Windows Analysis Report
https://ipexcel-my.sharepoint.com/:u:/p/bhaskar/EXkHa_fTPjZKq-NlTqXIh7sBrIzBSy8pqbKPLGCEzX2rbA

Overview

General Information

Sample URL: https://ipexcel-my.sharepoint.com/:u:/p/bhaskar/EXkHa_fTPjZKq-NlTqXIh7sBrIzBSy8pqbKPLGCEzX2rbA
Analysis ID: 1525248
Infos:

Detection

Score: 48
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Antivirus / Scanner detection for submitted sample
HTML page contains hidden javascript code
Stores files to the Windows start menu directory

Classification

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: https://ipexcel-my.sharepoint.com/:u:/p/bhaskar/EXkHa_fTPjZKq-NlTqXIh7sBrIzBSy8pqbKPLGCEzX2rbA SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering
HTML page contains hidden javascript code
Source: https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1 HTTP Parser: Base64 decoded: sv=o365_1_nom&rand=cXBqOE4=&uid=USER16092024U29091607
Source: https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1 HTTP Parser: No favicon
Source: unknown HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49774 version: TLS 1.2
Source: unknown HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49868 version: TLS 1.2
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: global traffic HTTP traffic detected: GET /:u:/p/bhaskar/EXkHa_fTPjZKq-NlTqXIh7sBrIzBSy8pqbKPLGCEzX2rbA HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1 HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_api/web/GetFileByServerRelativePath(DecodedUrl=@a1)/OpenBinaryStream?@a1=%27%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml%27 HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/json;odata=verbosesec-ch-ua-platform: "Windows"CollectSPPerfMetrics: SPSQLQueryCountsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;odata=verboseSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_api/web/GetList(@listUrl)/RenderListDataAsStream?@listUrl=%27%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%27&View= HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2ZmOWFiNGE1ZWFkMGZiMmQ0OTY5YmQyN2FlNDIxNjI1MTZhMTY4MDFjNDQ2NmM2ZWNjNmU1NjhkZTVlZjhlZjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jZmY5YWI0YTVlYWQwZmIyZDQ5NjliZDI3YWU0MjE2MjUxNmExNjgwMWM0NDY2YzZlY2M2ZTU2OGRlNWVmOGVmMywxMzM3MjQ2NTM5MjAwMDAwMDAsMCwxMzM3MjU1MTQ5MjYwODI1NzMsMC4wLjAuMCwyNTgsMzhiNDkzMjUtMjhkMS00MGM1LWE5MzItMTA3ZjIxNWYyMTc3LCwsZTg2NzU2YTEtMzA3Ny0zMDAwLWNmMGUtNWVmODdmMWNjMjI1LGU4Njc1NmExLTMwNzctMzAwMC1jZjBlLTVlZjg3ZjFjYzIyNSxucURWZkNGelBrT3FETUZtT1BNblV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY1MTQsZnN5WnhoQ2lZLUFNSG0xTUlST1ZFMzRRYjNFLExZN2JtT1ZxZ0xGdmpvQ1RjSXRMcklab0F0RVlUc0JEbWh4TW9xbndqb3BBbXM0TVI0dEdNd3JGSHVwTE5CR3BDU1ZZV05ZSml2U1Z6OXB4M2JZeTFub2FGUzkrTzZyc3RmTnlMbDZvZnpUVlBhUjlrM2RYcVZJNGNqZnJFQkZmL041LzZ4MHZpSE55VlF4eWtjOVFTL1RYYnU4T1A5RG9lVnE4QVB4SGFWR3kzbllvU3AyZXd4bm9nVjNtaTVCZlRaME15ZXd2K2JFMXZNeEFXOCtzR3orN3M2cDl5RFg2blJPZ3JNSGo0aHUxVStjYnlFQ2owZXg1UzV4RG5MSi9ZU2krRHcrYUV3MGtob1hBRVRVMEhYQ1JGdnRoOUE1TjhOaE42K1EzeENiTlNOeitmVlJGbTU3aElZeGhjUDBiR0RTWTJ6ZlVwN0lZVXg4cURzQWlhZz09PC9TUD4=; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_api/web/GetFileByServerRelativePath(DecodedUrl=@a1)/OpenBinaryStream?@a1=%27%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml%27 HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2ZmOWFiNGE1ZWFkMGZiMmQ0OTY5YmQyN2FlNDIxNjI1MTZhMTY4MDFjNDQ2NmM2ZWNjNmU1NjhkZTVlZjhlZjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jZmY5YWI0YTVlYWQwZmIyZDQ5NjliZDI3YWU0MjE2MjUxNmExNjgwMWM0NDY2YzZlY2M2ZTU2OGRlNWVmOGVmMywxMzM3MjQ2NTM5MjAwMDAwMDAsMCwxMzM3MjU1MTQ5MjYwODI1NzMsMC4wLjAuMCwyNTgsMzhiNDkzMjUtMjhkMS00MGM1LWE5MzItMTA3ZjIxNWYyMTc3LCwsZTg2NzU2YTEtMzA3Ny0zMDAwLWNmMGUtNWVmODdmMWNjMjI1LGU4Njc1NmExLTMwNzctMzAwMC1jZjBlLTVlZjg3ZjFjYzIyNSxucURWZkNGelBrT3FETUZtT1BNblV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY1MTQsZnN5WnhoQ2lZLUFNSG0xTUlST1ZFMzRRYjNFLExZN2JtT1ZxZ0xGdmpvQ1RjSXRMcklab0F0RVlUc0JEbWh4TW9xbndqb3BBbXM0TVI0dEdNd3JGSHVwTE5CR3BDU1ZZV05ZSml2U1Z6OXB4M2JZeTFub2FGUzkrTzZyc3RmTnlMbDZvZnpUVlBhUjlrM2RYcVZJNGNqZnJFQkZmL041LzZ4MHZpSE55VlF4eWtjOVFTL1RYYnU4T1A5RG9lVnE4QVB4SGFWR3kzbllvU3AyZXd4bm9nVjNtaTVCZlRaME15ZXd2K2JFMXZNeEFXOCtzR3orN3M2cDl5RFg2blJPZ3JNSGo0aHUxVStjYnlFQ2owZXg1UzV4RG5MSi9ZU2krRHcrYUV3MGtob1hBRVRVMEhYQ1JGdnRoOUE1TjhOaE42K1EzeENiTlNOeitmVlJGbTU3aElZeGhjUDBiR0RTWTJ6ZlVwN0lZVXg4cURzQWlhZz09PC9TUD4=; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_api/sp.FavoriteItemCollection.GetFavoriteItems?top=500 HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0Authorization: BearerUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;odata=verboseCollectSPPerfMetrics: SPSQLQueryCountaccept: application/json;odata=verbosex-requestdigest: 0xD120195DB23A93EA3E404DA851274AE55C2F2062D54D03B0B9C6E4C2FADC0FF2BC40F45E0CB87D22768C86F494EE220FAAF28A3EC0D86754A5EC9AFA5590375E,03 Oct 2024 21:38:13 -0000Caller: ODBWebsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2ZmOWFiNGE1ZWFkMGZiMmQ0OTY5YmQyN2FlNDIxNjI1MTZhMTY4MDFjNDQ2NmM2ZWNjNmU1NjhkZTVlZjhlZjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jZmY5YWI0YTVlYWQwZmIyZDQ5NjliZDI3YWU0MjE2MjUxNmExNjgwMWM0NDY2YzZlY2M2ZTU2OGRlNWVmOGVmMywxMzM3MjQ2NTM5MjAwMDAwMDAsMCwxMzM3MjU1MTQ5MjYwODI1NzMsMC4wLjAuMCwyNTgsMzhiNDkzMjUtMjhkMS00MGM1LWE5MzItMTA3ZjIxNWYyMTc3LCwsZTg2NzU2YTEtMzA3Ny0zMDAwLWNmMGUtNWVmODdmMWNjMjI1LGU4Njc1NmExLTMwNzctMzAwMC1jZjBlLTVlZjg3ZjFjYzIyNSxucURWZkNGelBrT3FETUZtT1BNblV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY1MTQsZnN5WnhoQ2lZLUFNSG0xTUlST1ZFMzRRYjNFLExZN2JtT1ZxZ0xGdmpvQ1RjSXRMcklab0F0RVlUc0JEbWh4TW9xbndqb3BBbXM0TVI0dEdNd3JGSHVwTE5CR3BDU1ZZV05ZSml2U1Z6OXB4M2JZeTFub2FGUzkrTzZyc3RmTnlMbDZvZnpUVlBhUjlrM2RYcVZJNGNqZnJFQkZmL041LzZ4MHZpSE55VlF4eWtjOVFTL1RYYnU4T1A5RG9lVnE4QVB4SGFWR3kzbllvU3AyZXd4bm9nVjNtaTVCZlRaME15ZXd2K2JFMXZNeEFXOCtzR3orN3M2cDl5RFg2blJPZ3JNSGo0aHUxVStjYnlFQ2owZXg1UzV4RG5MSi9ZU2krRHcrYUV3MGtob1hBRVRVMEhYQ1JGdnRoOUE1TjhOaE42K1EzeENiTlNOeitmVlJGbTU3aElZeGhjUDBiR0RTWTJ6ZlVwN0lZVXg4cURzQWlhZz09PC9TUD4=; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789
Source: global traffic HTTP traffic detected: GET /_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=true HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-aliveCache-Control: max-age=0Accept: */*Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|172799149
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MnhE7f2hFFFZ22Z&MD=rOH4MOs7 HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ipexcel-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789; MSFPC=GUID=b0d38322b9c14b57b15a85cf2a1919e9&HASH=b0d3&LV=202410&V=4&LU=1727991502332
Source: global traffic HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22spfx%22]&languages=%5B%5D HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ipexcel-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789; MSFPC=GUID=b0d38322b9c14b57b15a85cf2a1919e9&HASH=b0d3&LV=202410&V=4&LU=1727991502332
Source: global traffic HTTP traffic detected: GET /o/?c3Y9bzM2NV8xX25vbSZyYW5kPWNYQnFPRTQ9JnVpZD1VU0VSMTYwOTIwMjRVMjkwOTE2MDc=N0123N HTTP/1.1Host: marty-n.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_layouts/15/download.aspx?SourceUrl=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789; MSFPC=GUID=b0d38322b9c14b57b15a85cf2a1919e9&HASH=b0d3&LV=202410&V=4&LU=1727991502332
Source: global traffic HTTP traffic detected: GET /o/?c3Y9bzM2NV8xX25vbSZyYW5kPWNYQnFPRTQ9JnVpZD1VU0VSMTYwOTIwMjRVMjkwOTE2MDc=N0123N HTTP/1.1Host: marty-n.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: marty-n.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marty-n.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWNYQnFPRTQ9JnVpZD1VU0VSMTYwOTIwMjRVMjkwOTE2MDc=N0123NAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: marty-n.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /o/?c3Y9bzM2NV8xX25vbSZyYW5kPWNYQnFPRTQ9JnVpZD1VU0VSMTYwOTIwMjRVMjkwOTE2MDc=N0123N HTTP/1.1Host: marty-n.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MnhE7f2hFFFZ22Z&MD=rOH4MOs7 HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_api/web/GetFileByServerRelativePath(DecodedUrl=@a1)/OpenBinaryStream?@a1=%27%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml%27 HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/json;odata=verbosesec-ch-ua-platform: "Windows"CollectSPPerfMetrics: SPSQLQueryCountsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;odata=verboseSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789; MSFPC=GUID=b0d38322b9c14b57b15a85cf2a1919e9&HASH=b0d3&LV=202410&V=4&LU=1727991502332If-Modified-Since: Thu, 03 Oct 2024 21:38:19 GMT
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_api/web/GetFileByServerRelativePath(DecodedUrl=@a1)/OpenBinaryStream?@a1=%27%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml%27 HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789; MSFPC=GUID=b0d38322b9c14b57b15a85cf2a1919e9&HASH=b0d3&LV=202410&V=4&LU=1727991502332If-Modified-Since: Thu, 03 Oct 2024 21:38:20 GMT
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_layouts/15/codicon.ttf HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ipexcel-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789; MSFPC=GUID=b0d38322b9c14b57b15a85cf2a1919e9&HASH=b0d3&LV=202410&V=4&LU=1727991502332
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1 HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789; MSFPC=GUID=b0d38322b9c14b57b15a85cf2a1919e9&HASH=b0d3&LV=202410&V=4&LU=1727991502332
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_layouts/15/AccessDenied.aspx?correlation=f76756a1%2D20d7%2D3000%2Dcf0e%2D5e019dc53382 HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2ZmOWFiNGE1ZWFkMGZiMmQ0OTY5YmQyN2FlNDIxNjI1MTZhMTY4MDFjNDQ2NmM2ZWNjNmU1NjhkZTVlZjhlZjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jZmY5YWI0YTVlYWQwZmIyZDQ5NjliZDI3YWU0MjE2MjUxNmExNjgwMWM0NDY2YzZlY2M2ZTU2OGRlNWVmOGVmMywxMzM3MjQ2NTM5MjAwMDAwMDAsMCwxMzM3MjU1MTQ5MjYwODI1NzMsMC4wLjAuMCwyNTgsMzhiNDkzMjUtMjhkMS00MGM1LWE5MzItMTA3ZjIxNWYyMTc3LCwsZTg2NzU2YTEtMzA3Ny0zMDAwLWNmMGUtNWVmODdmMWNjMjI1LGU4Njc1NmExLTMwNzctMzAwMC1jZjBlLTVlZjg3ZjFjYzIyNSxucURWZkNGelBrT3FETUZtT1BNblV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY1MTQsZnN5WnhoQ2lZLUFNSG0xTUlST1ZFMzRRYjNFLExZN2JtT1ZxZ0xGdmpvQ1RjSXRMcklab0F0RVlUc0JEbWh4TW9xbndqb3BBbXM0TVI0dEdNd3JGSHVwTE5CR3BDU1ZZV05ZSml2U1Z6OXB4M2JZeTFub2FGUzkrTzZyc3RmTnlMbDZvZnpUVlBhUjlrM2RYcVZJNGNqZnJFQkZmL041LzZ4MHZpSE55VlF4eWtjOVFTL1RYYnU4T1A5RG9lVnE4QVB4SGFWR3kzbllvU3AyZXd4bm9nVjNtaTVCZlRaME15ZXd2K2JFMXZNeEFXOCtzR3orN3M2cDl5RFg2blJPZ3JNSGo0aHUxVStjYnlFQ2owZXg1UzV4RG5MSi9ZU2krRHcrYUV3MGtob1hBRVRVMEhYQ1JGdnRoOUE1TjhOaE42K1EzeENiTlNOeitmVlJGbTU3aElZeGhjUDBiR0RTWTJ6ZlVwN0lZVXg4cURzQWlhZz09PC9TUD4=; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789; MSFPC=GUID=b0d38322b9c14b57b15a85cf2a1919e9&HASH=b0d3&LV=202410&V=4&LU=1727991502332
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_api/web/GetFileByServerRelativePath(DecodedUrl=@a1)/OpenBinaryStream?@a1=%27%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml%27 HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/json;odata=verbosesec-ch-ua-platform: "Windows"CollectSPPerfMetrics: SPSQLQueryCountsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;odata=verboseSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2ZmOWFiNGE1ZWFkMGZiMmQ0OTY5YmQyN2FlNDIxNjI1MTZhMTY4MDFjNDQ2NmM2ZWNjNmU1NjhkZTVlZjhlZjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jZmY5YWI0YTVlYWQwZmIyZDQ5NjliZDI3YWU0MjE2MjUxNmExNjgwMWM0NDY2YzZlY2M2ZTU2OGRlNWVmOGVmMywxMzM3MjQ2NTM5MjAwMDAwMDAsMCwxMzM3MjU1MTQ5MjYwODI1NzMsMC4wLjAuMCwyNTgsMzhiNDkzMjUtMjhkMS00MGM1LWE5MzItMTA3ZjIxNWYyMTc3LCwsZTg2NzU2YTEtMzA3Ny0zMDAwLWNmMGUtNWVmODdmMWNjMjI1LGU4Njc1NmExLTMwNzctMzAwMC1jZjBlLTVlZjg3ZjFjYzIyNSxucURWZkNGelBrT3FETUZtT1BNblV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY1MTQsZnN5WnhoQ2lZLUFNSG0xTUlST1ZFMzRRYjNFLExZN2JtT1ZxZ0xGdmpvQ1RjSXRMcklab0F0RVlUc0JEbWh4TW9xbndqb3BBbXM0TVI0dEdNd3JGSHVwTE5CR3BDU1ZZV05ZSml2U1Z6OXB4M2JZeTFub2FGUzkrTzZyc3RmTnlMbDZvZnpUVlBhUjlrM2RYcVZJNGNqZnJFQkZmL041LzZ4MHZpSE55VlF4eWtjOVFTL1RYYnU4T1A5RG9lVnE4QVB4SGFWR3kzbllvU3AyZXd4bm9nVjNtaTVCZlRaME15ZXd2K2JFMXZNeEFXOCtzR3orN3M2cDl5RFg2blJPZ3JNSGo0aHUxVStjYnlFQ2owZXg1UzV4RG5MSi9ZU2krRHcrYUV3MGtob1hBRVRVMEhYQ1JGdnRoOUE1TjhOaE42K1EzeENiTlNOeitmVlJGbTU3aElZeGhjUDBiR0RTWTJ6ZlVwN0lZVXg4cURzQWlhZz09PC9TUD4=; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991497789; MSFPC=GUID=b0d38322b9c14b57b15a85cf2a1919e9&HASH=b0d3&LV=202410&V=4&LU=1727991502332If-Modified-Since: Thu, 03 Oct 2024 21:39:05 GMT
Source: global traffic HTTP traffic detected: GET /personal/bhaskar_ipexcel_com/_api/web/GetFileByServerRelativePath(DecodedUrl=@a1)/OpenBinaryStream?@a1=%27%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml%27 HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2ZmOWFiNGE1ZWFkMGZiMmQ0OTY5YmQyN2FlNDIxNjI1MTZhMTY4MDFjNDQ2NmM2ZWNjNmU1NjhkZTVlZjhlZjMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jZmY5YWI0YTVlYWQwZmIyZDQ5NjliZDI3YWU0MjE2MjUxNmExNjgwMWM0NDY2YzZlY2M2ZTU2OGRlNWVmOGVmMywxMzM3MjQ2NTM5MjAwMDAwMDAsMCwxMzM3MjU1MTQ5MjYwODI1NzMsMC4wLjAuMCwyNTgsMzhiNDkzMjUtMjhkMS00MGM1LWE5MzItMTA3ZjIxNWYyMTc3LCwsZTg2NzU2YTEtMzA3Ny0zMDAwLWNmMGUtNWVmODdmMWNjMjI1LGU4Njc1NmExLTMwNzctMzAwMC1jZjBlLTVlZjg3ZjFjYzIyNSxucURWZkNGelBrT3FETUZtT1BNblV3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTY1MTQsZnN5WnhoQ2lZLUFNSG0xTUlST1ZFMzRRYjNFLExZN2JtT1ZxZ0xGdmpvQ1RjSXRMcklab0F0RVlUc0JEbWh4TW9xbndqb3BBbXM0TVI0dEdNd3JGSHVwTE5CR3BDU1ZZV05ZSml2U1Z6OXB4M2JZeTFub2FGUzkrTzZyc3RmTnlMbDZvZnpUVlBhUjlrM2RYcVZJNGNqZnJFQkZmL041LzZ4MHZpSE55VlF4eWtjOVFTL1RYYnU4T1A5RG9lVnE4QVB4SGFWR3kzbllvU3AyZXd4bm9nVjNtaTVCZlRaME15ZXd2K2JFMXZNeEFXOCtzR3orN3M2cDl5RFg2blJPZ3JNSGo0aHUxVStjYnlFQ2owZXg1UzV4RG5MSi9ZU2krRHcrYUV3MGtob1hBRVRVMEhYQ1JGdnRoOUE1TjhOaE42K1EzeENiTlNOeitmVlJGbTU3aElZeGhjUDBiR0RTWTJ6ZlVwN0lZVXg4cURzQWlhZz09PC9TUD4=; FeatureOverrides_experiments=[]; MicrosoftApplicationsTelemetryDeviceId=e0cecb35-b05b-4e80-ae8e-cc44a14e7bc0; MSFPC=GUID=b0d38322b9c14b57b15a85cf2a1919e9&HASH=b0d3&LV=202410&V=4&LU=1727991502332; ai_session=qIFizxQTaNWy3ozkFwdtHh|1727991497779|1727991562189If-Modified-Since: Thu, 03 Oct 2024 21:39:06 GMT
Source: global traffic HTTP traffic detected: GET /o/?c3Y9bzM2NV8xX25vbSZyYW5kPWNYQnFPRTQ9JnVpZD1VU0VSMTYwOTIwMjRVMjkwOTE2MDc=N0123N HTTP/1.1Host: marty-n.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic DNS traffic detected: DNS query: ipexcel-my.sharepoint.com
Source: global traffic DNS traffic detected: DNS query: spo.nel.measure.office.net
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: marty-n.com
Source: global traffic DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: unknown HTTP traffic detected: POST /personal/bhaskar_ipexcel_com/_api/web/GetList(@listUrl)/RenderListDataAsStream?@listUrl=%27%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%27&View= HTTP/1.1Host: ipexcel-my.sharepoint.comConnection: keep-aliveContent-Length: 400sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;odata=verboseCollectSPPerfMetrics: SPSQLQueryCountaccept: application/json;odata=verboseX-SP-REQUESTRESOURCES: listUrl=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocumentsX-ServiceWorker-Strategy: CacheFirstsec-ch-ua-platform: "Windows"Origin: https://ipexcel-my.sharepoint.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundP3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnlyX-NetworkStatistics: 0,525568,0,0,124463,0,40006,189X-SharePointHealthScore: 2X-DataBoundary: NONEX-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/SPRequestGuid: f66756a1-8079-3000-dec9-b7ce896ee04frequest-id: f66756a1-8079-3000-dec9-b7ce896ee04fMS-CV: oVZn9nmAADDeybfOiW7gTw.0Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-EWR31r5b&frontEnd=AFD&RemoteIP=8.46.123.0"}]}NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0}Strict-Transport-Security: max-age=31536000X-FRAME-OPTIONS: SAMEORIGINContent-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com teams.cloud.microsoft *.office365.com goals.cloud.microsoft *.powerapps.com app.powerbi.com *.yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft *.officeapps.live.com *.office.com *.microsoft365.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;SPRequestDuration: 8SPIisLatency: 1X-Powered-By: ASP.NETMicrosoftSharePointTeamServices: 16.0.0.25311X-Content-Type-Options: nosniffX-MS-InvokeApp: 1; RequireReadOnlyX-Cache: CONFIG_NOCACHEX-MSEdge-Ref: Ref A: CEE11D37C66C4B8C83D2970197C84B4F Ref B: EWR311000103011 Ref C: 2024-
Source: chromecache_825.1.dr, chromecache_692.1.dr String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_835.1.dr String found in binary or memory: http://www.contoso.com
Source: chromecache_837.1.dr String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_759.1.dr, chromecache_686.1.dr String found in binary or memory: https://1drv.com/
Source: chromecache_759.1.dr, chromecache_686.1.dr String found in binary or memory: https://centralus1-mediad.svc.ms
Source: chromecache_839.1.dr, chromecache_781.1.dr String found in binary or memory: https://clients.config.office.net/user/v1.0/web/policies
Source: chromecache_872.1.dr, chromecache_676.1.dr String found in binary or memory: https://facebook.github.io/react/docs/more-about-refs.html#the-ref-callback-attribute
Source: chromecache_862.1.dr, chromecache_841.1.dr String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: chromecache_808.1.dr String found in binary or memory: https://lists.live.com/
Source: chromecache_759.1.dr, chromecache_686.1.dr String found in binary or memory: https://livefilestore.com/
Source: chromecache_881.1.dr, chromecache_883.1.dr String found in binary or memory: https://make.powerautomate.com
Source: chromecache_881.1.dr, chromecache_883.1.dr String found in binary or memory: https://make.preprod.powerautomate.com
Source: chromecache_881.1.dr, chromecache_883.1.dr String found in binary or memory: https://make.test.powerautomate.com
Source: chromecache_738.1.dr, chromecache_961.1.dr, chromecache_716.1.dr, aadd8b70-47de-420c-9fe0-b416c5ac4d88.tmp.0.dr String found in binary or memory: https://marty-n.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWNYQnFPRTQ9JnVpZD1VU0VSMTYwOTIwMjRVMjkwOTE2MDc=N0123
Source: chromecache_759.1.dr, chromecache_686.1.dr String found in binary or memory: https://media.cloudapp.net
Source: chromecache_759.1.dr, chromecache_686.1.dr String found in binary or memory: https://northcentralus1-medias.svc.ms
Source: chromecache_839.1.dr String found in binary or memory: https://office.visualstudio.com/OC/_git/M365AdminUX?path=%2Fmodules%2Fhvc-loader
Source: chromecache_839.1.dr String found in binary or memory: https://office.visualstudio.com/OC/_workitems/edit/2364251
Source: chromecache_686.1.dr String found in binary or memory: https://onedrive.cloud.microsoft
Source: chromecache_686.1.dr String found in binary or memory: https://onedrive.dev.cloud.microsoft
Source: chromecache_932.1.dr String found in binary or memory: https://onedrive.live.com/?gologin=1
Source: chromecache_819.1.dr, chromecache_706.1.dr, chromecache_897.1.dr, chromecache_881.1.dr, chromecache_739.1.dr, chromecache_882.1.dr, chromecache_901.1.dr String found in binary or memory: https://outlook.office.com/search
Source: chromecache_686.1.dr String found in binary or memory: https://portal.office.com/
Source: chromecache_712.1.dr String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_828.1.dr, chromecache_689.1.dr, chromecache_741.1.dr String found in binary or memory: https://res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets
Source: chromecache_769.1.dr String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-09-27.007/
Source: chromecache_769.1.dr String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-09-27.007/spserviceworker.js
Source: chromecache_769.1.dr String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-09-27.007/stsserviceworkerprefetch/stsservicew
Source: chromecache_769.1.dr String found in binary or memory: https://shell.cdn.office.net/api/ShellBootstrapper/business/OneShell
Source: chromecache_686.1.dr String found in binary or memory: https://substrate.office.com
Source: chromecache_932.1.dr String found in binary or memory: https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2F$
Source: chromecache_932.1.dr String found in binary or memory: https://www.office.com/login?ru=%2Flaunch%2F$
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49774 version: TLS 1.2
Source: unknown HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49868 version: TLS 1.2
Source: classification engine Classification label: mal48.win@22/577@24/5
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1988,i,2914659362718140999,4094254327220701742,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ipexcel-my.sharepoint.com/:u:/p/bhaskar/EXkHa_fTPjZKq-NlTqXIh7sBrIzBSy8pqbKPLGCEzX2rbA"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1988,i,2914659362718140999,4094254327220701742,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Google Drive.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Window Recorder Window detected: More than 3 window changes detected
Stores files to the Windows start menu directory
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk Jump to behavior
Source: chromecache_710.1.dr, chromecache_773.1.dr, chromecache_774.1.dr, chromecache_796.1.dr Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_710.1.dr, chromecache_773.1.dr, chromecache_774.1.dr, chromecache_796.1.dr Binary or memory string: ",DisconnectVirtualMachine:"
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1525248 URL: https://ipexcel-my.sharepoi... Startdate: 03/10/2024 Architecture: WINDOWS Score: 48 24 Antivirus / Scanner detection for submitted sample 2->24 6 chrome.exe 20 2->6         started        9 chrome.exe 2->9         started        process3 dnsIp4 14 192.168.2.16, 138, 443, 49700 unknown unknown 6->14 16 239.255.255.250 unknown Reserved 6->16 11 chrome.exe 6->11         started        process5 dnsIp6 18 marty-n.com 185.45.66.155, 443, 49784, 49785 SUPERHOSTING_ASBG Bulgaria 11->18 20 dual-spo-0005.spo-msedge.net 13.107.136.10, 443, 49700, 49701 MICROSOFT-CORP-MSN-AS-BLOCKUS United States 11->20 22 8 other IPs or domains 11->22
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
13.107.136.10
 dual-spo-0005.spo-msedge.net United States
8068 MICROSOFT-CORP-MSN-AS-BLOCKUS false
185.45.66.155
 marty-n.com Bulgaria
201200 SUPERHOSTING_ASBG false
216.58.206.36
 www.google.com United States
15169 GOOGLEUS false
239.255.255.250
 unknown Reserved
unknown unknown false

Private

IP
192.168.2.16

Contacted Domains

Name IP Active
marty-n.com 185.45.66.155 true
dual-spo-0005.spo-msedge.net 13.107.136.10 true
www.google.com 216.58.206.36 true
ipexcel-my.sharepoint.com unknown unknown
m365cdn.nel.measure.office.net unknown unknown
spo.nel.measure.office.net unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/CSPReporting.aspx false
    		unknown
    https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_api/SP.OAuth.Token/Acquire() false
      		unknown
      https://ipexcel-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D false
        		unknown
        https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_api/web/GetList(@listUrl)/RenderListDataAsStream?@listUrl=%27%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%27&View= false
          		unknown
          file:///C:/Users/user/Downloads/RFQ-AirReady%20MRO%20Services,%20INC.%20%23031024023.html false
            		unknown
            https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml&parent=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments&ga=1 false
              		unknown
              https://ipexcel-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22spfx%22]&languages=%5B%5D false
                		unknown
                https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/codicon.ttf false
                  		unknown
                  https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_api/sp.FavoriteItemCollection.GetFavoriteItems?top=500 false
                    		unknown
                    https://ipexcel-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=true false
                      		unknown
                      https://marty-n.com/favicon.ico false
                        		unknown
                        https://marty-n.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWNYQnFPRTQ9JnVpZD1VU0VSMTYwOTIwMjRVMjkwOTE2MDc=N0123N false
                          		unknown
                          https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_api/web/GetFileByServerRelativePath(DecodedUrl=@a1)/OpenBinaryStream?@a1=%27%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml%27 false
                            		unknown
                            https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/AccessDenied.aspx?correlation=f76756a1%2D20d7%2D3000%2Dcf0e%2D5e019dc53382 false
                              		unknown
                              https://ipexcel-my.sharepoint.com/personal/bhaskar_ipexcel_com/_layouts/15/download.aspx?SourceUrl=%2Fpersonal%2Fbhaskar%5Fipexcel%5Fcom%2FDocuments%2FRFQ%2DAirReady%20MRO%20Services%2C%20INC%2E%20%23031024023%2Ehtml false
                                		unknown
                                https://ipexcel-my.sharepoint.com/:u:/p/bhaskar/EXkHa_fTPjZKq-NlTqXIh7sBrIzBSy8pqbKPLGCEzX2rbA true
                                  		unknown