=true&compWWFlow=true&atomic=true&g=0&l2=true	false	Avira URL Cloud: safe	unknown
https://irisindiacloud-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D	false	Avira URL Cloud: safe	unknown
https://m365cdn.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=LITHIASPRINGS&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.4a7d2f17.1744898576.5e9d835&TotalRTCDNTime=105&CompressionType=gzip&FileSize=55158	false		high
https://m365cdn.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=LITHIASPRINGS&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.4a7d2f17.1744898516.5e2d7cd&TotalRTCDNTime=105&CompressionType=gzip&FileSize=42642	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://office.visualstudio.com/OC/_git/M365AdminUX?path=%2Fmodules%2Fhvc-loader	chromecache_1040.1.dr, chromecache_1276.1.dr	false		high
https://irisindiacloud-my.sharepoint.com:443/_api/v2.0/drives/b	chromecache_1023.1.dr	false	Avira URL Cloud: safe	unknown
https://outlook.office.com/search	chromecache_1239.1.dr, chromecache_1182.1.dr, chromecache_1116.1.dr, chromecache_1311.1.dr, chromecache_1350.1.dr, chromecache_1276.1.dr, chromecache_1320.1.dr, chromecache_998.1.dr, chromecache_1138.1.dr	false		high
https://www.office.com/login?ru=%2Flaunch%2F$	chromecache_1332.1.dr	false		high
https://shellppe.msocdn.com	chromecache_1147.1.dr	false		high
https://make.powerautomate.com	chromecache_1350.1.dr, chromecache_1304.1.dr, chromecache_1162.1.dr	false		high
https://sharepoint.uservoice.com/forums/329214-sites-and-collaboration	chromecache_1147.1.dr, chromecache_1308.1.dr	false		high
https://esign.svc.cloud.dev.microsoft	chromecache_986.1.dr, chromecache_1175.1.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/en-us/article/Manage-lists-and-libraries-with-many-items-b8588dae-9387-48	chromecache_1314.1.dr	false		high
https://office.visualstudio.com/OC/_workitems/edit/2364251	chromecache_1040.1.dr, chromecache_1276.1.dr	false		high
https://reactjs.org/link/react-polyfills	chromecache_1325.1.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_1073.1.dr	false		high
https://onedrive.cloud.microsoft	chromecache_1147.1.dr, chromecache_1340.1.dr	false		high
https://shellprod.msocdn.com	chromecache_1147.1.dr	false		high
https://northcentralus1-medias.svc.ms	chromecache_992.1.dr, chromecache_1147.1.dr, chromecache_971.1.dr, chromecache_1340.1.dr	false		high
https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2F$	chromecache_1332.1.dr	false		high
https://centralus1-mediad.svc.ms	chromecache_992.1.dr, chromecache_971.1.dr, chromecache_1340.1.dr	false		high
https://onedrive.live.com/?gologin=1	chromecache_1023.1.dr, chromecache_1332.1.dr	false		high
http://linkless.header/	chromecache_1308.1.dr	false	Avira URL Cloud: safe	unknown
https://facebook.github.io/react/docs/more-about-refs.html#the-ref-callback-attribute	chromecache_1360.1.dr, chromecache_1312.1.dr	false	Avira URL Cloud: safe	unknown
https://make.preprod.powerautomate.com	chromecache_1350.1.dr, chromecache_1162.1.dr	false	Avira URL Cloud: safe	unknown
https://my.microsoftpersonalcontent.com	chromecache_992.1.dr, chromecache_1147.1.dr, chromecache_1085.1.dr, chromecache_1249.1.dr, chromecache_1175.1.dr, chromecache_971.1.dr	false		high
https://portal.office.com/	chromecache_986.1.dr, chromecache_1175.1.dr, chromecache_1289.1.dr, chromecache_971.1.dr	false		high
https://onedrive.live.com	chromecache_1085.1.dr, chromecache_1249.1.dr	false		high
https://clients.config.office.net/user/v1.0/web/policies	chromecache_1057.1.dr, chromecache_1040.1.dr, chromecache_1276.1.dr	false		high
https://make.test.powerautomate.com	chromecache_1350.1.dr, chromecache_1162.1.dr	false	Avira URL Cloud: safe	unknown
http://fb.me/use-check-prop-types	chromecache_1366.1.dr	false		high
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js	chromecache_1023.1.dr	false		high
https://1drv.com/	chromecache_992.1.dr, chromecache_971.1.dr, chromecache_1340.1.dr	false		high
https://github.com/microsoft/griffel/issues	chromecache_1345.1.dr	false		high
https://livefilestore.com/	chromecache_992.1.dr, chromecache_971.1.dr, chromecache_1340.1.dr	false		high
https://substrate.office.com	chromecache_1340.1.dr	false		high
https://esign.svc.cloud.microsoft	chromecache_986.1.dr, chromecache_1175.1.dr	false	Avira URL Cloud: safe	unknown
https://apps.test.powerapps.com/sdk/preload	chromecache_1086.1.dr	false	Avira URL Cloud: safe	unknown
http://www.contoso.com	chromecache_976.1.dr, chromecache_1217.1.dr, chromecache_1363.1.dr	false		high
https://lists.live.com/	chromecache_1204.1.dr	false	Avira URL Cloud: safe	unknown
https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com	chromecache_1023.1.dr	false	Avira URL Cloud: safe	unknown
https://onedrive.dev.cloud.microsoft	chromecache_1147.1.dr, chromecache_1340.1.dr	false		high
https://www.office.com/login?ru=%2Flaunch%2Fonedrive	chromecache_1023.1.dr	false		high
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	chromecache_1289.1.dr	false		high
https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2Fonedrive	chromecache_1023.1.dr	false		high
https://loki.delve.office.com	chromecache_1148.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.138.10	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.45.13.169	unknown	United States	20940	AKAMAI-ASN1EU	false
23.47.218.164	unknown	United States	16625	AKAMAI-ASUS	false
173.194.219.106	www.google.com	United States	15169	GOOGLEUS	false
23.45.13.144	a1894.dscb.akamai.net	United States	20940	AKAMAI-ASN1EU	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1667600
Start date and time:	2025-04-17 16:00:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://irisindiacloud-my.sharepoint.com/:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@21/769@16/7

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, SgrmBroker.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.215.138, 172.217.215.113, 172.217.215.101, 172.217.215.102, 172.217.215.139, 172.217.215.100, 173.194.219.94, 142.251.15.84, 74.125.138.139, 74.125.138.101, 74.125.138.113, 74.125.138.138, 74.125.138.100, 74.125.138.102, 173.194.219.101, 173.194.219.138, 173.194.219.139, 173.194.219.100, 173.194.219.113, 173.194.219.102, 172.253.124.100, 172.253.124.113, 172.253.124.102, 172.253.124.139, 172.253.124.101, 172.253.124.138, 23.79.183.65, 20.189.173.28, 20.42.72.131, 199.232.214.172, 142.250.9.102, 142.250.9.100, 142.250.9.138, 142.250.9.139, 142.250.9.101, 142.250.9.113, 74.125.136.139, 74.125.136.138, 74.125.136.101, 74.125.136.100, 74.125.136.102, 74.125.136.113, 64.233.185.94, 108.177.122.94, 52.182.143.210, 52.168.112.66, 23.48.246.142, 23.192.229.101, 4.245.163.56, 23.192.229.102, 23.79.17.61
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, res-1.cdn.office.net, dns.msftncsi.com, mobile.events.data.microsoft.com, clients2.google.com, redirector.gvt1.com, onedscolprdwus18.westus.cloudapp.azure.com, shell.cdn.office.net, update.googleapis.com, c.pki.goog, onedscolprdcus10.centralus.cloudapp.azure.com, fs.microsoft.com, accounts.google.com, onedscolprdeus01.eastus.cloudapp.azure.com, ctldl.windowsupdate.com, e19254.dscg.akamaiedge.net, shell.cdn.office.net-c.edgekey.net.globalredir.akadns.net, res-stls-prod.edgesuite.net, fe3cr.delivery.mp.microsoft.com, shell.cdn.office.net-c.edgekey.net, edgedl.me.gvt1.com, res-prod.trafficmanager.net, onedscolprdeus00.eastus.cloudapp.azure.com, clients.l.google.com, res.cdn.office.net, mobile.events.data.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://irisindiacloud-my.sharepoint.com/:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2801)
Category:	downloaded
Size (bytes):	10184
Entropy (8bit):	5.275519834742433
Encrypted:	false
SSDEEP:	192:T5AxX+hszu9B+y5xJHpOOoJoJvjdsQOjzmWR3MeU5fqKfSSDq:VAxX7u9gwcOkoajz/R8EKfSSDq
MD5:	64F4F47F7FF8E27FD0FD0F9E2316660D
SHA1:	0AB51CF90FCCDEC44997F580B8C44B0A5682627C
SHA-256:	AA804842C999D00863EC6F2E4828A2DB5D266F5FEA47728339E4CA625910DA99
SHA-512:	F99B83D386F9E1EB57EDAEDB65A3C333B36B5BC1D7C210206C3181A4CC754CD7BFC2409666FF95BF4EA0EDEB8F041AEA99C7626A521809B3D7E2B5841627986F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2025-04-04.005/listsenterprise/79.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[79,108],{1297:(e,t,n)=>{n.d(t,{a:()=>c,b:()=>s});var a=n("tslib_358"),i=n("react-lib"),r=n(23),o=n(34),s=function(e){var t=e.OnDemandFabric,n=e.children,r=e.calloutProps,o=i.useState(!0),s=o[0],c=o[1];return s?i.createElement(t.Callout,(0,a.q5)({},r,{onDismiss:function(){r.onDismiss&&r.onDismiss(),c(!s)}}),n):null},c=(0,r.b)({loader:function(){return(0,a.yv)(void 0,void 0,void 0,function(){return(0,a.SO)(this,function(e){switch(e.label){case 0:return[4,(0,o.c)()];case 1:return[2,e.sent().Callout]}})})}})}.,964:(e,t,n)=>{n.r(t),n.d(t,{ListErrorMessage:()=>h});var a=n("tslib_358"),i=n("odsp.util_925"),r=n(1),o=n(0),s=n(34),c=n(855),d=n(165),l=n(1297);(0,n("fui.util_114").ZW)([{rawString:".errorCallout_63ec9d16{border-radius:4px;border:1px solid var(--ms-semanticColors-errorText)}.errorCallout_63ec9d16 .ms-Callout-main{border-radius:4px}.errorCalloutContent_63ec9d16{display:flex;max-width:608px;padding:10px;box-

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.9.94
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.9.94
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.9.94
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.9.94
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.9.94
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.9.94
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: irisindiacloud-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: southindia1-mediap.svc.ms
Source: global traffic	DNS traffic detected: DNS query: spo.nel.measure.office.net

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 17, 2025 16:01:47.922611952 CEST	53	51555	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:47.926636934 CEST	53	57269	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:48.803102016 CEST	53	57691	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:48.987603903 CEST	53	58852	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:52.349595070 CEST	51720	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:52.349726915 CEST	60157	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:52.456406116 CEST	53	60157	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:52.457626104 CEST	53	51720	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:53.581774950 CEST	56157	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:53.582027912 CEST	56460	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:53.740627050 CEST	53	56157	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:53.763035059 CEST	53	56460	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:56.512406111 CEST	64425	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:56.512564898 CEST	57847	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:56.620358944 CEST	53	57847	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:56.620994091 CEST	53	64425	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:58.093457937 CEST	58225	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:58.093914986 CEST	57152	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:58.214931011 CEST	53	58225	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:58.237607002 CEST	53	57152	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:58.693183899 CEST	53900	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:58.693378925 CEST	57900	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:58.802145004 CEST	53	53900	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:58.871460915 CEST	53	57900	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:59.230407953 CEST	57611	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:59.230547905 CEST	59723	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:01:59.352539062 CEST	53	57611	1.1.1.1	192.168.2.7
Apr 17, 2025 16:01:59.355184078 CEST	53	59723	1.1.1.1	192.168.2.7
Apr 17, 2025 16:02:05.971458912 CEST	53	56399	1.1.1.1	192.168.2.7
Apr 17, 2025 16:02:24.791719913 CEST	53	58530	1.1.1.1	192.168.2.7
Apr 17, 2025 16:02:47.593796968 CEST	53	61050	1.1.1.1	192.168.2.7
Apr 17, 2025 16:02:47.660834074 CEST	53	62186	1.1.1.1	192.168.2.7
Apr 17, 2025 16:02:50.770987988 CEST	53	51825	1.1.1.1	192.168.2.7
Apr 17, 2025 16:02:56.519303083 CEST	62070	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:02:56.519541025 CEST	51317	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:02:56.627285957 CEST	53	62070	1.1.1.1	192.168.2.7
Apr 17, 2025 16:02:56.629434109 CEST	53	51317	1.1.1.1	192.168.2.7
Apr 17, 2025 16:02:56.952348948 CEST	60974	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:02:56.952523947 CEST	63946	53	192.168.2.7	1.1.1.1
Apr 17, 2025 16:02:57.059082031 CEST	53	63946	1.1.1.1	192.168.2.7
Apr 17, 2025 16:02:57.061350107 CEST	53	60974	1.1.1.1	192.168.2.7

Timestamp	Bytes transferred	Direction	Data
Apr 17, 2025 16:02:05.319312096 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 17, 2025 16:02:05.426019907 CEST	1242	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 530 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 17 Apr 2025 13:57:58 GMT Expires: Thu, 17 Apr 2025 14:47:58 GMT Cache-Control: public, max-age=3000 Age: 247 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 02 0e 30 82 01 93 02 01 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 34 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 81 e9 30 2f 02 10 6e 47 a9 ce 4f 46 c2 3d e2 49 ea cc 38 94 53 73 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 9c 5b 70 05 a6 dc 86 e2 f9 9e f3 17 0d 32 30 30 31 33 31 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 fe a5 81 44 7e 3b fd 3b b8 1c 24 98 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 16 68 25 e1 70 04 40 61 24 91 f5 40 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 00 8e b2 58 e7 b5 94 0c 1f f9 00 44 17 0d 32 35 30 [TRUNCATED] Data Ascii: 000H=0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R4250403080000Z260228075959Z00/nGOF=I8Ss190930000000Z00U0,[p200131000000Z00U0,D~;;$230613000000Z00U0,h%p@a$@250403080000Z00U0,XD250403080000Z00U/0-0U0U#0LtI6>j0H=i0f1>2en:IN@g=;bQZ~`NX1?^4y[$\4{;$zDeU6O

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:54 UTC	786	OUT	GET /:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc HTTP/1.1 Host: irisindiacloud-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 14:01:54 UTC	3954	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 474 Content-Type: text/html; charset=utf-8 Location: https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024%2F549300EOHIZUJWKQ3G67%2D2024%2D12%2D31%2D0%2Dnl%2Ezip&parent=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024&ga=1 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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 [TRUNCATED] X-NetworkStatistics: 0,0,0,0,0,0,0,0 X-SharePointHealthScore: 2 X-MS-SPO-CookieValidator: lvhL9DDt0nd95FjGb0a787d/DOyGptwhYpMBik+kqxDOgctko5ma9h/nVOFYQDF30Mr1lbA6FXtAqv7CFqU8thQzpjwomqq45xVf0FuHcduqP2dqTTkBjCPqrLkmc8Uv3K+K/YW98hiJfD+ytFkc9au4Ukg3vY/0O0Oiw0NEZPRQlnJIL6bsEYWH3XuVM+Zb9973dWsN2fWx2b5GUPvO5y/O6Vy70KlBzYuxVznwybCqUKNl/D8Xx6fbvME/ZGatr3xi7cbM7a4P219Dd8x/UIFAy9DtKfrCLYeRaBvjC/p3Bm2GO0pRAE6cdabJ282JXN+CWczmn9gJHfBpkQx4Wg== X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: b36395a1-705c-4000-e90b-ecdaf61de603 request-id: b36395a1-705c-4000-e90b-ecdaf61de603 MS-CV: oZVjs1xwAEDpC+za9h3mAw.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=06e84b96-907a-4418-ae29-211bfd190e84&destinationEndpoint=Edge-Prod-ATL33r5d&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 172 SPIisLatency: 5 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 78FD378C50E943EC83F2BE139B726A91 Ref B: ATL331000107039 Ref C: 2025-04-17T14:01:54Z Date: Thu, 17 Apr 2025 14:01:54 GMT Connection: close
2025-04-17 14:01:54 UTC	474	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 72 69 73 69 6e 64 69 61 63 6c 6f 75 64 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 6e 75 70 75 72 5f 73 61 6d 61 6e 74 61 72 61 79 5f 69 72 69 73 62 75 73 69 6e 65 73 73 5f 63 6f 6d 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 6f 6e 65 64 72 69 76 65 2e 61 73 70 78 3f 69 64 3d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 6e 75 70 75 72 25 35 46 73 61 6d 61 6e 74 61 72 61 79 25 35 46 69 72 69 73 62 75 73 69 6e 65 73 73 25 35 46 63 6f 6d 25 32 46 44 6f 63 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDoc

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:54 UTC	2152	OUT	GET /personal/nupur_samantaray_irisbusiness_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024%2F549300EOHIZUJWKQ3G67%2D2024%2D12%2D31%2D0%2Dnl%2Ezip&parent=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024&ga=1 HTTP/1.1 Host: irisindiacloud-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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 [TRUNCATED]
2025-04-17 14:01:55 UTC	10951	IN	HTTP/1.1 200 OK Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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 [TRUNCATED] X-NetworkStatistics: 0,4194720,0,0,222860,53874,53874,209583 X-SharePointHealthScore: 3 Referrer-Policy: no-referrer, strict-origin-when-cross-origin Reporting-Endpoints: cspendpoint="https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_layouts/15/CSPReporting.aspx" X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com .cloud.microsoft .powerbi.com; Content-Security-Policy-Report-Only: base-uri 'none';;report-to cspendpoint Content-Security-Policy: worker-src 'self' blob:;script-src https://contentstorage.osi.office.net https://swx.cdn.skype.com https://res.delve.office.com https://lpcres.delve.office.com https://widget.uservoice.com https://by2.uservoice.com https://www.bing.com/api/maps/ https://www.bing.com/rms/ https://fabriciss.azureedge.net https://publiccdn.sharepointonline.com https://ajax.aspnetcdn.com https://res-1.cdn.office.net https://res-1.cdn.office.net https://res-2.cdn.office.net https://webshell.suite.office.com https://amcdn.msftauth.net .cdn.office.net .fluidpreview.office.net https://res-1.cdn.office.net https://teams.microsoft.com https://js.monitor.azure.com https://r4.res.office365.com https://c1-excel-15.cdn.office.net https://c1-onenote-15.cdn.office.net https://c1-powerpoint-15.cdn.office.net https://c1-visio-15.cdn.office.net https://c1-word-view-15.cdn.office.net https://loki.delve.office.com https://res.cdn.office.net/midgard/ https://substrate.office.com 'unsafe-eval' 'nonce-34b8f07c-adf2-4d70-bd [TRUNCATED] Content-Security-Policy-Report-Only: style-src https://contentstorage.osi.office.net https://swx.cdn.skype.com https://res.delve.office.com https://lpcres.delve.office.com https://widget.uservoice.com https://by2.uservoice.com https://www.bing.com/api/maps/ https://www.bing.com/rms/ https://fabriciss.azureedge.net https://publiccdn.sharepointonline.com https://ajax.aspnetcdn.com https://res-1.cdn.office.net https://res-1.cdn.office.net https://res-2.cdn.office.net https://webshell.suite.office.com https://amcdn.msftauth.net .cdn.office.net .fluidpreview.office.net https://res-1.cdn.office.net https://teams.microsoft.com https://js.monitor.azure.com https://r4.res.office365.com https://c1-excel-15.cdn.office.net https://c1-onenote-15.cdn.office.net https://c1-powerpoint-15.cdn.office.net https://c1-visio-15.cdn.office.net https://c1-word-view-15.cdn.office.net https://loki.delve.office.com https://res.cdn.office.net/midgard/ https://substrate.office.com 'self' blob: 'unsafe-inline';connect-src 'self' blob: h [TRUNCATED] X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: b36395a1-4084-5000-075f-c7d8f13d9076 request-id: b36395a1-4084-5000-075f-c7d8f13d9076 MS-CV: oZVjs4RAAFAHX8fY8T2Qdg.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=06e84b96-907a-4418-ae29-211bfd190e84&destinationEndpoint=Edge-Prod-ATL33r5c&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 840EB94363EA4BB19D10D6A42F22EA82 Ref B: ATL331000105023 Ref C: 2025-04-17T14:01:54Z Date: Thu, 17 Apr 2025 14:01:55 GMT Connection: close
2025-04-17 14:01:55 UTC	1761	IN	Data Raw: 36 64 61 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 Data Ascii: 6da<!DOCTYPE html><html lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta http-equ
2025-04-17 14:01:55 UTC	3801	IN	Data Raw: 65 64 32 0d 0a 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 73 63 72 69 70 74 45 6c 65 6d 29 3b 0d 0a 76 61 72 20 6e 65 77 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0d 0a 6e 65 77 53 63 72 69 70 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 74 79 70 65 27 2c 20 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 29 3b 0d 0a 6e 65 77 53 63 72 69 70 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 69 64 27 2c 20 27 53 75 69 74 65 4e 61 76 53 68 65 6c 6c 43 6f 72 65 27 29 3b 0d 0a 6e 65 77 53 63 72 69 70 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 72 63 27 2c 20 27 68 74 74 70 73 3a 2f 2f 73 68 65 6c 6c 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 53 68 65 Data Ascii: ed2e.removeChild(scriptElem);var newScript = document.createElement('script');newScript.setAttribute('type', 'text/javascript');newScript.setAttribute('id', 'SuiteNavShellCore');newScript.setAttribute('src', 'https://shell.cdn.office.net/api/She
2025-04-17 14:01:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 77 65 62 41 61 64 57 69 74 68 4d 73 61 50 72 6f 78 79 27 2c 20 6c 6f 67 69 6e 5f 48 69 6e 74 3a 20 27 75 72 6e 3a 73 70 6f 3a 61 6e 6f 6e 23 38 39 36 66 36 35 30 64 32 32 39 38 35 33 62 66 66 62 65 64 63 39 36 63 35 34 36 63 62 62 35 36 33 32 63 33 38 35 34 62 65 37 64 32 36 34 62 30 37 39 61 62 66 31 35 38 32 38 66 66 62 39 32 37 27 2c 20 61 70 70 53 69 67 6e 49 6e 55 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 2f 6c 6f 67 69 6e 3f 70 72 6f 6d 70 74 3d 73 65 6c 65 63 74 5f 61 63 63 6f 75 6e 74 26 72 75 3d 25 32 46 6c 61 75 6e 63 68 25 32 46 6f 6e 65 64 72 69 76 65 27 2c 20 61 70 70 53 69 67 6e 4f 75 74 55 72 6c 3a 20 27 68 74 74 70 73 3a 5c 75 30 30 32 66 5c 75 30 30 32 66 69 72 69 73 69 6e 64 69 61 Data Ascii: 2000webAadWithMsaProxy', login_Hint: 'urn:spo:anon#896f650d229853bffbedc96c546cbb5632c3854be7d264b079abf15828ffb927', appSignInUrl: 'https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2Fonedrive', appSignOutUrl: 'https:\u002f\u002firisindia
2025-04-17 14:01:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 6e 4f 75 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 63 74 69 76 69 74 79 42 61 73 65 64 54 69 6d 65 6f 75 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 53 6d 61 6c 6c 4d 65 64 69 75 6d 42 69 7a 4f 76 65 72 51 75 6f 74 61 54 65 6e 61 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 46 72 61 75 64 54 65 6e 61 6e 74 22 3a 66 61 6c 73 65 2c 22 66 72 61 75 64 54 65 6e 61 6e 74 53 75 62 73 63 72 69 70 74 69 6f 6e 54 79 70 65 22 3a 22 22 2c 22 69 73 54 65 6e 61 6e 74 4f 76 65 72 51 75 6f 74 61 22 3a 6e 75 6c 6c 2c 22 66 72 61 75 64 54 65 6e 61 6e 74 41 63 63 65 73 73 52 65 76 6f 6b 65 54 69 6d 65 22 3a 22 30 30 30 31 2d 30 31 2d 32 32 54 30 30 3a 30 30 3a 30 30 22 2c 22 65 35 44 65 76 4f 76 65 72 51 75 6f 74 61 54 65 6e 61 6e 74 41 Data Ascii: 2000nOutEnabled":false,"activityBasedTimeoutEnabled":false,"isSmallMediumBizOverQuotaTenant":false,"isFraudTenant":false,"fraudTenantSubscriptionType":"","isTenantOverQuota":null,"fraudTenantAccessRevokeTime":"0001-01-22T00:00:00","e5DevOverQuotaTenantA
2025-04-17 14:01:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 41 22 3a 74 72 75 65 2c 22 45 43 31 34 32 46 45 46 2d 31 35 36 31 2d 34 30 37 42 2d 41 34 33 30 2d 36 46 37 30 35 38 35 33 41 46 41 41 22 3a 74 72 75 65 2c 22 44 43 36 33 33 31 31 42 2d 36 44 41 42 2d 34 33 37 37 2d 38 41 44 44 2d 36 43 46 43 44 30 34 34 42 38 46 35 22 3a 74 72 75 65 2c 22 30 42 39 39 38 31 31 31 2d 36 44 37 35 2d 34 37 32 33 2d 39 38 44 32 2d 43 41 42 45 41 35 35 42 32 32 38 45 22 3a 74 72 75 65 2c 22 42 44 44 43 34 43 46 41 2d 34 37 30 43 2d 34 36 45 43 2d 42 43 42 44 2d 33 34 39 36 35 31 39 32 38 41 46 37 22 3a 74 72 75 65 2c 22 37 38 37 45 36 46 44 39 2d 38 31 43 44 2d 34 32 35 34 2d 42 30 42 38 2d 45 30 45 32 35 41 33 33 31 45 33 36 22 3a 74 72 75 65 2c 22 30 32 37 30 36 31 37 45 2d 35 45 45 43 2d 34 31 37 41 2d 38 Data Ascii: 2000A":true,"EC142FEF-1561-407B-A430-6F705853AFAA":true,"DC63311B-6DAB-4377-8ADD-6CFCD044B8F5":true,"0B998111-6D75-4723-98D2-CABEA55B228E":true,"BDDC4CFA-470C-46EC-BCBD-349651928AF7":true,"787E6FD9-81CD-4254-B0B8-E0E25A331E36":true,"0270617E-5EEC-417A-8
2025-04-17 14:01:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 22 38 41 33 36 46 35 41 43 2d 44 39 45 43 2d 34 30 32 30 2d 38 34 44 42 2d 43 36 32 37 33 41 41 45 45 32 37 32 22 3a 74 72 75 65 2c 22 41 45 30 37 44 39 46 33 2d 31 46 31 39 2d 34 41 43 41 2d 38 41 38 32 2d 43 39 42 38 43 44 41 45 45 45 38 37 22 3a 74 72 75 65 2c 22 32 44 46 37 46 41 38 35 2d 34 32 42 42 2d 34 34 33 36 2d 41 46 34 41 2d 38 45 30 37 30 32 33 36 43 35 39 34 22 3a 74 72 75 65 2c 22 36 34 41 37 35 31 30 33 2d 37 42 30 30 2d 34 35 35 44 2d 39 43 30 34 2d 38 30 31 44 45 42 39 39 35 44 44 41 22 3a 74 72 75 65 2c 22 30 35 32 37 39 39 39 46 2d 33 39 41 41 2d 34 44 45 43 2d 39 46 31 33 2d 44 41 45 45 37 45 43 38 43 45 46 32 22 3a 74 72 75 65 2c 22 36 41 39 32 42 36 36 33 2d 44 37 46 33 2d 34 30 41 32 2d 42 44 46 32 2d 44 46 30 43 Data Ascii: 2000"8A36F5AC-D9EC-4020-84DB-C6273AAEE272":true,"AE07D9F3-1F19-4ACA-8A82-C9B8CDAEEE87":true,"2DF7FA85-42BB-4436-AF4A-8E070236C594":true,"64A75103-7B00-455D-9C04-801DEB995DDA":true,"0527999F-39AA-4DEC-9F13-DAEE7EC8CEF2":true,"6A92B663-D7F3-40A2-BDF2-DF0C
2025-04-17 14:01:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 45 2d 33 43 38 45 2d 34 30 34 38 2d 41 35 43 32 2d 41 43 33 33 35 43 42 33 45 33 42 34 22 3a 74 72 75 65 2c 22 44 38 34 44 37 43 43 37 2d 37 38 43 42 2d 34 36 46 38 2d 41 30 36 37 2d 44 30 36 44 43 37 42 35 36 32 46 46 22 3a 74 72 75 65 2c 22 45 45 33 42 30 44 39 36 2d 32 31 33 44 2d 34 46 46 44 2d 42 33 38 31 2d 43 34 30 38 33 44 38 37 35 36 46 42 22 3a 74 72 75 65 2c 22 46 30 34 43 41 41 44 31 2d 39 44 39 37 2d 34 43 41 46 2d 41 43 41 44 2d 37 31 45 31 43 44 31 36 38 32 41 31 22 3a 74 72 75 65 2c 22 42 35 35 44 35 30 43 38 2d 36 41 36 45 2d 34 37 43 46 2d 41 34 43 45 2d 37 41 45 41 38 41 32 34 41 46 35 38 22 3a 74 72 75 65 2c 22 32 35 31 39 33 32 42 30 2d 44 34 33 37 2d 34 37 42 31 2d 38 34 42 30 2d 42 35 38 44 39 43 44 45 30 38 36 43 Data Ascii: 2000E-3C8E-4048-A5C2-AC335CB3E3B4":true,"D84D7CC7-78CB-46F8-A067-D06DC7B562FF":true,"EE3B0D96-213D-4FFD-B381-C4083D8756FB":true,"F04CAAD1-9D97-4CAF-ACAD-71E1CD1682A1":true,"B55D50C8-6A6E-47CF-A4CE-7AEA8A24AF58":true,"251932B0-D437-47B1-84B0-B58D9CDE086C
2025-04-17 14:01:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 44 30 34 2d 42 45 33 32 2d 45 30 43 35 44 30 31 32 31 44 38 35 22 3a 74 72 75 65 2c 22 46 36 43 42 41 45 46 38 2d 30 38 45 46 2d 34 39 42 32 2d 39 35 43 39 2d 41 46 41 42 30 38 42 33 44 42 32 41 22 3a 74 72 75 65 2c 22 41 42 34 46 37 44 33 41 2d 41 34 41 33 2d 34 31 36 32 2d 39 32 46 41 2d 32 44 41 41 41 45 43 44 36 42 43 46 22 3a 74 72 75 65 2c 22 44 45 33 45 34 46 46 43 2d 37 33 30 39 2d 34 36 43 32 2d 41 38 45 33 2d 31 43 34 37 42 30 34 46 33 35 46 35 22 3a 74 72 75 65 2c 22 33 37 46 45 34 37 37 31 2d 35 41 34 33 2d 34 36 42 37 2d 42 41 36 41 2d 31 41 39 41 44 44 43 36 42 33 32 42 22 3a 74 72 75 65 2c 22 35 37 42 46 42 44 34 36 2d 35 39 33 35 2d 34 45 41 45 2d 41 31 42 34 2d 39 31 37 35 45 44 41 41 46 39 32 42 22 3a 74 72 75 65 2c 22 Data Ascii: 2000D04-BE32-E0C5D0121D85":true,"F6CBAEF8-08EF-49B2-95C9-AFAB08B3DB2A":true,"AB4F7D3A-A4A3-4162-92FA-2DAAAECD6BCF":true,"DE3E4FFC-7309-46C2-A8E3-1C47B04F35F5":true,"37FE4771-5A43-46B7-BA6A-1A9ADDC6B32B":true,"57BFBD46-5935-4EAE-A1B4-9175EDAAF92B":true,"
2025-04-17 14:01:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 2d 39 36 34 34 32 43 43 43 36 35 37 36 22 3a 74 72 75 65 2c 22 46 46 45 32 37 39 32 34 2d 39 33 31 33 2d 34 43 35 32 2d 42 30 35 39 2d 32 41 37 30 36 35 34 41 39 30 31 30 22 3a 74 72 75 65 2c 22 42 45 45 32 30 37 46 34 2d 43 30 31 31 2d 34 37 45 46 2d 38 45 36 32 2d 34 33 43 37 46 44 45 36 36 34 33 32 22 3a 74 72 75 65 2c 22 43 41 38 36 35 37 37 37 2d 39 33 43 44 2d 34 31 46 45 2d 38 30 36 42 2d 38 42 35 43 41 34 36 43 35 31 37 46 22 3a 74 72 75 65 2c 22 35 38 34 37 32 30 44 45 2d 43 46 34 42 2d 34 34 43 41 2d 42 43 43 43 2d 36 35 46 39 36 39 44 35 31 38 39 35 22 3a 74 72 75 65 2c 22 32 46 46 39 34 39 42 44 2d 43 34 43 32 2d 34 39 42 46 2d 42 43 37 39 2d 41 34 33 33 36 44 35 38 45 30 39 38 22 3a 74 72 75 65 2c 22 31 46 44 41 44 32 32 32 Data Ascii: 2000-96442CCC6576":true,"FFE27924-9313-4C52-B059-2A70654A9010":true,"BEE207F4-C011-47EF-8E62-43C7FDE66432":true,"CA865777-93CD-41FE-806B-8B5CA46C517F":true,"584720DE-CF4B-44CA-BCCC-65F969D51895":true,"2FF949BD-C4C2-49BF-BC79-A4336D58E098":true,"1FDAD222
2025-04-17 14:01:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 41 34 41 30 34 22 3a 74 72 75 65 2c 22 33 41 46 33 31 33 33 45 2d 46 46 43 32 2d 34 42 33 41 2d 42 36 45 46 2d 39 35 43 30 35 38 30 31 38 42 32 39 22 3a 74 72 75 65 2c 22 37 39 35 41 32 39 44 38 2d 45 31 44 41 2d 34 33 30 39 2d 42 38 33 46 2d 34 37 35 35 31 34 32 46 38 33 45 33 22 3a 74 72 75 65 2c 22 35 44 41 33 31 39 31 42 2d 46 44 35 43 2d 34 43 33 43 2d 42 38 31 36 2d 37 34 36 31 31 45 45 36 42 32 35 46 22 3a 74 72 75 65 2c 22 33 39 36 46 34 30 39 43 2d 37 34 33 45 2d 34 37 35 30 2d 38 30 32 37 2d 35 46 39 32 46 44 41 44 43 37 45 33 22 3a 74 72 75 65 2c 22 45 42 31 38 34 37 45 45 2d 33 46 30 46 2d 34 36 45 34 2d 38 39 31 34 2d 34 34 41 41 38 45 36 35 35 32 41 39 22 3a 74 72 75 65 2c 22 32 30 32 37 33 33 36 46 2d 44 30 45 34 2d 34 43 Data Ascii: 2000A4A04":true,"3AF3133E-FFC2-4B3A-B6EF-95C058018B29":true,"795A29D8-E1DA-4309-B83F-4755142F83E3":true,"5DA3191B-FD5C-4C3C-B816-74611EE6B25F":true,"396F409C-743E-4750-8027-5F92FDADC7E3":true,"EB1847EE-3F0F-46E4-8914-44AA8E6552A9":true,"2027336F-D0E4-4C

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:56 UTC	611	OUT	OPTIONS /api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=LITHIASPRINGS&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.4a7d2f17.1744898516.5e2d7cd&TotalRTCDNTime=105&CompressionType=gzip&FileSize=42642 HTTP/1.1 Host: m365cdn.nel.measure.office.net Connection: keep-alive Origin: https://res-1.cdn.office.net Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 14:01:57 UTC	319	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7 Date: Thu, 17 Apr 2025 14:01:57 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *
2025-04-17 14:01:57 UTC	7	IN	Data Raw: 4f 50 54 49 4f 4e 53 Data Ascii: OPTIONS

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:57 UTC	586	OUT	POST /api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=LITHIASPRINGS&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.4a7d2f17.1744898516.5e2d7cd&TotalRTCDNTime=105&CompressionType=gzip&FileSize=42642 HTTP/1.1 Host: m365cdn.nel.measure.office.net Connection: keep-alive Content-Length: 499 Content-Type: application/reports+json Origin: https://res-1.cdn.office.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 14:01:57 UTC	499	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 35 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 69 72 69 73 69 6e 64 69 61 63 6c 6f 75 64 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 32 33 2e 34 38 2e 32 34 36 2e 31 34 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f Data Ascii: [{"age":0,"body":{"elapsed_time":556,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://irisindiacloud-my.sharepoint.com/","sampling_fraction":0.01,"server_ip":"23.48.246.142","status_code":200,"type":"ok"},"type":"network-erro
2025-04-17 14:01:57 UTC	399	IN	HTTP/1.1 429 Too Many Requests Content-Length: 0 x-ms-middleware-request-id: 00000000-0000-0000-0000-000000000000 Request-Context: appId=cid-v1:41ca65cb-08a6-4a29-94ab-18b081ee8b8b Date: Thu, 17 Apr 2025 14:01:57 GMT Connection: close Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:58 UTC	2083	OUT	GET /_layouts/15/images/BLANK.gif HTTP/1.1 Host: irisindiacloud-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024%2F549300EOHIZUJWKQ3G67%2D2024%2D12%2D31%2D0%2Dnl%2Ezip&parent=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024&ga=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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 [TRUNCATED]
2025-04-17 14:01:58 UTC	1948	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 43 Content-Type: image/gif Last-Modified: Sat, 12 Apr 2025 08:18:47 GMT Accept-Ranges: bytes ETag: "7652a78383abdb1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg5NmY2NTBkMjI5ODUzYmZmYmVkYzk2YzU0NmNiYjU2MzJjMzg1NGJlN2QyNjRiMDc5YWJmMTU4MjhmZmI5MjcsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODk2ZjY1MGQyMjk4NTNiZmZiZWRjOTZjNTQ2Y2JiNTYzMmMzODU0YmU3ZDI2NGIwNzlhYmYxNTgyOGZmYjkyNywxMzM4OTM3MjQxNDAwMDAwMDAsMCwxMzM4OTQ1ODUxNDUxNTg5MTEsMC4wLjAuMCwyNTgsMDZlODRiOTYtOTA3YS00NDE4LWFlMjktMjExYmZkMTkwZTg0LCwsNjUxMmYxZTktNDYxMS00ZmFlLTg4OGMtODFkMjI1YzM2OWU5LDY1MTJmMWU5LTQ2MTEtNGZhZS04ODhjLTgxZDIyNWMzNjllOSxQZnhLWmNqcjkwbU5jaWRPZm1IaGV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY0NjMsTkxITm9QekJlYzNqTGxRc1NZb0w1UTFFZ2ZFLGx2aEw5RER0MG5kOTVGakdiMGE3ODdkL0RPeUdwdHdoWXBNQmlrK2txeERPZ2N0a281bWE5aC9uVk9GWVFERjMwTXIxbGJBNkZYdEFxdjdDRnFVOHRoUXpwandvbXFxNDV4VmYwRnVIY2R1cVAyZHFUVGtCakNQcXJMa21jOFV2M0srSy9ZVzk4aGlKZkQreXRGa2M5YXU0VWtnM3ZZLzBPME9pdzBORVpQUlFsbkpJTDZic0VZV0gzWHVWTStaYjk5NzNkV3NOMmZXeDJiNUdVUHZPNXkvTzZWeTcwS2xCell1eFZ6bnd5YkNxVUtObC9EOFh4 [TRUNCATED] X-NetworkStatistics: 0,4194720,0,629,2742664,506528,506528,209570 SPRequestDuration: 7 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F34A07FA0F974DADAB4CAB08DEB49558 Ref B: ATL331000102033 Ref C: 2025-04-17T14:01:58Z Date: Thu, 17 Apr 2025 14:01:58 GMT Connection: close
2025-04-17 14:01:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:58 UTC	1748	OUT	GET /transform/zipmetadata?provider=spo&inputFormat=zip&cs=fFNQTw&docid=https%3A%2F%2Firisindiacloud-my.sharepoint.com%3A443%2F_api%2Fv2.0%2Fdrives%2Fb!muee7D1UoUaKMB6Hyn7oSP4q9wZBdZ5MuGcL1i6ESsnqi4CRzdWzQLJ8zCX0FLAO%2Fitems%2F014YKULSI74UR5M6PBIREKVRBEHEHTP756%3Fversion%3DPublished&access_token=v1.eyJzaXRlaWQiOiJlYzllZTc5YS01NDNkLTQ2YTEtOGEzMC0xZTg3Y2E3ZWU4NDgiLCJhdWQiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAvaXJpc2luZGlhY2xvdWQtbXkuc2hhcmVwb2ludC5jb21AMDZlODRiOTYtOTA3YS00NDE4LWFlMjktMjExYmZkMTkwZTg0IiwiZXhwIjoiMTc0NDkxMjgwMCJ9.CiMKCXNoYXJpbmdpZBIWUGZ4S1pjanI5MG1OY2lkT2ZtSGhldwoICgNzdHASAXQKCgoEc25pZBICMzMSBgiolTsQARoOODkuMTg3LjE3MS4xNjEiFG1pY3Jvc29mdC5zaGFyZXBvaW50KixRWml5UTE5ME0rMFExQnAvQTJ3cVRqVHExcGxaNmN3NXNRejdiMjJocHFZPTB8OAFKEGhhc2hlZHByb29mdG9rZW5iBHRydWVyYTBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg5NmY2NTBkMjI5ODUzYmZmYmVkYzk2YzU0NmNiYjU2MzJjMzg1NGJlN2QyNjRiMDc5YWJmMTU4MjhmZmI5Mjd6ATDCAWEwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiM4OTZmNjUwZDIyOTg1M2JmZmJlZGM5NmM1NDZjYmI1NjMyYzM4NTRiZTd [TRUNCATED] Host: southindia1-mediap.svc.ms Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://irisindiacloud-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://irisindiacloud-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 14:01:59 UTC	950	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 5474 Content-Type: application/json X-AspNetMvc-Version: 5.2 Access-Control-Expose-Headers: Content-Length, X-CorrelationId, X-ErrorCode, X-ErrorType, x-cache, x-msedge-ref, x-azure-ref-originshield, Server-Timing, Request-Stat, X-OneDriveMeTA-Region Access-Control-Max-Age: 2592000 Access-Control-Allow-Origin: * Timing-Allow-Origin: * X-StreamOrigin: Cached Server-Timing: Provider;dur=86,SharePoint;dur=67,StreamRead;dur=0,TotalRequest;dur=97,Sandbox;dur=0 Request-Stat: Cached;True,RemoteReads;1 X-CorrelationId: 26a7c8ff-855b-484a-9cca-7d11bc23da74 X-OneDriveMeTA-Version: 1.614.14415.0 X-OneDriveMeTA-Build: 2025.04.03.5 X-OneDriveMeTA-Region: southindia X-AspNet-Version: 4.0.30319 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 39CE00745FCD42A692A005A09E497003 Ref B: ATL331000103031 Ref C: 2025-04-17T14:01:58Z Date: Thu, 17 Apr 2025 14:01:58 GMT Connection: close
2025-04-17 14:01:59 UTC	3220	IN	Data Raw: 7b 22 6d 65 74 61 64 61 74 61 22 3a 20 7b 22 65 72 72 6f 72 22 3a 22 22 2c 22 64 65 6c 69 6d 69 74 65 72 22 3a 22 2f 22 2c 22 6c 69 73 74 22 3a 5b 7b 22 70 61 74 68 22 3a 22 35 34 39 33 30 30 45 4f 48 49 5a 55 4a 57 4b 51 33 47 36 37 2d 32 30 32 34 2d 31 32 2d 33 31 2d 30 2d 6e 6c 22 2c 22 6e 61 6d 65 22 3a 22 35 34 39 33 30 30 45 4f 48 49 5a 55 4a 57 4b 51 33 47 36 37 2d 32 30 32 34 2d 31 32 2d 33 31 2d 30 2d 6e 6c 22 2c 22 70 61 72 65 6e 74 46 6f 6c 64 65 72 22 3a 22 22 2c 22 73 69 7a 65 22 3a 30 2c 22 69 73 46 6f 6c 64 65 72 22 3a 74 72 75 65 2c 22 63 68 69 6c 64 43 6f 75 6e 74 22 3a 33 2c 22 64 61 74 65 22 3a 22 32 30 32 35 2d 30 34 2d 31 30 22 2c 22 65 78 74 65 6e 73 69 6f 6e 22 3a 22 22 2c 22 63 68 69 6c 64 72 65 6e 22 3a 5b 7b 22 70 61 74 68 22 3a Data Ascii: {"metadata": {"error":"","delimiter":"/","list":[{"path":"549300EOHIZUJWKQ3G67-2024-12-31-0-nl","name":"549300EOHIZUJWKQ3G67-2024-12-31-0-nl","parentFolder":"","size":0,"isFolder":true,"childCount":3,"date":"2025-04-10","extension":"","children":[{"path":
2025-04-17 14:01:59 UTC	2254	IN	Data Raw: 2b 30 30 3a 30 30 22 7d 2c 7b 22 70 61 74 68 22 3a 22 35 34 39 33 30 30 45 4f 48 49 5a 55 4a 57 4b 51 33 47 36 37 2d 32 30 32 34 2d 31 32 2d 33 31 2d 30 2d 6e 6c 2f 77 77 77 2e 77 68 61 74 73 63 6f 6f 6b 69 6e 67 2e 67 72 6f 75 70 2f 78 62 72 6c 2f 32 30 32 34 2f 35 34 39 33 30 30 45 4f 48 49 5a 55 4a 57 4b 51 33 47 36 37 2d 32 30 32 34 2d 31 32 2d 33 31 5f 63 61 6c 2e 78 6d 6c 22 2c 22 6e 61 6d 65 22 3a 22 35 34 39 33 30 30 45 4f 48 49 5a 55 4a 57 4b 51 33 47 36 37 2d 32 30 32 34 2d 31 32 2d 33 31 5f 63 61 6c 2e 78 6d 6c 22 2c 22 70 61 72 65 6e 74 46 6f 6c 64 65 72 22 3a 22 35 34 39 33 30 30 45 4f 48 49 5a 55 4a 57 4b 51 33 47 36 37 2d 32 30 32 34 2d 31 32 2d 33 31 2d 30 2d 6e 6c 2f 77 77 77 2e 77 68 61 74 73 63 6f 6f 6b 69 6e 67 2e 67 72 6f 75 70 2f 78 Data Ascii: +00:00"},{"path":"549300EOHIZUJWKQ3G67-2024-12-31-0-nl/www.whatscooking.group/xbrl/2024/549300EOHIZUJWKQ3G67-2024-12-31_cal.xml","name":"549300EOHIZUJWKQ3G67-2024-12-31_cal.xml","parentFolder":"549300EOHIZUJWKQ3G67-2024-12-31-0-nl/www.whatscooking.group/x

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4095
Entropy (8bit):	5.1206178192030345
Encrypted:	false
SSDEEP:	96:yzTp7tFUVfrtFUVfFYgC1YgC0WDsLcVgnc/:yzNtFWrtFWFTC1TCZV/
MD5:	2A17DF207183A22BFB5277F5F94FC88C
SHA1:	F4CF789563CBA17EC28B381F65B312C07BEF418F
SHA-256:	711788348F3597102F133D7E8278E00BE9E3AD5565410F31070363ABA62F3463
SHA-512:	4EAC2958B9D71FFF5918AFB67DB73E2EB85A71350FFCE1FB4855E71E596CFA691E23063FC883630CB21DD16FAB5D5663B43ED9E1BC952A0E263CA08466F259B3
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2025-04-04.005/odblightspeedwebpack/images/ic_fluent_copilot_20_color_03a0b840.svg
Preview:	<svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">..<path d="M14.1437 3.34932C13.9101 2.54966 13.177 2 12.3439 2L11.7427 2C10.8467 2 10.0758 2.634 9.90296 3.51321L8.85352 8.85006L9.15094 7.89102C9.39431 7.1063 10.1202 6.57143 10.9418 6.57143L14.2351 6.57143L15.6352 7.74347L16.8818 6.57143H16.4905C15.6574 6.57143 14.9242 6.02177 14.6907 5.22211L14.1437 3.34932Z" fill="url(#paint0_radial_56201_15523)"/>..<path d="M6.0492 16.643C6.28017 17.4465 7.01519 18 7.85121 18H9.07497C10.0844 18 10.9126 17.2009 10.9488 16.1921L11.1295 11.1429L10.842 12.0954C10.6031 12.887 9.87385 13.4286 9.04701 13.4286L5.73383 13.4286L4.34959 12.5434L3.32812 13.4286H3.71324C4.54926 13.4286 5.28427 13.9821 5.51524 14.7855L6.0492 16.643Z" fill="url(#paint1_radial_56201_15523)"/>..<path d="M12.2503 2H5.68785C3.81286 2 2.68787 4.39748 1.93788 6.79497C1.04933 9.63537 -0.113354 13.4342 3.25037 13.4342H6.11145C6.9435 13.4342 7.67548 12.8878 7.91125 12.0899C8.40466 10.4199 9.264

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	682
Entropy (8bit):	4.849297734990448
Encrypted:	false
SSDEEP:	12:trZvnltuJpvLtDiHATM65Trl1HkK1XdUS57dOcSBnSFuRl1WgtK4ELgHQPbqIYp:tVvnjuJpTtDHTMMTb9ZS95T1WgtKqAbQ
MD5:	EB9B9836D41E761A94DE4C9A48780F28
SHA1:	275F09F5F87854676CDDEF033D99B5B0371FB51D
SHA-256:	3D2C1F9C959C97C75F339FF4C109D08B943B1197CC7F4B0F7CC587BFAE2FA603
SHA-512:	EBE94F9372E8FEDC93DA7D070E4F6113D9D0F6DD6DB8A71C1A55326FA9F11A4FF8AFAE9CEF1EA7A5FFE8D9EB5FC727C70D1B4A3C7A7172CA8FC3F22B1C4F6FD8
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/sp-client/odsp-media-d9c73484/images/addtoonedrive/shortcutbadge_16.svg
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="16" height="16" rx="3.5" fill="white"/>..<path fill-rule="evenodd" clip-rule="evenodd" d="M4.5 5.125C4.15482 5.125 3.875 4.84518 3.875 4.5C3.875 4.15482 4.15482 3.875 4.5 3.875H11.5C11.8452 3.875 12.125 4.15482 12.125 4.5V11.5C12.125 11.8452 11.8452 12.125 11.5 12.125C11.1548 12.125 10.875 11.8452 10.875 11.5V6.00888L4.94194 11.9419C4.69786 12.186 4.30214 12.186 4.05806 11.9419C3.81398 11.6979 3.81398 11.3021 4.05806 11.0581L9.99112 5.125H4.5Z" fill="#0F6CBD"/>..<rect x="0.6" y="0.6" width="14.8" height="14.8" rx="2.9" stroke="#979695" stroke-width="1.2"/>..</svg>..

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2015)
Category:	downloaded
Size (bytes):	6096
Entropy (8bit):	5.262703489949342
Encrypted:	false
SSDEEP:	96:qW3hFjr1NOb+xKAy7c/WTepjIqnrsQ5BFnH+V0DWezPAD+XfAbdNR2UmBr5ATjv:qihR1NOb+xpWc/pnMV0NjACvgdH2iTb
MD5:	80D6767D2657BB6272DA5E5C8DA0F173
SHA1:	8F823C5271DACB86A4CF0D426373CF3BADE3E296
SHA-256:	EE4AA0BC4D6187238201DC60051C766E334EADEA11DA4E11E88E60F14AC13EA7
SHA-512:	A8B17C71B6313D3AB54117154797ED71233A6263A1C4BF8649787D83BA950F44838768911278F71E8A55233224D084543A0B31279E2843A70B8451828D4866ED
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2025-04-04.005/@ms/stream-bundle/chunks/5475.js
Preview:	"use strict";(self.webpackChunk_ms_stream_bundle=self.webpackChunk_ms_stream_bundle\|\|[]).push([[5475],{434807:(e,t,n)=>{n.d(t,{UcD:()=>r,fse:()=>i,gvh:()=>o});var a=n(639691);const i=(0,a.U)("ClockArrowDownload20Regular","20",["M11 1a8 8 0 1 1-.59 15.98c.16-.31.29-.64.38-.98H11a7 7 0 1 0-7-6.8c-.34.1-.67.23-.98.39L3 9a8 8 0 0 1 8-8Zm-.5 3a.5.5 0 0 1 .5.41V9h2.5a.5.5 0 0 1 .09 1H10.5a.5.5 0 0 1-.5-.41V4.5c0-.28.22-.5.5-.5ZM1 14.5a4.5 4.5 0 0 1 4-4.47v3.76l-.65-.64a.5.5 0 0 0-.7.7l1.5 1.5c.2.2.5.2.7 0l1.5-1.5a.5.5 0 1 0-.7-.7l-.65.64v-3.76a4.5 4.5 0 1 1-5 4.47Zm7 2a.5.5 0 0 0-.5-.5h-4a.5.5 0 1 0 0 1h4a.5.5 0 0 0 .5-.5Z"]),r=(0,a.U)("ClosedCaption24Regular","24",["M18.75 4C20.55 4 22 5.46 22 7.25v9.5c0 1.8-1.46 3.25-3.25 3.25H5.25A3.25 3.25 0 0 1 2 16.75v-9.5a3.25 3.25 0 0 1 3.07-3.24L5.25 4h13.5Zm0 1.5H5.11c-.9.08-1.61.83-1.61 1.75v9.5c0 .97.78 1.75 1.75 1.75h13.5c.97 0 1.75-.78 1.75-1.75v-9.5c0-.97-.78-1.75-1.75-1.75ZM5.5 12c0-3.15 2.71-4.78 5.12-3.4a.75.75 0 0 1-.74 1.3C8.48 9.1 7 10 7

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1232)
Category:	downloaded
Size (bytes):	1237
Entropy (8bit):	4.947310023456463
Encrypted:	false
SSDEEP:	24:i4I4eQFqTRSk0N5x7A03o8Nc+TtQT6EbtQDoQH2:iHwAjy3D3o8NPBQTBpQ0QH2
MD5:	F8F9C192D347ED95427BD2133A5E90EE
SHA1:	17B17AA3DB0A68FA908BB5352CDED86582426080
SHA-256:	72ED7F02F576E81E0154C44E65B962A86FD56CBF31E90FA27BB5A20F31E90648
SHA-512:	8724F5197603A8AFE6096759EADFCBEB66A70497CB5B9C7A77792732B1391F02632F0CBC1D919175B93DE2FAEC5EB32A09ADB2123A6D874A95A2D561D05ABFC2
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2025-04-04.005/@ms/stream-bundle/chunks/30099.js
Preview:	"use strict";(self.webpackChunk_ms_stream_bundle=self.webpackChunk_ms_stream_bundle\|\|[]).push([[30099],{830099:(e,t,n)=>{n.d(t,{DYX:()=>r,L4E:()=>o,Lu3:()=>i,Po1:()=>s,zJg:()=>c});var a=n(639691);const i=(0,a.U)("Add20Regular","20",["M10 2.5a.5.5 0 0 0-1 0V9H2.5a.5.5 0 0 0 0 1H9v6.5a.5.5 0 0 0 1 0V10h6.5a.5.5 0 0 0 0-1H10V2.5Z"]),r=(0,a.U)("Add24Regular","24",["M11.75 3c.38 0 .7.28.74.65l.01.1V11h7.25a.75.75 0 0 1 .1 1.5H12.5v7.25a.75.75 0 0 1-1.49.1V12.5H3.74a.75.75 0 0 1-.1-1.5H11V3.75c0-.41.34-.75.75-.75Z"]),o=(0,a.U)("ArrowCounterclockwise24Regular","24",["M12 4.5a7.5 7.5 0 1 1-7.42 6.4c.07-.46-.26-.9-.72-.9-.37 0-.7.26-.76.62A9 9 0 1 0 6 5.3V4.25a.75.75 0 0 0-1.5 0v3c0 .41.34.75.75.75h3a.75.75 0 0 0 0-1.5H6.9a7.47 7.47 0 0 1 5.1-2Z"]),s=(0,a.U)("ArrowExportLtr16Regular","16",["M1.5 3c.28 0 .5.22.5.5V12a.5.5 0 0 1-1 0V3.5c0-.28.22-.5.5-.5Zm9.15.65c.2-.2.5-.2.7 0l3.5 3.5c.2.2.2.5 0 .7l-3.5 3.5a.5.5 0 0 1-.7-.7L13.29 8H4.5a.5.5 0 0 1 0-1h8.8l-2.65-2.65a.5.5 0 0 1 0-.7Z"]),c=(0,a.U)("

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:58 UTC	2620	OUT	GET /personal/nupur_samantaray_irisbusiness_com/_api/sp.FavoriteItemCollection.GetFavoriteItems?top=500 HTTP/1.1 Host: irisindiacloud-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" Authorization: Bearer CollectSPPerfMetrics: SPSQLQueryCount sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Caller: ODBWeb sec-ch-ua-mobile: ?0 x-requestdigest: 0x8F5A6A3731F22678B7C5FDBB34AF1583F51E0EA6297C3315849F9DE6859A9742DF8409670D54EB003EB5268745D615379F39C9A98B7632F876D9FDF1D787CE65,17 Apr 2025 14:01:55 -0000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: application/json;odata=verbose Content-Type: application/json;odata=verbose Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024%2F549300EOHIZUJWKQ3G67%2D2024%2D12%2D31%2D0%2Dnl%2Ezip&parent=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024&ga=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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 [TRUNCATED]
2025-04-17 14:01:59 UTC	3451	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private, max-age=0 Transfer-Encoding: chunked Content-Type: application/json;odata=verbose;charset=utf-8 Expires: Wed, 02 Apr 2025 14:01:59 GMT Last-Modified: Thu, 17 Apr 2025 14:01:59 GMT Vary: Origin P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg5NmY2NTBkMjI5ODUzYmZmYmVkYzk2YzU0NmNiYjU2MzJjMzg1NGJlN2QyNjRiMDc5YWJmMTU4MjhmZmI5MjcsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODk2ZjY1MGQyMjk4NTNiZmZiZWRjOTZjNTQ2Y2JiNTYzMmMzODU0YmU3ZDI2NGIwNzlhYmYxNTgyOGZmYjkyNywxMzM4OTM3MjQxNDAwMDAwMDAsMCwxMzM4OTQ1ODUxNDUxNTg5MTEsMC4wLjAuMCwyNTgsMDZlODRiOTYtOTA3YS00NDE4LWFlMjktMjExYmZkMTkwZTg0LCwsNjUxMmYxZTktNDYxMS00ZmFlLTg4OGMtODFkMjI1YzM2OWU5LDY1MTJmMWU5LTQ2MTEtNGZhZS04ODhjLTgxZDIyNWMzNjllOSxQZnhLWmNqcjkwbU5jaWRPZm1IaGV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY0NjMsTkxITm9QekJlYzNqTGxRc1NZb0w1UTFFZ2ZFLGx2aEw5RER0MG5kOTVGakdiMGE3ODdkL0RPeUdwdHdoWXBNQmlrK2txeERPZ2N0a281bWE5aC9uVk9GWVFERjMwTXIxbGJBNkZYdEFxdjdDRnFVOHRoUXpwandvbXFxNDV4VmYwRnVIY2R1cVAyZHFUVGtCakNQcXJMa21jOFV2M0srSy9ZVzk4aGlKZkQreXRGa2M5YXU0VWtnM3ZZLzBPME9pdzBORVpQUlFsbkpJTDZic0VZV0gzWHVWTStaYjk5NzNkV3NOMmZXeDJiNUdVUHZPNXkvTzZWeTcwS2xCell1eFZ6bnd5YkNxVUtObC9EOFh4 [TRUNCATED] X-NetworkStatistics: 0,4194720,0,0,3892433,525568,525568,223545 X-SharePointHealthScore: 0 X-SP-SERVERSTATE: ReadOnly=0 DATASERVICEVERSION: 3.0 SPClientServiceRequestDuration: 8 X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: b46395a1-9084-5000-075f-c64ba02c9c56 request-id: b46395a1-9084-5000-075f-c64ba02c9c56 MS-CV: oZVjtISQAFAHX8ZLoCycVg.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=06e84b96-907a-4418-ae29-211bfd190e84&destinationEndpoint=Edge-Prod-ATL33r5b&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A529036FD5D54406A4D752E011A654F9 Ref B: ATL331000104017 Ref C: 2025-04-17T14:01:58Z Date: Thu, 17 Apr 2025 14:01:58 GMT Connection: close
2025-04-17 14:01:59 UTC	341	IN	Data Raw: 31 34 65 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 22 2d 31 2c 20 53 79 73 74 65 6d 2e 4e 6f 74 53 75 70 70 6f 72 74 65 64 45 78 63 65 70 74 69 6f 6e 22 2c 22 6d 65 73 73 61 67 65 22 3a 7b 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 76 61 6c 75 65 22 3a 22 4e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 66 6f 72 20 63 75 72 72 65 6e 74 20 75 73 65 72 3a 20 4c 6f 67 69 6e 4e 61 6d 65 3a 20 69 3a 30 23 2e 66 7c 6d 65 6d 62 65 72 73 68 69 70 7c 75 72 6e 25 33 61 73 70 6f 25 33 61 61 6e 6f 6e 23 38 39 36 66 36 35 30 64 32 32 39 38 35 33 62 66 66 62 65 64 63 39 36 63 35 34 36 63 62 62 35 36 33 32 63 33 38 35 34 62 65 37 64 32 36 34 62 30 37 39 61 62 66 31 35 38 32 38 66 66 62 39 32 37 2c 20 49 73 45 6d 61 69 6c 41 75 74 68 65 6e 74 69 63 61 74 69 Data Ascii: 14e{"error":{"code":"-1, System.NotSupportedException","message":{"lang":"en-US","value":"Not supported for current user: LoginName: i:0#.f\|membership\|urn%3aspo%3aanon#896f650d229853bffbedc96c546cbb5632c3854be7d264b079abf15828ffb927, IsEmailAuthenticati
2025-04-17 14:01:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:59 UTC	2655	OUT	POST /personal/nupur_samantaray_irisbusiness_com/_api/SP.OAuth.Token/Acquire() HTTP/1.1 Host: irisindiacloud-my.sharepoint.com Connection: keep-alive Content-Length: 42 sec-ch-ua-platform: "Windows" CollectSPPerfMetrics: SPSQLQueryCount sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 x-requestdigest: 0x8F5A6A3731F22678B7C5FDBB34AF1583F51E0EA6297C3315849F9DE6859A9742DF8409670D54EB003EB5268745D615379F39C9A98B7632F876D9FDF1D787CE65,17 Apr 2025 14:01:55 -0000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json;odata.metadata=minimal Content-Type: application/json;odata=verbose Odata-Version: 4.0 Origin: https://irisindiacloud-my.sharepoint.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024%2F549300EOHIZUJWKQ3G67%2D2024%2D12%2D31%2D0%2Dnl%2Ezip&parent=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024&ga=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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 [TRUNCATED]
2025-04-17 14:01:59 UTC	42	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 22 3a 22 68 74 74 70 73 3a 2f 2f 67 72 61 70 68 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 7d Data Ascii: {"resource":"https://graph.microsoft.com"}
2025-04-17 14:01:59 UTC	3666	IN	HTTP/1.1 400 Bad Request Cache-Control: private, max-age=0 Transfer-Encoding: chunked Content-Type: application/json;odata.metadata=minimal;odata.streaming=true;IEEE754Compatible=false;charset=utf-8 Expires: Wed, 02 Apr 2025 14:01:59 GMT Last-Modified: Thu, 17 Apr 2025 14:01:59 GMT Vary: Origin P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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 [TRUNCATED] X-NetworkStatistics: 0,4194656,0,0,1048200,100605,100605,218460 X-SharePointHealthScore: 0 X-SP-SERVERSTATE: ReadOnly=0 ODATA-VERSION: 4.0 SPClientServiceRequestDuration: 9 X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: b46395a1-a090-4000-fef3-92cf289ee0be request-id: b46395a1-a090-4000-fef3-92cf289ee0be MS-CV: oZVjtJCgAED+85LPKJ7gvg.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=06e84b96-907a-4418-ae29-211bfd190e84&destinationEndpoint=Edge-Prod-ATL33r5a&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} X-RequestDigest: 0xC5CA2C7832B909BD99FCB8A790D74658B66694AE2487CC775075128F3D6BD23DFE25CBA81CB315439D10786A9C1404AED807715979C7ABFC7EBFB98A619217CE,17 Apr 2025 14:01:59 -0000 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DEBA1D6CE6864B4BB8B522A5CDCE8618 Ref B: ATL331000101011 Ref C: 2025-04-17T14:01:59Z Date: Thu, 17 Apr 2025 14:01:59 GMT Connection: close
2025-04-17 14:01:59 UTC	8	IN	Data Raw: 33 0d 0a 7b 22 65 0d 0a Data Ascii: 3{"e
2025-04-17 14:01:59 UTC	59	IN	Data Raw: 33 35 0d 0a 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 22 31 30 30 31 32 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 73 75 70 70 6f 72 74 65 64 20 75 73 65 72 2e 22 7d 7d 0d 0a Data Ascii: 35rror":{"code":"10012","message":"Unsupported user."}}
2025-04-17 14:01:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:59 UTC	1759	OUT	GET /_layouts/15/images/BLANK.gif HTTP/1.1 Host: irisindiacloud-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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 [TRUNCATED]
2025-04-17 14:01:59 UTC	1943	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 43 Content-Type: image/gif Last-Modified: Sat, 12 Apr 2025 08:18:47 GMT Accept-Ranges: bytes ETag: "7652a78383abdb1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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 [TRUNCATED] X-NetworkStatistics: 0,4194720,0,0,125497,38118,38118,214587 SPRequestDuration: 7 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0437E17A52C24FA6A3EB8F2B57BFFC42 Ref B: ATL331000107023 Ref C: 2025-04-17T14:01:59Z Date: Thu, 17 Apr 2025 14:01:58 GMT Connection: close
2025-04-17 14:01:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:59 UTC	2299	OUT	GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1 Host: irisindiacloud-my.sharepoint.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024%2F549300EOHIZUJWKQ3G67%2D2024%2D12%2D31%2D0%2Dnl%2Ezip&parent=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024&ga=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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 [TRUNCATED]
2025-04-17 14:01:59 UTC	1950	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sat, 12 Apr 2025 08:21:27 GMT Accept-Ranges: bytes ETag: "2ecff4e283abdb1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg5NmY2NTBkMjI5ODUzYmZmYmVkYzk2YzU0NmNiYjU2MzJjMzg1NGJlN2QyNjRiMDc5YWJmMTU4MjhmZmI5MjcsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODk2ZjY1MGQyMjk4NTNiZmZiZWRjOTZjNTQ2Y2JiNTYzMmMzODU0YmU3ZDI2NGIwNzlhYmYxNTgyOGZmYjkyNywxMzM4OTM3MjQxNDAwMDAwMDAsMCwxMzM4OTQ1ODUxNDUxNTg5MTEsMC4wLjAuMCwyNTgsMDZlODRiOTYtOTA3YS00NDE4LWFlMjktMjExYmZkMTkwZTg0LCwsNjUxMmYxZTktNDYxMS00ZmFlLTg4OGMtODFkMjI1YzM2OWU5LDY1MTJmMWU5LTQ2MTEtNGZhZS04ODhjLTgxZDIyNWMzNjllOSxQZnhLWmNqcjkwbU5jaWRPZm1IaGV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY0NjMsTkxITm9QekJlYzNqTGxRc1NZb0w1UTFFZ2ZFLGx2aEw5RER0MG5kOTVGakdiMGE3ODdkL0RPeUdwdHdoWXBNQmlrK2txeERPZ2N0a281bWE5aC9uVk9GWVFERjMwTXIxbGJBNkZYdEFxdjdDRnFVOHRoUXpwandvbXFxNDV4VmYwRnVIY2R1cVAyZHFUVGtCakNQcXJMa21jOFV2M0srSy9ZVzk4aGlKZkQreXRGa2M5YXU0VWtnM3ZZLzBPME9pdzBORVpQUlFsbkpJTDZic0VZV0gzWHVWTStaYjk5NzNkV3NOMmZXeDJiNUdVUHZPNXkvTzZWeTcwS2xCell1eFZ6bnd5YkNxVUtObC9EOFh4 [TRUNCATED] X-NetworkStatistics: 0,4194720,0,0,722642,115640,115640,219419 SPRequestDuration: 7 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 5AAEC5A3FEAF47E68F05FD7C6888630C Ref B: ATL331000102045 Ref C: 2025-04-17T14:01:59Z Date: Thu, 17 Apr 2025 14:01:59 GMT Connection: close
2025-04-17 14:01:59 UTC	1212	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @
2025-04-17 14:01:59 UTC	6674	IN	Data Raw: 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 cf 00 00 00 00 00 00 00 00 e0 92 16 cf ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff e9 a7 27 ff e4 9a 1d 70 d4 78 00 60 d4 78 00 ff d5 7b 03 ff df 90 14 ff e7 a2 23 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea Data Ascii: (((((((((((((((((((((((((((((((((((('px`x{#((((((((((((((((((

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:59 UTC	1543	OUT	GET /transform/zipmetadata?provider=spo&inputFormat=zip&cs=fFNQTw&docid=https%3A%2F%2Firisindiacloud-my.sharepoint.com%3A443%2F_api%2Fv2.0%2Fdrives%2Fb!muee7D1UoUaKMB6Hyn7oSP4q9wZBdZ5MuGcL1i6ESsnqi4CRzdWzQLJ8zCX0FLAO%2Fitems%2F014YKULSI74UR5M6PBIREKVRBEHEHTP756%3Fversion%3DPublished&access_token=v1.eyJzaXRlaWQiOiJlYzllZTc5YS01NDNkLTQ2YTEtOGEzMC0xZTg3Y2E3ZWU4NDgiLCJhdWQiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAvaXJpc2luZGlhY2xvdWQtbXkuc2hhcmVwb2ludC5jb21AMDZlODRiOTYtOTA3YS00NDE4LWFlMjktMjExYmZkMTkwZTg0IiwiZXhwIjoiMTc0NDkxMjgwMCJ9.CiMKCXNoYXJpbmdpZBIWUGZ4S1pjanI5MG1OY2lkT2ZtSGhldwoICgNzdHASAXQKCgoEc25pZBICMzMSBgiolTsQARoOODkuMTg3LjE3MS4xNjEiFG1pY3Jvc29mdC5zaGFyZXBvaW50KixRWml5UTE5ME0rMFExQnAvQTJ3cVRqVHExcGxaNmN3NXNRejdiMjJocHFZPTB8OAFKEGhhc2hlZHByb29mdG9rZW5iBHRydWVyYTBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg5NmY2NTBkMjI5ODUzYmZmYmVkYzk2YzU0NmNiYjU2MzJjMzg1NGJlN2QyNjRiMDc5YWJmMTU4MjhmZmI5Mjd6ATDCAWEwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiM4OTZmNjUwZDIyOTg1M2JmZmJlZGM5NmM1NDZjYmI1NjMyYzM4NTRiZTd [TRUNCATED] Host: southindia1-mediap.svc.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 14:02:00 UTC	750	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 5474 Content-Type: application/json X-AspNetMvc-Version: 5.2 Access-Control-Expose-Headers: x-cache, x-msedge-ref, x-azure-ref-originshield X-StreamOrigin: Cached Server-Timing: Provider;dur=64,SharePoint;dur=42,StreamRead;dur=0,TotalRequest;dur=74,Sandbox;dur=0 Request-Stat: Cached;True,RemoteReads;1 X-CorrelationId: bd417711-233a-4c99-a24a-a6340cd98a2b X-OneDriveMeTA-Version: 1.614.14415.0 X-OneDriveMeTA-Build: 2025.04.03.5 X-OneDriveMeTA-Region: southindia X-AspNet-Version: 4.0.30319 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 7FBD824145894C239BE2FD61DC835FD1 Ref B: ATL331000104033 Ref C: 2025-04-17T14:01:59Z Date: Thu, 17 Apr 2025 14:01:59 GMT Connection: close
2025-04-17 14:02:00 UTC	3420	IN	Data Raw: 7b 22 6d 65 74 61 64 61 74 61 22 3a 20 7b 22 65 72 72 6f 72 22 3a 22 22 2c 22 64 65 6c 69 6d 69 74 65 72 22 3a 22 2f 22 2c 22 6c 69 73 74 22 3a 5b 7b 22 70 61 74 68 22 3a 22 35 34 39 33 30 30 45 4f 48 49 5a 55 4a 57 4b 51 33 47 36 37 2d 32 30 32 34 2d 31 32 2d 33 31 2d 30 2d 6e 6c 22 2c 22 6e 61 6d 65 22 3a 22 35 34 39 33 30 30 45 4f 48 49 5a 55 4a 57 4b 51 33 47 36 37 2d 32 30 32 34 2d 31 32 2d 33 31 2d 30 2d 6e 6c 22 2c 22 70 61 72 65 6e 74 46 6f 6c 64 65 72 22 3a 22 22 2c 22 73 69 7a 65 22 3a 30 2c 22 69 73 46 6f 6c 64 65 72 22 3a 74 72 75 65 2c 22 63 68 69 6c 64 43 6f 75 6e 74 22 3a 33 2c 22 64 61 74 65 22 3a 22 32 30 32 35 2d 30 34 2d 31 30 22 2c 22 65 78 74 65 6e 73 69 6f 6e 22 3a 22 22 2c 22 63 68 69 6c 64 72 65 6e 22 3a 5b 7b 22 70 61 74 68 22 3a Data Ascii: {"metadata": {"error":"","delimiter":"/","list":[{"path":"549300EOHIZUJWKQ3G67-2024-12-31-0-nl","name":"549300EOHIZUJWKQ3G67-2024-12-31-0-nl","parentFolder":"","size":0,"isFolder":true,"childCount":3,"date":"2025-04-10","extension":"","children":[{"path":
2025-04-17 14:02:00 UTC	2054	IN	Data Raw: 45 4f 48 49 5a 55 4a 57 4b 51 33 47 36 37 2d 32 30 32 34 2d 31 32 2d 33 31 2d 30 2d 6e 6c 2f 77 77 77 2e 77 68 61 74 73 63 6f 6f 6b 69 6e 67 2e 67 72 6f 75 70 2f 78 62 72 6c 2f 32 30 32 34 22 2c 22 73 69 7a 65 22 3a 36 39 33 38 34 2c 22 69 73 46 6f 6c 64 65 72 22 3a 66 61 6c 73 65 2c 22 63 68 69 6c 64 43 6f 75 6e 74 22 3a 30 2c 22 64 61 74 65 22 3a 22 32 30 32 35 2d 30 34 2d 31 30 22 2c 22 65 78 74 65 6e 73 69 6f 6e 22 3a 22 78 6d 6c 22 2c 22 63 68 69 6c 64 72 65 6e 22 3a 5b 5d 2c 22 69 73 6f 44 61 74 65 54 69 6d 65 22 3a 22 32 30 32 35 2d 30 34 2d 31 30 54 31 34 3a 30 35 3a 30 36 2e 30 30 30 30 30 30 30 2b 30 30 3a 30 30 22 7d 2c 7b 22 70 61 74 68 22 3a 22 35 34 39 33 30 30 45 4f 48 49 5a 55 4a 57 4b 51 33 47 36 37 2d 32 30 32 34 2d 31 32 2d 33 31 2d 30 Data Ascii: EOHIZUJWKQ3G67-2024-12-31-0-nl/www.whatscooking.group/xbrl/2024","size":69384,"isFolder":false,"childCount":0,"date":"2025-04-10","extension":"xml","children":[],"isoDateTime":"2025-04-10T14:05:06.0000000+00:00"},{"path":"549300EOHIZUJWKQ3G67-2024-12-31-0

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:01:59 UTC	1771	OUT	GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1 Host: irisindiacloud-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg5NmY2NTBkMjI5ODUzYmZmYmVkYzk2YzU0NmNiYjU2MzJjMzg1NGJlN2QyNjRiMDc5YWJmMTU4MjhmZmI5MjcsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODk2ZjY1MGQyMjk4NTNiZmZiZWRjOTZjNTQ2Y2JiNTYzMmMzODU0YmU3ZDI2NGIwNzlhYmYxNTgyOGZmYjkyNywxMzM4OTM3MjQxNDAwMDAwMDAsMCwxMzM4OTQ1ODUxNDUxNTg5MTEsMC4wLjAuMCwyNTgsMDZlODRiOTYtOTA3YS00NDE4LWFlMjktMjExYmZkMTkwZTg0LCwsNjUxMmYxZTktNDYxMS00ZmFlLTg4OGMtODFkMjI1YzM2OWU5LDY1MTJmMWU5LTQ2MTEtNGZhZS04ODhjLTgxZDIyNWMzNjllOSxQZnhLWmNqcjkwbU5jaWRPZm1IaGV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY0NjMsTkxITm9QekJlYzNqTGxRc1NZb0w1UTFFZ2ZFLGx2aEw5RER0MG5kOTVGakdiMGE3ODdkL0RPeUdwdHdoWXBNQmlrK2txeERPZ2N0a281bWE5aC9uVk9GWVFERjMwTXIxbGJBNkZYdEFxdjdDRnFVOHRoUXpwandvbXFxNDV4VmYwRnVIY2R1cVAyZHFUVGtCakNQcXJMa21jOFV2M0srSy9ZVzk4aGlKZkQreXRGa2M5YXU0VWtnM3ZZLzBPME9pdzBORVpQUlFsbkpJTDZic0VZV0gzWHVWTStaYjk5NzNkV3NOMmZXeDJiNUdVUHZPNXkvTzZWeTcwS2xCell1eFZ6bnd5YkNxVUtObC9EOFh4NmZi [TRUNCATED]
2025-04-17 14:02:00 UTC	1948	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sat, 12 Apr 2025 08:21:27 GMT Accept-Ranges: bytes ETag: "2ecff4e283abdb1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg5NmY2NTBkMjI5ODUzYmZmYmVkYzk2YzU0NmNiYjU2MzJjMzg1NGJlN2QyNjRiMDc5YWJmMTU4MjhmZmI5MjcsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODk2ZjY1MGQyMjk4NTNiZmZiZWRjOTZjNTQ2Y2JiNTYzMmMzODU0YmU3ZDI2NGIwNzlhYmYxNTgyOGZmYjkyNywxMzM4OTM3MjQxNDAwMDAwMDAsMCwxMzM4OTQ1ODUxNDUxNTg5MTEsMC4wLjAuMCwyNTgsMDZlODRiOTYtOTA3YS00NDE4LWFlMjktMjExYmZkMTkwZTg0LCwsNjUxMmYxZTktNDYxMS00ZmFlLTg4OGMtODFkMjI1YzM2OWU5LDY1MTJmMWU5LTQ2MTEtNGZhZS04ODhjLTgxZDIyNWMzNjllOSxQZnhLWmNqcjkwbU5jaWRPZm1IaGV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY0NjMsTkxITm9QekJlYzNqTGxRc1NZb0w1UTFFZ2ZFLGx2aEw5RER0MG5kOTVGakdiMGE3ODdkL0RPeUdwdHdoWXBNQmlrK2txeERPZ2N0a281bWE5aC9uVk9GWVFERjMwTXIxbGJBNkZYdEFxdjdDRnFVOHRoUXpwandvbXFxNDV4VmYwRnVIY2R1cVAyZHFUVGtCakNQcXJMa21jOFV2M0srSy9ZVzk4aGlKZkQreXRGa2M5YXU0VWtnM3ZZLzBPME9pdzBORVpQUlFsbkpJTDZic0VZV0gzWHVWTStaYjk5NzNkV3NOMmZXeDJiNUdVUHZPNXkvTzZWeTcwS2xCell1eFZ6bnd5YkNxVUtObC9EOFh4 [TRUNCATED] X-NetworkStatistics: 0,4194720,0,0,126008,36965,36965,218521 SPRequestDuration: 6 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4907E59C62814D06BA3CE9B56BDBFC63 Ref B: ATL331000101037 Ref C: 2025-04-17T14:02:00Z Date: Thu, 17 Apr 2025 14:01:59 GMT Connection: close
2025-04-17 14:02:00 UTC	1035	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @
2025-04-17 14:02:00 UTC	6851	IN	Data Raw: a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 cf ea a8 28 10 00 00 00 00 00 00 00 00 ea a8 28 20 ea a8 28 ef ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 cf 00 00 00 00 00 00 00 00 e0 92 16 cf ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff Data Ascii: ((((((((((((((((((((( ((((((((((((((((((((((((((((((((((((((

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:02:00 UTC	3184	OUT	GET /_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&spartanOneDriveWireframe=true&enableVHSourceOriginRedirect=true&streamViewServerLoad=true&streamInlineScript=true&com [TRUNCATED] Host: irisindiacloud-my.sharepoint.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024%2F549300EOHIZUJWKQ3G67%2D2024%2D12%2D31%2D0%2Dnl%2Ezip&parent=%2Fpersonal%2Fnupur%5Fsamantaray%5Firisbusiness%5Fcom%2FDocuments%2FTERBEKE%5FAR2024&ga=1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg5NmY2NTBkMjI5ODUzYmZmYmVkYzk2YzU0NmNiYjU2MzJjMzg1NGJlN2QyNjRiMDc5YWJmMTU4MjhmZmI5MjcsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODk2ZjY1MGQyMjk4NTNiZmZiZWRjOTZjNTQ2Y2JiNTYzMmMzODU0YmU3ZDI2NGIwNzlhYmYxNTgyOGZmYjkyNywxMzM4OTM3MjQxNDAwMDAwMDAsMCwxMzM4OTQ1ODUxNDUxNTg5MTEsMC4wLjAuMCwyNTgsMDZlODRiOTYtOTA3YS00NDE4LWFlMjktMjExYmZkMTkwZTg0LCwsNjUxMmYxZTktNDYxMS00ZmFlLTg4OGMtODFkMjI1YzM2OWU5LDY1MTJmMWU5LTQ2MTEtNGZhZS04ODhjLTgxZDIyNWMzNjllOSxQZnhLWmNqcjkwbU5jaWRPZm1IaGV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY0NjMsTkxITm9QekJlYzNqTGxRc1NZb0w1UTFFZ2ZFLGx2aEw5RER0MG5kOTVGakdiMGE3ODdkL0RPeUdwdHdoWXBNQmlrK2txeERPZ2N0a281bWE5aC9uVk9GWVFERjMwTXIxbGJBNkZYdEFxdjdDRnFVOHRoUXpwandvbXFxNDV4VmYwRnVIY2R1cVAyZHFUVGtCakNQcXJMa21jOFV2M0srSy9ZVzk4aGlKZkQreXRGa2M5YXU0VWtnM3ZZLzBPME9pdzBORVpQUlFsbkpJTDZic0VZV0gzWHVWTStaYjk5NzNkV3NOMmZXeDJiNUdVUHZPNXkvTzZWeTcwS2xCell1eFZ6bnd5YkNxVUtObC9EOFh4NmZi [TRUNCATED]
2025-04-17 14:02:00 UTC	1971	IN	HTTP/1.1 200 OK Cache-Control: max-age=1800 Content-Length: 853 Content-Type: text/javascript; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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 [TRUNCATED] X-NetworkStatistics: 0,4194720,0,0,1842436,188083,188083,222424 Service-Worker-Allowed: / Strict-Transport-Security: max-age=31536000 X-AspNet-Version: 4.0.30319 SPRequestDuration: 23 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 56F5209CF1364A528516C133855D3231 Ref B: ATL331000106025 Ref C: 2025-04-17T14:02:00Z Date: Thu, 17 Apr 2025 14:01:59 GMT Connection: close
2025-04-17 14:02:00 UTC	59	IN	Data Raw: 0d 0a 76 61 72 20 5f 73 74 61 72 74 54 69 6d 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2c 5f 73 74 61 72 74 54 69 6d 65 54 69 63 6b 73 3d 44 61 74 65 2e 6e 6f 77 Data Ascii: var _startTime=performance.now(),_startTimeTicks=Date.now
2025-04-17 14:02:00 UTC	794	IN	Data Raw: 28 29 3b 0a 76 61 72 20 5f 73 68 6f 75 6c 64 42 79 70 61 73 73 3d 66 61 6c 73 65 3b 0a 76 61 72 20 5f 63 64 6e 42 61 73 65 55 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 66 69 6c 65 73 2f 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 35 2d 30 33 2d 32 38 2e 30 30 39 2f 27 3b 0a 76 61 72 20 5f 73 77 42 75 69 6c 64 4e 75 6d 62 65 72 3d 27 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 35 2d 30 33 2d 32 38 2e 30 30 39 27 3b 0a 76 61 72 20 5f 77 77 42 75 69 6c 64 4e 75 6d 62 65 72 3d 27 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 35 2d 30 33 2d 32 38 2e 30 30 39 27 3b 0a 76 61 72 20 5f 6f 6e 65 53 68 65 6c 6c 55 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 73 68 65 6c 6c 2e 63 64 6e 2e 6f 66 66 69 Data Ascii: ();var _shouldBypass=false;var _cdnBaseUrl='https://res-1.cdn.office.net/files/odsp-web-prod_2025-03-28.009/';var _swBuildNumber='odsp-web-prod_2025-03-28.009';var _wwBuildNumber='odsp-web-prod_2025-03-28.009';var _oneShellUrl='https://shell.cdn.offi

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:02:02 UTC	2930	OUT	GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D HTTP/1.1 Host: irisindiacloud-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json Content-Type: application/json Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://irisindiacloud-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&spartanOneDriveWireframe=true&enableVHSourceOriginRedirect=true&streamVi [TRUNCATED] Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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 [TRUNCATED]
2025-04-17 14:02:03 UTC	2022	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 7486571 Content-Type: application/json ETag: "49886973_sts_default_en-us" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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 [TRUNCATED] X-NetworkStatistics: 0,4194720,0,620,1853171,494394,494394,209530 X-Language: en-US X-STSClient-Language: en-US X-SPClient-Language: en-US CachedManifest: False X-AspNet-Version: 4.0.30319 SPRequestDuration: 219 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B2B0AA2981DC4C73933075A3944F16DD Ref B: ATL331000102029 Ref C: 2025-04-17T14:02:02Z Date: Thu, 17 Apr 2025 14:02:02 GMT Connection: close
2025-04-17 14:02:03 UTC	1524	IN	Data Raw: 7b 22 73 74 73 22 3a 7b 22 65 6e 2d 55 53 22 3a 7b 22 53 50 4c 49 53 54 22 3a 7b 22 73 63 72 69 70 74 50 61 74 68 44 61 74 61 22 3a 7b 22 61 72 69 61 2d 6d 69 6e 69 22 3a 22 61 72 69 61 2d 6d 69 6e 69 2d 62 31 64 33 65 62 32 65 22 2c 22 63 75 73 74 6f 6d 66 6f 72 6d 61 74 74 65 72 2d 6d 69 6e 69 22 3a 22 63 75 73 74 6f 6d 66 6f 72 6d 61 74 74 65 72 2d 6d 69 6e 69 2d 66 63 64 30 30 31 33 33 22 2c 22 63 75 73 74 6f 6d 66 6f 72 6d 61 74 74 65 72 2d 6d 69 6e 69 2e 72 65 73 78 22 3a 22 65 6e 2d 75 73 2f 63 75 73 74 6f 6d 66 6f 72 6d 61 74 74 65 72 2d 6d 69 6e 69 2e 72 65 73 78 2d 33 35 37 33 66 35 32 64 22 2c 22 72 6f 6f 73 74 65 72 65 64 69 74 6f 72 2d 6d 69 6e 69 22 3a 22 72 6f 6f 73 74 65 72 65 64 69 74 6f 72 2d 6d 69 6e 69 2d 34 39 39 38 34 36 33 64 22 2c Data Ascii: {"sts":{"en-US":{"SPLIST":{"scriptPathData":{"aria-mini":"aria-mini-b1d3eb2e","customformatter-mini":"customformatter-mini-fcd00133","customformatter-mini.resx":"en-us/customformatter-mini.resx-3573f52d","roostereditor-mini":"roostereditor-mini-4998463d",
2025-04-17 14:02:03 UTC	8192	IN	Data Raw: 69 73 74 64 65 66 65 72 72 65 64 65 78 70 72 65 73 73 2d 6d 69 6e 69 2e 72 65 73 78 2d 65 62 63 37 61 30 31 62 22 2c 22 73 70 6c 69 73 74 64 65 62 75 67 77 69 6e 64 6f 77 2d 6d 69 6e 69 22 3a 22 73 70 6c 69 73 74 64 65 62 75 67 77 69 6e 64 6f 77 2d 6d 69 6e 69 2d 35 39 32 37 33 30 63 39 22 2c 22 73 70 6c 69 73 74 72 6f 6f 74 2d 6d 69 6e 69 22 3a 22 73 70 6c 69 73 74 72 6f 6f 74 2d 6d 69 6e 69 2d 61 33 32 34 34 36 61 37 22 2c 22 73 70 6c 69 73 74 72 6f 6f 74 2d 6d 69 6e 69 2e 72 65 73 78 22 3a 22 65 6e 2d 75 73 2f 73 70 6c 69 73 74 72 6f 6f 74 2d 6d 69 6e 69 2e 72 65 73 78 2d 33 32 62 62 39 35 65 38 22 2c 22 73 70 6c 69 73 74 66 69 6c 65 70 69 63 6b 65 72 2d 6d 69 6e 69 22 3a 22 73 70 6c 69 73 74 66 69 6c 65 70 69 63 6b 65 72 2d 6d 69 6e 69 2d 62 31 39 64 Data Ascii: istdeferredexpress-mini.resx-ebc7a01b","splistdebugwindow-mini":"splistdebugwindow-mini-592730c9","splistroot-mini":"splistroot-mini-a32446a7","splistroot-mini.resx":"en-us/splistroot-mini.resx-32bb95e8","splistfilepicker-mini":"splistfilepicker-mini-b19d
2025-04-17 14:02:03 UTC	4768	IN	Data Raw: 22 2c 22 4b 47 65 22 2c 22 42 65 22 2c 22 6a 65 22 2c 22 24 48 65 22 2c 22 58 48 65 22 2c 22 5a 48 65 22 2c 22 4f 22 2c 22 45 22 2c 22 77 22 2c 22 67 22 2c 22 41 22 2c 22 62 22 2c 22 68 22 2c 22 52 22 2c 22 62 74 22 2c 22 41 65 22 2c 22 79 65 22 2c 22 6b 78 22 2c 22 54 74 22 2c 22 66 36 74 22 2c 22 6f 36 74 22 2c 22 64 36 74 22 2c 22 70 65 65 22 2c 22 73 36 74 22 2c 22 48 44 22 2c 22 44 22 2c 22 6c 36 74 22 2c 22 75 36 74 22 2c 22 5f 22 2c 22 67 65 65 22 2c 22 4a 65 22 5d 2c 22 73 70 6c 69 73 74 72 65 61 63 74 63 6f 6e 74 72 6f 6c 73 64 65 66 65 72 72 65 64 2d 6d 69 6e 69 22 3a 5b 22 66 6d 74 22 2c 22 67 6d 74 22 2c 22 45 6d 74 22 2c 22 5f 6d 74 22 2c 22 68 6d 74 22 2c 22 62 6d 74 22 2c 22 70 6d 74 22 2c 22 6d 6d 74 22 2c 22 43 6d 74 22 2c 22 53 6d 74 22 Data Ascii: ","KGe","Be","je","$He","XHe","ZHe","O","E","w","g","A","b","h","R","bt","Ae","ye","kx","Tt","f6t","o6t","d6t","pee","s6t","HD","D","l6t","u6t","_","gee","Je"],"splistreactcontrolsdeferred-mini":["fmt","gmt","Emt","_mt","hmt","bmt","pmt","mmt","Cmt","Smt"
2025-04-17 14:02:03 UTC	8192	IN	Data Raw: 22 2c 22 4d 37 22 2c 22 41 37 22 2c 22 67 37 22 2c 22 6c 37 22 2c 22 66 37 22 2c 22 4c 37 22 2c 22 72 62 22 2c 22 62 37 22 2c 22 6d 37 22 2c 22 70 37 22 2c 22 45 37 22 2c 22 77 37 22 2c 22 78 37 22 2c 22 49 37 22 2c 22 43 37 22 2c 22 44 37 22 2c 22 64 37 22 2c 22 6f 37 22 2c 22 72 37 22 2c 22 73 37 22 2c 22 69 37 22 2c 22 61 37 22 2c 22 6e 37 22 2c 22 74 5f 22 2c 22 61 5f 22 2c 22 6e 5f 22 2c 22 59 36 22 2c 22 4a 36 22 2c 22 24 6d 22 2c 22 65 5f 22 2c 22 57 6d 22 2c 22 5a 6d 22 2c 22 42 6d 22 2c 22 56 6d 22 2c 22 6a 6d 22 2c 22 4e 6d 22 2c 22 51 6d 22 2c 22 59 6d 22 2c 22 48 6d 22 2c 22 24 36 22 2c 22 58 6d 22 2c 22 47 6d 22 2c 22 5a 36 22 2c 22 4a 6d 22 2c 22 58 36 22 2c 22 64 5f 22 2c 22 46 6d 22 2c 22 55 6d 22 2c 22 54 6d 22 2c 22 51 36 22 2c 22 4b 36 Data Ascii: ","M7","A7","g7","l7","f7","L7","rb","b7","m7","p7","E7","w7","x7","I7","C7","D7","d7","o7","r7","s7","i7","a7","n7","t_","a_","n_","Y6","J6","$m","e_","Wm","Zm","Bm","Vm","jm","Nm","Qm","Ym","Hm","$6","Xm","Gm","Z6","Jm","X6","d_","Fm","Um","Tm","Q6","K6
2025-04-17 14:02:03 UTC	8192	IN	Data Raw: 2c 22 56 38 22 2c 22 51 38 22 2c 22 6a 47 22 2c 22 45 46 22 2c 22 69 47 22 2c 22 50 47 22 2c 22 41 47 22 2c 22 4c 47 22 2c 22 4d 47 22 2c 22 42 47 22 2c 22 24 78 22 2c 22 74 43 22 2c 22 65 43 22 2c 22 5f 43 22 2c 22 66 4b 22 2c 22 5f 4b 22 2c 22 70 4b 22 2c 22 6d 4b 22 2c 22 59 64 22 2c 22 65 6c 22 2c 22 4a 64 22 2c 22 43 38 22 2c 22 6b 38 22 2c 22 77 38 22 2c 22 41 38 22 2c 22 4c 38 22 2c 22 4f 38 22 2c 22 47 6f 22 2c 22 50 6f 22 2c 22 43 47 22 2c 22 6c 47 22 2c 22 66 47 22 2c 22 76 47 22 2c 22 63 47 22 2c 22 56 47 22 2c 22 64 47 22 2c 22 57 47 22 2c 22 61 6e 22 2c 22 4d 52 22 2c 22 6e 47 22 2c 22 43 54 22 2c 22 67 6e 22 2c 22 5a 7a 22 2c 22 24 7a 22 2c 22 73 47 22 2c 22 58 38 22 2c 22 5a 38 22 2c 22 4b 44 22 2c 22 65 47 22 2c 22 59 74 22 2c 22 24 74 22 Data Ascii: ,"V8","Q8","jG","EF","iG","PG","AG","LG","MG","BG","$x","tC","eC","_C","fK","_K","pK","mK","Yd","el","Jd","C8","k8","w8","A8","L8","O8","Go","Po","CG","lG","fG","vG","cG","VG","dG","WG","an","MR","nG","CT","gn","Zz","$z","sG","X8","Z8","KD","eG","Yt","$t"
2025-04-17 14:02:03 UTC	8192	IN	Data Raw: 62 55 65 22 2c 22 67 46 65 22 2c 22 45 4e 65 22 2c 22 43 35 65 22 2c 22 70 44 65 22 2c 22 53 4d 65 22 2c 22 6c 4d 65 22 2c 22 65 6a 65 22 2c 22 78 42 65 22 2c 22 43 42 65 22 2c 22 54 4e 65 22 2c 22 50 4e 65 22 2c 22 4d 4e 65 22 2c 22 6b 4e 65 22 2c 22 4c 4e 65 22 2c 22 41 4e 65 22 2c 22 77 35 65 22 2c 22 4f 35 65 22 2c 22 4f 42 65 22 2c 22 4d 42 65 22 2c 22 72 4d 65 22 2c 22 69 4d 65 22 2c 22 61 4d 65 22 2c 22 52 6b 65 22 2c 22 45 6b 65 22 2c 22 64 4d 65 22 2c 22 77 4d 65 22 2c 22 78 4d 65 22 2c 22 56 6b 65 22 2c 22 7a 6b 65 22 2c 22 48 6b 65 22 2c 22 63 4d 65 22 2c 22 44 4d 65 22 2c 22 49 4d 65 22 2c 22 4f 4d 65 22 2c 22 77 6b 65 22 2c 22 62 44 65 22 2c 22 77 42 65 22 2c 22 5f 44 65 22 2c 22 6d 44 65 22 2c 22 61 7a 65 22 2c 22 6e 7a 65 22 2c 22 58 56 65 Data Ascii: bUe","gFe","ENe","C5e","pDe","SMe","lMe","eje","xBe","CBe","TNe","PNe","MNe","kNe","LNe","ANe","w5e","O5e","OBe","MBe","rMe","iMe","aMe","Rke","Eke","dMe","wMe","xMe","Vke","zke","Hke","cMe","DMe","IMe","OMe","wke","bDe","wBe","_De","mDe","aze","nze","XVe
2025-04-17 14:02:03 UTC	8192	IN	Data Raw: 6e 6d 65 22 2c 22 59 33 65 22 2c 22 47 33 65 22 2c 22 4b 33 65 22 2c 22 51 33 65 22 2c 22 48 33 65 22 2c 22 58 33 65 22 2c 22 73 62 65 22 2c 22 76 66 65 22 2c 22 50 68 65 22 2c 22 72 62 65 22 2c 22 45 67 65 22 2c 22 68 67 65 22 2c 22 4c 75 65 22 2c 22 78 68 65 22 2c 22 64 67 65 22 2c 22 57 75 65 22 2c 22 50 76 65 22 2c 22 6f 75 65 22 2c 22 49 75 65 22 2c 22 61 75 65 22 2c 22 45 64 65 22 2c 22 5a 68 65 22 2c 22 65 62 65 22 2c 22 51 68 65 22 2c 22 4a 68 65 22 2c 22 58 68 65 22 2c 22 71 68 65 22 2c 22 6f 67 65 22 2c 22 5f 62 65 22 2c 22 62 62 65 22 2c 22 70 62 65 22 2c 22 64 62 65 22 2c 22 75 62 65 22 2c 22 6c 62 65 22 2c 22 63 62 65 22 2c 22 79 75 65 22 2c 22 49 6c 65 22 2c 22 44 6c 65 22 2c 22 78 6c 65 22 2c 22 53 6c 65 22 2c 22 41 6d 65 22 2c 22 45 6d 65 Data Ascii: nme","Y3e","G3e","K3e","Q3e","H3e","X3e","sbe","vfe","Phe","rbe","Ege","hge","Lue","xhe","dge","Wue","Pve","oue","Iue","aue","Ede","Zhe","ebe","Qhe","Jhe","Xhe","qhe","oge","_be","bbe","pbe","dbe","ube","lbe","cbe","yue","Ile","Dle","xle","Sle","Ame","Eme
2025-04-17 14:02:03 UTC	8192	IN	Data Raw: 4b 4a 22 2c 22 24 4a 22 2c 22 5a 4a 22 2c 22 63 58 22 2c 22 4a 4a 22 2c 22 6f 58 22 2c 22 66 58 22 2c 22 58 58 22 2c 22 24 58 22 2c 22 43 58 22 2c 22 59 4a 22 2c 22 44 58 22 2c 22 47 58 22 2c 22 45 58 22 2c 22 4e 58 22 2c 22 42 58 22 2c 22 52 58 22 2c 22 75 58 22 2c 22 6c 58 22 2c 22 76 58 22 2c 22 70 58 22 2c 22 6e 5a 22 2c 22 54 58 22 2c 22 69 5a 22 2c 22 4f 58 22 2c 22 41 58 22 2c 22 48 58 22 2c 22 77 58 22 2c 22 73 58 22 2c 22 4a 58 22 2c 22 49 58 22 2c 22 5a 58 22 2c 22 74 5a 22 2c 22 65 5a 22 2c 22 78 58 22 2c 22 46 58 22 2c 22 53 58 22 2c 22 71 4a 22 2c 22 69 58 22 2c 22 72 58 22 2c 22 57 4a 22 2c 22 51 4a 22 2c 22 4b 58 22 2c 22 71 58 22 2c 22 74 58 22 2c 22 50 58 22 2c 22 79 58 22 2c 22 56 58 22 2c 22 7a 58 22 2c 22 61 58 22 2c 22 59 58 22 2c 22 Data Ascii: KJ","$J","ZJ","cX","JJ","oX","fX","XX","$X","CX","YJ","DX","GX","EX","NX","BX","RX","uX","lX","vX","pX","nZ","TX","iZ","OX","AX","HX","wX","sX","JX","IX","ZX","tZ","eZ","xX","FX","SX","qJ","iX","rX","WJ","QJ","KX","qX","tX","PX","yX","VX","zX","aX","YX","
2025-04-17 14:02:03 UTC	8192	IN	Data Raw: 22 45 43 22 2c 22 4c 43 22 2c 22 4e 67 74 22 2c 22 61 64 22 2c 22 5f 67 74 22 2c 22 66 35 22 2c 22 58 65 22 2c 22 42 6f 22 2c 22 4f 44 22 2c 22 5a 65 22 2c 22 53 74 22 2c 22 43 67 74 22 2c 22 59 67 74 22 2c 22 4f 67 74 22 2c 22 48 6f 22 2c 22 41 67 74 22 2c 22 73 35 22 2c 22 63 35 22 2c 22 4c 44 22 2c 22 64 35 22 2c 22 6c 35 22 2c 22 77 67 74 22 2c 22 4b 50 22 2c 22 70 6c 22 2c 22 7a 35 22 2c 22 6b 67 74 22 2c 22 7a 67 74 22 2c 22 57 67 74 22 2c 22 4b 67 74 22 2c 22 46 67 74 22 2c 22 6a 67 74 22 2c 22 48 67 74 22 2c 22 6d 44 22 2c 22 43 44 22 2c 22 5f 44 22 2c 22 6a 6f 22 2c 22 4c 73 22 2c 22 70 44 22 2c 22 56 6f 22 2c 22 64 44 22 2c 22 66 44 22 2c 22 6c 44 22 2c 22 75 44 22 2c 22 5f 4d 22 2c 22 67 4d 22 2c 22 63 44 22 2c 22 68 4d 22 2c 22 62 4d 22 2c 22 Data Ascii: "EC","LC","Ngt","ad","_gt","f5","Xe","Bo","OD","Ze","St","Cgt","Ygt","Ogt","Ho","Agt","s5","c5","LD","d5","l5","wgt","KP","pl","z5","kgt","zgt","Wgt","Kgt","Fgt","jgt","Hgt","mD","CD","_D","jo","Ls","pD","Vo","dD","fD","lD","uD","_M","gM","cD","hM","bM","
2025-04-17 14:02:03 UTC	8192	IN	Data Raw: 22 73 63 72 69 70 74 50 61 74 68 44 61 74 61 22 3a 7b 22 61 72 69 61 2d 6d 69 6e 69 22 3a 22 61 72 69 61 2d 6d 69 6e 69 2d 62 31 64 33 65 62 32 65 22 2c 22 63 75 73 74 6f 6d 66 6f 72 6d 61 74 74 65 72 2d 6d 69 6e 69 22 3a 22 63 75 73 74 6f 6d 66 6f 72 6d 61 74 74 65 72 2d 6d 69 6e 69 2d 30 39 34 38 30 36 30 34 22 2c 22 63 75 73 74 6f 6d 66 6f 72 6d 61 74 74 65 72 2d 6d 69 6e 69 2e 72 65 73 78 22 3a 22 65 6e 2d 75 73 2f 63 75 73 74 6f 6d 66 6f 72 6d 61 74 74 65 72 2d 6d 69 6e 69 2e 72 65 73 78 2d 31 35 34 31 31 37 31 32 22 2c 22 72 6f 6f 73 74 65 72 65 64 69 74 6f 72 2d 6d 69 6e 69 22 3a 22 72 6f 6f 73 74 65 72 65 64 69 74 6f 72 2d 6d 69 6e 69 2d 36 32 30 36 66 66 34 62 22 2c 22 72 6f 6f 73 74 65 72 65 64 69 74 6f 72 2d 6d 69 6e 69 2e 72 65 73 78 22 3a 22 Data Ascii: "scriptPathData":{"aria-mini":"aria-mini-b1d3eb2e","customformatter-mini":"customformatter-mini-09480604","customformatter-mini.resx":"en-us/customformatter-mini.resx-15411712","roostereditor-mini":"roostereditor-mini-6206ff4b","roostereditor-mini.resx":"

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:02:08 UTC	3061	OUT	GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D HTTP/1.1 Host: irisindiacloud-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json Content-Type: application/json Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://irisindiacloud-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&spartanOneDriveWireframe=true&enableVHSourceOriginRedirect=true&streamVi [TRUNCATED] Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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 [TRUNCATED] If-None-Match: "49886973_sts_default_en-us"
2025-04-17 14:02:08 UTC	1923	IN	HTTP/1.1 304 Not Modified Cache-Control: private Content-Type: application/json ETag: "49886973_sts_default_en-us" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzg5NmY2NTBkMjI5ODUzYmZmYmVkYzk2YzU0NmNiYjU2MzJjMzg1NGJlN2QyNjRiMDc5YWJmMTU4MjhmZmI5MjcsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jODk2ZjY1MGQyMjk4NTNiZmZiZWRjOTZjNTQ2Y2JiNTYzMmMzODU0YmU3ZDI2NGIwNzlhYmYxNTgyOGZmYjkyNywxMzM4OTM3MjQxNDAwMDAwMDAsMCwxMzM4OTQ1ODUxNDUxNTg5MTEsMC4wLjAuMCwyNTgsMDZlODRiOTYtOTA3YS00NDE4LWFlMjktMjExYmZkMTkwZTg0LCwsNjUxMmYxZTktNDYxMS00ZmFlLTg4OGMtODFkMjI1YzM2OWU5LDY1MTJmMWU5LTQ2MTEtNGZhZS04ODhjLTgxZDIyNWMzNjllOSxQZnhLWmNqcjkwbU5jaWRPZm1IaGV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY0NjMsTkxITm9QekJlYzNqTGxRc1NZb0w1UTFFZ2ZFLGx2aEw5RER0MG5kOTVGakdiMGE3ODdkL0RPeUdwdHdoWXBNQmlrK2txeERPZ2N0a281bWE5aC9uVk9GWVFERjMwTXIxbGJBNkZYdEFxdjdDRnFVOHRoUXpwandvbXFxNDV4VmYwRnVIY2R1cVAyZHFUVGtCakNQcXJMa21jOFV2M0srSy9ZVzk4aGlKZkQreXRGa2M5YXU0VWtnM3ZZLzBPME9pdzBORVpQUlFsbkpJTDZic0VZV0gzWHVWTStaYjk5NzNkV3NOMmZXeDJiNUdVUHZPNXkvTzZWeTcwS2xCell1eFZ6bnd5YkNxVUtObC9EOFh4 [TRUNCATED] X-NetworkStatistics: 0,4194720,0,0,1857015,245075,245075,220211 X-Language: en-US X-AspNet-Version: 4.0.30319 SPRequestDuration: 7 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 34FBE9708AFC427F87D499D6651CB267 Ref B: ATL331000106047 Ref C: 2025-04-17T14:02:08Z Date: Thu, 17 Apr 2025 14:02:08 GMT Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:02:10 UTC	2959	OUT	GET /_layouts/15/spwebworkerproxy.ashx?odsp-web-prod_2025-03-28.009 HTTP/1.1 Host: irisindiacloud-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://irisindiacloud-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&spartanOneDriveWireframe=true&enableVHSourceOriginRedirect=true&streamVi [TRUNCATED] Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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 [TRUNCATED]
2025-04-17 14:02:10 UTC	3221	IN	HTTP/1.1 200 OK Cache-Control: max-age=600 Transfer-Encoding: chunked Content-Type: text/javascript; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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 [TRUNCATED] X-NetworkStatistics: 0,4194720,0,0,1059469,104260,104260,218450 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 IsOCDI: 0 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: b76395a1-c050-4000-fef3-99a7ab845ff4 request-id: b76395a1-c050-4000-fef3-99a7ab845ff4 MS-CV: oZVjt1DAAED+85mnq4Rf9A.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=06e84b96-907a-4418-ae29-211bfd190e84&destinationEndpoint=Edge-Prod-ATL33r5a&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com m365.cloud.microsoft .cloud.microsoft .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.26002 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 19069622609740699090BB3DD5C3AD0F Ref B: ATL331000101011 Ref C: 2025-04-17T14:02:10Z Date: Thu, 17 Apr 2025 14:02:10 GMT Connection: close
2025-04-17 14:02:10 UTC	706	IN	Data Raw: 32 62 62 0d 0a 73 65 6c 66 2e 5f 70 65 72 66 4d 61 72 6b 73 20 3d 20 7b 7d 3b 0a 73 65 6c 66 2e 5f 6d 61 72 6b 50 65 72 66 53 74 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 20 7b 69 66 28 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 74 79 70 65 6f 66 20 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 7b 73 65 6c 66 2e 5f 70 65 72 66 4d 61 72 6b 73 5b 6b 65 79 5d 3d 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 7d 20 65 6c 73 65 7b 73 65 6c 66 2e 5f 70 65 72 66 4d 61 72 6b 73 5b 6b 65 79 5d 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 7d 20 69 66 20 28 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 74 79 70 65 6f 66 20 73 65 6c 66 2e 70 65 72 66 6f Data Ascii: 2bbself._perfMarks = {};self._markPerfStage=function(key) {if(self.performance && typeof self.performance.now === 'function'){self._perfMarks[key]=self.performance.now();} else{self._perfMarks[key]=Date.now();} if (self.performance && typeof self.perfo
2025-04-17 14:02:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://irisindiacloud-my.sharepoint.com/:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Chrome Cache Entry: 1022

Chrome Cache Entry: 1023

Chrome Cache Entry: 1024

Chrome Cache Entry: 1025

Chrome Cache Entry: 1026

Chrome Cache Entry: 1027

Chrome Cache Entry: 1028

Windows Analysis Report
https://irisindiacloud-my.sharepoint.com/:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:02:56 UTC	611	OUT	OPTIONS /api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=LITHIASPRINGS&ASN=20940&Country=US&Region=GA&RequestIdentifier=0.4a7d2f17.1744898576.5e9d835&TotalRTCDNTime=105&CompressionType=gzip&FileSize=55158 HTTP/1.1 Host: m365cdn.nel.measure.office.net Connection: keep-alive Origin: https://res-1.cdn.office.net Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 14:02:56 UTC	319	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7 Date: Thu, 17 Apr 2025 14:02:56 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *
2025-04-17 14:02:56 UTC	7	IN	Data Raw: 4f 50 54 49 4f 4e 53 Data Ascii: OPTIONS

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:02:56 UTC	543	OUT	OPTIONS /api/report?tenantId=06e84b96-907a-4418-ae29-211bfd190e84&destinationEndpoint=Edge-Prod-ATL33r5a&frontEnd=AFD&RemoteIP=89.187.171.0 HTTP/1.1 Host: spo.nel.measure.office.net Connection: keep-alive Origin: https://irisindiacloud-my.sharepoint.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 14:02:57 UTC	319	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7 Date: Thu, 17 Apr 2025 14:02:57 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *
2025-04-17 14:02:57 UTC	7	IN	Data Raw: 4f 50 54 49 4f 4e 53 Data Ascii: OPTIONS

Timestamp	Bytes transferred	Direction	Data
2025-04-17 14:02:57 UTC	519	OUT	POST /api/report?tenantId=06e84b96-907a-4418-ae29-211bfd190e84&destinationEndpoint=Edge-Prod-ATL33r5a&frontEnd=AFD&RemoteIP=89.187.171.0 HTTP/1.1 Host: spo.nel.measure.office.net Connection: keep-alive Content-Length: 1680 Content-Type: application/reports+json Origin: https://irisindiacloud-my.sharepoint.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-17 14:02:57 UTC	1680	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 37 32 31 38 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 39 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 69 72 69 73 69 6e 64 69 61 63 6c 6f 75 64 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 6e 75 70 75 72 5f 73 61 6d 61 6e 74 61 72 61 79 5f 69 72 69 73 62 75 73 69 6e 65 73 73 5f 63 6f 6d 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 6f 6e 65 64 72 69 76 65 2e 61 73 70 78 3f 69 64 3d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 6e 75 70 75 72 25 35 46 73 61 6d 61 6e 74 61 72 Data Ascii: [{"age":57218,"body":{"elapsed_time":790,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://irisindiacloud-my.sharepoint.com/personal/nupur_samantaray_irisbusiness_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnupur%5Fsamantar
2025-04-17 14:02:57 UTC	399	IN	HTTP/1.1 429 Too Many Requests Content-Length: 0 x-ms-middleware-request-id: 00000000-0000-0000-0000-000000000000 Request-Context: appId=cid-v1:c242839f-7b23-4fcd-8b70-f19e1d322576 Date: Thu, 17 Apr 2025 14:02:57 GMT Connection: close Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *

Target ID:	0
Start time:	10:01:45
Start date:	17/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff778810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	1
Start time:	10:01:46
Start date:	17/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,16051653147721521405,11200063392564300186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2000 /prefetch:3
Imagebase:	0x7ff778810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	5
Start time:	10:01:52
Start date:	17/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://irisindiacloud-my.sharepoint.com/:u:/g/personal/nupur_samantaray_irisbusiness_com/ER_lI9Z54URIqsQkOQ83_74BG-sntRajgPr7wuint2ROnA?e=R4nJNc"
Imagebase:	0x7ff778810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre