Edit tour

Windows Analysis Report
https://www.dropbox.com/l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk

Overview

General Information

Sample URL:	https://www.dropbox.com/l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk
Analysis ID:	1427015
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5948 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 1576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7072 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5748 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6064 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_98501_657541&as=httAMoMYFWpnkUmNgT3bFw&hl=en
Source: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_98501_657541&as=httAMoMYFWpnkUmNgT3bFw&hl=en

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_98501_657541&as=httAMoMYFWpnkUmNgT3bFw&hl=en

HTTP Parser: Number of links: 0

Source: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: Title: Sign up to view this shared file does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_98501_657541&as=httAMoMYFWpnkUmNgT3bFw&hl=en	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_98501_657541&as=httAMoMYFWpnkUmNgT3bFw&hl=en	HTTP Parser: No favicon
Source: https://dropboxcaptcha.com/	HTTP Parser: No favicon

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_98501_657541&as=httAMoMYFWpnkUmNgT3bFw&hl=en	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_98501_657541&as=httAMoMYFWpnkUmNgT3bFw&hl=en	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_98501_657541&as=httAMoMYFWpnkUmNgT3bFw&hl=en	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_98501_657541&as=httAMoMYFWpnkUmNgT3bFw&hl=en	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.17:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.17:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.29.6:443 -> 192.168.2.17:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.17:49918 version: TLS 1.2

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=scl_invitation_signup&path=%2Fscl%2Ffi%2Ft43c0einrh377rm9dtyva%2FInvoice-0786.pdf&request_id=94973927328f48bc90f3a86eccb3af0f&time=1713298092 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /web-grpc/edison/prompt.PromptEdisonFetch/EdisonPromptPropsFetch HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=8897cfc2bf474bc2b5440b4de5ca7d80&time=1713298096 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /2/auth_logger/log_auth_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /jse HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /sso_state HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /2/account/check_user_with_email_exists HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /web-grpc/edison/fingerprintjs.FingerPrintJSService/FetchConstants HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=ReUI7oB54eFRG9-sGlJXBmCx; locale=en
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=VmfxbbkHsZ7DPxc&MD=osDo5xyD HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?hl=en&onload=recaptchaOnloadCallback&render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: dropboxcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /funcaptcha.js HTTP/1.1Host: dropboxcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dropboxcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /jse HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /alternate_wtl_browser_performance_info HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /alternate_wtl HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=VmfxbbkHsZ7DPxc&MD=osDo5xyD HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: 120X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAZ018joKFt9ONlJduRp0qgN4q0hEVgbtyzwhNOAQGHdiJ/WvF5CgahoZEynXJhIj56iTukhgVUPTic3eRyYR66fmSTdDW3LZw/IwxowvJNO42yNYmggOVq0grbDpD4QdDBVM9tWomORZ6Yhc//Dhybj55G1bMVl6gWid3LX185%2BHPvRzCdiW7tPCZaapPO7gKeTL3oDg104em5KKXTB%2BceyTUab5TPh2hCfSfz3ROVCrQakad6ZQ37pn7Jq55%2B49mfT4CA7pYaH/XGU53tm06AVeElWzPkyU/J4Yr1r8h47zRUwOcxGjC0T6BxpX7IwaaJwfyVT2Tevj23PMjumVtDYDZgAACPxIXebpGL%2BGqAGO2uVUIArwYVaEkhQ22OfhliGLM6ZzUHPcq8OgtEdhPx9a2KM7kV/RwIGjE2EaapB0tt9sgi2DzczVtNbBciuvDyQhmON3mDa1QDzs/rOIXlh4sYR9zv7uexEljV/Imrk%2B/sJT99cLZwVV7PMvd1F75eHIs4pX1BFkLWpqZNETz4fG4HhgXcUZelhm/bcvV1vX49JeogYTt2yiFUOMkY5tR4q28QjWv%2B1R691qg7cHA2JVSATROi1m/RUl6KBLCiACeckPxMzA6kQovWH%2ByRmDxA9ra27P9aO9CW75tKVB/3eKzk4rS28lqzzWYSUjYjkYDnCWOo6hDi/m2h1Dt%2BRXipZMn/BGku0N6WS8mtDNm2EzBNliNDUAhKqoAkUnmRP61pvZjFSi/aTpkXR/x8SfYv14rWHbUs9gyYkSjM1N3VP/7siZSJSl1OyMh3vaC8SGfSZrFSlQKjhgXAbTSfEQoWEBjSVKcudN6yE8YHqv4WtfvpibO/Clm/vLeQhq0fDv3br5Mj5jA5mQS7xg53GzMzhJNGn7pMUQ8cMvUPfsCbtlGq6eZAJ62AE%3D%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1713298150User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: E5BE7027061746948210979DA4705F6EX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}

Source: unknown

DNS traffic detected: queries for: www.dropbox.com

Source: unknown

HTTP traffic detected: POST /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveContent-Length: 381sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-CSRF-Token: ReUI7oB54eFRG9-sGlJXBmCxX-Dropbox-Uid: -1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonx-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prodsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dropbox.comSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Apr 2024 20:08:16 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: c92d750b05674c378f4d0a82c3335f82Connection: closeContent-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 16 Apr 2024 20:08:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 3dd69dfb1cdf4e5c86584e2065b501f5Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 16 Apr 2024 20:08:19 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 0ee750066ffd4294af98f6bb7b9d3146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 16 Apr 2024 20:08:19 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 5a52b9499d664f4c9b21e538a5cd805dConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Apr 2024 20:08:20 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: f1f630910e434c50ad5a00dd70a5600fConnection: closeContent-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 16 Apr 2024 20:08:27 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 3320c6c4a7964f9ca3f988ceec3ea74aConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 16 Apr 2024 20:08:28 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: a53b67a944504dc29b0ffcb56520cdbfConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 16 Apr 2024 20:08:28 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 17701f1a2c3e4c9b8c722e513d3fd923Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 16 Apr 2024 20:08:28 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 51d3485c78704030a8efca8662f52437Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 16 Apr 2024 20:08:28 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: dfb90949983945d5b7557ddf41d579f2Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 16 Apr 2024 20:08:29 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: b48fa8801d2a46e390e2298315a46b01Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 16 Apr 2024 20:08:30 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 98edb8971b374203ba4e879deaf767dfConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 16 Apr 2024 20:09:28 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 506e3f072f7c4399bae9a738d05ee719Connection: close

Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_217.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_262.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_262.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_217.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_217.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_217.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_217.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_262.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_262.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_262.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_238.1.dr	String found in binary or memory: https://dropbox-api.arkoselabs.com/v2/
Source: chromecache_265.1.dr	String found in binary or memory: https://dropbox.com/ux_analytics
Source: chromecache_217.1.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_262.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_164.1.dr, chromecache_223.1.dr, chromecache_239.1.dr, chromecache_168.1.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_168.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_262.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_262.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_262.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_262.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_262.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_192.1.dr	String found in binary or memory: https://www.dropbox.com
Source: chromecache_278.1.dr, chromecache_262.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_262.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.
Source: chromecache_278.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.17:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.17:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.29.6:443 -> 192.168.2.17:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.17:49918 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@22/248@33/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5748 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6064 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5748 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6064 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://dropboxcaptcha.com/	0%	URL Reputation	safe
https://dropboxcaptcha.com/funcaptcha.js	0%	URL Reputation	safe
https://dropbox-api.arkoselabs.com/v2/	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stun-anycast.l.google.com	74.125.250.129	true	false	high
play.google.com	142.251.15.101	true	false	high
dropboxcaptcha.com	18.160.48.194	true	false	unknown
www-env.dropbox-dns.com	162.125.9.18	true	false	unknown
www.google.com	64.233.177.104	true	false	high
fp.dropbox.com	18.165.116.50	true	false	high
stun.fpapi.io	unknown	unknown	false	unknown
www.dropbox.com	unknown	unknown	false	high
cfl.dropboxstatic.com	unknown	unknown	false	high
stun.l.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://fp.dropbox.com/CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18	false		high
https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0	false		high
https://dropboxcaptcha.com/funcaptcha.js	false	URL Reputation: safe	unknown
https://www.dropbox.com/2/auth_logger/log_auth_event	false		high
https://www.dropbox.com/log/ux_analytics	false		high
https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true	false		high
https://www.dropbox.com/page_success/end?edison_page_name=scl_invitation_signup&path=%2Fscl%2Ffi%2Ft43c0einrh377rm9dtyva%2FInvoice-0786.pdf&request_id=94973927328f48bc90f3a86eccb3af0f&time=1713298092	false		high
https://www.dropbox.com/2/client_metrics/record	false		high
https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1	false		high
https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true	false		high
https://www.dropbox.com/log/telemetry	false		high
https://www.dropbox.com/jse	false		high
https://www.dropbox.com/2/pap_event_logging/log_events	false		high
https://www.dropbox.com/2/udcl/log_timing	false		high
https://dropboxcaptcha.com/	false	URL Reputation: safe	unknown
https://www.dropbox.com/web-grpc/edison/prompt.PromptEdisonFetch/EdisonPromptPropsFetch	false		high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false		high
https://www.dropbox.com/log_js_sw_data	false		high
https://www.dropbox.com/pithos_api_helper_validation	false		high
https://www.dropbox.com/l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk	false		high
https://www.dropbox.com/page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=8897cfc2bf474bc2b5440b4de5ca7d80&time=1713298096	false		high
https://www.dropbox.com/sso_state	false		high
https://www.dropbox.com/web-grpc/edison/fingerprintjs.FingerPrintJSService/FetchConstants	false		high
https://www.dropbox.com/2/campaigns_toolkit/get_best_campaigns_for_user	false		high
https://www.dropbox.com/2/account/check_user_with_email_exists	false		high
https://www.dropbox.com/alternate_wtl_browser_performance_info	false		high
https://www.dropbox.com/alternate_wtl	false		high
https://www.dropbox.com/pithos/api_helper_validation	false		high
https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_262.1.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_262.1.dr	false		high
https://dropbox-api.arkoselabs.com/v2/	chromecache_238.1.dr	false	URL Reputation: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.	chromecache_262.1.dr	false	URL Reputation: safe	low
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_262.1.dr	false		high
https://cloud.google.com/contact	chromecache_262.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	chromecache_217.1.dr	false		high
https://reactjs.org/link/react-polyfills	chromecache_168.1.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_262.1.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_278.1.dr, chromecache_262.1.dr	false		high
https://support.google.com/recaptcha	chromecache_262.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout	chromecache_217.1.dr	false		high
https://www.dropbox.com	chromecache_192.1.dr	false		high
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_164.1.dr, chromecache_223.1.dr, chromecache_239.1.dr, chromecache_168.1.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_262.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)	chromecache_217.1.dr	false		high
https://dropbox.com/ux_analytics	chromecache_265.1.dr	false		high
https://recaptcha.net	chromecache_262.1.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_262.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_262.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_262.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment	chromecache_217.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.125.9.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
142.251.15.101	play.google.com	United States	15169	GOOGLEUS	false
74.125.250.129	stun-anycast.l.google.com	United States	15169	GOOGLEUS	false
18.160.48.194	dropboxcaptcha.com	United States	3	MIT-GATEWAYSUS	false
64.233.177.106	unknown	United States	15169	GOOGLEUS	false
64.233.177.104	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.165.116.50	fp.dropbox.com	United States	3	MIT-GATEWAYSUS	false
64.233.177.102	unknown	United States	15169	GOOGLEUS	false
18.165.116.52	unknown	United States	3	MIT-GATEWAYSUS	false

Private

IP
192.168.2.17
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1427015
Start date and time:	2024-04-16 22:07:36 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.dropbox.com/l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@22/248@33/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.105.94, 64.233.185.102, 64.233.185.101, 64.233.185.139, 64.233.185.100, 64.233.185.138, 64.233.185.113, 172.253.124.84, 34.104.35.123, 104.16.99.29, 104.16.100.29, 173.194.219.84, 172.217.215.95, 74.125.136.95, 142.250.9.95, 142.250.105.95, 173.194.219.95, 172.253.124.95, 142.251.15.95, 74.125.138.95, 108.177.122.95, 64.233.185.95, 64.233.176.95, 64.233.177.95, 108.177.122.84, 172.217.215.94, 173.194.219.94, 108.177.122.139, 108.177.122.138, 108.177.122.100, 108.177.122.101, 108.177.122.102, 108.177.122.113
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, cfl.dropboxstatic.com.cdn.cloudflare.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, evoke-windowsservices-tas.msedge.net, update.googleapis.com, clients.l.google.com, www.gstatic.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://www.dropbox.com/l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 19:08:10 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9905309402718254
Encrypted:	false
SSDEEP:	48:8dodiTj7YsHiidAKZdA1JehwiZUklqeh+5y+3:8dpkdH5y
MD5:	93FB8DFBA672A68C643A5BFA296AD218
SHA1:	97875640D83532A8DBB1E5F8F83159BB1D81D907
SHA-256:	34998504C6015A8EB4CA730D3F7102C4CD3E467A1A9E69D89CFBBBB2CA080ACA
SHA-512:	0C4CF7C7C40C110C1FD86863EB15037F18355F9552B9541690C6CAC481FF343078ACE35C4FB8B6A380D57C83EDA5EC167CD25BD1B4F964FA1CECD08D22BBC862
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......I.9.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........SN.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 19:08:10 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.008802483862027
Encrypted:	false
SSDEEP:	48:8rodiTj7YsHiidAKZdA10eh/iZUkAQkqeh35y+2:8rpkH9Q85y
MD5:	763445A6D95CAE2855B1468BDB75D971
SHA1:	EFD9730D7C5FAFF108F6ACEB15E4F152F0AD93F4
SHA-256:	6C14091E8399B8F73613E7EE47B15AE71192A625C9931BC6B95AC7BAD8B6C7BE
SHA-512:	CC691F1C2A52A4C65D3053368BC759EA2083015A54649BDFFCA6BA539DC0212BCC0A83E8225F8617BBB9FFD929A5819145652DB01E7183B7DA84CA6FB0D6E2A3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......>.9.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........SN.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.015113107600294
Encrypted:	false
SSDEEP:	48:8eodiTj7YjHiidAKZdA14tIeh7sFiZUkmgqeh7sV5y+BX:8epkSn75y
MD5:	33A1ED21D4C62920D1CC6857ACEA916B
SHA1:	2F2E3F0C099231FBA00498085F4B39B402B0F143
SHA-256:	CBC4F118408B3ED6CC9A9EB89DBE3EABEDAD0B9B5792DFA9F27426F290D8DE3F
SHA-512:	1183F32E9B6F2BE31A81603DE039C6191BA388481DA403CA660A9F39FD83156C8DE2A415B66667ED0ADC47C9E094E2BFEDD109A13912BD8B014917804A2A5C2B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........SN.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 19:08:10 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.004350083231647
Encrypted:	false
SSDEEP:	48:8bodiTj7YsHiidAKZdA1behDiZUkwqehz5y+R:8bpkUN5y
MD5:	260B30DB472D9ABD8479B958F37100EE
SHA1:	11914611B62584BD0E34A0110234FFA240EB2E9C
SHA-256:	25BE7245AE1799CEE53BB5A7BE8D57844966F0A9D16C6E3F804A8EFEDAC2FAEA
SHA-512:	CE118382D0D06C3E6D69D0C160AEAD13C5DD07D4555192EC2C8F0ACE5F1447937F4BC3D0A958911788F74270B98C2BAF41E5960E9E6CD44817D6140B5209BDAA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......7.9.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........SN.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 19:08:10 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9932638000629126
Encrypted:	false
SSDEEP:	48:8DodiTj7YsHiidAKZdA1VehBiZUk1W1qeh55y+C:8DpkU9Z5y
MD5:	F8D13AE5D07852652A9CF7278768DDD7
SHA1:	99F0093599332DE080F21373DA309302963E6C9E
SHA-256:	3DFCBC0F74B88C42FD3FFEC42F360EDF7AE002446E0BE4585AF081580AD751F9
SHA-512:	9B5FB20F707FFAF533D909036D88265748AE3BE78219546A5066C7C895DE178B005C792ABBA1F7E64538983EE291F3B75F94C433B5090CA7C234FF9AFA4103A3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....KD.9.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........SN.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 19:08:10 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.007085917895905
Encrypted:	false
SSDEEP:	48:8iQodiTj7YsHiidAKZdA1duT6ehOuTbbiZUk5OjqehOuTb75y+yT+:8iQpk+TTTbxWOvTb75y7T
MD5:	72E403700A7765C4E13372FAFE45D28B
SHA1:	BF48B750EF4D206C5154348D194CCF3D2101444B
SHA-256:	C9D1A5133268FF94EE0C7113D068DCD0A8335CE595668B943361A44819DC11DC
SHA-512:	D26DFDE3B8CF787B13A336D18906B2CD281641E39A05CFFAC88645C8270C4CBA970DE7AC11AD7E422998FFFC7BDDC85CFD13821DA942BF1FC0659A58494A5066
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........9.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........SN.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4720)
Category:	downloaded
Size (bytes):	4768
Entropy (8bit):	4.776680316640226
Encrypted:	false
SSDEEP:	96:sWqPkAQC4nY5Z9IuyDMLoXY8OFKE9lpF56KMBY3MIYiI:seAXqc9IumML38MpFDD3CiI
MD5:	366641E9CB419315F25D1AD2BF70936B
SHA1:	B789F141CB7EA723E10CB6F24428B760977FB9A2
SHA-256:	D8A348DF23957CF3F7400C5A160B6D276D7DF0F16C46B673FD722391E5583586
SHA-512:	A38D2E0DE2B87D1A8CEB9D48DEC9191D231E9ADAF675DC70A4790C180D8909BE407E5F8B51A6A4EA65474AAA18D93E3C995D26B90DDD29312E9FC5B144505924
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_viewer-vflNmZB6c.js
Preview:	define(["exports","metaserver/static/js/modules/constants/viewer","./c_core_uri"],(function(e,s,_){"use strict";class t{constructor(e){this.id=e.id,Object.assign(this,e)}toString(){return String(this.id)}}class i{constructor(e,s){this.active_and_paired_user_ids=s,this.users=e}get_users(){return Object.values(this.users).sort(((e,s)=>+e.linked_user_id-+s.linked_user_id))}is_uid_associated(e){return e in this.users}is_paired(){return this.active_and_paired_user_ids.length>1}has_linked_or_paired_users(){return Object.keys(this.users).length>1}get_unauthed_user_by_uid(e){return this.users[e]}}class r{static get_viewer(){return r._cached_viewer}static get_role_title(e){return this.get_viewer().get_title_with_correct_team_name(e)}static get_root_name(e){return this.get_viewer().get_root_name_with_correct_team_name(e)}static get_is_signed_in(e){return e.is_signed_in}constructor(e={}){this.replace_viewer_data(e)}replace_viewer_data(e={}){this._authed_users={},this._active_and_paired_authed_use

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	103908
Entropy (8bit):	4.976892033924162
Encrypted:	false
SSDEEP:	768:sy1BXGYx9fnn5xdL2Glicgy1wWQcOMhh+iev6Lv9+YOY48j0lAewLKB+NoiVvsGD:71BX7fnn5xdLRlW9v8jko+B+OxbMjh
MD5:	D7A3C32094B126EA229D11DF4960ED0C
SHA1:	AB37565FF9EAAECB989D64CE99197486FFB28C67
SHA-256:	973219C3D63CD492A44CE0C43D9C792DA4E82D4EE52D5884E0FE747D3DADC0CA
SHA-512:	5F9864740A0DEB4DF30BCC9D20711369E0FD5CEFC24AEE5C515AF6B5F6698B964468C4B39DA09DAF32151122D138B73E4DB6F204572506564FA722AA43C33040
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/main-vfl16PDIJ.css
Preview:	body,input,textarea,select,button,.normal{font-family:"Open Sans","lucida grande","Segoe UI",arial,verdana,"lucida sans unicode",tahoma,sans-serif;font-size:13px;color:var(--dig-color__text__base, #000);font-weight:normal}.maestro body:not(.dig-Button),.maestro input:not(.dig-Button),.maestro textarea:not(.dig-Button),.maestro select:not(.dig-Button),.maestro button:not(.dig-Button),.maestro .normal:not(.dig-Button){font-family:AtlasGrotesk,sans-serif}body{background-color:var(--dig-color__background__base, #fff);min-height:100%;margin:0;padding:0}a,a *{cursor:pointer;outline:none}a{color:var(--dig-color__primary__base, #0061ff);text-decoration:none}a:focus{text-decoration:underline}a img{border:0}p,h1,h2,h3,h4,h5{margin:0 0 1em 0;line-height:1.6em}h1{font-size:18pt;font-weight:normal;margin:10px 0}h2{padding-top:3px;padding-bottom:10px;margin-bottom:4px;font-size:10pt}h3{padding:0;margin:0;font-size:10pt}h4{margin:0 0 0.5em 0;font-weight:bold;font-size:14px}h5{margin:0 0 0.5em 0;font-

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	4.8021925847933264
Encrypted:	false
SSDEEP:	6:FHHBsqRW4liwXAzDDKS9XRJfynmDMUc0DdXgP8F:1hHlipD1UnWMUUG
MD5:	3E904D06E56BD470498071EF9F7403BE
SHA1:	F99226A89C61F90A6FA6E3601E7B933DAD057A11
SHA-256:	AC66E676723D630FDEC99090F7F476E9F933773409EEE8B4CC9157A3E3856794
SHA-512:	7D46BEFCC17FB685D228B1D5BA04D242DB3371AE77FAFDBAF242392561EDE24136FF47703DC41A9728E6EF38D12A902498A46A1B94702FA85BE8B39F9B338D2B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison_init_edison_page-vflPpBNBu.js
Preview:	define(["exports","./c_init_data_runtime","./e_edison","./e_core_exception","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison"],(function(i,e,t,_,n,o,r){"use strict";i.initPage=t.initPage,i.initialize_module=t.initFromDws}));.//# sourceMappingURL=e_edison_init_edison_page.js-vfl51Wdck.map.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (605)
Category:	downloaded
Size (bytes):	120585
Entropy (8bit):	5.370923647345209
Encrypted:	false
SSDEEP:	1536:6s276dU+/c7hEUuoiwbUgLYUR16SLq959TDqReyDjG9M5nvr2aIgq20PH:12lCy6LSl16S4PTODj+MZDDRs
MD5:	23BFE7E99565EE8F34AFD63C06F4C24B
SHA1:	BF08B8AD1AD73C12A7C9CB211926CE23A861DB07
SHA-256:	9DB33292007AB6C38527B39D5663E976A305564E19B2A5A8713EA2B2C00F505D
SHA-512:	F6318DAF93E2C1EF27CCB2D84E4F10AC430F7E3194D29C7CD066332995318BB96609FAC18EDC827355799244B9BF1570C0807B429CDCED4C4B890C5F00DDF477
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/react-dom-vflI7_n6Z.js
Preview:	/** @license React v17.0.2. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(M,ha){"object"===typeof exports&&"undefined"!==typeof module?ha(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],ha):(M=M\|\|self,ha(M.ReactDOM={},M.React))})(this,function(M,ha){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function Ta(a,b){gb(a,b);gb(a+"Capture",b)}function gb(a,b){Ib[a]=b;for(a=0;a<b.length;a++)zf.add(b[a])}function li(a){if(Af.call(Bf,a)

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3491)
Category:	downloaded
Size (bytes):	3559
Entropy (8bit):	5.065053693189517
Encrypted:	false
SSDEEP:	96:6nLHJkcmcEQ0kYSZbAgDoJ91A+OShAeAwflTT:qlkcmlkRQ/
MD5:	5A9A1990481F6C4B0AFF64192A3D2DC8
SHA1:	D0EE02BA86BCE2EAAC7F9463BBEDD46068B73084
SHA-256:	E2F54D98C3200FEC2547F0A73B5FA041D766F5C65EBFF38FA2A5A3BF2E4EC8EC
SHA-512:	385B08381C6D1DB13F0E0CD693C26FF8318A85A3F36FD5F68666E0FB5F3C3707BA05FF7E0DB669437F84E25939410BC24B9BD3CC2438893841616142C0C44AD9
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_teams_idle_timeout_pagelet-vflWpoZkE.js
Preview:	define(["exports","./e_edison_scl_invitation_signup","react","./e_core_exception","./c_react_query_helpers_helpers","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_uri","./c_init_data_runtime","metaserver/static/js/modules/constants/viewer","./e_edison","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_sink_index","./c_core_xhr","./c_rfc4648_lib_rfc4648","./c_core_attribution_header","./c_api_v2_noauth_client","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","react-dom","metaserver/static/js/modules/constants/web_experience_constants","./c_lodash-es_lodash","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","metaserver/static/js/modules/constants/file_viewer_configuration","metaserver/static/js/modules/constants/file_viewer_feature_experiments","metaserver/static/js/modules/constants/locales"],(function(e,t,s,i,r,c,o,n,a,d,h,_,v,m,u,p,l,I,y,A,R,F,f,S,w,M,U,g){"use strict";const E=["keypress","keydown"

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52402)
Category:	downloaded
Size (bytes):	52460
Entropy (8bit):	5.3568882673248925
Encrypted:	false
SSDEEP:	768:5xN2UFSuqnKVzQFv4wqKmV2AE2nVLwHDwsjh+8QoJOW+nTyoRKPOFpnw5FFdXkfn:5xNXWZMsjNYW+tsPYIaFzLIHsn3
MD5:	2D38135994C678D7640482640774DE39
SHA1:	28D6E93C409A6DF7408CA134D04A788B17499828
SHA-256:	D15AF9827C1B2B2E300C8A04FBF14717BD643FE77E36621CD3523AB432124978
SHA-512:	32913DE21347C771083D636AD0C3D69AA58D9F8B2373EF41CDF71668CFAB4ABB839006B2751CEBADA245237602AA12390DBB13555311408F902B7BED55DE61A8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_chat_chat_client-vflLTgTWZ.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_rfc4648_lib_rfc4648","./c_core_notify","./e_edison_scl_invitation_signup","./c_core_uri","./c_core_i18n","react-dom","react","./e_core_exception","./c_src_sink_index"],(function(t,e,i,a,s,n,r,o,h,c,d,p){"use strict";function m(t){return t&&t.__esModule?t:{default:t}}function g(t){if(t&&t.__esModule)return t;var e=Object.create(null);return t&&Object.keys(t).forEach((function(i){if("default"!==i){var a=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,a.get?a:{enumerable:!0,get:function(){return t[i]}})}})),e.default=t,Object.freeze(e)}var l=g(h),_=m(c);function u(t){return"1508d082-aa3d-468f-9ac3-cfeb7d5a8435"===t\|\|"c0b3fc4d-5e75-4c65-b5c0-db72be2085f7"===t}var C,S,T,E;e.ChatProviderType=void 0,(C=e.ChatProviderType\|\|(e.ChatProviderType={}))[C.SNAPENGAGE=0]="SNAPENGAGE",C[C.DIALOGUE_CHAT=1]="DIALOGUE_CHAT",C[C.SOLVVY=2]="SOLVVY",i.proto3.util.setEnumType(e.ChatProviderType,"chat.ChatProviderType",[{no:0,name:"SNAPENG

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4787)
Category:	downloaded
Size (bytes):	4887
Entropy (8bit):	5.270860802966812
Encrypted:	false
SSDEEP:	96:VONsXQ+FkU3YFgQ+F5UT/nfl2gLNxMdGaBQGjHfQ94XvOH:VmmQ+FkU3YFgQ+F5UT/n92gLHdaBQG7s
MD5:	1DB6D4FD47F26888CB9787D97FC00EC0
SHA1:	7E0F0236E67678426A357D5CDC7F75773F5A4E44
SHA-256:	85CC4203336C5900A1D094989172DF90925D5704EFCB314F5EB7633CDC811137
SHA-512:	B40BA785F2D8F10CBDD0ED3252047EDB98259B2A58C9B6F880466F45D76EEFAD5201EF7866090B8242C31EF0E561622BD45E827B5ACEC344808B9E404DEBB813
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_user_centric_perf_metrics_component_visually_complete_ajax-vflHbbU_U.js
Preview:	define(["exports"],(function(e){"use strict";var t,i,s;e.ApiV2HeaderNames=void 0,(t=e.ApiV2HeaderNames\|\|(e.ApiV2HeaderNames={})).DropboxApiArg="Dropbox-API-Arg",t.DropboxApiSelectAdmin="Dropbox-API-Select-Admin",t.DropboxPathRoot="X-Dropbox-Path-Root",t.DropboxUid="X-Dropbox-Uid",t.DropboxTeamId="X-Dropbox-Teamid",t.DropboxTeamAuthorization="X-Dropbox-Team-Authorization",t.CsrfToken="X-CSRF-Token",t.DropboxForceQuic="X-Dropbox-Force-Quic",function(e){e[e.TeamAdminRole=0]="TeamAdminRole",e[e.MTARole=1]="MTARole",e[e.FederationAdminRole=2]="FederationAdminRole"}(i\|\|(i={})),function(e){e[e.AdminAction=0]="AdminAction",e[e.AssumeAction=1]="AssumeAction",e[e.OnBehalfOfAction=2]="OnBehalfOfAction"}(s\|\|(s={}));const n=6e4;class o{constructor(){this.pendingRequests=0,this.subscribers=new Set,this.didNetworkTimeOut=!1,this.next=e=>{this.subscribers.forEach((t=>t(e)))},this.startCleanupTimeout=()=>{this.abortCleanupTimeout();this.cleanupTimeout=window.setTimeout((()=>{this.didNetworkTimeOut=!0,t

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (544)
Category:	downloaded
Size (bytes):	11440
Entropy (8bit):	5.360613902337515
Encrypted:	false
SSDEEP:	192:8cL60YrI90CW3j4xqLYfMHaPsiJcW9eYcfZcTQWhGJykDZNZ3e:9L6hrI90CW3jhgUiJc+eYcfZ3W0JySN0
MD5:	61699B70CF57ABE63FDF5F4007D36EC1
SHA1:	6C05189CC2D08BB2A7609C002F0675C9C670D362
SHA-256:	229BBF4D0E7488209564152C6723497F1AC3934136CA1684233D2FA88FA4146F
SHA-512:	AA5CC8794B5383B781A6611A4B5D8D660C73E766186551799B28FCF668C911EB0177FA04F543EC60E5F64005F3BCE019604BD0A2129D718F33284D3689F5C398
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/react-vflYWmbcM.js
Preview:	/** @license React v17.0.2. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=Y&&a[Y]\|\|a["@@iterator"];return"function"===typeof a?a:null}function y(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,e=1;e<arguments.length;e++)b+="&args[]="+encodeURIComponent(arguments[e]);return"Minified React error #"+.a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function v(a,b,e){this.props=a;this.context=b;this.refs=Z;this.updater=e\|\|aa}function ba(){}function K(a,b,e

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21663)
Category:	downloaded
Size (bytes):	21716
Entropy (8bit):	5.286903626672907
Encrypted:	false
SSDEEP:	384:eNChqKqEpDdlbv83lMJ/dp9QW9u0Ivimh07EWVd0ChidNU+MQ9:ndJv8VMJ39j9u0IKmId0Chid1MQ9
MD5:	10F3FA701AF7A3CB6F9E8054D4AEBC62
SHA1:	A18AFB404DC5405CCBB850D4371AAB5119779302
SHA-256:	40CF8DA6EAE259A4BC031CEDBE0844AB5B09D2A78ADE4A30B4FCB86237186CBB
SHA-512:	C6A0D90942BCBB6C0668B4A473187B554EA7D233838DA10727C15832CE353B3F938BE3907BD8173FDE6B4722D66F7675AEC53BF0033F82E2A57BC3045CD774EF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_notify-vflEPP6cB.js
Preview:	define(["exports","react-dom","react","./e_edison"],(function(e,t,n,r){"use strict";function i(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}var o=i(t),a=i(n);var s=Object.hasOwnProperty,c=Object.setPrototypeOf,l=Object.isFrozen,u=Object.freeze,d=Object.seal,f=Object.create,p="undefined"!=typeof Reflect&&Reflect,m=p.apply,h=p.construct;m\|\|(m=function(e,t,n){return e.apply(t,n)}),u\|\|(u=function(e){return e}),d\|\|(d=function(e){return e}),h\|\|(h=function(e,t){return new(Function.prototype.bind.apply(e,[null].concat(function(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);t<e.length;t++)n[t]=e[t];return n}return Array.from(e)}(t))))});var y,g=M(Array.prototype.forEach),v=M(Array.prototype.pop),T=M(Array.prototype.push),b=M(String.prototype.toLowerCase),_=M(St

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1280170
Entropy (8bit):	5.547128889964881
Encrypted:	false
SSDEEP:	24576:nS7OYzzlWBDghXPhNb2TOyndDyXamzeIYPQXVKq924JzZHgCyiX6j6lSTrCU:nS7OYzzcBDghXPhNb2TOyndDyXamzeIA
MD5:	D7BF2E3664A1A5ADAF7DFD357CA59B1F
SHA1:	A3417D40B8BD1416F2A8F49A59D23A4049373EC9
SHA-256:	1467A8637A285BE8D2AED1D81D2528D4C89821C1080EF85371284D34BEF2552C
SHA-512:	3F340400158EC88F2DA1E2372D6214B51C1CC2CC7ED5D401776E7CAE0F0913F9E759A1252C43C9DDA461CC1D39CC7F35C533DF4ADFAB97E0B25FDEB04EFE121F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/e_edison_scl_invitation_signup-vfl178uNm.js
Preview:	define(["require","exports","react","./e_core_exception","./c_react_query_helpers_helpers","./c_init_data_runtime","./e_edison","./c_apex-metrics_src_types","./c_src_sink_index","./c_core_xhr","./c_core_uri","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_i18n","./c_rfc4648_lib_rfc4648","./c_core_attribution_header","./c_core_notify","react-dom","metaserver/static/js/modules/constants/web_experience_constants","./c_lodash-es_lodash","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","metaserver/static/js/modules/constants/file_viewer_configuration","metaserver/static/js/modules/constants/file_viewer_feature_experiments","metaserver/static/js/modules/constants/locales","metaserver/static/js/modules/constants/viewer","./c_init_data_edison","metaserver/static/js/langpack"],(function(e,t,n,i,a,o,r,s,l,c,d,u,p,m,g,_,h,f,v,E,b,S,w,y,T,C,I,O){"use strict";function N(e){if(e&&e.__esModule)return e;var t=Object

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1353)
Category:	downloaded
Size (bytes):	1419
Entropy (8bit):	5.004045923311685
Encrypted:	false
SSDEEP:	24:1bmHf9EzCHD0NR9AYM4gsTW6pgDaqDatRRCur+swRFvVGzrem8sH2:1af0XmYMcsa2atcjEzr2sH2
MD5:	4D83CD35A5B3138D895EA13588222C8F
SHA1:	2C86E768E75EB2F2846502D5D20C142A9912A590
SHA-256:	90FD413CA296A562B99A32806EC8AA799455B0D252DEC24B2580FA45F621881A
SHA-512:	8C364530213F4985A705CC900C34348C263D0AFBFFE8E562A0C49ACC9C8018C73DEB39279C7051078ACE56DC53BC0ECFCECC7FE1AAAB6CC5777C19353E53FDC3
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison_edison_react_page-vflTYPNNa.js
Preview:	define(["require","exports","react","react-dom","./e_edison","./c_init_data_runtime","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison","./e_core_exception"],(function(e,t,o,n,r,d,c,i,a,l){"use strict";function u(e){return e&&e.__esModule?e:{default:e}}var s=u(o),f=u(n);t.render=function(t,o=!1,n="",c=!1){if(!t.RootComponent){const e=function(){const e=d.getInitData().debugPanelInfo;if(e)return e.clone()}();throw new Error(`Module '${null==e?void 0:e.entryPointModuleName}' does not export a React component named RootComponent.`)}let i={};if(n&&n.length>0){const{encodedProto:e}=d.unmarshalProto(n,r.InitProps);i={encodedProto:e}}const a=c?s.default.createElement(s.default.StrictMode,null,s.default.createElement(t.RootComponent,i)):s.default.createElement(t.RootComponent,i),l="root";let u=document.getElementById(l);null===u&&(u=document.createElement("div"),u.id=l,document.body.appendChild(u));const m=r.Edison.getMetrics();m.recordRenderStarted(),s.default.version.start

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9688)
Category:	downloaded
Size (bytes):	9752
Entropy (8bit):	5.276706544083514
Encrypted:	false
SSDEEP:	192:5k4dvwpio1gGa6dnACvdQvHthR0sCaOHx41Zm0hX1sT914ouWk7/m8nhOE0KmsJw:nlwpio1xpqCvdQvthR0sCvHx41Zm0hXw
MD5:	506A9584ABD4EAA99B53D76D6BA0144B
SHA1:	5B6450A6339306D3F925CB188CDB6A7A0337838F
SHA-256:	EEF1B33343539D8827847D82CCA73783B894C6CB877A5C57C184C1B72D027912
SHA-512:	124DE6E78F95F2797D151BAB56AF24FA683CAC4D7CC498F5B8D28F9F40F7D1166EEB148638762B4652160A9C7C51272B6ECEC20A8373C5C031E88427B7C3A3A6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_abuse_funcaptcha_modal-vflUGqVhK.js
Preview:	define(["exports","react","./e_edison_scl_invitation_signup","./c_core_uri","./e_core_exception","metaserver/static/js/modules/constants/login_and_register","./c_apex-metrics_src_types","react-dom","./c_src_sink_index","./c_react_query_helpers_helpers","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_init_data_runtime","metaserver/static/js/modules/constants/viewer","./e_edison","./c_init_data_edison","./c_core_xhr","./c_rfc4648_lib_rfc4648","./c_core_attribution_header","./c_api_v2_noauth_client","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","metaserver/static/js/modules/constants/web_experience_constants","./c_lodash-es_lodash","./c_security_crypto","metaserver/static/js/modules/constants/file_viewer_configuration","metaserver/static/js/modules/constants/file_viewer_feature_experiments","metaserver/static/js/modules/constants/locales"],(function(e,t,s,i,a,n,r,c,o,h,p,l,d,_,u,f,m,g,y,v,D,w,C,A,b,P,$,k){"use strict";function E(e){return e&&e.__e

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54939)
Category:	downloaded
Size (bytes):	55320
Entropy (8bit):	4.946031865259786
Encrypted:	false
SSDEEP:	768:TAZXM3pHnMxWKZB5HVNN6vMEzJWJd2wtg+3R9/Yo/GrdrYqLZ81A1t/OF+rwbxrO:TAZXapg3R9v/Grd9LBOFZxrnO
MD5:	250DD7BB2E374710798456A4C572D310
SHA1:	9B3D1D22932D5FAFD6DD05FD06D1885FE6CE6691
SHA-256:	F79612EE221ED657AD63B4ED70673AC24DEA5F4027078EF287686F3EDCFE90D2
SHA-512:	E2CF5BEAB1CFAC56DC5830E428F210E1E50ED0DA4C1921B9DED4D8C650E592427C9B5EC96E4184939B0C7FF2140792930DEF56C4C389CE72B059CC08774C0365
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/tokens-vflJQ3Xuy.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-components@19.18.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-Mode--bright,:root{--scheme__color:light;--scheme__inverse__color:dark;--spacing__base_unit:8px;--spacing__unit--0_5:4px;--spacing__unit--1:8px;--spacing__unit--1_5:12px;--spacing__unit--2:16px;--spacing__unit--2_5:20px;--spacing__unit--3:24px;--spacing__unit--4:32px;--spacing__unit--5:40px;--boxshadow__elevation1:0px 8px 32px rgba(30,25,25,.03),0px 8px 16px rgba(30,25,25,.03),0px 4px 8px rgba(30,25,25,.03),0px 2px 4px rgba(30,25,25,.03),0px 1px 2px rgba(30,25,25,.03);--boxshadow__elevation2:0px 16px 80px rgba(30,25,25,.03),0px 32px 48px rgba(30,25,25,.03),0px 16px 32px rgba(30,25,25,.03),0px 8px 24px rgba(

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (667)
Category:	downloaded
Size (bytes):	729
Entropy (8bit):	5.08588424060212
Encrypted:	false
SSDEEP:	12:1hXB6ll9+n4K91BAtTk5O/sEF0Xhk+kZ8T7KC+5XLFUs/BZzWxKHW5iQyozQc:1hX8c4A1B0k5O/Uh/km7KVLCoBZzWxrJ
MD5:	391DF6D8943BD72729FFAE6D12FFCC1F
SHA1:	639C7997CD036AA108FFD006750974C3EDB421C9
SHA-256:	D0891DBFBD95E964CB336D1006DD9ADDEAA7E3450ED687A30C445D9BA0090E22
SHA-512:	00E5F38CD9B9A327F51D7F3265B754990C8B90B349F0C6905E4FDB0006C68AA0C8C26807A8A135980AE852186A47D55CA0F77BC88EBDAAA0B00ED89A97097825
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_edison_cookies_check-vflOR322J.js
Preview:	define(["exports","./c_core_notify","./c_rfc4648_lib_rfc4648","./c_core_i18n","react-dom","react","./e_edison","./c_init_data_runtime","./e_core_exception","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_sink_index","metaserver/static/js/langpack"],(function(e,t,c,i,s,r,n,o,_,a,d,f,u,l){"use strict";e.ensureCookiesAreEnabled=function(){return!!c.Cookies.are_enabled()\|\|(window===window.top&&t.require_css("/static/metaserver/static/css/notify-vfl4oJv2S.css").then((()=>{t.Notify.error(i.intl.formatMessage({id:"G39vbK",defaultMessage:"Unable to access strictly necessary cookies. The website might not function correctly."}))})),!1)}}));.//# sourceMappingURL=c_edison_cookies_check.js-vfltSikrD.map.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1052)
Category:	downloaded
Size (bytes):	1103
Entropy (8bit):	4.760291881629183
Encrypted:	false
SSDEEP:	24:1hNfhWim4A1BZWV6zEk5jhWiXVBhWiTkHQnhWiphWiIfhWi/RK38oWJwWA:1hanLHzj5kwNJ
MD5:	16689ACAEF4F6C3A7036903379D21499
SHA1:	789D214DBA3F828C508FA9869E0C16BC38F7457D
SHA-256:	AC1F0921885A2805CBDE3B2A45FE69AAA4C131A6B3D25200C95FEFA8A9544B2E
SHA-512:	B23F1C4F6B72655825BDE8ACF02C89676C5A867A9300E061C71B8EDE1948776305B757E256843196BFDFC2400A77DCD8E9B3B58067A3CC35109018692070C391
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_mjs_index-vflFmiayu.js
Preview:	define(["exports","./e_edison_scl_invitation_signup","react","./e_core_exception","./c_react_query_helpers_helpers","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_uri","./c_init_data_runtime","metaserver/static/js/modules/constants/viewer","./e_edison","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_sink_index","./c_core_xhr","./c_rfc4648_lib_rfc4648","./c_core_attribution_header","./c_api_v2_noauth_client","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","react-dom","metaserver/static/js/modules/constants/web_experience_constants","./c_lodash-es_lodash","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","metaserver/static/js/modules/constants/file_viewer_configuration","metaserver/static/js/modules/constants/file_viewer_feature_experiments","metaserver/static/js/modules/constants/locales"],(function(e,t,c,s,_,r,n,i,o,a,l,m,u,d,p,v,f,x,j,I,g,h,y,w,b,k,C,P){"use strict";e.IconContext=t.IconContext,e

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57485)
Category:	downloaded
Size (bytes):	57536
Entropy (8bit):	5.56289638591114
Encrypted:	false
SSDEEP:	1536:pHN3NpnQ2oY8jG823v+xK3Imhe0nRxzvwN3NpnQ2oY8zG/mPIrlTb2PyUhK03DKh:RN3NpnQ2oY8jG823v+xK3Im40UN3Npnd
MD5:	9344C1ACA08405FF26D245EA6D33379D
SHA1:	ACB6C050B2830F8FC108B5174F6A138D49C9974A
SHA-256:	8D9948E65D622C35A926726F17860B9F76A87FAD28CA7FFEEE697F6241D6A2AE
SHA-512:	15A59E9F2F487AC63FFAEAB71D411C82E486A481507C606220324A6626E3E7EF9ADFF0A89C3E23FAA8256866BD4CF2B4ABDB3BC28399F97506743E4D07C24625
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_i18n-vflk0TBrK.js
Preview:	define(["exports","./e_core_exception","./c_src_sink_index","./c_init_data_runtime","metaserver/static/js/langpack","react"],(function(e,t,r,n,i,o){"use strict";function a(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)}var s=a(i),u=a(o),l=function(e,t){return l=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},l(e,t)};var c=function(){return c=Object.assign\|\|function(e){for(var t,r=1,n=arguments.length;r<n;r++)for(var i in t=arguments[r])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},c.apply(this,arguments)};function f(e,t){var r={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(r[n]=e[n]);if(null!

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (362)
Category:	downloaded
Size (bytes):	363
Entropy (8bit):	4.770323504150667
Encrypted:	false
SSDEEP:	6:UWxZrbwYEdZ81oAhkRao4HNVcYosKWxZiiZdRjIrRI4TWxZiiZJBRI4eu+kEypv:U6pbwYEbrAhF9NVcYbX/sRIv/PRIbuxd
MD5:	7D3C66659E01077F47CBDD74349E60FA
SHA1:	86EC17A2B340E0E3BD6B84E38CE741D0867C0B9F
SHA-256:	B4374EBF2AD5928DC936BB92738388059F1A6DF117AA47FB33F741B8DA23F864
SHA-512:	EEDF041724AE168E147CF0C92E342C1BD3EE7468FAFF63FB781B476B2541D18E26F1FB133597C4F92A3485ECAA15496AAC7A0DF41BC387CB4462AD4CDF5DC41F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/sharing/shared_folder_invitation_google_one_tap-vflfTxmZZ.css
Preview:	.sf-invite-signup-page .login-register-container .one-tap-tos__terms-container .checkbox_label{margin-left:0;position:static;line-height:18px !important;font-weight:400 !important}.sf-invite-signup-page .one-tap-tos{background-color:#fff;max-width:415px}.sf-invite-signup-page .one-tap-tos__modal{max-width:415px;display:block;margin-left:auto;margin-right:auto}.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4418
Entropy (8bit):	4.550570902126072
Encrypted:	false
SSDEEP:	96:D9zCIF3c3CSTICP18YV8cqkvTy1GyB9W8uNg6WyWCHbI/zbQxapyQUZQvHbQB5xA:D9zCIFsSSTICP18YV8cqkvTcGm9W8uNg
MD5:	D6C32610BC01D28D09392E8CAE4869E6
SHA1:	1A248754B2853D6FFA0381BBA3C4CA65C1AF19C5
SHA-256:	107F84EDAF1294B3B3681D48FAFE9DE85165493D55EA9C361FA08ECBD7994148
SHA-512:	1F62F8FC1A3C6165019B7D736E04154D55C5135F83AE3A67E07FE55C00A2714297061C93A79DD5A9B710C6AC00F5286EC4E9992836802C223F5A4AECD518112D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/legacy-token-migration-vfl1sMmEL.css
Preview:	/* .In-Theme-Provider is the generic class we use to say we're inside of DIG's theme provider..we use it here as a way to ensure that the specificity of this selector can beat `0 1 0` assuming.it is loaded after the other dig tokens..*/..In-Theme-Provider {. --color__standard__background: var(--dig-color__background__base);. --color__faint__background: var(--dig-color__background__subtle);. --color__elevated__background: var(--dig-color__background__raised);. --color__standard__text: var(--dig-color__text__base);. --color__faint__text: var(--dig-color__text__subtle);. --color__standard__border: var(--dig-color__border__base);. --color__faint__border: var(--dig-color__border__subtle);. --color__disabled__text: var(--dig-color__disabled__base);. --color__disabled__border: var(--dig-color__disabled__base);. --color__disabled__background: var(--dig-color__disabled__base);. --color__core__accent: var(--dig-color__primary__base);. --color__attention__text: var(--dig-color__pr

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	96
Entropy (8bit):	5.647055208874203
Encrypted:	false
SSDEEP:	3:KXE05c0rC4EwZrtGtjRuQqV/XzggKtyCgRd3U4Y:KXEr0W+Zr0tj7CXzgPtyU
MD5:	8D9EE6476597D6CAE766C651D343B976
SHA1:	D31AB7FE6B025778D3C5CE424ADEF5F2B91F55D5
SHA-256:	7E0C92C1D2D2620896D6FDD3927E6C83FD56309612A05B05956686E2005CA7AD
SHA-512:	16AD6B73DEE0DB8FA5A07CA5438F31EBCD9598266667FF0A91E81C2B9FDB381CA9549C1D5B92C2122DDAC3CFDE84E7C47DBDD0AA87E213BBA41D0AFAFFFEA1D1
Malicious:	false
Reputation:	low
Preview:	2fcraRqPzAFAnDqcyJ+9Ilmkbg2MaV9j/iTEK1uFcTWzXSGGGKv4L3F3kw5H1O0rJrwjGE0Zx5/bhN4RJugpoXdH8EW1uw==

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2099)
Category:	downloaded
Size (bytes):	2156
Entropy (8bit):	5.2479673187776985
Encrypted:	false
SSDEEP:	48:1aXkK24gCpxPUmizzUI6wKug/sLmxbaUoPLS:WZ24gYYwI6wKug/syxbaXW
MD5:	F77250E0EFE74549BDB944F47C9FCB47
SHA1:	BB9407BB3E11799F95B829271637913AAF1177DD
SHA-256:	B8F5E9440EA0ACE133BC11771970A4D105A24584AD118CD8D73758A58894D0CD
SHA-512:	6EBFFA04F53AFBB7E9A86508C35F0401C92EBC3C294C74281AF0497B5CF31BFFFEFBF28B048616CE3C8CF4915F2E810502858DFF6FC171E43324EA28B20B6CA0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_security_crypto-vfl93JQ4O.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_apex-metrics_src_types"],(function(e,t,n,r){"use strict";function i(e){return String.fromCharCode(...new Uint8Array(e))}function o(e){const t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n);return t}function c(){return n.__awaiter(this,void 0,void 0,(function*(){const t=r.edge&&!r.edgeChromium();if(void 0!==window.crypto.subtle&&!t&&!r.checkBrowserVersion(r.chrome,40,!1))return window.crypto;if(t){const{legacyEdgeWrapper:t}=yield new Promise((function(t,n){e(["./c_security_legacy_edge_shim"],t,n)})),n=t();if(void 0!==n)return n}throw function(e){const t=new Error(e);return t.isBrowserNotSupported=!0,t}("WebCrypto not supported")}))}t.b64urldecode=function(e){return o(atob(e.replace(/_/g,"/").replace(/-/g,"+")))},t.b64urlencode=function(e){return function(e){return btoa(e).replace(/\//g,"_").replace(/\+/g,"-")}(i(e))},t.bytesToString=i,t.encryptWithPublicKey=function(e,t,r){return n.__awaiter(this,void 0,v

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51287)
Category:	downloaded
Size (bytes):	51356
Entropy (8bit):	5.105997912665954
Encrypted:	false
SSDEEP:	768:nBOkM5rodNkeBD2Y0lXGHrbbyv8Rok/D2mKfBpb8RhPRUtmi1EFmn9B1az5mtr2D:Bz2e+8IfbuuTv9Lat8C
MD5:	2B78FC32690682B2275760850331C4D5
SHA1:	F2C36B7D5C6BB25688FA42FCAE3576BDD06CF05E
SHA-256:	5C07793D2FF05D2894BFFB5A9EEB2674BBADE259CBB857E4E330521340F9F8AC
SHA-512:	A41D8120EBEE47505A7619730424998C9929D894165C25869FF566145B6B32A240E7BD6327956AD2CFFF49C15462DEE8557C3C52F827F14CE761F8E30E6F1AE5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_react_query_helpers_helpers-vflK3j8Mm.js
Preview:	define(["exports","react","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_uri","./e_core_exception","./c_init_data_runtime","metaserver/static/js/modules/constants/viewer"],(function(t,e,r,s,i,n,o){"use strict";function u(t){if(t&&t.__esModule)return t;var e=Object.create(null);return t&&Object.keys(t).forEach((function(r){if("default"!==r){var s=Object.getOwnPropertyDescriptor(t,r);Object.defineProperty(e,r,s.get?s:{enumerable:!0,get:function(){return t[r]}})}})),e.default=t,Object.freeze(e)}var a=u(e);class c{constructor(){this.listeners=new Set,this.subscribe=this.subscribe.bind(this)}subscribe(t){const e={listener:t};return this.listeners.add(e),this.onSubscribe(),()=>{this.listeners.delete(e),this.onUnsubscribe()}}hasListeners(){return this.listeners.size>0}onSubscribe(){}onUnsubscribe(){}}const l="undefined"==typeof window\|\|"Deno"in window;function h(){}function d(t){return"number"==typeof t&&t>=0&&t!==1/0}function f(t,e){return Math.max(t+(e\|\|0)-Date.n

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2314)
Category:	downloaded
Size (bytes):	2360
Entropy (8bit):	5.218276246222954
Encrypted:	false
SSDEEP:	48:1h4UNOJruZ1jMp1w+7e6sFh5i1W+7TSb5jVr6xuWtmUzAsQ+3j6D03Fsl7i:YUYJrubjMzwqBEh5i19TSb9YuW4UzAs5
MD5:	61444FC69EEE497F28D680EE0C9157E7
SHA1:	D72A2EC487F48C1C8C6AAB7B316FCBB6F2ADD7BF
SHA-256:	6E6CC053B72069322499F1716187D1C81889190DE9E22D00ADC3231A7FFF90D6
SHA-512:	B5480EC396A352E520BCD669692BD76C97442E1BB68CCDA9AF013C300864257DFB26CFB770BFCFF09C4F6D25B59C326919FD8EE6651CC0325239AD7BE1354AEB
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_csrf-vflYURPxp.js
Preview:	define(["exports"],(function(e){"use strict";const o=function(e,o){if(!e)throw new Error(o)},t=/^([0-9]{1,3}\.){3}[0-9]{1,3}$/,n=function(e){if(e.match(t))return[e];const o=e.split("."),n=[];for(let e=0;e<o.length;e++)n.push(o.slice(e).join("."));return n},i=function(e){const o=e.split("/"),t=[];for(let e=0;e<o.length;e++){const n=o.slice(0,o.length-e).join("/");""!==n&&t.push(n),t.push(n+"/")}return t},a=["=",";"],s=function(e,t,n=!1){o("string"==typeof e,`${t} must be a string, but was ${typeof e}`),o(n\|\|e.length>0,`${t} must not be empty`),o(!function(e){if(null==e)return!1;for(const o of a)if(-1!==e.indexOf(o))return!0;return!1}(e),`${t} contains illegal characters`)},r=e=>s(e,"Cookie name",!1),c=e=>{return t=e,n="Cookie max age",void o(!isNaN(Number(t)),`${n} must be numeric, but was ${t}`);var t,n},u=function(e,o,t={}){var n,i;r(e),(e=>{s(e,"Cookie value",!0)})(o),t.maxAge&&c(t.maxAge),t.domain&&(n=t.domain,s(n,"Cookie domain",!1)),t.path&&(i=t.path,s(i,"Cookie path",!1));const a

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21694)
Category:	downloaded
Size (bytes):	21747
Entropy (8bit):	5.284578799910504
Encrypted:	false
SSDEEP:	384:mnyLq/Hzuprdhgv8ClMs7MU7e0hZVLdUBbimoj7av+oVaaLOuYMwfD9:mnwdav86Msr1DVLdUBuQ+oVayOhfD9
MD5:	2968EA53455F7060CDE6EE7B77B65BB4
SHA1:	12872D8072A63D0E680705FD54353967B4FF5966
SHA-256:	22B6A22B68B4E7F934729EF432A9A9FEAABF07E64838EAE43D8C7F680975467C
SHA-512:	523909BC2662FC9588670DED075F7E6F1B184DD03136C7A7E823E23FAA60E4AEA420FDF21E7CCB25B64B180A691595101AA71CE1324352FC4F8F580F801DC69C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_core_notify-vflKWjqU0.js
Preview:	define(["exports","react-dom","react","./e_edison"],(function(e,t,n,r){"use strict";function i(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}var o=i(t),a=i(n);const s=/[^\w@\.\ \-\,\$~%#\[\]\{\}\!\^]/g,c=e=>`&#${e.charCodeAt(0)};`,l=e=>`${e}`.replace(s,c);function u(e){return"object"==typeof e&&"function"==typeof e.toHTML}class d{constructor(e){this._str_DONT_TOUCH=e}toHTML(){return this._str_DONT_TOUCH}toString(){return"[object HTML]"}static tmpl(e,t){if(!/[^\w:.-]/.test(e)){const t=document.getElementById(e);e=t.innerHTML,window.CSP_SCRIPT_NONCE!==(t.nonce\|\|t.getAttribute("nonce"))&&(e="")}const n=e.replace(/[\r\t\n]/g," ").replace(/'(?=[^%]%>)/g,"\t").split("'").join("\\'").split("\t").join("'").replace(/<%=(.?)%>/g,"',__no_conflict_HTML__._raw_escape

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4828)
Category:	downloaded
Size (bytes):	4895
Entropy (8bit):	5.368982337989415
Encrypted:	false
SSDEEP:	96:x08OWJB+hyYFDTprUZ21FdndrbNgIVllvmo+dkd6kLILP+ewcwohyn:x0MAhprDd1V7d0ChEz+emGy
MD5:	E6C7B1B5B48D9989C48C543C3EA5ABC6
SHA1:	2109AF7D0C10FF2D93FF2B58802C7F01B93B485F
SHA-256:	AF3DF2BE4EA805F2A8A8C43951C7EB8BB8CA60E16AA24A3868206156B4B7667E
SHA-512:	BC8A9EC6292FF33632979A4BC7EEF9CB7BCAF3905579BFA261C359412BD9EAF066A237E20AD5461EB8D634177D153F5B642B1E026D78FD4A72B82A8A3B92D07D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_browser_browser_detection-vfl5sextb.js
Preview:	define(["exports","./c_init_data_runtime"],(function(e,o){"use strict";class n extends o.Message{constructor(e){super(),o.proto3.util.initPartial(e,this)}static fromBinary(e,o){return(new n).fromBinary(e,o)}static fromJson(e,o){return(new n).fromJson(e,o)}static fromJsonString(e,o){return(new n).fromJsonString(e,o)}static equals(e,i){return o.proto3.util.equals(n,e,i)}}var i;n.runtime=o.proto3,n.typeName="google.protobuf.Empty",n.fields=o.proto3.util.newFieldList((()=>[])),e.TimeUnit=void 0,(i=e.TimeUnit\|\|(e.TimeUnit={}))[i.NANOSECONDS=0]="NANOSECONDS",i[i.MILLISECONDS=1]="MILLISECONDS",i[i.SECONDS=2]="SECONDS",i[i.MINUTES=3]="MINUTES",i[i.HOURS=4]="HOURS",i[i.DAYS=5]="DAYS";const{ipad:t,chrome:s,safari:r,opera:w,msie:d,edge:a,edgeChromium:u,chromium:c,mozilla:m,webkit:g,mac:f,windows:l,windowsInfo:b,iphone:p,ipod:x,iOS:O,facebookWebView:v,browser_name:S,version:h,userAgent:A,plugins:C,pluginNames:N}=function(e=navigator.userAgent){const o=function(e=navigator.userAgent){const o=functi

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41553)
Category:	downloaded
Size (bytes):	41612
Entropy (8bit):	5.380714812942167
Encrypted:	false
SSDEEP:	768:i6x6gynMWsQ0VoCgdHKhkm2WPMwvBuqmhPIHcBDGFXGXt9hnCRgEs7ABPxD0Dcr8:PVoC4KswOvUegrY8mSimdY
MD5:	C715D5135A3F304F19BC34A3954F7937
SHA1:	782A003978640B50552F7D841C142512B76F1DBA
SHA-256:	D4913CB47DA91CB6110D06E8FF9BFE439502D4494C219FF895480974A3358576
SHA-512:	FA49398855A68E8708838B3B82EF99C1781B847FAB4CC1A42A015663BC0CF5143556475D8D27E04C516BA520155E0E53F3FC57CCB060A02A80A3FC9F1E46B9B2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_init_data_runtime-vflxxXVE1.js
Preview:	define(["exports","./e_core_exception"],(function(e,t){"use strict";function n(e){var t="function"==typeof Symbol&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")}function r(e){return this instanceof r?(this.v=e,this):new r(e)}function i(e,t){if(!e)throw new Error(t)}const s=34028234663852886e22,a=-34028234663852886e22,o=4294967295,c=2147483647,u=-2147483648;function l(e){if("number"!=typeof e)throw new Error("invalid int 32: "+typeof e);if(!Number.isInteger(e)\|\|e>c\|\|e<u)throw new Error("invalid int 32: "+e)}function f(e){if("number"!=typeof e)throw new Error("invalid uint 32: "+typeof e);if(!Number.isInteger(e)\|\|e>o\|\|e<0)throw new Error("invalid uint 32: "+e)}function d(e){if("number"!=typeof e)throw new Error("invalid float 32: "+typeof e);if(Number.isFinite(e)&&(e>s\|\|e<a))throw new

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (710)
Category:	downloaded
Size (bytes):	760
Entropy (8bit):	5.201380254654961
Encrypted:	false
SSDEEP:	12:1hRu/DZ0BpNvNUUR4jYLTFFKCc2RvB/4sRXHrx6vCYoN/iGAQIDNF9gqjlzDC:1hR4Z0BpNvmUs6FFKH+vB/4GXMCR9eDW
MD5:	09C0D53AF2879162B43B03734FEC35B2
SHA1:	BC603C2186F1808BE5A7085055F0557F7DF4866B
SHA-256:	CDFD069A981E8373C2F2EC1FEAF286D8273F2A20A0865831DE93592F15F091E2
SHA-512:	03DA7B5EEBF2D7B6C05C3D6BB911887A1D35F318FEAB6C6C54E01E1F5F4F5E4A742736D670CD8DB88D618AD9BFE331EB843085B79A01688FC3C5AF738B1C55D5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_xhr-vflCcDVOv.js
Preview:	define(["exports","./c_csrf","./c_core_attribution_header"],(function(t,e,n){"use strict";const o=function(t){};t.sendXhr=function(t,r,s=o){e.assertDropboxDomain(t),function(t){const n=e.readCsrfToken();t.is_xhr=!0,t.t=n}(r);const i=function(t){const e=[];for(const n in t)t.hasOwnProperty(n)&&void 0!==t[n]&&e.push(`${encodeURIComponent(n)}=${encodeURIComponent(String(t[n]))}`);return e.join("&")}(r),c=new XMLHttpRequest;c.onreadystatechange=function(){c.readyState===XMLHttpRequest.DONE&&s(c.status)},c.open("POST",t),c.setRequestHeader("Content-Type","application/x-www-form-urlencoded");const u=n.getAttributionHeader();return u&&c.setRequestHeader("X-Dropbox-Client-Yaps-Attribution",u),c.send(i),c}}));.//# sourceMappingURL=c_core_xhr.js-vflW3Ov9o.map.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66
Category:	downloaded
Size (bytes):	43308
Entropy (8bit):	7.995084572292543
Encrypted:	true
SSDEEP:	768:Y6isHlLX1zBleTdZ0MS1wQ1vBIG2z1oCA2/Ovub/uOe:YKlr1zBleTdZJYN5INz1oCdGmbK
MD5:	93B6F18EC99BCB7C3FA7EA570A75E240
SHA1:	60B9E3062FE532CBC18B897FAC542C56A03544C7
SHA-256:	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
SHA-512:	AC1A9398B74EB75AC4D52B9A9054A1ADD5A836F2572B99307851A0BB6D93288A13199E06E5DF4F1391209403BF775C9235A679BD081CA7F62B7752ED0FA691C6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2
Preview:	wOF2.......,...............B.......................d.......`..\....a..... ..R.....6.$..x..~.. .....\|..5[r.......bJU..T...^.Ui5.$..c.OI...(...V.%......... ........"..]..$m+.X..........'..p..".Y...q..f.......B[........tjS.6..ZF.V.'8..]L.;f.....p...H.JtYQ.r.......U..v.F.....M..L.Js... ....j)o3/...L.r...%....('......O......7.a..&..z.!/.w.%.....p.P.o..#.....$..~.&r...=.a;.K......RE.....U..F..M..ARd.c.:........Ji..z.X].&..6..2Y.dM..6...8`I....T..BqPc.W.].......q......lG\.....{.j..\|.Ab.s.C...q...w.9...j`. F.a4b..o..?:......~.........Al;...~n=.(.=b.cQlc...+..V.2..J..........wx.Y.q.UxQF....JQ.{...D"PA...Dx...^........].!.......{'.#..I.P...R........p....$K.%Y..!.n..,d..sO...(O@.R...q.(...t:.T....){p1w..Pc..V(._... t\|.....rm....ed%2....D"O"OrM.\....z+.=U..QL.qK...V....Ckw($..........mH..0...v......H=.Y.\|.5.~.3......b.g..X..M.R..Q...UZ.b.lV..-.$#Q..]?1[....O.:.&74.]l...H.W.n.l.?..-.K.r......Z.W..<..HG.c...N...2..V.;..a.....`.T..q.`#...?r...T.Ak....y.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	3.6767668884768048
Encrypted:	false
SSDEEP:	48:wFFFFFFFFFFFFFFFFtJdFdFSFfyFbK9MFDFCFbXFbFexKFdFcFQrDFaFNGCF7sF9:nudyjwG+jeWqQmGDB5
MD5:	F25511F4158C2DFAB6AA11A07D026E4A
SHA1:	99F63CF1694FA5E52F43EB967462EA0D9EEF7513
SHA-256:	C0906D540D89DBE1F09B24F17B7F35B81350E8D381C1558B075C28EA913C450D
SHA-512:	0BFB19AEC453A1C4D4B8F39602BF8BBF0A98182A98E29E1E1708EABFD99E3168855994A56061ED462C29B099137C226E25DDD274B46ED2F443C2C515A530B731
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .........%...%............a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...Q...R...`...b...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...b...]...P....C...=..T...\...b...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a..._...T...a...................a...T..._...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...b...[

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	375
Entropy (8bit):	5.1223448635271
Encrypted:	false
SSDEEP:	6:U2ycV6jI4siXvXJBSU48t1UcA2xkN7w23biE1H5ouSLn8hrK9IVKDd/xWJrr0Q8J:U2eAi/ZBLTUQxkNP371H5ouSA0CVKR/p
MD5:	2FDFFDD1608FE3ED35E7827066DA9FD1
SHA1:	9D6516E47029DEAB1CB5158E9CC9C2D7562280EC
SHA-256:	A6DADDC200534ED549A179751B36B35F63D2AE229CF7191E9623945EABF0604A
SHA-512:	91078DBC23A85A0F77CD22A7E1DD22C4A696AEAB288246765906E0573C799DBDD3D05145AEC4CE8000FAAC3E03B37467407DC0036A6C113AEE4EBA7747E21F58
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/icons-vflL9_90W.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-icons@3.10.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./..

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25701)
Category:	downloaded
Size (bytes):	25702
Entropy (8bit):	5.133461814454743
Encrypted:	false
SSDEEP:	384:4kZnYUlkLLw9I6u6qeNRqH/mLRHwcOH3cy:4k1llkLL6qmqH/mLRHwcOH3cy
MD5:	6147FC8D260EB9D681C80F3D974C713D
SHA1:	FDE6BE0942C18722FB467FA9AD3FF90D431966CE
SHA-256:	DFE4ED256A5C75579163A390549BE9EE31E0ED6E6CD368880AADDA48AEA912A3
SHA-512:	98E9E4A5B86517F96D3478E78396AAB6AAD48542625747A4A79BE4A2AA12DC72661D2A690CC49906A8342461BF984C2AF51F0358CC486B5B5068EA4FC03A8196
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/sharing/shared_folder_invitation_signup_page-vflYUf8jS.css
Preview:	@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflugmAly.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflWr14lv.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflYSEsbG.ttf") format("truetype");font-weight:100;font-style:normal}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflP-manv.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflmKWqdQ.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflHYkDrv.ttf") format("truetype");font-weight:100;font-style:italic}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Light-Web-vflvAXMid.woff2") format("woff2"),url("

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (1803)
Category:	downloaded
Size (bytes):	1809
Entropy (8bit):	5.235830949555532
Encrypted:	false
SSDEEP:	48:Bq1baQb1TzbtST35ubFuPIXufundDBq6QEzer2c5aQDRb:EamXtapoF+IXEun/4P2c5bdb
MD5:	4ADDF5E9272BD4FE3138862368434369
SHA1:	B9B339BB0495D1346BCFF1180D2D9CA3CD9EB6F6
SHA-256:	BA1EA83AACDFEC164A3161871E51026876A3BD863B46BB494C3EFFAE037B5007
SHA-512:	A0C5A6F026A9CF446EE46FD2FAC6031B011EB5C2D03C5CEC54F0BD3BE6E6636D6501DB2AD5A93E1DF39958EA61489CF7FC4827BF6E838B09927FA88A071765AF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/pithos/api_helper_validation.bundle-vflSt316S.js
Preview:	(() => {const define = dbxPithosConfig._define, require = dbxPithosConfig._require; define((()=>(()=>{"use strict";var t={r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};t.r(e);class n{constructor(t){this.dropboxOrigin=t,this.meta_asyncApi=!1}isDropboxDomain(t){const e=document.createElement("a");return e.href=t,e.hostname.endsWith(".dropbox.com")}handleEvent(t,e,n){"function"==typeof t&&t(e,n)}addQueryParameter(t,e){return 0!==e.indexOf("?")&&0!==e.indexOf("&")\|\|(e=e.substring(1)),null===t&&(t=""),-1!==t.indexOf("?")?t+="&"+e:t+="?"+e,t}makeRequest(t,e,n,i,o,a,s,r,d){if(!t)return;t=this.dropboxOrigin+t,n\|\|(n=6e4),i=i\|\|function(){},o=o\|\|function(){},a=a\|\|function(){},s=s\|\|function(){},d=void 0!==d?d:"POST";const c=new XMLHttpRequest;c.addEventListener("load",function(){this.meta_asyncApi=!0,200===c.status?this.handleEvent(i,c,r):this.handleEvent(o,c,r)}.bind(this))

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10533)
Category:	downloaded
Size (bytes):	10591
Entropy (8bit):	5.234934257056051
Encrypted:	false
SSDEEP:	192:ZUXRvotYV2cpTXupFgX8GehjTnNmSkpyTDUOFubQpKTH5+iD32nCoP32m3fcRN6T:ZUXRvotYUyXWFgX8GehjTNN1UOGlT0Cg
MD5:	151644207B52C049454C572377EE3E83
SHA1:	3BF4661205268520A40DA52C8D2E87F0F9B4BBA4
SHA-256:	8BB9C7C60AFCCF29AE2F7CFC9A613619677105D1C698E0343287225080FADFB2
SHA-512:	98EB9930274D2B1C81F7C04736678B4F3DD066E94F29FD111FCA70D742AB82842EE6F49A075464BCB09A27011AB9841FFD578D4E0F6343348648C613927F6E0F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_init_data_edison-vflFRZEIH.js
Preview:	define(["exports","./c_init_data_runtime","./c_core_uri"],(function(e,t,n){"use strict";var r,a,o;function i(e){const t=o[e];return"string"!=typeof t?e.toString():t[0].toLowerCase()+t.substring(1).replace(/[A-Z]/g,(e=>"_"+e.toLowerCase()))}e.MethodKind=void 0,(r=e.MethodKind\|\|(e.MethodKind={}))[r.Unary=0]="Unary",r[r.ServerStreaming=1]="ServerStreaming",r[r.ClientStreaming=2]="ClientStreaming",r[r.BiDiStreaming=3]="BiDiStreaming",function(e){e[e.NoSideEffects=1]="NoSideEffects",e[e.Idempotent=2]="Idempotent"}(a\|\|(a={})),function(e){e[e.Canceled=1]="Canceled",e[e.Unknown=2]="Unknown",e[e.InvalidArgument=3]="InvalidArgument",e[e.DeadlineExceeded=4]="DeadlineExceeded",e[e.NotFound=5]="NotFound",e[e.AlreadyExists=6]="AlreadyExists",e[e.PermissionDenied=7]="PermissionDenied",e[e.ResourceExhausted=8]="ResourceExhausted",e[e.FailedPrecondition=9]="FailedPrecondition",e[e.Aborted=10]="Aborted",e[e.OutOfRange=11]="OutOfRange",e[e.Unimplemented=12]="Unimplemented",e[e.Internal=13]="Internal",e[e

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4934)
Category:	downloaded
Size (bytes):	4998
Entropy (8bit):	5.378189879795476
Encrypted:	false
SSDEEP:	96:xLTFhMXJbLprJZcHrdndCNsBel+dkd355LpQwwcwOlSfYFHV:xLYNprSdle0CrdQwmvfYF1
MD5:	F89735DD18CC42E63140917E07CF2C99
SHA1:	FDA8163CA3BD87016D4376CF094B0AE4EFB993D5
SHA-256:	FBF67DBB48D74A501DD35F15EF6E5E2D015DA5E07B5E556C9DA237CD8F1717B0
SHA-512:	04331A5910CE81D7A991FC3FE4AF473C88C94A984FB7796BFAB006BC509A5226B22BB9F1695C2FB8FDCC5A1E799B96D0E8D91488B483646C0D9439949DCA6529
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_apex-metrics_src_types-vfl-Jc13R.js
Preview:	define(["exports","./c_init_data_runtime"],(function(e,o){"use strict";class i extends o.Message{constructor(e){super(),o.proto3.util.initPartial(e,this)}static fromBinary(e,o){return(new i).fromBinary(e,o)}static fromJson(e,o){return(new i).fromJson(e,o)}static fromJsonString(e,o){return(new i).fromJsonString(e,o)}static equals(e,n){return o.proto3.util.equals(i,e,n)}}i.runtime=o.proto3,i.typeName="google.protobuf.Empty",i.fields=o.proto3.util.newFieldList((()=>[]));const{ipad:n,chrome:t,safari:s,opera:r,msie:w,edge:d,edgeChromium:a,chromium:u,mozilla:c,webkit:m,mac:g,windows:f,windowsInfo:l,iphone:b,ipod:p,iOS:x,facebookWebView:v,browser_name:O,version:A,userAgent:S,plugins:h,pluginNames:N}=function(e=navigator.userAgent){const o=function(e=navigator.userAgent){const o=function(e){const o=e.toLowerCase(),i=/(ipad)/.exec(o)\|\|/(crios)[ \/]([\w.]+)/.exec(o)\|\|/(fxios)[ \/]([\w.]+)/.exec(o)\|\|/(opt\|opr\|opios).*[ \/]([\w.]+)/.exec(o)\|\|/(edge)[ \/]([\w.]+)/.exec(o)\|\|/(edg)[ \/]([\w.]+)/.exec

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40379)
Category:	downloaded
Size (bytes):	40438
Entropy (8bit):	5.376589973437227
Encrypted:	false
SSDEEP:	768:9pr6EyPKyqwU6Cm3fvLf+YJGLvdVcW+sk4NIMMVgxxxujhmEj+BDGFXGVvi5qlZO:qU6CojhhzXjoQclSl6r8OsimCm
MD5:	45BD73696958F0863F8B7F9265D054A9
SHA1:	1C943197E7CDB6AE422BF8CEFD4602B68EA38E44
SHA-256:	C20C06F0D8A322B788147CF62C0D1DC173C36AF0B113A055BD1F503590606859
SHA-512:	63408DB8CE26A9B5B3D870CE1B88FE26C8C81B70D5E7CC37F50F79C409E9A48CC851241F42AF432AC918A1C98F40FBCF51B3CA570C3E0C2461985F692FAC9143
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_init_data_runtime-vflRb1zaW.js
Preview:	define(["exports","./e_core_exception"],(function(e,t){"use strict";function n(e,t){if(!e)throw new Error(t)}const r=34028234663852886e22,i=-34028234663852886e22,s=4294967295,o=2147483647,a=-2147483648;function u(e){if("number"!=typeof e)throw new Error("invalid int 32: "+typeof e);if(!Number.isInteger(e)\|\|e>o\|\|e<a)throw new Error("invalid int 32: "+e)}function c(e){if("number"!=typeof e)throw new Error("invalid uint 32: "+typeof e);if(!Number.isInteger(e)\|\|e>s\|\|e<0)throw new Error("invalid uint 32: "+e)}function l(e){if("number"!=typeof e)throw new Error("invalid float 32: "+typeof e);if(Number.isFinite(e)&&(e>r\|\|e<i))throw new Error("invalid float 32: "+e)}const f=Symbol("@bufbuild/protobuf/enum-type");function d(e){const t=e[f];return n(t,"missing enum type on enum object"),t}function h(e,t,n,r){e[f]=m(t,n.map((t=>({no:t.no,name:t.name,localName:e[t.no]}))))}function m(e,t,n){const r=Object.create(null),i=Object.create(null),s=[];for(const e of t){const t=g(e);s.push(t),r[e.name]=t,

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26312)
Category:	downloaded
Size (bytes):	26370
Entropy (8bit):	5.269279401854444
Encrypted:	false
SSDEEP:	768:KSJShw1N9prFnP3+QVNW1OgkF3TsreetFtDn:BJ9N9pJPOQ61rqsreetnT
MD5:	B81161543399CE8985A244004D3BF2BE
SHA1:	546775FDB5068A331F2217702DFABCF44EEA0F36
SHA-256:	D78B91BA7FA509896508F7C3BE2A409D4F6E8C43DF1CF6904D296431FE5D2044
SHA-512:	7EDD5C769D7F2DA0F753A45A977B2045B9259B6B611FF67A2A93F056CE511C8C59F7884B7D25E59F5C99810F8592E0C0E6D81E10C5FFFB27DFE8518350BCD561
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_lodash-es_lodash-vfluBFhVD.js
Preview:	define(["exports"],(function(t){"use strict";var r="object"==typeof global&&global&&global.Object===Object&&global,n="object"==typeof self&&self&&self.Object===Object&&self,e=r\|\|n\|\|Function("return this")(),o=e.Symbol,u=Object.prototype,i=u.hasOwnProperty,c=u.toString,a=o?o.toStringTag:void 0;var f=Object.prototype.toString;var l="[object Null]",s="[object Undefined]",v=o?o.toStringTag:void 0;function p(t){return null==t?void 0===t?s:l:v&&v in Object(t)?function(t){var r=i.call(t,a),n=t[a];try{t[a]=void 0;var e=!0}catch(t){}var o=c.call(t);return e&&(r?t[a]=n:delete t[a]),o}(t):function(t){return f.call(t)}(t)}function b(t){return null!=t&&"object"==typeof t}var h="[object Symbol]";function y(t){return"symbol"==typeof t\|\|b(t)&&p(t)==h}function d(t,r){for(var n=-1,e=null==t?0:t.length,o=Array(e);++n<e;)o[n]=r(t[n],n,t);return o}var j=Array.isArray,g=1/0,_=o?o.prototype:void 0,w=_?_.toString:void 0;function O(t){if("string"==typeof t)return t;if(j(t))return d(t,O)+"";if(y(t))return w?w.c

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	3.6767668884768048
Encrypted:	false
SSDEEP:	48:wFFFFFFFFFFFFFFFFtJdFdFSFfyFbK9MFDFCFbXFbFexKFdFcFQrDFaFNGCF7sF9:nudyjwG+jeWqQmGDB5
MD5:	F25511F4158C2DFAB6AA11A07D026E4A
SHA1:	99F63CF1694FA5E52F43EB967462EA0D9EEF7513
SHA-256:	C0906D540D89DBE1F09B24F17B7F35B81350E8D381C1558B075C28EA913C450D
SHA-512:	0BFB19AEC453A1C4D4B8F39602BF8BBF0A98182A98E29E1E1708EABFD99E3168855994A56061ED462C29B099137C226E25DDD274B46ED2F443C2C515A530B731
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/images/favicon.ico
Preview:	...... .... .........(... ...@..... .........%...%............a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...Q...R...`...b...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...b...]...P....C...=..T...\...b...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a..._...T...a...................a...T..._...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...b...[

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8406)
Category:	downloaded
Size (bytes):	8468
Entropy (8bit):	5.122595875532334
Encrypted:	false
SSDEEP:	192:/B6PeH4MBpHXnOQ6C4kpHXiOAq9j2Y9JArOhD4U5/voh2dwD4U5tYa1aK3cs7D7K:p6mYMmQ6C4tOhdN4qG4Y3csWWS
MD5:	26AAC2A148655859CD7464BAAA808AE8
SHA1:	FAFABB4EF231C4D08C6FDE13503BC16B193CB32C
SHA-256:	A800D6B2E4BE85662AB2E5FE5E10E46CA1EBC1AF29A27269CFBDF26CFC6325D3
SHA-512:	A8E3B2EDEBF165A90F356C8960F9188AF29836904881EAE5E8DDC41E3286E14D16D890B2BF4172142EAB8C37B1E83058AA3C341A5CC2075BB1A36D297F59F779
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_api_v2_noauth_client-vflJqrCoU.js
Preview:	define(["exports","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_init_data_runtime","./c_core_uri","./c_core_attribution_header","./c_rfc4648_lib_rfc4648"],(function(e,s,t,o,n,r){"use strict";class a extends Error{static parseResponse(e,s,t,o=null){let n="";null==o&&(o=e in p?p[e]:e>=500?i:a);const r={raw:{status:e,responseBody:t},summary:null,error:{},headers:s};try{const e=JSON.parse(t)\|\|{};r.error=e.error,r.summary=e.error_summary,n=null!=e.user_message?e.user_message.text:""}catch(e){}return Object.assign(new o(n\|\|void 0),r)}}class i extends a{}const p={400:class extends a{},401:class extends a{},409:class extends a{},429:class extends a{}};class d extends Error{constructor(e,s){super(s),this.name="FetchAbortError",this.response=e}}class c extends Error{constructor(e,s){super(s),this.name="FetchFailError",this.response=e}}class l extends Error{constructor(e,s){super(s),this.name="FetchResponseError",this.response=e}}function u(e){return"FetchResponseError"===

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 19 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	58272
Entropy (8bit):	6.087497514749547
Encrypted:	false
SSDEEP:	768:2FHqzyMfHsSmkRc0mt+j6XPNnR4fLpSlZdgz7B8rYgiy/U1BoWSRbUJOtojRbEMW:2jMfHw6mtuU4LMlZG/B8BoxBCd
MD5:	F9ABED3D3D7E0B5A0A5A303B113C53F4
SHA1:	8DEA33D500E929B878CED36C5980745C0BF13DB9
SHA-256:	2BB6585B06B56D32AA48AC85F698AEA00A96B5E32B944C9FBA5022CD90F97DCF
SHA-512:	33E2E61B9EABEB41056D86B34BDDAAD8C2C4F0BED63EB873439AB8FA6B3E154D1486AA7D7BBB46B6226BA3F7D0603D4AE2AE8E7CAECF43BD03E3599AA5B643AE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJllpyw.ttf
Preview:	............GDEF+......p...XGPOSn....;h..6.GSUB..M........4OS/2f{.k.......`STAT...K.......xcmap...........gasp............glyfm.....q...q.head U-....`...6hhea...*...<...$hmtx.<db...8....loca.-{....\....maxp...%....... nameA.wj........post......'....Kpreph..................................X.....................................R.............................B...X_.<...........X.....3N.R..... .........................X...K...X...^.T.2...............g...k...(....GOOG.............+.7 .............. ...................4..opsz....wght....GRAD....ital.....0.$.....................................................................0.................................................................................................................................................0.2...6.8...C.H.......9.....&...v.v.l.l.^.l.T.J.@.v.v.v.v.v.v.8.0.................[.......i...:.........................M.............F.................Q.......;...>.z.........0.2...6.9...C.H.................^.~...........P..

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6506)
Category:	downloaded
Size (bytes):	6567
Entropy (8bit):	5.1472234569759125
Encrypted:	false
SSDEEP:	192:jX2JnpscHfOeltbJm6oYCVvNARo1p6D/ocGkd/N+BO:aJnac/OelJJm9YKVARoPU/ocGkRN+BO
MD5:	4A0F62C20280F479F751116AAF6FF004
SHA1:	92E3963DEE944C49A5CF1F9BCC0E668D307CCABD
SHA-256:	B16431F6654C40FDCD3D12717AB8E23CAC760678A5DB6063D3C3DA35316451F9
SHA-512:	2FCB6FB852030D2369027C09F8EE4CEECA5754818BAC3C9D3ADFE4DA3D48076B67C5DADC138A0D937DC23C9987644674CE6B83E91A3024003E5E02412EBE59A1
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_ui-icon_line_upload-vflSg9iwg.js
Preview:	define(["exports","react"],(function(e,t){"use strict";function l(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(l){if("default"!==l){var n=Object.getOwnPropertyDescriptor(e,l);Object.defineProperty(t,l,n.get?n:{enumerable:!0,get:function(){return e[l]}})}})),t.default=e,Object.freeze(t)}var n=l(t);e.AddLine=e=>n.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},n.createElement("path",{d:"M11.75 4.5V19M19 11.75H4.5",stroke:"currentColor",strokeWidth:1.5,strokeMiterlimit:10,vectorEffect:"non-scaling-stroke"})),e.ArrowUpLine=e=>n.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},n.createElement("path",{d:"M11.75 19V7m-6.5 5.25L11.75 6l6.5 6.25",stroke:"currentColor",strokeWidth:1.5,strokeMiterlimit:10,vectorEffect:"non-scaling-stroke"})),e.CopyLine=e=>n.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},n.createElement("path",{fillRule:"evenodd",clipRule:"evenodd",d:"M7 4.5V17h12.5V4.5H7Zm11 11H8.5V6H18v9.5Z",

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (519)
Category:	downloaded
Size (bytes):	584
Entropy (8bit):	5.199901264020445
Encrypted:	false
SSDEEP:	12:1hHryZO9DPeLv0Pmeagn/Werbb5w5w26PqJT0SwEohXI7:1hHryZOhcvSmjg/Werbb5w56PqJ0Eoy
MD5:	C2591593FFBD92E16276E86068DB913A
SHA1:	E7B7B89E0FFB6C5E1CD91BB81AA418E1E9BD77D1
SHA-256:	64CFD9646AFC31C4E5D1E3E6753194DCE4F385B017B1227DE2248730DE2DC0C0
SHA-512:	AE5D5BC1C7002E7600197597DD9F97600DA5875A82128105C787AD83439B6F8D59F2272ED4E6D8127C5524A1BC714B0442CF3B87785A98B454326851476171F0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_core_attribution_header-vflwlkVk_.js
Preview:	define(["exports","./c_init_data_runtime"],(function(e,t){"use strict";e.getAttributionHeader=function(){if(!window.ensemble)return void 0!==t.getYapsProject()&&void 0!==t.getYapsDeployment()?`${t.getYapsProject()}:${t.getYapsDeployment()}`:void 0;const e=window.ensemble.getPageletInfoForExceptionReporting().filter((e=>void 0!==e.yaps_deployment&&void 0!==e.yaps_project));return 0!==e.length?e.sort(((e,t)=>e.pagelet_name<t.pagelet_name?-1:1)).map((e=>`${e.yaps_project}:${e.yaps_deployment}`)).join(";"):void 0}}));.//# sourceMappingURL=c_core_attribution_header.js-vflts_Mx9.map.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1563)
Category:	downloaded
Size (bytes):	1564
Entropy (8bit):	4.765867310326991
Encrypted:	false
SSDEEP:	24:veo6TuveluWgjW1RqeMGAurZuuEPdyiBPdy59Pdybf9Zs3PzDzK6:veX6elWW1JMGA4ZlEPdJBPdK9Pdcfu
MD5:	7B08E15668E6293DED274A0E43734BD4
SHA1:	84CC2086318F411FA109744A702B5B04271D7658
SHA-256:	6A8AD86F86D2671FDF62C01740FDC191743F39E124EE7401857E238144329881
SHA-512:	C5FE8390538C05BC59240D73C6813D7D16B63F1FDA3A1C4634FB987B26C9CCA160CF0AE3AB128F0C4CB02610FCC6F1653D4E3D23B2B565FEA28B9E3F95CED206
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/signup_signin/unified_susi-vflewjhVm.css
Preview:	.unified-susi-na .dwg-button2--button-style-transparent.link-na{color:var(--dwg-theme__color__attention__text);text-decoration-color:var(--dwg-theme__color__attention__border)}.unified-susi-na .dwg-button2--button-style-transparent.link-na:hover{text-decoration-color:var(--dwg-theme__color__attention__border--faint)}.link-na>.dwg-text{font-size:14px;line-height:17px}.sig-wrapper--dwg-refresh{position:absolute}.back-button-na .dwg-button2__icon{rotate:180deg;transform-origin:center var(--dwg-spacing__unit--1_5, 12px)}.back-button-na.dwg-button2--button-style-transparent{color:#000;text-decoration-color:var(--dwg-theme__color__attention__border)}.back-button-na:hover.dwg-button2--button-style-transparent{text-decoration-color:var(--dwg-theme__color__attention__border--faint)}.back-button-na.dwg-button2:hover>.dwg-button2__icon.dwg-button2__icon--right,.back-button-na.dwg-button2:focus-visible>.dwg-button2__icon.dwg-button2__icon--right,.js-focus-visible .back-button-na.dwg-button2.focus-

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5602)
Category:	downloaded
Size (bytes):	5663
Entropy (8bit):	5.24321991454641
Encrypted:	false
SSDEEP:	96:jXmHCeSj0p6zKNTJS7uUZSL6NU2K65epwK4FqaW+EfJgOova8blRjq6J4nmOeQS+:jX8Cyp6zerUZM6NU2l4w7dXE+Na8blR6
MD5:	CA16D5CAE96CA2371692E4019505C217
SHA1:	438924A22E5C1272240AD7CDC8523FE98A82551F
SHA-256:	A5DF177C3AB72BAB2BDFD61E71281E3AF2553E222AE02A89548DED7DAF6753A3
SHA-512:	777725600C06E3BC5A031D12A947AE183E4BE21E071ED336C673F3C7D19AC26183F70C68C45F5C42E26F2078C156ABFC647A692EC85ADD935B660F927575C409
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_helpers_esm_extends-vflyhbVyu.js
Preview:	define(["exports","react"],(function(e,t){"use strict";function l(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(l){if("default"!==l){var n=Object.getOwnPropertyDescriptor(e,l);Object.defineProperty(t,l,n.get?n:{enumerable:!0,get:function(){return e[l]}})}})),t.default=e,Object.freeze(t)}var n=l(t);function r(){return r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var l=arguments[t];for(var n in l)Object.prototype.hasOwnProperty.call(l,n)&&(e[n]=l[n])}return e},r.apply(this,arguments)}e.ActivityFill=e=>n.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},n.createElement("path",{d:"M18.814 10H14.5V2.696L5.185 14H9.5v7.31L18.814 10Z",fill:"currentColor",vectorEffect:"non-scaling-stroke"})),e.BriefcaseLine=e=>n.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},n.createElement("path",{d:"M10 16.75h4v-1.5h-4v1.5Z",fill:"currentColor",vectorEffect:"non-scaling-stroke"}),n.createElement

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	230
Entropy (8bit):	5.002586826718898
Encrypted:	false
SSDEEP:	3:FHHBsrd6XR6h4H4DMLGRFjQWAF5K0W8LDfekfrRL00DLw9LDkETaGu/YpuB6Qaip:FHHBsqRW4EMybDAFHLNrz8LSG7sB9p
MD5:	A3A2554444A71B125FBF14F91125D2E7
SHA1:	7212DDC0E5552AF5BF29C82351474F88A3C99CB8
SHA-256:	C5D544593946BDB983EADD3A6BA179CBD317C5D98409C3DD00C1D19444FC44EB
SHA-512:	8423B086B1A4EF8142CCA1F19301B19BD59B609778DB3AEF396D117FD35C9D05172E2B77FE5E1461630DF00F461BB3EF6D6A63AA3DC260A1F629884553D5A852
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_init_data_debug_panel-vflo6JVRE.js
Preview:	define(["exports","./c_init_data_runtime"],(function(n,t){"use strict";n.getDebugPanelInfo=function(){const n=t.getInitData().debugPanelInfo;if(n)return n.clone()}}));.//# sourceMappingURL=c_init_data_debug_panel.js-vflvMPM0Z.map.

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	818761
Entropy (8bit):	4.5932073471324655
Encrypted:	false
SSDEEP:	12288:/imqQPgH8T4J2+pTuyfPEWEmUVlHybZeb391Kl4Af7e7:BqQPlT4JVREDSbs9aa
MD5:	9399F55783480DB822CF654BA10EF050
SHA1:	05890E089C22CBF65878D08E5D4F2B7125FD7FFD
SHA-256:	A679E10D76F51E53F19137FEF3DD0D39973DD3CE4C693312C4D316E2059DA52C
SHA-512:	4FA50F429C9C2519DBAAA22439D2D9D74461FD15D2C3257FDC130EC6B5885B909320614135A3D48F725E742DBE6B0859F90CD427B4AAF2E28CD8C1C7FAB3073E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_zxcvbn_lib_main-vflk5n1V4.js
Preview:	define(["exports","./e_core_exception"],(function(e,a){"use strict";function i(e,a){return a.forEach((function(a){a&&"string"!=typeof a&&!Array.isArray(a)&&Object.keys(a).forEach((function(i){if("default"!==i&&!(i in e)){var r=Object.getOwnPropertyDescriptor(a,i);Object.defineProperty(e,i,r.get?r:{enumerable:!0,get:function(){return a[i]}})}}))})),Object.freeze(e)}var r,n,s,o,t={passwords:"123456,password,12345678,qwerty,123456789,12345,1234,111111,1234567,dragon,123123,baseball,abc123,football,monkey,letmein,shadow,master,696969,mustang,666666,qwertyuiop,123321,1234567890,pussy,superman,654321,1qaz2wsx,7777777,fuckyou,qazwsx,jordan,123qwe,000000,killer,trustno1,hunter,harley,zxcvbnm,asdfgh,buster,batman,soccer,tigger,charlie,sunshine,iloveyou,fuckme,ranger,hockey,computer,starwars,asshole,pepper,klaster,112233,zxcvbn,freedom,princess,maggie,pass,ginger,11111111,131313,fuck,love,cheese,159753,summer,chelsea,dallas,biteme,matrix,yankees,6969,corvette,austin,access,thunder,merlin,secret,

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37813)
Category:	downloaded
Size (bytes):	37814
Entropy (8bit):	4.834634937803195
Encrypted:	false
SSDEEP:	384:l2/G0HaJ6HQ6O0yWS2UAh+NSa4yofSUHGfw8SAjy8bmeFNUEBgwpUzc1thl/gIfp:s/GlicNPLQdvXSiYx9
MD5:	E8610524A37C783C12736026210E54F8
SHA1:	B771D988771F01270E63C1CCD89135A4D6FF8C47
SHA-256:	CF24DA1C7EFC209200ADDA31BAF434A0A846BA41B7992273B9DC1B65E2C6BC0C
SHA-512:	B88EDA80DE01DA5D5D619FD7B92C5C9C25B44C988482F99A8D4F5C28E0C43BF129582C8B2F439D5728969AFA15BE91951354EDFA7FDD12752B83F00ABC8D0A9A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/upsell/prompt_pagelet-vfl6GEFJK.css
Preview:	body,input,textarea,select,button,.normal{font-family:"Open Sans","lucida grande","Segoe UI",arial,verdana,"lucida sans unicode",tahoma,sans-serif;font-size:13px;color:var(--dig-color__text__base, #000);font-weight:normal}.maestro body:not(.dig-Button),.maestro input:not(.dig-Button),.maestro textarea:not(.dig-Button),.maestro select:not(.dig-Button),.maestro button:not(.dig-Button),.maestro .normal:not(.dig-Button){font-family:AtlasGrotesk,sans-serif}body{background-color:var(--dig-color__background__base, #fff);min-height:100%;margin:0;padding:0}a,a *{cursor:pointer;outline:none}a{color:var(--dig-color__primary__base, #0061ff);text-decoration:none}a:focus{text-decoration:underline}a img{border:0}p,h1,h2,h3,h4,h5{margin:0 0 1em 0;line-height:1.6em}h1{font-size:18pt;font-weight:normal;margin:10px 0}h2{padding-top:3px;padding-bottom:10px;margin-bottom:4px;font-size:10pt}h3{padding:0;margin:0;font-size:10pt}h4{margin:0 0 0.5em 0;font-weight:bold;font-size:14px}h5{margin:0 0 0.5em 0;font-

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.085500657991218
Encrypted:	false
SSDEEP:	3:aoOMmmZNDrPzZl9l:anijBl
MD5:	513F1D1684F5F5F96983E4AFDE6A12A9
SHA1:	9EE5B819E26671328A7B58526C7B5885EE053F1E
SHA-256:	BFC7DC4C0C556175F63B2D19A5BDB021D04A3160EEBFD0DAD90E4B3F019A6C5B
SHA-512:	493FCC0FC9704AB975C3576F2C8C2DD797E46CD6B8FC1CAC795D2BD3C8E9E879C67B9D5D9D4B790FB2061CC19EDDC6C36DDBDEE75DCAE46F3C18D48A53177A00
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwnkgLBxhQ1aVhIFDcy-BCUSBQ0Vg6i3?alt=proto
Preview:	CiIKEw3MvgQlGgQICRgBGgQIVhgCIAEKCw0Vg6i3GgQISxgC

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4143)
Category:	downloaded
Size (bytes):	4204
Entropy (8bit):	5.491716080158686
Encrypted:	false
SSDEEP:	96:fA+SzcxvYi8vJrjBVKOdAWke6XaVOyjwcZzfaHfaTLW5jCOUCdpM:frKYklXDS3XXAMMLW5uOhpM
MD5:	6D7F12ED56D5FAFDFB141EAAF437F237
SHA1:	CC722F807C215B6B90A005A8405E0C18E63564C7
SHA-256:	229FF7E74BF376A04E7DAE2B3A8A6DA04DF25A07D5B0300FCEFDA8FC821F8FF9
SHA-512:	907D9341F35E32F702EB22666E9092EBE9474ED312AA2741D92C8F9E69BFCBC22C53064710D071B31B6A1B6AE9CF7592545CE70F005D90199EB633D82DA1E3F0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_rfc4648_lib_rfc4648-vflbX8S7V.js
Preview:	define(["exports"],(function(t){"use strict";const e=function(t,e){if(!t)throw new Error(e)},n=/^([0-9]{1,3}\.){3}[0-9]{1,3}$/,o=function(t){if(t.match(n))return[t];const e=t.split("."),o=[];for(let t=0;t<e.length;t++)o.push(e.slice(t).join("."));return o},r=function(t){const e=t.split("/"),n=[];for(let t=0;t<e.length;t++){const o=e.slice(0,e.length-t).join("/");""!==o&&n.push(o),n.push(o+"/")}return n},i=["=",";"],s=function(t,n,o=!1){e("string"==typeof t,`${n} must be a string, but was ${typeof t}`),e(o\|\|t.length>0,`${n} must not be empty`),e(!function(t){if(null==t)return!1;for(const e of i)if(-1!==t.indexOf(e))return!0;return!1}(t),`${n} contains illegal characters`)},a=t=>s(t,"Cookie name",!1),c=t=>{return n=t,o="Cookie max age",void e(!isNaN(Number(n)),`${o} must be numeric, but was ${n}`);var n,o},u=function(t,e,n={}){var o,r;a(t),(t=>{s(t,"Cookie value",!0)})(e),n.maxAge&&c(n.maxAge),n.domain&&(o=n.domain,s(o,"Cookie domain",!1)),n.path&&(r=n.path,s(r,"Cookie path",!1));const i

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (304)
Category:	downloaded
Size (bytes):	305
Entropy (8bit):	4.931439734894977
Encrypted:	false
SSDEEP:	6:OXCw0UVexRJNZHXWXC+kEybGX9G4l6lm6c2XunG6HoV6HoQ:4CIVqN5GXCxEybGDT7Hw6HR
MD5:	4E2CC091FAC48A36F2EB401FA6ECE06B
SHA1:	AC35B42D5B1FF5B592A44574459A1C6CE6DFBE44
SHA-256:	EA511EB41E9199AEC50864F7CD7862DEF7BE3AE5C232DBC066AC353EA56FEC8D
SHA-512:	B7E439B7D5A48FB1D52EC78BB0CC72622717F37CCB03AA988741D9757C8CC3AFBE7FE0ECDA12970916CDF484ED9280613E7E1777942CC64A517886516D8E3692
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/abuse/fingerprintjs_component-vflTizAkf.css
Preview:	.fingerprintjsComponent{z-index:1000;position:fixed;top:0;left:0;width:100%;height:100%;visibility:hidden}.fingerprintjsDiv{margin-left:auto;margin-right:auto;visibility:hidden}body #one-tap-fpjs-container~iframe[src='about:blank'][style*='visibility: hidden']{top:-100% !important;left:-100% !important}.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (729)
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.167258852207224
Encrypted:	false
SSDEEP:	12:N3BhZQgBRqm+Rs0BhZQkyoTLxPrwagTG6pzD9iEUNV0x/pzP5Ls0sd:N3BhWgXqPXhWkdxsJppz40/pzCb
MD5:	75ED595D4A569CF9073CD6EEE308B3B3
SHA1:	13F9416A70CEEA9033A496A6AA5B922B72A6FBE2
SHA-256:	34BA9C679427ACA43C1321759FAE0373E54B68661E8D12FB59BDB1F3D93ED1E8
SHA-512:	7860705ED80A784187CB3303CF06C3FD597121A73C751CAB9059C2E834D0EB689C25018F668C8C5EF11F74C50E29B1D795F92F18E58ECEB697C2B225BC362DA3
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/common/inputs/auth_checkbox.module.out-vflde1ZXU.css
Preview:	._susi-checkbox_1lyd3_3{align-items:center;display:flex}._susi-checkbox_1lyd3_3._two-factor-checkbox_1lyd3_8{border-radius:3px;box-sizing:border-box;display:inline-block;line-height:normal;margin:2px 0 5px;max-width:230px;min-height:34px;padding:25px 0 10px}._susi-checkbox_1lyd3_3._two-factor-checkbox_1lyd3_8 input{cursor:pointer;height:14px;margin:0;padding:0;vertical-align:middle;width:14px}._label_1lyd3_28{font-size:12px;line-height:16px;padding-top:1px}._label_1lyd3_28,._label_1lyd3_28._login_1lyd3_37{font-family:var(--__dwgAtlasGroteskStack);font-weight:400;margin-left:var(--dwg-spacing__unit--1)}._label_1lyd3_28._login_1lyd3_37{font-size:16px;line-height:20px}._icon-container_1lyd3_45{display:flex;margin-left:4px}./# sourceMappingURL=auth_checkbox.module.out.css.map /

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	5.038924068526502
Encrypted:	false
SSDEEP:	3:7DR5Xw7kMTVaCxNACOTKDtEA6W4Sk/YpPXJqRLGR88A:H+TVGq2FaJRXQsI
MD5:	00E3748EF6EF9B75F69F6AC20471BC85
SHA1:	713BD618ADFC43F6EC695CFE3788D19708666FB1
SHA-256:	5E49FEF385C5BDA41E5FD72F0D0FB2E76722A5C156CAC7AFDBDCD9C6B9B9648A
SHA-512:	0FED16F611FBF747CF393BC51D656527BFE0D313A6A77AD7A8E98F9FEBF147041D52F2D74DE542B222F3ECC02C97EC11839EA63366654ED2816B7726A0F63715
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/susi/susi.module.out-vflAON0jv.css
Preview:	._susi-form-container_vmoxa_1{position:relative;text-align:left;width:100%}._current-form_vmoxa_7{display:block}./# sourceMappingURL=susi.module.out.css.map /

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2051)
Category:	downloaded
Size (bytes):	2110
Entropy (8bit):	5.045839121437345
Encrypted:	false
SSDEEP:	24:wx7f7NXF+B2PJQsKMiX0M367ZpQPOQ6NENUoMKs5i+NZnZA7r6Q5+b6npbRb:srh0kFVM3Df6V7iorMr6U/b
MD5:	72F9A26C26C1A681AD75A7E270550788
SHA1:	5579A02442ADFE9980A87BF495B18260927CD146
SHA-256:	F4024DCE9F70735047ADC3A8CF7E8AC9FD2E1D4BFF6ABFC4158A1810EDFCE45F
SHA-512:	0CFAF5CBD337D6D04A6D6AB1B2E86F943A93CC835B20C0DE00A309D69EDD9E6828470D6DA2D8E263A8FADEF6E58C4AD679D88062184A09D4F190CD19427EFB55
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/common/inputs/auth_text_field.module.out-vflcvmibC.css
Preview:	._susi-auth-field_4srl7_4{display:flex;flex-direction:column;font-family:var(--__dwgAtlasGroteskStack);line-height:normal;margin-bottom:var(--dwg-spacing__unit--2);text-align:left;width:100%}._susi-auth-field_4srl7_4._login_4srl7_14{margin-bottom:var(--dwg-spacing__unit--0_5,4px)}._show-password-button_4srl7_18{bottom:12px;display:flex;position:absolute;right:22px;width:24px}._show-password-button_4srl7_18 ._show-password-icon_4srl7_26{color:var(--color__standard__text)}._password-capslock-warning_4srl7_30{bottom:7px;padding:var(--dwg-spacing__unit--1,8px);position:absolute;right:20px;visibility:hidden}._password-capslock-warning-register_4srl7_38{right:42px}._password-capslock-warning--visible_4srl7_42{visibility:visible}._password-capslock-warning-icon_4srl7_46{width:10px}._field-input-wrapper_4srl7_50{margin-bottom:0;position:relative}._field-input-password_4srl7_55:not(:focus)~._password-capslock-warning_4srl7_30{visibility:hidden}._field-input_4srl7_50{border-color:var(--color__st

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40817)
Category:	downloaded
Size (bytes):	40886
Entropy (8bit):	5.40969868742486
Encrypted:	false
SSDEEP:	768:/jz+z6zKzACntN+Ds4FGxHzMsZ63D4WHE/u00FZ6NROowq5fJLObEGEVHYTUYS3C:/dDsgGxHc3TL5bNJB2UGl192nvSIN
MD5:	5A34B03CB884671743BEEBC13F7C1399
SHA1:	12D69902E44C7661FA1CC50AF7D2D020EAB6F3A0
SHA-256:	1CE473D6A4749E63F8BBFE0EE1B3B591FF6A13C08E71EF01425A716758EB885B
SHA-512:	E05A9DD2B779963F167900796088D17054BC7CA4B60546D04691C55501C3B9631247C6D025F41253BA71A6AA4F021C11C11FD647EE188844ACA5CC6F5011B87C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_pap-client_analytics_client-vflWjSwPL.js
Preview:	define(["exports","./c_viewer","./e_privacy_consent_static_ccpa_iframe","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_init_data_runtime","./c_browser_browser_detection","./c_src_sink_index","metaserver/static/js/modules/constants/viewer","./c_core_uri","react","./e_core_exception","./c_core_notify","react-dom","./e_edison","./c_init_data_edison","./c_core_i18n","metaserver/static/js/langpack","./c_core_xhr","./c_csrf","./c_core_attribution_header"],(function(e,t,i,n,r,s,o,c,a,d,h,l,u,p,f,v,g,m,y,w,b){"use strict";var _,S={exports:{}};_=S,function(){var e={cipher:{},hash:{},keyexchange:{},mode:{},misc:{},codec:{},exception:{corrupt:function(e){this.toString=function(){return"CORRUPT: "+this.message},this.message=e},invalid:function(e){this.toString=function(){return"INVALID: "+this.message},this.message=e},bug:function(e){this.toString=function(){return"BUG: "+this.message},this.message=e},notReady:function(e){this.toString=function(){r

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12419)
Category:	downloaded
Size (bytes):	12481
Entropy (8bit):	5.302644669501011
Encrypted:	false
SSDEEP:	192:yv6yQwnQi70Mnv9/FBONV87i4XtFlO47YvGQSTjPCo2:QQQQKzvg7gjlO5Bo2
MD5:	1B7D50BF09D1E7435809F79E4EBD6018
SHA1:	65F4FE988615E501E5DF0704C958B68BC2FB7627
SHA-256:	F33EDEA12C404010889EA01BF0A34425AC66952BC8A71EBE9690C178B2736E76
SHA-512:	56487397A30BD06BE0DCCAF5A16A4915666BE078E88C559C484228D450AD044D46E49FD03B364E1AFA93E20CB380F086C9549BD1ADCC84A94AAE2A42A98F552C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_browse_constants-vflG31Qvw.js
Preview:	define(["exports","./c_core_i18n"],(function(e,a){"use strict";var s,t,d,i;!function(e){e.FILENAME="FILENAME",e.MODIFIED="MODIFIED",e.CATEGORY="CATEGORY",e.EXTENSION="EXTENSION",e.SIZE="SIZE",e.SHARED_WITH="SHARED_WITH",e.SYNC_SETTING="SYNC_SETTING",e.FILE_COUNTS="FILE_COUNTS",e.RELEVANCE="RELEVANCE",e.LOCKED_FILES="LOCKED_FILES",e.POLICY="POLICY",e.PARENT_FOLDER="PARENT_FOLDER",e.RECENT_ACTIVITY="RECENT_ACTIVITY"}(s\|\|(s={})),function(e){e.FILENAME="FILES_BY_NAME",e.MODIFIED="FILES_BY_MODIFIED",e.CATEGORY="FILES_BY_CATEGORY",e.EXTENSION="FILES_BY_NAME",e.SIZE="FILES_BY_SIZE",e.SHARED_WITH="FILES_BY_NAME",e.SYNC_SETTING="FILES_BY_SYNC_SETTING",e.FILE_COUNTS="FILES_BY_FILE_COUNTS",e.RELEVANCE="FILES_BY_RELEVANCE",e.LOCKED_FILES="LOCKED_FILES",e.POLICY="FILES_BY_POLICY",e.PARENT_FOLDER="FILES_BY_PARENT_FOLDER",e.RECENT_ACTIVITY="FILES_BYRECENT_ACTIVITY"}(t\|\|(t={})),function(e){e.ASCENDING="ASCENDING",e.DESCENDING="DESCENDING"}(d\|\|(d={})),function(e){e[e.NotReady=0]="NotReady",e[e.NotLive=

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16982)
Category:	downloaded
Size (bytes):	17032
Entropy (8bit):	5.208378630806752
Encrypted:	false
SSDEEP:	384:YdVk7zan08HeCamIafhJc+HMoJ7AJOsJ/z304I31xJVhSEc+q:YdCnc3eCamIchJc+HMoJ7AJ1J/z304IE
MD5:	4015C8AEA03713850B2ED6A120A7B947
SHA1:	81627FB8CD488CC6652D0A5EB9B85D164EC66DC8
SHA-256:	E2105D63158F5AB48345741B47916947BF9078522FF0A4F84737D33DE6478205
SHA-512:	1E08FD0C56287CBE97465BA11EDB155E84D37E619F3C1C9855F531021277BBCA2DDC668315F530F4CAD94677BFAF76DE62A7819B42B10C678AA41D40A501B06C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_core_uri-vflQBXIrq.js
Preview:	define(["exports"],(function(e){"use strict";const t={DEBUG:!1,IDLE_TIMEOUT:200,NETWORK_TIMEOUT:6e4};class i{static format(...e){return["[ttvc]",...e,"::",performance.now()]}static debug(...e){t.DEBUG&&console.debug(...this.format(...e))}static info(...e){t.DEBUG&&console.info(...this.format(...e))}static warn(...e){t.DEBUG&&console.warn(...this.format(...e))}}class s{constructor(){this.pendingRequests=0,this.subscribers=new Set,this.didNetworkTimeOut=!1,this.next=e=>{i.debug("AjaxIdleObservable.next()",e),this.subscribers.forEach((t=>t(e)))},this.startCleanupTimeout=()=>{if(0===t.NETWORK_TIMEOUT)return;this.abortCleanupTimeout();this.cleanupTimeout=window.setTimeout((()=>{i.warn("AjaxIdleObservable","::","Timed out waiting for requests to resolve.","Make sure that incrementAjaxCount() is always matched with decrementAjaxCount().","::","pendingRequests =",this.pendingRequests),this.didNetworkTimeOut=!0,this.pendingRequests=0,this.next("IDLE")}),t.NETWORK_TIMEOUT)},this.abortCleanupTime

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	639
Entropy (8bit):	5.239448849095377
Encrypted:	false
SSDEEP:	12:U2eAi/ZB5tpUQxkNP371H5ouSA0CVKR/x6rgYaTmokRm2MRTGM6yK3TCz:xeAi/ZBdU7Z371HOu70CViTmBmDKn3Gz
MD5:	98070F1CF7C37AF35E411C1EAE73D5C3
SHA1:	652F4EC37768D55F02BA12617D3058E3A3436761
SHA-256:	2DD3B640A7C87526BB0B29205D1FD3253AA5B779BDCCBF8A6F4C082FE909BE90
SHA-512:	849B96385E40A08420CB2337673EC3F07AB828D5ED8F7856BC17C6E0BA1A2B8ECC9BA9CA16606930F02BC4B23E364DC832296C12FE3DB69EBB8948B975245A33
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/content-icons-vflmAcPHP.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-content-icons@4.6.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-ContentIcon{box-sizing:border-box}.dig-ContentIcon--overSubtle{--dig-color__fileicon__container:var(--dig-color__background__base)}.dig-ContentIcon--hasNoBackground{--dig-color__fileicon__container:transparent;--dig-color__fileicon__shadow:transparent}

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2903)
Category:	downloaded
Size (bytes):	224463
Entropy (8bit):	5.549830536062083
Encrypted:	false
SSDEEP:	6144:EPJzxw5DpwyKfrb5Hcimaaz2xICmKB7pLFx:9SyKfBHpHaCxICmkHx
MD5:	935A57D7B3A664FF798C18C5A490705A
SHA1:	63CD6CC42F98DD53CC45346B772673EC5F628ED1
SHA-256:	7D29FAA43BD29762C126E7C044C9E950D37C1DEDE7E37D5EB5380F20010ADE31
SHA-512:	48FE7A8EDA0F8CE8F36026D46C346CD0DABD968309166D94BE5099121EAE351D7A9E8A9DDB1035FF668EFF32095E4B8B440F909FB95801796C8A73E66BC46191
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/client
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1c042400, 0x0, ]);.var aa,ba,ca,da,t,ea,fa,ha,ja;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (519)
Category:	downloaded
Size (bytes):	584
Entropy (8bit):	5.199901264020445
Encrypted:	false
SSDEEP:	12:1hHryZO9DPeLv0Pmeagn/Werbb5w5w26PqJT0SwEohXI7:1hHryZOhcvSmjg/Werbb5w56PqJ0Eoy
MD5:	C2591593FFBD92E16276E86068DB913A
SHA1:	E7B7B89E0FFB6C5E1CD91BB81AA418E1E9BD77D1
SHA-256:	64CFD9646AFC31C4E5D1E3E6753194DCE4F385B017B1227DE2248730DE2DC0C0
SHA-512:	AE5D5BC1C7002E7600197597DD9F97600DA5875A82128105C787AD83439B6F8D59F2272ED4E6D8127C5524A1BC714B0442CF3B87785A98B454326851476171F0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_attribution_header-vflwlkVk_.js
Preview:	define(["exports","./c_init_data_runtime"],(function(e,t){"use strict";e.getAttributionHeader=function(){if(!window.ensemble)return void 0!==t.getYapsProject()&&void 0!==t.getYapsDeployment()?`${t.getYapsProject()}:${t.getYapsDeployment()}`:void 0;const e=window.ensemble.getPageletInfoForExceptionReporting().filter((e=>void 0!==e.yaps_deployment&&void 0!==e.yaps_project));return 0!==e.length?e.sort(((e,t)=>e.pagelet_name<t.pagelet_name?-1:1)).map((e=>`${e.yaps_project}:${e.yaps_deployment}`)).join(";"):void 0}}));.//# sourceMappingURL=c_core_attribution_header.js-vflts_Mx9.map.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	5.1409828575032925
Encrypted:	false
SSDEEP:	3:bT3+DrOXjiCRnar7TPOQitK5ssAuWhMq//ZUh5KRR:/ebynar7TGQitY7qpUh5g
MD5:	9787D8E52A897B135A9229B55B793894
SHA1:	DC17BDE436C7037472EDDD9DD66008DA8377CA55
SHA-256:	E44007295A1109B3EE9F07737B97B9E1EB58AA578307953F62776069F6DE3BA4
SHA-512:	15DD4C1B3BCF42B1C0518D2716AF45135FFA3385269E46E9536F620C0E0614EBA62B91375417E7E9BCA3731C2FE56296DEAEAD5069395F51C51BF5C05BE08A31
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSJQnimLpvoV4pyxIFDYOoWz0SBQ169gCqEgUNj4-etBIFDc5BTHo=?alt=proto
Preview:	ClQKDQ2DqFs9GgQIVhgCIAEKCw169gCqGgQIAxgBCgsNj4+etBoECAUYAQopDc5BTHoaBAhMGAIqHAgKUhgKDiFAIy4kKl8tPyYlKy8sEAEY/////w8=

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	222
Entropy (8bit):	5.070216732279745
Encrypted:	false
SSDEEP:	3:JVMBWoJ51GSg4KOrN9ENx8Zp3MEIRIfmX/0TSK9ylWoKJQIsvUGFO/Ype3XRLGRI:JS06jLVKycn8zMEpfguXXs8GFbYBsI
MD5:	4985A0F29951864A832BB9471CF2B43F
SHA1:	B1D80D67A0A506CBB31B459E0A155138E887EC75
SHA-256:	4A644362AC51EC790ADA2283D0762D6F24775F815B7ADAAEFE6F7CA4F9A7AE89
SHA-512:	7CD7373B03C0F118C0274E2E660C181FA15224AFED7659C007E598B314C72D9E905913D9B78B5DBA86821B8F68301674F5B033C806BCCCF192230F9958C3138E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/susi/email.module.out-vflSYWg8p.css
Preview:	._hide-password_1wewp_4{display:none}._email-check-button_1wewp_8{margin-top:var(--dwg-spacing__unit--3,24px)}._submit-container_1wewp_12{display:flex;flex-direction:column}./# sourceMappingURL=email.module.out.css.map /

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9312
Entropy (8bit):	4.937003383694957
Encrypted:	false
SSDEEP:	192:e0zDuAn+eT6X3vRzpedPRPkaFclVERezlf/LX74K+ljkBfgk:ry2+eWXJ1eL4lVEoZf/5+ljCh
MD5:	46CAC945E491B87E2835B2D5E8EC8804
SHA1:	2D072C5E3A12ABD4733DD429709C8DBCB5D3D50B
SHA-256:	5A2D87CA902230E9900DF89430987C8F17B22FF184820DD40C8C6FBE777A5FC1
SHA-512:	E30B985F18B6ED70B6B2F50691AB5698412FE4F67D1297F2582D6445DF65971DBC35758C122F9780D8D6306F5AC6B543E82AB2ED24CEF68E94D8178112F7BE9E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/ccpa_iframe/ccpa_iframe-vflRsrJRe.css
Preview:	html,.html.maestro {. display: inline;. background-color: transparent !important;.}..body {. background-color: transparent !important;.}..:root {. /* Colors /. --color__theme__link: #0061ff;. --color_primary--light: #0061fe;. --color_primary--dark: #0057e5;. --color_graphite: #1e1919;. --color_graphite--darker: #312a25;. --color_coconut: #f7f5f2;. --color__utility__focusring: #428bff;. --color__disabled__background: #bfbfbf;. --color__opacity--darken1: #f3f0eb;. --color__opacity--darken2: #e4ddd3;. --color__faint__text: rgba(82, 74, 62, 0.78);. --color__alert__background: rgba(155, 0, 50, 0.1);.. / Animation Speeds /. --motion__time--fastest: 100ms;. --motion__time--faster: 200ms;. --motion__time--slow: 600ms;.. / Fonts */. --type__body--fontfamily: 'Atlas Grotesk Web', 'Atlas Grotesk', 'AtlasGrotesk', -apple-system,. 'BlinkMacSystemFont', 'Segoe UI', 'Helvetica Neue', 'Helvetica', 'Arial', sans-serif,.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8486)
Category:	downloaded
Size (bytes):	8487
Entropy (8bit):	4.9015857124952
Encrypted:	false
SSDEEP:	192:zhw3JmwyswyMwuk6wysw9wy9wiw2CwuXsw/yw4m2/C6Q9d+QBcwLrOxNIqZhBn94:/+2E66ArR6a7gPA6
MD5:	2B550C403E2A5FE12C846A9C2931F7C8
SHA1:	D9D69852E8B9F3F66A5E2CFEF60D40664B368286
SHA-256:	72BDE476747B0BB5613AFFF1C51476F46BA3D1D481994838690C1786A9BD025A
SHA-512:	4E2FBF62FB76DD776618DDCEC9D76D24509391CC8934BE1A96D24D9DA15C2516B17CD5286CAEFDB714CD2643444B3295D64407C5E2F89709DD5D23E04EC81B45
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/google_one_tap-vflK1UMQD.css
Preview:	#credential_picker_iframe{z-index:10002 !important}.shared-link-signup-page #credential_picker_container,.shared-link-signup-page .one-tap-tos-modal-v1{top:var(--ib-preview-toolbar-top-offset, 20px)}.transfer-page #credential_picker_container{top:calc( var(--dwg-nav__height--universal, 48px) + var(--dwg-spacing__unit--2, 16px) - 6px)}.warp-page #credential_picker_container{top:calc( var(--dwg-nav__height--universal, 48px) + var(--dwg-spacing__unit--2, 16px) - 6px)}.shared-link-file-page #credential_picker_container,.shared-link-file-page .one-tap-tos-modal-v1{top:calc(var(--titlebarHeight, 64px) + var(--dwg-spacing__unit--2, 16px) - 6px);right:calc(56px + var(--dwg-spacing__unit--2, 16px) - 6px)}.shared-link-folder-page #credential_picker_container,.shared-link-folder-page .one-tap-tos-modal-v1,.scl-folder-page #credential_picker_container,.scl-folder-page .one-tap-tos-modal-v1{top:calc(var(--titlebarHeight, 64px) + var(--dwg-spacing__unit--2, 16px) - 6px)}.login-or-register-page #cred

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (605)
Category:	downloaded
Size (bytes):	120585
Entropy (8bit):	5.370923647345209
Encrypted:	false
SSDEEP:	1536:6s276dU+/c7hEUuoiwbUgLYUR16SLq959TDqReyDjG9M5nvr2aIgq20PH:12lCy6LSl16S4PTODj+MZDDRs
MD5:	23BFE7E99565EE8F34AFD63C06F4C24B
SHA1:	BF08B8AD1AD73C12A7C9CB211926CE23A861DB07
SHA-256:	9DB33292007AB6C38527B39D5663E976A305564E19B2A5A8713EA2B2C00F505D
SHA-512:	F6318DAF93E2C1EF27CCB2D84E4F10AC430F7E3194D29C7CD066332995318BB96609FAC18EDC827355799244B9BF1570C0807B429CDCED4C4B890C5F00DDF477
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/react-dom-vflI7_n6Z.js
Preview:	/** @license React v17.0.2. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(M,ha){"object"===typeof exports&&"undefined"!==typeof module?ha(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],ha):(M=M\|\|self,ha(M.ReactDOM={},M.React))})(this,function(M,ha){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function Ta(a,b){gb(a,b);gb(a+"Capture",b)}function gb(a,b){Ib[a]=b;for(a=0;a<b.length;a++)zf.add(b[a])}function li(a){if(Af.call(Bf,a)

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10662)
Category:	downloaded
Size (bytes):	10720
Entropy (8bit):	5.239643174421954
Encrypted:	false
SSDEEP:	192:9ukCRImpTR7cpTXupFgPIkLhjTnkjx8ojNpETPGX36tcBpMT44+xfD32nCoP32P0:9utRImpTR7yXWFgPIkLhjTkd3j2GXf5g
MD5:	BAD44F3FF516D5115FD80389FF48F251
SHA1:	BA4ED3A47A79EF4D2D44543734132D029F674347
SHA-256:	C5BE44FE054D18F7EDDD32ECA1DC6C4AADD7951694440683F0CB503FF800564A
SHA-512:	886BFB4335D5434B1E1A56F30D88BFE54FBB449B0BA2EFE35C34AA21DB5066EA2C032585C2443B5C059F668FA5E7226196A1DCE62CAC7D3D71E889EB841E6561
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_init_data_edison-vflutRPP_.js
Preview:	define(["exports","./c_init_data_runtime","./c_core_uri"],(function(e,t,n){"use strict";var r,a,o;function i(t){const n=e.Code[t];return"string"!=typeof n?t.toString():n[0].toLowerCase()+n.substring(1).replace(/[A-Z]/g,(e=>"_"+e.toLowerCase()))}e.MethodKind=void 0,(r=e.MethodKind\|\|(e.MethodKind={}))[r.Unary=0]="Unary",r[r.ServerStreaming=1]="ServerStreaming",r[r.ClientStreaming=2]="ClientStreaming",r[r.BiDiStreaming=3]="BiDiStreaming",function(e){e[e.NoSideEffects=1]="NoSideEffects",e[e.Idempotent=2]="Idempotent"}(a\|\|(a={})),e.Code=void 0,(o=e.Code\|\|(e.Code={}))[o.Canceled=1]="Canceled",o[o.Unknown=2]="Unknown",o[o.InvalidArgument=3]="InvalidArgument",o[o.DeadlineExceeded=4]="DeadlineExceeded",o[o.NotFound=5]="NotFound",o[o.AlreadyExists=6]="AlreadyExists",o[o.PermissionDenied=7]="PermissionDenied",o[o.ResourceExhausted=8]="ResourceExhausted",o[o.FailedPrecondition=9]="FailedPrecondition",o[o.Aborted=10]="Aborted",o[o.OutOfRange=11]="OutOfRange",o[o.Unimplemented=12]="Unimplemented",o[

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9586)
Category:	downloaded
Size (bytes):	9587
Entropy (8bit):	5.076530007287422
Encrypted:	false
SSDEEP:	96:0NFNSNw2f7NaawvN5N6KNVV6NF1NljNON/NxUl5NALL9NkNrG:03+zf5aaw1D62mFH7ylxUlDALLvErG
MD5:	53A288476541A8A0E790FC62E77B6FB9
SHA1:	FFB02CE6E09E61EB494BDE86E21A225F01C58EDA
SHA-256:	FB41B7F75A350B961521693271414222486CB98B099D0D68DFF83765F412CA94
SHA-512:	D23D810D2B69F86A3CB082128E405768BFBB8436E67650729072FD33D5B18DB6CAA76FC2E2B50422F83ACBFF273CD807C3274ABEE222AE2D6A0E03581D3E2D31
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/font_sharp_grotesk-vflU6KIR2.css
Preview:	@font-face{font-family:'SharpGroteskSuperCondensed';font-display:swap;src:url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBBook11-vflIBQIXn.eot");src:url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBBook11-vflIBQIXn.eot?#iefix") format("embedded-opentype"),url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBBook11-vflIUABa0.woff2") format("woff2"),url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBBook11-vflyOWHzZ.woff") format("woff"),url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBBook11-vflzrCLFX.ttf") format("truetype");font-weight:400;font-style:normal}@font-face{font-family:'SharpGroteskSuperCondensed';font-display:swap;src:url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBMedium11-vflVqGBL6.eot");src:url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBMedium11-vflVqGBL6.eot?#iefix") format("embedded-opentype"),url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBMedium11-v

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (725)
Category:	downloaded
Size (bytes):	775
Entropy (8bit):	5.238442196362785
Encrypted:	false
SSDEEP:	24:1ht7Z0BpNvmUs6FFKH+vB/4GXMCR9eDNFC2Lb:1hl0pVDrFB/5YDXzLb
MD5:	42A9D428891E55709CBCC278E1AE4005
SHA1:	30D29986E8567445705FF03CBD57DC82D2AB5619
SHA-256:	2785B93267B43EF84EB328F3F50AEDECE658149CDCEED2F0B3EE5384759BE2B5
SHA-512:	A280CD45981E4C7A9402C501219D632B2FE46BFAFAFA90661D7D838F69A11692391421898D699EA10D42F247C4346396556C59519061EAB386C322F977735E83
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_core_xhr-vflQqnUKI.js
Preview:	define(["exports","./c_rfc4648_lib_rfc4648","./c_core_attribution_header"],(function(t,e,n){"use strict";const o=function(t){};t.sendXhr=function(t,r,s=o){e.assertDropboxDomain(t),function(t){const n=e.readCsrfToken();t.is_xhr=!0,t.t=n}(r);const i=function(t){const e=[];for(const n in t)t.hasOwnProperty(n)&&void 0!==t[n]&&e.push(`${encodeURIComponent(n)}=${encodeURIComponent(String(t[n]))}`);return e.join("&")}(r),c=new XMLHttpRequest;c.onreadystatechange=function(){c.readyState===XMLHttpRequest.DONE&&s(c.status)},c.open("POST",t),c.setRequestHeader("Content-Type","application/x-www-form-urlencoded");const u=n.getAttributionHeader();return u&&c.setRequestHeader("X-Dropbox-Client-Yaps-Attribution",u),c.send(i),c}}));.//# sourceMappingURL=c_core_xhr.js-vfldcOlT0.map.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2962)
Category:	downloaded
Size (bytes):	2963
Entropy (8bit):	5.059442814486228
Encrypted:	false
SSDEEP:	48:boD3AFSMrvDpVzueGEKaxOSBaKv0DEq3AbCCLS1BDRLtmfDRcz43V56Y:bg3zU7/ieGEKaxnoKcDEq385mpa3nh
MD5:	4D8313A7B6900F61AE9BFE51DDF4F67B
SHA1:	8B528784DBBE02C32F5F844953563C9B30178600
SHA-256:	BFF7C9A7A1D2C6B47613859610EBA689A43C53189917DB1E81B5826B21B6C957
SHA-512:	9376D23F37B26C95A8DE19B1B104935C521DEE10328629A7B82CAA0FA524C7079DBB9687AA5C270D348FE64DA414C22F8E72DADC23C2FEC9427EB72598DA8263
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/maestro_appshell_styles-vflTYMTp7.css
Preview:	body,input,textarea,select,button,.normal{font-family:"Open Sans","lucida grande","Segoe UI",arial,verdana,"lucida sans unicode",tahoma,sans-serif;font-size:13px;color:var(--dig-color__text__base, #000);font-weight:normal}.maestro body:not(.dig-Button),.maestro input:not(.dig-Button),.maestro textarea:not(.dig-Button),.maestro select:not(.dig-Button),.maestro button:not(.dig-Button),.maestro .normal:not(.dig-Button){font-family:AtlasGrotesk,sans-serif}body{background-color:var(--dig-color__background__base, #fff);min-height:100%;margin:0;padding:0}a,a *{cursor:pointer;outline:none}a{color:var(--dig-color__primary__base, #0061ff);text-decoration:none}a:focus{text-decoration:underline}a img{border:0}p,h1,h2,h3,h4,h5{margin:0 0 1em 0;line-height:1.6em}h1{font-size:18pt;font-weight:normal;margin:10px 0}h2{padding-top:3px;padding-bottom:10px;margin-bottom:4px;font-size:10pt}h3{padding:0;margin:0;font-size:10pt}h4{margin:0 0 0.5em 0;font-weight:bold;font-size:14px}h5{margin:0 0 0.5em 0;font-

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65155)
Category:	downloaded
Size (bytes):	148001
Entropy (8bit):	4.906082415856757
Encrypted:	false
SSDEEP:	3072:szx2x9JMbtA6CCYMMw/Id8N17xvU0Y2owYDo/xU8RDXQwQvdMUbQF7P/LPMDInAu:szx2x9JMbtA6CCYMMw/Id8N17xvU0Y2r
MD5:	369DC6BC585DE3225DD8F7A2E3875AF3
SHA1:	2E316D6E7D6CE9B6BCC76800327EE8F00D0D6536
SHA-256:	4C02ADF2AE56429E877AB87CDFFBBAB270170AD3B4A32D4DCA0E99B96AF614B2
SHA-512:	CA9C0C9FFACA25F5E2652F974909FE01BC53197C4BE79831ADBD61CE62949D33F20585AAAFFEA459A78503A831314E65C68A2A5EBB3C2A30854DFCD6994C0296
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/foundations-components-vflNp3GvF.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-foundations@2.16.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./..._4rjmw90{-webkit-font-smoothing:antialiased;box-sizing:border-box}.js-focus-visible ._4rjmw90:focus:not([data-focus-visible-added]){outline:none}._4rjmw90:after,._4rjmw90:before{box-sizing:border-box}.ekabin0{-webkit-appearance:none;-moz-appearance:none;appearance:none}.ekabin1{-webkit-user-select:none;-moz-user-select:none;user-select:none}.ekabin2{list-style-type:none}.ekabin3{cursor:default}.ekabin4{cursor:pointer}.ekabin5{word-break:break-all}.ekabin6{word-break:break-word}.ekabin7{word-break:inherit}.ekabin8{word-break:keep-all}.ekabin9{white-space:normal}.ekabina{white-space:nowrap}.ekabinb{overflow:hidde

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8391)
Category:	downloaded
Size (bytes):	8453
Entropy (8bit):	5.113739133759895
Encrypted:	false
SSDEEP:	192:UB6PeH4MBpHXnOQ6C4kpHXiOAq9j2Y9JArOhD4U5/voh2dwD4U5tYa1aK3cs7D7D:K6mYMmQ6C4tOhdN4qG4Y3csWWL
MD5:	CEF3AFAC3BB3869958AE9EADA3A9E2D0
SHA1:	E19153C14CDC86ADDA25922707DEC307D7EAEA18
SHA-256:	557B5C5A37612D8B42057A42C52D372546C51AAD7B3C8FF89E652EFAF6DAD603
SHA-512:	960491C44EFC7E80CBA123423E4964C46E657687B061E2D8FAE6D20C6FB60BDDE4D4A1420D165E9CE5995BC90958DC5C69369162E5688F81726781DF95C0B4A2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_api_v2_noauth_client-vflzvOvrD.js
Preview:	define(["exports","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_init_data_runtime","./c_core_uri","./c_core_attribution_header","./c_csrf"],(function(e,s,t,o,n,r){"use strict";class a extends Error{static parseResponse(e,s,t,o=null){let n="";null==o&&(o=e in p?p[e]:e>=500?i:a);const r={raw:{status:e,responseBody:t},summary:null,error:{},headers:s};try{const e=JSON.parse(t)\|\|{};r.error=e.error,r.summary=e.error_summary,n=null!=e.user_message?e.user_message.text:""}catch(e){}return Object.assign(new o(n\|\|void 0),r)}}class i extends a{}const p={400:class extends a{},401:class extends a{},409:class extends a{},429:class extends a{}};class d extends Error{constructor(e,s){super(s),this.name="FetchAbortError",this.response=e}}class c extends Error{constructor(e,s){super(s),this.name="FetchFailError",this.response=e}}class l extends Error{constructor(e,s){super(s),this.name="FetchResponseError",this.response=e}}function u(e){return"FetchResponseError"===e.name}function

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2334)
Category:	downloaded
Size (bytes):	2400
Entropy (8bit):	5.164664434417214
Encrypted:	false
SSDEEP:	48:1aMEGPUm1zjIBS4gJaUoPepzUJIjk0y6o:d1zME4gJaXWpzwIAN6o
MD5:	D7102E61F8A55FE25337F4C956CCEF24
SHA1:	5B45C74151E3ADB6E9AA71428347060BA2098CA3
SHA-256:	B3B2C6C4B2857BD79700FD042D4250538368ED5D1628FF82EAC6E7391D96DA86
SHA-512:	E5BED0B1A87DD2E17D187B6BA6E3F39EDB158AB547FE3C8D85BD090D05B4E659970122C105ECFE5CB4B0497A5D4E9FC3CD5D562C057ECA18A4786B5E0240B43C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_toast_toast_on_init-vfl1xAuYf.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_core_notify","./c_csrf","./c_browser_browser_detection","./c_core_uri","./e_core_exception","react-dom","react","./e_edison","./c_init_data_edison"],(function(e,t,n,o,r,i,s,c,u,d,l,a){"use strict";function f(){return n.__awaiter(this,void 0,void 0,(function(){const t=i.edge&&!i.edgeChromium();if(void 0!==window.crypto.subtle&&!t&&!i.checkBrowserVersion(i.chrome,40,!1))return window.crypto;if(t){const{legacyEdgeWrapper:t}=yield new Promise((function(t,n){e(["./c_security_legacy_edge_shim"],t,n)})),n=t();if(void 0!==n)return n}throw function(e){const t=new Error(e);return t.isBrowserNotSupported=!0,t}("WebCrypto not supported")}))}function _(e,t){return n.__awaiter(this,void 0,void 0,(function(){const o=e.split(":");if(3!==o.length)return null;const[i,s,c]=o;if("1"!==i)return null;const u=(new TextEncoder).encode(s);let d=decodeURIComponent(c);try{d=atob(d)}catch(e){return null}const l=function(e){const t=new Uint8Array(e.length)

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 58239, version 0.0
Category:	downloaded
Size (bytes):	58239
Entropy (8bit):	7.987567220825239
Encrypted:	false
SSDEEP:	1536:PdhJVv8P7HlrwHvxIazBkhS5F+HU/ZZklmjE7:PbvQH8pgS5FdrE7
MD5:	83BB5AE3E28AFB23B4ED2EF74C272312
SHA1:	C79EC10C6AB82271C588B59A0DD26DC57DE54843
SHA-256:	B1F18FD551241D3EFD5B9D114317F1D52C0C19677D3ECE876CE75249A1E067A6
SHA-512:	A804C81646BC9E204164342CC27A9A426BB3F65FB270DCCD08C5D79C74A84224D3BF0F4E1F3ADE1CFC60462425EB8735B489D3D4550A0921DDB44F590A2FEFE1
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Regular-Web-vflg7ta4-.woff
Preview:	wOFF...............D........................GPOS...h..0......;.GSUB...p........u._.LTSH...T...).....^'"OS/2.......M...`^.kfcmap..3....Z...\...cvt ..7............Yfpgm..5........a.B..gasp...\............glyf..;...b.... ]...hdmx......- ..`....head.......6...6....hhea.......!...$.+..hmtx...`........R.ovloca..7...........pmaxp....... ... ....name...\...,...gg...post...........\|M..rprep..6........5B.e........B...0_.<...........a.......]c.;.,................x.c`d``...........5.A...2`...s.............d...i....................x.c`f.a....................2.1<d@....g.__.....L.:.]....3\Q``...c.g.....x.F......x.U[hTW.]{.I.XP.dFS'...d..q...2.i.i..D....RRb.T..(..~\|....C"...J...?..U...P..~.:]{..v2...:..s.>g...c.OfOB.#.....FA.....Cz..X"7..1l.}."......<^./.#_".Cx....LG...-X.......c..x.x..GK...z.mz.....cX/.C\|....!.c.Np~3.%8.t.......M.WOb.>..A[.e.......m......^...g.....}.eM K.j.k.0W.q..e.c@..4.q...W\.y...e.F.....e...n@.!..F...}.].^e.&i....s.s..x.......q?.m.n@.....@.....J.P3A

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47981)
Category:	downloaded
Size (bytes):	48037
Entropy (8bit):	5.265897252421922
Encrypted:	false
SSDEEP:	768:JYQq7XTMiYuxEvp1wr8HSktn4rdVbUyXqmHWEYWMhiAcaW9fjaaWlnxDKe4KSADK:NapZbm+1ZWkjiL7oBj
MD5:	AC75D2758BF3E040611814872A174121
SHA1:	CC5AF2F2D44FEF889E3779F768CFEC8713D4F386
SHA-256:	7314EB1E0738878F2BACCF1B901FCD3E438834902A0146BC21B54D1521E62A3D
SHA-512:	DE40C011C8BDC049AF0774BF5D41C7F98A042C65E300AFD90614A36C1EF3B0A1EC66BBDB938001F688F2DDD13F275F9C48C851CB5BE4977A2E6E00DAE4EB2A05
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_src_sink_index-vflrHXSdY.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_browser_browser_detection","./e_core_exception"],(function(e,t,n,s,i){"use strict";class r extends n.Message{constructor(e){super(),this.seconds=n.protoInt64.zero,this.nanos=0,n.proto3.util.initPartial(e,this)}fromJson(e,t){if("string"!=typeof e)throw new Error(`cannot decode google.protobuf.Timestamp from JSON: ${n.proto3.json.debug(e)}`);const s=e.match(/^([0-9]{4})-([0-9]{2})-([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(?:Z\|\.([0-9]{3,9})Z\|([+-][0-9][0-9]:[0-9][0-9]))$/);if(!s)throw new Error("cannot decode google.protobuf.Timestamp from JSON: invalid RFC 3339 string");const i=Date.parse(s[1]+"-"+s[2]+"-"+s[3]+"T"+s[4]+":"+s[5]+":"+s[6]+(s[8]?s[8]:"Z"));if(Number.isNaN(i))throw new Error("cannot decode google.protobuf.Timestamp from JSON: invalid RFC 3339 string");if(i<Date.parse("0001-01-01T00:00:00Z")\|\|i>Date.parse("9999-12-31T23:59:59Z"))throw new Error("cannot decode message google.protobuf.Timestamp from JSON: must be from

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	267
Entropy (8bit):	4.717822099205975
Encrypted:	false
SSDEEP:	6:qF/UGaYkiUN3DkGX98QHAEdJs6Oq5Ss/lAqJmW/XLV/QL:4UvN8jEdiEZ/aqJmWvLV/QL
MD5:	00F53700C90A2EDF60A83C7C3B959710
SHA1:	270A7C333D4BDE912992993FBDB7D2EC579E9B1B
SHA-256:	C23F75F5147BEDB59DE93A0559B52C5303702B063C8D665C27CD8F40FE329B8B
SHA-512:	4F1FF50C5F02508BDF14735AEE6E1121F81120665CF10F2288F1DF344BE79649A4D48EFEE8784618184491E8DF9ACB400280E4C219D121B4057DC42CEEE8C117
Malicious:	false
Reputation:	low
URL:	https://dropboxcaptcha.com/
Preview:	<html>. <head>. <meta charset="utf-8">. <meta content="IE=edge" http-equiv="X-UA-Compatible">. <title>DropboxCaptcha</title>. </head>.. <body style="margin: 0px">. <script type="text/javascript" src="funcaptcha.js"></script></body>.</html>.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5082)
Category:	downloaded
Size (bytes):	5083
Entropy (8bit):	4.931498303456814
Encrypted:	false
SSDEEP:	48:sal1qQzFHzjzjGQH7awKT0j5L1QkKvk+yvMdRIRCrHfZ2PMRpe6nMOqOxpOq92Oc:tBfySNKY6kSQwVr/Z2A6Oz9Q3
MD5:	0E80CBB2EF9225FDC2B4DEFA7D321901
SHA1:	BD0862DEAD0CDAD41CC33D88856225717C6B173E
SHA-256:	E34014DB1E6DA64AE844602B85DAFC41024F5694E49058A6F138DC7415E0AD25
SHA-512:	5BED798924D325326B30C5089EF51E7086D5281B113EDC519A58632528FB95B082ED723813F4C1F4E73D7D05F0DADB70B2BDD478DEFCB5124A2E9A7020271C09
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/font_paper_atlas_grotesk-vflDoDLsu.css
Preview:	@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflugmAly.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflWr14lv.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflYSEsbG.ttf") format("truetype");font-weight:100;font-style:normal}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflP-manv.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflmKWqdQ.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflHYkDrv.ttf") format("truetype");font-weight:100;font-style:italic}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Light-Web-vflvAXMid.woff2") format("woff2"),url("

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48054)
Category:	downloaded
Size (bytes):	48110
Entropy (8bit):	5.266117469237999
Encrypted:	false
SSDEEP:	768:zYQW7XTMiYuxEvp1wr8HSktn4zdVbUyXqmHWEYWMhiAEaW9fjCaWlnxDKe4KiAnW:Lm5Zz+KptW4TiL7oSu
MD5:	9A4D33E9F93F1ED9DA898D73B532A9E6
SHA1:	1350A5CBE24B1CB428FA1033DBC9A47EA2E07151
SHA-256:	1C3BD03F8C5D3EB2450C490C1679A36E7CD9488D127A74433BB57DD691E8F8B3
SHA-512:	4B634E558BB68344BEB2AEA4480F4662BF3AC24D8EBE84CFD639B4AAEF6C6779E71571C618779060D330D931937788665C884165F34E755A6899E3B0ACD85B25
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_src_sink_index-vflmk0z6f.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_apex-metrics_src_types","./e_core_exception"],(function(e,t,n,s,i){"use strict";class r extends n.Message{constructor(e){super(),this.seconds=n.protoInt64.zero,this.nanos=0,n.proto3.util.initPartial(e,this)}fromJson(e,t){if("string"!=typeof e)throw new Error(`cannot decode google.protobuf.Timestamp from JSON: ${n.proto3.json.debug(e)}`);const s=e.match(/^([0-9]{4})-([0-9]{2})-([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(?:Z\|\.([0-9]{3,9})Z\|([+-][0-9][0-9]:[0-9][0-9]))$/);if(!s)throw new Error("cannot decode google.protobuf.Timestamp from JSON: invalid RFC 3339 string");const i=Date.parse(s[1]+"-"+s[2]+"-"+s[3]+"T"+s[4]+":"+s[5]+":"+s[6]+(s[8]?s[8]:"Z"));if(Number.isNaN(i))throw new Error("cannot decode google.protobuf.Timestamp from JSON: invalid RFC 3339 string");if(i<Date.parse("0001-01-01T00:00:00Z")\|\|i>Date.parse("9999-12-31T23:59:59Z"))throw new Error("cannot decode message google.protobuf.Timestamp from JSON: must be from 00

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2845)
Category:	downloaded
Size (bytes):	2846
Entropy (8bit):	4.966993863852829
Encrypted:	false
SSDEEP:	24:sP84FvD4FIKN24FrX4FyTk+4Fpf0P84FLD4FcKN24Fx4FZ+4F+ffP8y/Bz+9W7HF:sPb+N5ztPPPKNRPlaPAxNvZ
MD5:	0E3B3B3216D852E1ADEABC8B6E7FC27B
SHA1:	5D2CC55D2D9738CBCBDFE2CC350ABF2A3BF0EFA0
SHA-256:	5585BCC97733AF2B7DC9F697D3BA3B7D4AF58484C38117DECD68F75E8407ADFE
SHA-512:	BBB9EF7CBAF5736E5983E92C358B95AB3F573EFD363DF62F9F837ECC697681F58B50BA28E8E573A6450A4A221E8716A54DBA9B09D9B002AD973CDE78D0143AF9
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/font_atlas_grotesk-vflDjs7Mh.css
Preview:	@font-face{font-family:'Atlas Grotesk Web';src:url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Light-Web-vflKfRQb9.eot");src:url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Light-Web-vflKfRQb9.eot?#iefix") format("embedded-opentype"),url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Light-Web-vfl5CyyQq.woff") format("woff"),url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Light-Web-vflVNjX5v.ttf") format("truetype"),url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Light-Web-vfloBJpb4.svg#Atlas Grotesk Web") format("svg");font-weight:300;font-style:normal;font-stretch:normal}.AtlasGrotesk-Light-Web{font-family:'Atlas Grotesk Web';font-weight:300;font-style:normal;font-stretch:normal}@font-face{font-family:'Atlas Grotesk Web';src:url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Regular-Web-vfl31qaPE.eot");src:url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Regular-Web-vfl31qaPE.eot?#iefix"

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33947)
Category:	downloaded
Size (bytes):	34023
Entropy (8bit):	5.476192726537979
Encrypted:	false
SSDEEP:	768:iZJddxPY7YuuBYtZyqU4n1wse73nXnTixgmNhAvV76Orr8q/rgqm3Bdr6q+gkS3U:ihPR/r9ir+Hvpnq6B8Ju5KzEhxTL
MD5:	EB9D1E82831ED22126CDDF837D2089E3
SHA1:	2D3DBDABBBA3083677BBDA0004F00561F4F300AB
SHA-256:	7F3EE892CEC382DDBB792661DEFB495C844F1D6C11103C383A60B74CA7D428E0
SHA-512:	153F2214B0710EF2C44B4C00104E9A8BF7B89D72AB5A506BC225ADC3AA17C2559633A034F82A8F7A99BFAACBC05FFEE0C49B062B35555A6CF28437A554FB29EF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_campaigns_campaigns_toolkit_client-vfl650ego.js
Preview:	define(["require","exports","./c_init_data_runtime","react","./e_edison_scl_invitation_signup","./c_api_v2_noauth_client","./e_core_exception","./c_core_uri","./c_browse_constants","./c_lodash-es_lodash","./c_apex-metrics_src_types"],(function(e,a,n,t,i,s,o,c,l,_,r){"use strict";function m(e){return e&&e.__esModule?e:{default:e}}var u,d,p,g,E,f,S,I,O,C,A,v,N,b=m(t);!function(e){e.SUGGESTED_FOLDERS_QUALIFY="suggested_folders_qualify",e.SUGGESTED_FOLDERS_VIEW="suggested_folders_view",e.SUGGESTED_FOLDER_CREATE_CLICKED="suggested_folder_create_clicked",e.SUGGESTED_FOLDER_HIDE_CLICKED="suggested_folder_hide_clicked",e.SUGGESTED_FOLDER_CREATED="suggested_folder_created",e.SUGGESTED_FOLDER_FAILED="suggested_folder_failed",e.SUGGESTED_FOLDER_ACCESS_VIEW="suggested_folder_access_view",e.SUGGESTED_FOLDER_ACCESS_CHANGE="suggested_folder_access_change",e.SUGGESTED_FOLDERS_COMPLETED="suggested_folders_completed"}(u\|\|(u={})),function(e){e.PASSWORDS_BANNER_QUALIFY="passwords_banner_qualify",e.PASSWOR

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2102), with no line terminators
Category:	downloaded
Size (bytes):	2102
Entropy (8bit):	5.140601464364906
Encrypted:	false
SSDEEP:	48:mUX/EuBawjQtsDBhokj2OMwarf+AmhseggQPh7JhR:mUs+T669Arv
MD5:	FFF8E4C34D574BE9AC43718EE5ACCD9E
SHA1:	A88F5AAC146D4726FE7A7DC60BDF6BF3236CF187
SHA-256:	851BAAFA4D75A31942B8D7F752909C9BD63873DD2B2D9E3C5B69439FC1F645A2
SHA-512:	3A19E93545B170067C53EC734DC6314A160EDE0671C2E7A6AC630B34D321D4634052637E51F5D51841D8C83F3CBCAE7ECF648A9E5C2E88C6912B714CAD7D691E
Malicious:	false
Reputation:	low
URL:	https://dropboxcaptcha.com/funcaptcha.js
Preview:	!function(e){var n={};function t(o){if(n[o])return n[o].exports;var a=n[o]={i:o,l:!1,exports:{}};return e[o].call(a.exports,a,a.exports,t),a.l=!0,a.exports}t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(t.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var a in e)t.d(o,a,function(n){return e[n]}.bind(null,a));return o},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=0)}([function(e,n,t){e.exports=t(1)},function(e,n){var t,o={};function a(e){if(/^https:\/\/dr

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (544)
Category:	downloaded
Size (bytes):	11440
Entropy (8bit):	5.360613902337515
Encrypted:	false
SSDEEP:	192:8cL60YrI90CW3j4xqLYfMHaPsiJcW9eYcfZcTQWhGJykDZNZ3e:9L6hrI90CW3jhgUiJc+eYcfZ3W0JySN0
MD5:	61699B70CF57ABE63FDF5F4007D36EC1
SHA1:	6C05189CC2D08BB2A7609C002F0675C9C670D362
SHA-256:	229BBF4D0E7488209564152C6723497F1AC3934136CA1684233D2FA88FA4146F
SHA-512:	AA5CC8794B5383B781A6611A4B5D8D660C73E766186551799B28FCF668C911EB0177FA04F543EC60E5F64005F3BCE019604BD0A2129D718F33284D3689F5C398
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/react-vflYWmbcM.js
Preview:	/** @license React v17.0.2. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=Y&&a[Y]\|\|a["@@iterator"];return"function"===typeof a?a:null}function y(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,e=1;e<arguments.length;e++)b+="&args[]="+encodeURIComponent(arguments[e]);return"Minified React error #"+.a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function v(a,b,e){this.props=a;this.context=b;this.refs=Z;this.updater=e\|\|aa}function ba(){}function K(a,b,e

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31230)
Category:	downloaded
Size (bytes):	31611
Entropy (8bit):	4.893111591526175
Encrypted:	false
SSDEEP:	192:EpfCRornDwyfbEd2d2v6+mOoiWP6Vk+6D1iZVop4VmwJNZgEWJ83ptaLcsyxmsHK:EpfCRoGYY0uVGzBGrg6YYFuVZzBZ
MD5:	7C750AAD2B692C1D3E448FD3B3404136
SHA1:	67CE2AB7109B50856F58D42E8BDE38A9D071213F
SHA-256:	53B3A32379965955CC752FEC0C709ED86910370368E9824BCEFEAA731E54C725
SHA-512:	3024D9868DFD1AD01B6F52EBB429257B8D83F588C03566560F197CB0ED2BD459A9E0E3EA82FD72037607525D44CE48162E1F9AD4114A81D8A7D617F0902908DC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/foundations-tokens-vflfHUKrS.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-foundations@2.16.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./..:root{--type__title__medium--lineheight:28px;--type__title__medium--fontweight_strong:500;--type__title__medium--fontweight:400;--type__title__medium--fontsize:22px;--type__title__standard--lineheight:28px;--type__title__standard--fontweight_strong:500;--type__title__standard--fontweight:400;--type__title__standard--fontsize:22px;--type__title__small--lineheight:26px;--type__title__small--fontweight_strong:500;--type__title__small--fontweight:400;--type__title__small--fontsize:16px;--type__title__large--lineheight:36px;--type__title__large--fontweight_strong:500;--type__title__large--fontweight:400;--type__title

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16909)
Category:	downloaded
Size (bytes):	16959
Entropy (8bit):	5.208525427500881
Encrypted:	false
SSDEEP:	384:YdVk7zan08HeCamIafhJc+HMoJ7AJOsJ/z304I31xJVhSE2+A:YdCnc3eCamIchJc+HMoJ7AJ1J/z304Ic
MD5:	313C3A6F8BD31B6BF355EF74CF3F819D
SHA1:	08A271D9551636E72D071433E8EBB0F2975D7A7E
SHA-256:	C5FE6187E5DA574D6D694A83BE523993E62DAC5F89D165283F38EB92C830F992
SHA-512:	CD297E57A34DAB753948E41CF1566200E9F577578CE35E2B2311A8F97FE67DF114A570F3D24ADCC0DA4F7C7ADC2BA4C4C44DF12F73EC2B2A1BDC89536512D17F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_uri-vflMTw6b4.js
Preview:	define(["exports"],(function(e){"use strict";const t={DEBUG:!1,IDLE_TIMEOUT:200,NETWORK_TIMEOUT:6e4};class i{static format(...e){return["[ttvc]",...e,"::",performance.now()]}static debug(...e){t.DEBUG&&console.debug(...this.format(...e))}static info(...e){t.DEBUG&&console.info(...this.format(...e))}static warn(...e){t.DEBUG&&console.warn(...this.format(...e))}}class s{constructor(){this.pendingRequests=0,this.subscribers=new Set,this.didNetworkTimeOut=!1,this.next=e=>{i.debug("AjaxIdleObservable.next()",e),this.subscribers.forEach((t=>t(e)))},this.startCleanupTimeout=()=>{if(0===t.NETWORK_TIMEOUT)return;this.abortCleanupTimeout();this.cleanupTimeout=window.setTimeout((()=>{i.warn("AjaxIdleObservable","::","Timed out waiting for requests to resolve.","Make sure that incrementAjaxCount() is always matched with decrementAjaxCount().","::","pendingRequests =",this.pendingRequests),this.didNetworkTimeOut=!0,this.pendingRequests=0,this.next("IDLE")}),t.NETWORK_TIMEOUT)},this.abortCleanupTime

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (655)
Category:	downloaded
Size (bytes):	717
Entropy (8bit):	5.049075062689685
Encrypted:	false
SSDEEP:	12:1hnc6llD1K91BAtTk5O/YKdSEF0Xhk+kZ8T7KC+5XLWOUs/BZzWxKHW5iQyozQDn:1hnppA1B0k5OZRUh/km7KVL0oBZzWxre
MD5:	9E909F5DC4EB2917A092969CFA8C1C1B
SHA1:	EC5795627579E606612250BE3E30690F3A70E3CF
SHA-256:	C174E839D663E6F9ED38C7901711B911FF058A033154BCDE3DF30208DF454C74
SHA-512:	4087C4896C10BBE7912E9BF5CB189DE7DFDC9FAF8BE4E6D1B1EFA4917695A3E58E1A452478451CAAE8370B372917558456E2D1302A0166DCCB907991949E143A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_edison_cookies_check-vflnpCfXc.js
Preview:	define(["exports","./c_core_notify","./c_csrf","./c_core_i18n","react-dom","react","./e_edison","./c_init_data_runtime","./e_core_exception","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison","./c_src_sink_index","metaserver/static/js/langpack"],(function(e,t,c,s,i,r,o,n,_,a,d,f,u,l){"use strict";e.ensureCookiesAreEnabled=function(){return!!c.Cookies.are_enabled()\|\|(window===window.top&&t.require_css("/static/metaserver/static/css/notify-vfl4oJv2S.css").then((()=>{t.Notify.error(s.intl.formatMessage({id:"G39vbK",defaultMessage:"Unable to access strictly necessary cookies. The website might not function correctly."}))})),!1)}}));.//# sourceMappingURL=c_edison_cookies_check.js-vflb3v8qT.map.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33484)
Category:	downloaded
Size (bytes):	33629
Entropy (8bit):	5.281219042392323
Encrypted:	false
SSDEEP:	768:yofe7X5COk45xSeK+TD4pGuY1m4ydwDVNTJw8p++tMLhY/X3+tWjOVCkkq:SX5hkbVYc4GaPG
MD5:	99EB0DE2B72A849BCAB77B4AB0CA030B
SHA1:	1273CD3F0776E5A43F00065FBFF954FF243C837F
SHA-256:	F3560B927CD30017511D2623F2F3FF299BCAA3A09167742BC3DA3AE417D1F852
SHA-512:	5712BA5EBB0CDFC698172C203673EE21C94D5B222FBC1DF0241670933660DA45CEB923B382E80CB4D1C7AF334242AC1E5F1BC9C1C4EB392803566FA9E64BA779
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/alameda_bundle/alameda_bundle_chrome_en-vflmesN4r.js
Preview:	/! For license information please see alameda_bundle_chrome_en.js.LICENSE.txt /.(()=>{var e={672:(e,t)=>{(function(){var e,n,r;!function(t,o,i){if(!o)throw new Error("No Promise implementation available");var s,a,c,u,l=e\|\|n,f=Object.prototype.hasOwnProperty,d={},p=[],h={},m={},v={},g={},y=/^\.\//,b=/^\/\|\:\|\?\|\.js$/,w=/\/\[\s\S]?\\/\|([^:"'=]\|^)\/\/.$/gm,_=/[^.]\srequire\s$\s["']([^'"\s]+)["']\s$/g,x=/\.js$/,j=Array.prototype.slice;if("function"!=typeof e){var E=o.resolve(void 0);e=s=function n(r){var s,a,c,u,l,f,h,m,v=Object.create(null),g=Object.create(null),E={waitSeconds:7,baseUrl:"./",paths:{},bundles:{},pkgs:{},shim:{},config:{}},q=Object.create(null),M=[],$=Object.create(null),U=Object.create(null),P={},L=0,R=(new Date).getTime(),D=0,I={},B={},F={},N=o.resolve();function W(e,t,n){var r,o,i,s,a,c,u,l,f,d,p=t&&t.split("/"),h=E.map,m=h&&h["*"];if(e&&(c=(e=e.split("/")).length-1,E.nodeIdCompat&&x.test(e[c])&&(e[c]=e[c].replace(x,"")),"."===e[0].charAt(0)&&p&&(e=p.slice(0,

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5341)
Category:	downloaded
Size (bytes):	5441
Entropy (8bit):	5.273645972770034
Encrypted:	false
SSDEEP:	96:VOvUSQ+FMU3YFZQ+FvUT/nfl2gLNxMdGazQGjskfQ9C3ewi:VyUSQ+FMU3YFZQ+FvUT/n92gLHdazQGQ
MD5:	757A6AB0DD9C36D34560BA29F8A2E990
SHA1:	FA23336FD64AFC6218933D458A1FEFEDC6F56838
SHA-256:	5A600EA33AB9E0371DB4C3BAE67E8917DF17A05B3D55B1DB58B2B33B6B81258C
SHA-512:	D7E83EB263ECDEA81B34DE45147518F7184714E4E4882F5508DB063B5EF41428CF09A3894C9263CAE2B4E6A4145CB8A354762142A93E1D110C6D2AB4A8FEF822
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_user_centric_perf_metrics_component_visually_complete_ajax-vfldXpqsN.js
Preview:	define(["exports"],(function(e){"use strict";var t,i,s;e.ApiV2HeaderNames=void 0,(t=e.ApiV2HeaderNames\|\|(e.ApiV2HeaderNames={})).DropboxApiArg="Dropbox-API-Arg",t.DropboxApiSelectAdmin="Dropbox-API-Select-Admin",t.DropboxPathRoot="X-Dropbox-Path-Root",t.DropboxUid="X-Dropbox-Uid",t.DropboxTeamId="X-Dropbox-Teamid",t.DropboxTeamAuthorization="X-Dropbox-Team-Authorization",t.CsrfToken="X-CSRF-Token",t.DropboxForceQuic="X-Dropbox-Force-Quic",function(e){e[e.TeamAdminRole=0]="TeamAdminRole",e[e.MTARole=1]="MTARole",e[e.FederationAdminRole=2]="FederationAdminRole"}(i\|\|(i={})),function(e){e[e.AdminAction=0]="AdminAction",e[e.AssumeAction=1]="AssumeAction",e[e.OnBehalfOfAction=2]="OnBehalfOfAction"}(s\|\|(s={}));class n{static parse(e){const t=e[".tag"];return 2===Object.keys(e).length&&null!=e[t]?new o(t,e[t]):new r(t,e)}constructor(e,t,i){this.type=e,this.value=t,this.isScalar=i}}class o extends n{constructor(e,t=null){super(e,t,!0)}toJSON(){const e={".tag":this.type};return null!=this.value&

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	5.505288120598821
Encrypted:	false
SSDEEP:	3:JznLjrjfWJMCVxQBGgOKtHqkLRRNvLzf/drwn:JznXv+7VxfglUkLhL2
MD5:	9F7470B5888050C3F71BB2ADE4A69E62
SHA1:	E6FD80EED8FF7C97A026FB642884A8AF8071EABC
SHA-256:	124B86BFF02777CBD47DC3590E05F259EBF7BB4352CFCE34F90620767BBD1C0B
SHA-512:	B4E51142E047B43422F2E4B8D3D895EDC490138573D4116EEAB8BFB4C8786DCF63E9497FA038EF541C882B5494A68AFABED1E1297A77BF2F2502BF28C7D17141
Malicious:	false
Reputation:	low
URL:	https://fp.dropbox.com/CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18
Preview:	7mhnVq3n5WQ8Y3yIQLLZFe+XdrjRzRZ3PfHf/Eb0Q39PwhuD2lmE+oHllPOJponrtcqE+t4hRKtFIxngFSbZu4GnxNOPwQ==

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	407875
Entropy (8bit):	4.9487438817066485
Encrypted:	false
SSDEEP:	6144:JEA5bB0/McWJu4DqBpMJ4hy52jFrwO17uqGnbTqSC7MK6edbLktXWn1y8jzMgZrT:oIvND2BH
MD5:	34A33B69C4625F4DEA22F157C0B8AB80
SHA1:	D6CB50B5BC02949D6F20FEFE18EFCC4F9FF329FA
SHA-256:	93B9169CF31B33F679CF2BDEBE4EBD42CF9251AFDD03304DF9A72481EDAD5A1F
SHA-512:	7215A1AFBA5702F46CAD47CD4A00AB54FE71D4F938E84D8AA2358A35DC578D4CBDB0C4AF5A7A43E8C6EB8669532C418F22B25B2107698900081F2C28A9EE2421
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_mjs_assets_index-vflNKM7ac.js
Preview:	define(["exports","react","./e_edison_scl_invitation_signup","./c_helpers_esm_extends","./c_ui-icon_line_upload","./c_strings_trademark"],(function(e,l,t,n,c,o){"use strict";function r(e){if(e&&e.__esModule)return e;var l=Object.create(null);return e&&Object.keys(e).forEach((function(t){if("default"!==t){var n=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(l,t,n.get?n:{enumerable:!0,get:function(){return e[t]}})}})),l.default=e,Object.freeze(l)}var a=r(l);var v=Object.freeze({__proto__:null,AccountsPictogram:e=>a.createElement("svg",{viewBox:"0 0 64 64",fill:"none",...e},a.createElement("path",{d:"M48 42a6.978 6.978 0 0 0-2.67.5l-3.214-3.214A13.252 13.252 0 0 0 44 32c.09-2.56-.565-5.092-1.884-7.288L45.33 21.5c.849.34 1.756.51 2.67.5 3.7 0 6-2.3 6-6s-2.3-6-6-6-6 2.3-6 6c-.01.914.16 1.821.5 2.67l-3.214 3.214A13.252 13.252 0 0 0 32 20c-2.56-.09-5.092.565-7.288 1.884L21.5 18.67c.34-.849.51-1.756.5-2.67 0-3.7-2.3-6-6-6s-6 2.3-6 6 2.3 6 6 6a6.98 6.98 0 0 0 2.67-.5l3.214 3.214A13.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	downloaded
Size (bytes):	151518
Entropy (8bit):	5.478095324796891
Encrypted:	false
SSDEEP:	1536:n/S3uyJ0JMx1Et5v9mez63NjhXjQsF4YM5r717:nKmiq5v9ml3NjhcPY0F
MD5:	DD3A63D89A120D21CAEEF592A6D402F4
SHA1:	8E4FF005C1D1DF7A9A336A6F3AD8B06A5F5BA657
SHA-256:	FC1D7B30F08DF466E74C29408525FD5DD625E2136B48FD5ADB5690DA179928E1
SHA-512:	693B9F0C1361202E8B30583321C144B996D550CE7BA263E6BA54FA8A390092AAC7593E023129D78298C5A48D02E2986E2529B499AA8DB72EF668D28A733E9F3F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_fingerprintjs-pro-static_dist_fp-vfl3Tpj2J.js
Preview:	define(["exports"],(function(n){"use strict";var t=function(){return t=Object.assign\|\|function(n){for(var t,e=1,r=arguments.length;e<r;e++)for(var o in t=arguments[e])Object.prototype.hasOwnProperty.call(t,o)&&(n[o]=t[o]);return n},t.apply(this,arguments)};function e(n,t){var e={};for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&t.indexOf(r)<0&&(e[r]=n[r]);if(null!=n&&"function"==typeof Object.getOwnPropertySymbols){var o=0;for(r=Object.getOwnPropertySymbols(n);o<r.length;o++)t.indexOf(r[o])<0&&Object.prototype.propertyIsEnumerable.call(n,r[o])&&(e[r[o]]=n[r[o]])}return e}function r(n,t,e,r){return new(e\|\|(e=Promise))((function(o,i){function u(n){try{c(r.next(n))}catch(n){i(n)}}function a(n){try{c(r.throw(n))}catch(n){i(n)}}function c(n){var t;n.done?o(n.value):(t=n.value,t instanceof e?t:new e((function(n){n(t)}))).then(u,a)}c((r=r.apply(n,t\|\|[])).next())}))}function o(n,t){var e,r,o,i,u={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54939)
Category:	downloaded
Size (bytes):	204175
Entropy (8bit):	5.0432092366541035
Encrypted:	false
SSDEEP:	3072:Tn3R9XGrdhaElM6hQ67PQuXNveZSMRs5rOLf8t+WSvSfNk0Y2yb6TOfAuLlhFN0P:Tnh98dK2LjJxp42Cm3
MD5:	A29E7349DF7F27236744ED6B2BFEE49D
SHA1:	CDF68B71360616D7BC8A0A0790C48AEDD566CB31
SHA-256:	75E7061852C164158192444025245780550CE3AD81C634831EE9128DB0782DE5
SHA-512:	429080B18C42AF69633110282E62997E62E74CC6C3455474DDDFAC655D4425A943BB698CD946C7D12BF27F411AA05B250EB27EAC5ABB6A316902274B8F7C975D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/components-vflop5zSd.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-components@19.18.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./../! autoprefixer: off /./* -- tokens.css */..dig-Mode--bright,:root{--scheme__color:light;--scheme__inverse__color:dark;--spacing__base_unit:8px;--spacing__unit--0_5:4px;--spacing__unit--1:8px;--spacing__unit--1_5:12px;--spacing__unit--2:16px;--spacing__unit--2_5:20px;--spacing__unit--3:24px;--spacing__unit--4:32px;--spacing__unit--5:40px;--boxshadow__elevation1:0px 8px 32px rgba(30,25,25,.03),0px 8px 16px rgba(30,25,25,.03),0px 4px 8px rgba(30,25,25,.03),0px 2px 4px rgba(30,25,25,.03),0px 1px 2px rgba(30,25,25,.03);--boxshadow__elevation2:0px 16px 80px rgba(30,25,25,.03),0px 32px 48px rgba(30,25,25,.03),0px 16

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	295
Entropy (8bit):	4.730024157907159
Encrypted:	false
SSDEEP:	6:qcSxUVexRJNY6ckJLEaNDUvckJLWQQaeCIxvciEyqDNb6Jv:EiVqNZHJLEVHJLWQQJBvEyqRc
MD5:	E9B97DB6D2E8DA79AA3E750F28E1BF56
SHA1:	1EDD4B6BB950948139840936828FED909BE6B8B8
SHA-256:	A28E9054559B06E3D1520ED9058715B6511F6ADDFF73690FF35C90CB9332BE25
SHA-512:	C2463D1FF243A8092D44A80E717CDF643B64FCD0B00220CF056F121C7CC89483DCD68EB2E7983A4A88B6DFC79CB12882D40625142959F3AD0BD41293CA61D0BE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/abuse/funcaptcha_modal-vfl6bl9tt.css
Preview:	.funcaptcha-modal{z-index:1000;position:fixed;top:0;left:0;width:100%;height:100%}.funcaptcha-modal--hidden-firefox{visibility:hidden;z-index:0}.funcaptcha-modal--hidden-non-firefox{display:none;z-index:0}.funcaptcha-div{margin-left:auto;margin-right:auto;height:100vh;width:100%;display:block}.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (623)
Category:	downloaded
Size (bytes):	683
Entropy (8bit):	4.875457368925568
Encrypted:	false
SSDEEP:	12:voPwYkDjuA9l7uscXYCJFGKNJnS8wBXi8+fzDQi8bk01i8OS+jQPBN:U+3uZNGi4RS8xnl+j+BN
MD5:	B8BE0AEA05D076DD5B710F6DED7565B0
SHA1:	65F0CF4F7D35B7EC22F2E244A11A30E39BEF57BD
SHA-256:	6437CDA00E26052D776AFE662A06DDF8FE9981DD79AB0F9D3F2360D694AC319E
SHA-512:	B2A2678876762FA27E335FEC289E095F239F689690DC21A4BEBDD90D96DA791BBB9CEED3491792FF4ACE318FB0D2B2824CDF2F18FB89C35737CA79B496579BAC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/third_party/third_party_auth.module.out-vfluL4K6g.css
Preview:	:root{--kakao-color:#fee500;--kakao-hover-color:#fada0a;--kakao-active-color:#f2d00f;--kakao-disabled-color:#eee}._sign-in-with-google-button-register_brn4n_8{margin-top:16px}._third-party-container_brn4n_12{display:flex;flex-direction:column;gap:var(--dwg-spacing__unit--2)}._disable-google-button_brn4n_18{opacity:.5;pointer-events:none}._kakao-button_brn4n_23{background-color:var(--kakao-color)}._kakao-button_brn4n_23:hover{background-color:var(--kakao-hover-color)}._kakao-button_brn4n_23:active{background-color:var(--kakao-active-color)}._kakao-button_brn4n_23:disabled{background-color:var(--kakao-disabled-color)}./# sourceMappingURL=third_party_auth.module.out.css.map /

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1025)
Category:	downloaded
Size (bytes):	1026
Entropy (8bit):	4.686137439870003
Encrypted:	false
SSDEEP:	24:QUUl7UUwrNQUUwgopUUwz97UUb26l76wrNQ6wgop6wz976bXwO:Qfl7fIQfBOfO7fb26l76IQ6BO6O76bXJ
MD5:	20DEA3DFDE3B9352F8294408ADC604E9
SHA1:	C21EDD35DB63CD8852790ECE8323957643928648
SHA-256:	0DA537469F646AEA2AB5EAFE2641AA33C329A7D17F2751B63D93D39722BFB21C
SHA-512:	B1B85EBBEC740D86F5FFDF4379B8A905D640C94C34DDA6DB9815FF3302C720E7208D487202877A5783628E03D938DC260510ACC320E85564AC65ACA9EFFBB497
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/recaptcha-vflIN6j39.css
Preview:	.recaptcha-v2-challenge-container{display:none}.recaptcha-v2-challenge-container .text-input-error-wrapper{line-height:normal;color:#e82110;font-size:12px;min-height:17px;margin-top:10px}.recaptcha-v2-challenge-container .text-input-error-wrapper span.error-message{color:#e82110;display:block;font-size:12px}.recaptcha-v2-challenge-container .text-input-error-wrapper br{display:none}.recaptcha-v2-challenge-container .recaptcha_v2_challenge{margin-top:5px}.recaptcha-invisible-challenge-container{display:none}.recaptcha-invisible-challenge-container .text-input-error-wrapper{line-height:normal;color:#e82110;font-size:12px;min-height:17px;margin-top:10px}.recaptcha-invisible-challenge-container .text-input-error-wrapper span.error-message{color:#e82110;display:block;font-size:12px}.recaptcha-invisible-challenge-container .text-input-error-wrapper br{display:none}.recaptcha-invisible-challenge-container .recaptcha_invisible_challenge{margin-top:3px}.recaptcha-terms-text{font-size:12px;font-

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	306
Entropy (8bit):	4.809625401935587
Encrypted:	false
SSDEEP:	6:FHHBsqRW4liwXAzD9Q3B1FuRJfyrucFDMUc0DdXgP8F:1hHlip9+n4Ur/dMUUG
MD5:	D3216D824D821C8026C31566767B57E4
SHA1:	03F460961D787EAB26DDD334BF740332E1113B54
SHA-256:	ED5175A8E6813F9CB849D8E0DAE03CDCBC8F76C8E2C6328135E9AA648F95FA70
SHA-512:	E8A536F8F061B82F48D5255CECD4F926862B8EB5D82327F345874735148221FCF13A31CD68D6DE9E87006F6F1A8DB33BBEFBCB9F65D70F07E43B8895F62F032D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/e_edison_init_edison_page-vfl0yFtgk.js
Preview:	define(["exports","./c_init_data_runtime","./e_edison","./e_core_exception","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison"],(function(i,e,t,_,n,c,o){"use strict";i.initPage=t.initPage,i.initialize_module=t.initFromDws}));.//# sourceMappingURL=e_edison_init_edison_page.js-vfl51Wdck.map.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1281)
Category:	downloaded
Size (bytes):	1331
Entropy (8bit):	5.025370189455523
Encrypted:	false
SSDEEP:	24:3UxC/61wk53oIW1I4ub0TXD6+hAupLAfnGGhsyY:3U861wkVxbb0TZAlPPhsyY
MD5:	68B92CF8F7C6D25796C695153614D004
SHA1:	718B985F5FA2A0FB44A5418FAF206B0BCBC07ABA
SHA-256:	432741E746A4433ED39843670574A69AE8724BAB0DE5A8992510B99C34646D12
SHA-512:	61150F5DD9A7DDA8AE528C3A4751580A9CB561F1016363BA2D760EB7C21C87FC9D244632C52551FA75A997173C635289B15C1E9D7A9BA1D2FC5D2C73268D2D62
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/susi/header.module.out-vflaLks-P.css
Preview:	._toggle-link-container_6mkyf_4{align-items:start;display:flex;justify-content:flex-start;padding-top:var(--dwg-spacing__unit--0_5)}._toggle-link-container_6mkyf_4._login_6mkyf_11{margin-bottom:30.5px}._toggle-link-container_6mkyf_4._register_6mkyf_15{margin-bottom:22.5px}._form-header_6mkyf_19{margin-bottom:24px}._form-header_6mkyf_19 strong{font-weight:500}._header-logo-container_6mkyf_27{margin-bottom:8px}._header-logo-image_6mkyf_31{display:block;margin:auto;max-height:64px;padding:24px 0}._header-logo-image-large_6mkyf_38{display:block;margin:auto;max-height:120px;padding:8px 0}._email-as-label_6mkyf_45{margin-bottom:24px}._reduced-bottom-margin_6mkyf_50{margin-bottom:12px}._back-button-wrapper_6mkyf_54{padding-bottom:50px;position:relative}._go-back-button_6mkyf_59{color:var(--dwg-theme__color__core__primary);float:left;text-decoration-color:var(--dwg-theme__color__attention__border)}._left-align_6mkyf_65{text-align:left}._center-align_6mkyf_69{text-align:center}._right-align_6mk

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (345)
Category:	downloaded
Size (bytes):	719
Entropy (8bit):	5.417628934625646
Encrypted:	false
SSDEEP:	12:U2eAi/ZBRiUQxkNP371H5ouSA0CVKR/x6rgYaTmJOnxlEU3wrxhJm9:xeAi/ZBRiU7Z371HOu70CViTmJWV81k
MD5:	A1782CB302D36D94A8F5904841B1F9CD
SHA1:	F489819205A11E879A7CBD37D906B7476040F5D9
SHA-256:	2B1903F4A4FA1A2C629480FCDDD60D673D3CEE3BE8C13C6D198419757FB6E228
SHA-512:	F0BC15CF5DF3959036029298BF03FB3788B3308EA81A44BC26D1CF55F008C5378AC57764784CFEC26836413F8E5D036F66C348B817DBF172FC86C806F5781109
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/logos-vfloXgssw.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-logos@3.6.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-Mode--bright,:root{--color__glyph__primary:#1e1919;--color__glyph__accent:#0061fe;--color__inverse__glyph__primary:#696663;--color__inverse__glyph__accent:#3984ff}.dig-Mode--dark,.dig-Theme--dark{--color__glyph__primary:#696663;--color__glyph__accent:#3984ff;--color__inverse__glyph__primary:#1e1919;--color__inverse__glyph__accent:#0061fe}

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1641)
Category:	downloaded
Size (bytes):	1707
Entropy (8bit):	5.15917992357226
Encrypted:	false
SSDEEP:	24:1bmH83O4UQhB6QoCjij+AKY48mTrQEFEOfp6X/6vIFjm7K60yfRR19SiV0LJNLb8:1aOOQyQ3jIBjKFAXCSkfyv8
MD5:	565B12C7B3FFC7D46032C040A23A9A66
SHA1:	270406F09279BD6E8A571E07DB52516F6EBDAFCC
SHA-256:	99C4895C9154E53837084897DFDEF1602258DE6D205F58746CF0DEA9027ADD6C
SHA-512:	A56388C87AF148B4367734BE27CB06B82814DE8D5CA0A0A8F19A82A3ECDF080E66039B573B228FA29154D4D22A2B114ACCC169A610DB60103036987780F11F9D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_core_toast_toast_on_init-vflVlsSx7.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_core_notify","./c_rfc4648_lib_rfc4648","./c_security_crypto","./c_core_uri","./e_core_exception","react-dom","react","./e_edison","./c_apex-metrics_src_types","./c_init_data_edison"],(function(e,t,n,o,i,r,s,c,u,d,a,l,f){"use strict";const _="toast";function y(e,t){return n.__awaiter(this,void 0,void 0,(function(){const o=yield function(e,t){return n.__awaiter(this,void 0,void 0,(function(){const n=e.split(":");if(3!==n.length)return null;const[o,s,c]=n;if("1"!==o)return null;const u=(new TextEncoder).encode(s);let d=decodeURIComponent(c);try{d=atob(d)}catch(e){return null}const a=r.stringToBytes(d),l=(new TextEncoder).encode(null!=t?t:i.readCsrfToken());return(yield r.verifyMessageHmac(l,u,a))?decodeURIComponent(s):null}))}(e,t);if(null==o)return null;if(o.startsWith("er:"))return[!0,o.substring(3)];if(o.startsWith("ok:"))return[!1,o.substring(3)];throw new Error("unrecognized format of message in toast cookie")}))}t.decodeToas

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2400)
Category:	downloaded
Size (bytes):	2472
Entropy (8bit):	5.129177550135275
Encrypted:	false
SSDEEP:	48:1hwnLHzj5kwrsDNue6L6LIMQ7NMol9TKAVXid+L:QnLHJkHhpIJNJbp80L
MD5:	378E23080E33101EC0F14BB272F93C71
SHA1:	48EDB3E9EB0E21A2C83DE0ECE2EF2FECA76B72C8
SHA-256:	824FBE7B7A51A605872358102B842AC0DD268A638E63142EBBEA8859EDF5FB42
SHA-512:	2C74F56C3D5CC9B2E8FBB15A87409CABD1A7D0C88B9E6A809CBB133196C4320B773B105D0F9A7A99809A4ED014C96B759C8BDE67E7B92256EA638FFFDEEC55E0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_components_dwg-tooltip_control-vflN44jCA.js
Preview:	define(["exports","react","./e_edison_scl_invitation_signup","./e_core_exception","./c_react_query_helpers_helpers","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_uri","./c_init_data_runtime","metaserver/static/js/modules/constants/viewer","./e_edison","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_sink_index","./c_core_xhr","./c_rfc4648_lib_rfc4648","./c_core_attribution_header","./c_api_v2_noauth_client","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","react-dom","metaserver/static/js/modules/constants/web_experience_constants","./c_lodash-es_lodash","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","metaserver/static/js/modules/constants/file_viewer_configuration","metaserver/static/js/modules/constants/file_viewer_feature_experiments","metaserver/static/js/modules/constants/locales"],(function(e,t,r,o,a,n,s,c,i,l,_,d,u,p,m,f,g,v,w,h,x,y,j,D,R,E,N,b){"use strict";function C(e){return e&&e.__e

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	249
Entropy (8bit):	5.303517348946012
Encrypted:	false
SSDEEP:	6:FHHBSyt8FWSZm2ZTzt+M2ZqImC6B64rF7sNmEnWQQWs:1hSymVa1m5B645YNmUWfWs
MD5:	68C8F81D9FDD45D2F65BCEE949F4AD28
SHA1:	EBE2733E978AF725E227EDE139BA61E776A44ADC
SHA-256:	D6F848FB0E9C27FF1C2DD18CF2D0096AEE107068F8D3E4B6F9087837D14BD46C
SHA-512:	69008A732AE42E134D74B9D1322E5D891608E6BD758E8B4398D9CEEDB24575EBD859D4139BE66718BC01F6898EB64A7AE8011364A7F21575BF6A78738952EDF7
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_stormcrow_types_log_exposure-vflaMj4HZ.js
Preview:	define(["exports"],(function(t){"use strict";var e;t.ClientLogStatus=void 0,(e=t.ClientLogStatus\|\|(t.ClientLogStatus={})).LOG_SUCCESS="log_success",e.LOG_FAILURE="log_failure"}));.//# sourceMappingURL=c_stormcrow_types_log_exposure.js-vflNMZDbI.map.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30425)
Category:	downloaded
Size (bytes):	30473
Entropy (8bit):	5.212175489639093
Encrypted:	false
SSDEEP:	768:UdYEm4/5oG50/6dFx8gX5Nc+xUgDvjOvMmdATZyvEXWhnZgYJjPNiXQQ:2Y54H6d6rmMqvEm5Q
MD5:	69991038140966BA9AD01815DA736FB3
SHA1:	AC46284A7C3AB7DF07EA4CD3EB9F093538AB65D2
SHA-256:	FC593D1C8965D82E5A2800E995F28891E02FBCA92E6CFD143799170C9145A39D
SHA-512:	04A12BEA3AF0984C3414309F00A215D002AAA7D10B642958961F15D5A9D86F36A0ACC3987FD47D6B0DB83B98BEF9904C7173F4295B25D3ED2E078DAEB05CF43F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison-vflaZkQOB.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison","./e_core_exception"],(function(e,t,r,n,s,i,o){"use strict";function a(e){return n.assert(e.startsWith("/static/"),`'${e}' is not a /static url`),new n.URI({scheme:"https",authority:"cfl.dropboxstatic.com",path:e}).toString()}const d=["edison:preloadCss","js:requireCssWithComponent","js:require_css","loadCssWithCache","ensemble","CssEntryPoint","css-modules"],c=["css-modules"];function l(e,t,r){if(r[t].length>0){if(c.includes(t)){const n=r[t];for(let t=0;t<n.length;t++){const{elem:r,path:s}=n[t];if(s>e.path)return[r,t]}}return[r[t][r[t].length-1].elem.nextElementSibling,null]}const n=d.indexOf(t);for(let e=n-1;e>=0;e--){const t=r[d[e]]\|\|[];if(t.length>0)return[t[t.length-1].elem.nextElementSibling,null]}for(let e=n+1;e<d.length;e++){const t=r[d[e]]\|\|[];if(t.length>0)return[t[0].elem,null]}return[null,null]}function u(e,t,r,n,s){e.elem.setAttribute("data-loader",t),e

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	661
Entropy (8bit):	5.112361370693629
Encrypted:	false
SSDEEP:	12:bRUGa4GYLqGkwaRuEpzbx6PfUI2Fylde9hWKg2JW3dwVxK:urHjL1phyyWK5Y3KVxK
MD5:	8B7FB34E0EC9ECFD6C2523036161EFEF
SHA1:	A241AAB257D9E4B2F606E0AB94E4E8E9333B2369
SHA-256:	092F05A37727D13D22048C83B9928E9A17D878F216C1C2EC2090D0C404D2340B
SHA-512:	8BC8223B14145E2202F33C64ACDD5470CCFDCEFF776F37C3AB054723F944818CD452A0220B7F6BAD5EFE2206061B5A0278668F432A8991917F988C0C34D52E55
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/index.web-vfli3-zTg.css
Preview:	@import url('./components-vflop5zSd.css');./* This loads after `components.css` because it contains all the legacy color tokens /.@import url('./legacy-token-migration-vfl1sMmEL.css');.@import url('./logos-vfloXgssw.css');.@import url('./icons-vflL9_90W.css');.@import url('./foundations-tokens-vflfHUKrS.css');.@import url('./foundations-components-vflNp3GvF.css');.@import url('./content-icons-vflmAcPHP.css');./ For any images that are circle cropped, scale them up a bit so that they're still cropped as a squircle /..dig-Avatar-image--modern[src='circle_crop=1'],..dig-Avatar-image--modern[srcset*='circle_crop=1'] {. transform: scale(1.075);.}.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12494)
Category:	downloaded
Size (bytes):	12550
Entropy (8bit):	5.391211180435
Encrypted:	false
SSDEEP:	384:9QIdXpDm2qiM6MGGei9/4sw81HXcZFmR3ZkEpsDbIA:9HDmfyk4EHXuFmR3ZkEpsDbIA
MD5:	0CCE36E0D631A9F9391326766FA604CC
SHA1:	32C7AC701C52A87238CF4F6A36AD8A8D517B9C72
SHA-256:	090502C741FCE96E98551F7BB6CC3C89B14F55B2A2DD5F87BAF7856B5A699249
SHA-512:	EAB2549C4A048B44FDF9B1AEEACBCB389907945239C95B496327061E32BEDB2302B3F6D9B6CD4807ADC776F19154584F33433383AE75C0F28BDEB21C8DEFE99C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_core_exception-vflDM424N.js
Preview:	define(["exports"],(function(e){"use strict";let n=new Set;if(globalThis.ensemble){const e=globalThis;e.REGISTERED_EXCEPTION_TAGS\|\|(e.REGISTERED_EXCEPTION_TAGS=new Set),n=e.REGISTERED_EXCEPTION_TAGS}var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function r(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var c,i={exports:{}};c=i,function(e,n){if(e){var t={},r=e.TraceKit,i=[].slice,o="?";t.noConflict=function(){return e.TraceKit=r,t},t.wrap=function(e){return function(){try{return e.apply(this,arguments)}catch(e){throw t.report(e),e}}},t.report=function(){var n,r,c=[],o=null,s=null,u=null;function a(e,n){var r=null;if(!n\|\|t.collectWindowErrors){for(var o in c)if(l(c,o))try{c[o].apply(null,[e].concat(i.call(arguments,2)))}catch(e){r=e}if(r)throw r}}function f(e,r,c,i,o){if(u)t.computeStackTrace.augmentStackTraceWithInitialElement(u,r,c,e),p();else

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15368)
Category:	downloaded
Size (bytes):	15369
Entropy (8bit):	5.068877632418108
Encrypted:	false
SSDEEP:	192:JQNPyw5a9nhYm1lrM3y00hukrmjJPyuu42aGvyRtrMyqHdyb+imipupm2OSFQsG4:Jk9fMimipupm2OSFQsGeR+5ZJ0Fj5AY
MD5:	62E594328005F6A1C6E0EDBCAFA712B0
SHA1:	69404C43961EA5224B6DF433C9424C07679A08BD
SHA-256:	2C79A0244A616AC9449EE94382007A3631AF38C5BE7BC6B91CC1B9F9C9F99513
SHA-512:	D9001E196A218E7FC69619F03E5FAC65AC3FC02023AA7DDB2A7DD507CF952AADFA5A99A97194B03FBE85F50D7591CC759C544FE861D87A3176FF8B44B9D76C71
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/maestro_layout-vflYuWUMo.css
Preview:	@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflyEJFZg.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflJ3txfq.ttf") format("truetype");font-weight:400;font-style:normal}@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vfl38XiTL.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vflyja8tN.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vflbI0jjP.ttf") format("truetype");font-weight:500;font-style:normal}@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrot

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1327)
Category:	downloaded
Size (bytes):	1393
Entropy (8bit):	5.027216870343494
Encrypted:	false
SSDEEP:	24:1bmHfYyD4EzFSjPR9AYM4gETOf7iDilWDiKRRHur4gDRFEOYzremi0PJ9nb:1aB7OpmYMVeTH6j+zrvPJ9nb
MD5:	03EA710579B2A03B4874E2AC684B72F4
SHA1:	1BAA6ACAAB61033E0702993D7BDD1204AA3FBE5A
SHA-256:	67DB7A1710B395F92D3328FF8ABD8AA1C280C577B631D1F4013B975E88E986C4
SHA-512:	9B8430994BF8B97C0941CEB6A7DCA4425E3A16B27D598C7145BEDBB1CE44D0D6407FF4617A0C17741B63440543734FD4B4EBEAD39ED1271C006CD6C8605FF6ED
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/e_edison_edison_react_page-vflA-pxBX.js
Preview:	define(["require","exports","react","react-dom","./e_edison","./c_init_data_runtime","./c_init_data_debug_panel","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./e_core_exception"],(function(e,t,o,n,r,d,c,i,a,l,u){"use strict";function s(e){return e&&e.__esModule?e:{default:e}}var m=s(o),_=s(n);t.render=function(t,o=!1,n="",i=!1){if(!t.RootComponent){const e=c.getDebugPanelInfo();throw new Error(`Module '${null==e?void 0:e.entryPointModuleName}' does not export a React component named RootComponent.`)}let a={};if(n&&n.length>0){const{encodedProto:e}=d.unmarshalProto(n,r.InitProps);a={encodedProto:e}}const l=i?m.default.createElement(m.default.StrictMode,null,m.default.createElement(t.RootComponent,a)):m.default.createElement(t.RootComponent,a),u="root";let s=document.getElementById(u);null===s&&(s=document.createElement("div"),s.id=u,document.body.appendChild(s));const f=r.Edison.getMetrics();f.recordRenderStarted(),m.default.version.startsWith("18")?new Promise((f

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2792)
Category:	downloaded
Size (bytes):	2858
Entropy (8bit):	5.17060148446323
Encrypted:	false
SSDEEP:	48:1hycs/0vq0+obRb/QIseZFSX7q32HpFxWq9nYCRY+WMzGf1UkQuYcRFEJTtYB4PG:Scs/0vq05RbYIswSq32LxWr0Y7aGNUBi
MD5:	77A115D3A09DC29A146902DD0A75A3BC
SHA1:	67FF8B3F8E44B4ADC666B6605B84160CD0BEEAF2
SHA-256:	22E5825BE132E56D6A435331B14689B3C4A935C9F46808ABBDB6F6B7BC1792A8
SHA-512:	BCF7D6282D4290F91138B4168A20D6B25421E5C85A3404E30E88CFF0BDB2266E8AAB28A7E372B7F68E3CACC0B743F96632ADEE28F582B72CAB93A6E7D2833C1F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_ux_analytics_ux_variants-vfld6EV06.js
Preview:	define(["exports","./e_edison_scl_invitation_signup"],(function(t,e){"use strict";const n="variants",s=",",o=":";let r=0;const a=(t=!1)=>{const n=(t,e)=>{const n=[],s=document.head.querySelectorAll(`meta[${t}]`);return s?(Array.prototype.forEach.call(s,(s=>{try{const o=s.getAttribute(t);if(!o)return;e?n.push(...JSON.parse(o)):n.push(o)}catch(t){}})),n):[]};if(t&&r>1\|\|!t&&r)return;r++,(()=>{const t=e.getUXVariantsFromDOM();if(!t)return;const n=f(t,"matchers"),s=[];for(const[t,e]of n){const n={feature_name:t,event_name:JSON.parse(e).event_name};s.push(n)}p({variant_tokens:t,matchers:s})})();const o=n("data-uxa-matcher-configs",!0),a=n("data-uxa-variant-tokens",!1);if(!o.length\|\|!a.length)return;p({variant_tokens:a.join(s),matchers:o})},i=(t,e)=>{let n;n=t.startsWith("adobetarget")?"adobe_target_variants":"variants",e[n]?e[n]+=s+t:e[n]=t};const c=(t,e)=>{const n=t=>decodeURIComponent(escape(t)),[s,o,r]=t.split(".").map((t=>atob(t.split("_").join("/").split("-").join("+"))));if(!r)return;i

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46188, version 1.66
Category:	downloaded
Size (bytes):	46188
Entropy (8bit):	7.994727284862106
Encrypted:	true
SSDEEP:	768:1NNzV0ynJc0ZFM5VB4R4HFlW3dhjfPlHRGSngzacOTXs4bS8PQefNYYI6xS:MWcx5VB4R4HFlwP1UTacOTXTS8PZfNY5
MD5:	DFC5E24CBC1B134E0C00C61E84EC999A
SHA1:	D3B1A8EF1D0F6F9162986479252570525719F203
SHA-256:	B5DB3E633EC765FC01A19C06B0955D56C2503285E59D8D348D08EC34ABBFEAF3
SHA-512:	48726CB83BDD0EB6822A73734AE272286483E8AEB6E18F57E635ED9269CA3C6C62E2D900224138DAFE32A79A94C3C7694307FF413505D695A77FE602681DF27B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vfl38XiTL.woff2
Preview:	wOF2.......l...............B.......................&.......`..\.2..a.....\..M.....6.$..x..~.. .....\|..?[....r.O.tf.$...d.wSc....=.3-=7v=.....`n.u...h.\|.I........d"c.\.%i.@QU...s..b.&n.T..%J..Zj....^(....3....k.vV..{8(..M{J/.C..w<.uV....=u.2t..Y.......`...C3K.'wp.F.R....5C..2w<.N=.+...@..A..:....._....X....y.Zn....DE..`....Yh.82....."..3YM..f.]...?..'.".s5...#.O..P....4....;6W.U.S.....Y.CGD....v...].....&..".....9.X.d.m.g..m...3c..%b...]....<b(....h...,.v...._z........R..z23?.S.?3...Y`...e...qL...m6YJ...h....#l.........B..m.`....KDQq. s...."c9G..\e.U....5....fu...e7...n..kDM...`. 7......OB.&(.R...Y.....Ir.^......Q..V~}.!r!.J[;`.iU@Z........I8.8..b.5...e.Z%%.-t.B[.%...^..R..d....kM.LN...*T..L.a.X[.jd)...F....J.,pN..TE.v.5U.h...J#?M.[./..laM.'.HI....9.^.....\|.....!5%.X... .).~=..t..T...J..!.........Ml...2.Tx......I$.yRi.R.....l.X.$..o\|Oz..[i.1?l...0#.._.......)....I..Q.c......B...0.."...@.k..~)5...\|[!..p..8.6.OL$.(..`.C.e3.L............[4...%

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24978)
Category:	downloaded
Size (bytes):	25031
Entropy (8bit):	5.275814213348532
Encrypted:	false
SSDEEP:	768:R9bTAamTGl8atBANwIC8b5bNSsYjwvUgLKg8MPX1i9gE2xspLDEzF4RtfwUEzWIU:R38eWNwICi5NRGR7Ivc
MD5:	CEE4D421195F1B0AD85FC8FF00E7D989
SHA1:	0A63D271F7312F98A6117AAC1B6CACBC81ABDD0F
SHA-256:	CB5A487968DB52967A9E2E3E772B8E977A1B219D7941BC5F1221AD93C0A5F955
SHA-512:	C35D3546B27EC0136B5188A4BA091E98A4D0D77EDD438E344A0332448C51BCF1A9026C6E7448EB10682ECAD5A66A11B9F3B9785861B65C44ED5D20B4DB0ED593
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_uxa_pagelet-vflzuTUIR.js
Preview:	define(["require","exports","./e_edison_scl_invitation_signup","./e_core_exception","./c_init_data_runtime","./c_ux_analytics_ux_variants","react","./c_react_query_helpers_helpers","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_uri","metaserver/static/js/modules/constants/viewer","./e_edison","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_sink_index","./c_core_xhr","./c_rfc4648_lib_rfc4648","./c_core_attribution_header","./c_api_v2_noauth_client","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","react-dom","metaserver/static/js/modules/constants/web_experience_constants","./c_lodash-es_lodash","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","metaserver/static/js/modules/constants/file_viewer_configuration","metaserver/static/js/modules/constants/file_viewer_feature_experiments","metaserver/static/js/modules/constants/locales"],(function(e,t,n,i,a,s,r,o,l,c,d,u,h,g,m,_,p,f,v,E,y,w,I,T,S,b,k,x,O,

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533), with no line terminators
Category:	downloaded
Size (bytes):	533
Entropy (8bit):	4.933115570682282
Encrypted:	false
SSDEEP:	12:X5eNcBWFXMOYEBAP5egtIzVWRwHjXJqIK+qIKzg0fUsq5eK:pemBkXWegazdDZq3+q3c08sceK
MD5:	FEB698008C36A09DFE88AB06A1C3E3B9
SHA1:	A871FBCBBE298AE7078D06627708B2C106A0FAF3
SHA-256:	1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE
SHA-512:	F8E3CA3E49B1C027232D1B3AAB82B5430F4A69334A5E18BEB4469C39D6A24D3F4D3FA4C473F360B619CE734977F0D7EFD03BE6ACB5EB7B9F69295FB2CBF94D9B
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/style
Preview:	#credential_picker_container{border:none;height:330px;position:fixed;right:20px;top:20px;width:391px;z-index:9999}#credential_picker_container iframe{border:none;width:391px;height:330px}#g_a11y_announcement{height:1px;left:-10000px;overflow:hidden;position:absolute;top:auto;width:1px}.L5Fo6c-sM5MNb{border:0;display:block;left:0;position:relative;top:0}.L5Fo6c-bF1uUb{-webkit-border-radius:4px;border-radius:4px;bottom:0;cursor:pointer;left:0;position:absolute;right:0;top:0}.L5Fo6c-bF1uUb:focus{border:none;outline:none}sentinel{}

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (744)
Category:	downloaded
Size (bytes):	798
Entropy (8bit):	4.83636828949503
Encrypted:	false
SSDEEP:	12:rWEO/XRWEWJ5h5t+xQWs5gOWHIW4FXNuV72Ope:yj/Y5XH0Igr1MC7q
MD5:	FFA4A8CEE985A798CFF48D450F8436AD
SHA1:	0584E9A89D7DCE5DA4AC9084DC91297237BB3B94
SHA-256:	45526D8DCBFAE6EE2E386F518184BC65B459B3F207FF8E82A89C8FBFABB249F4
SHA-512:	BFD66B672D26860B625F468CA615C4EAC2A3DA4F232C24C664FE546C1D7F88DD2D980D43F9D017F6D9C7D73BD5417BC00AAF4E1B4D603E60148A1A2F155C65C7
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/common/auth_error.module.out-vfl_6Sozu.css
Preview:	._text-input-error-wrapper_1nlfs_4,._text-input-success-wrapper_1nlfs_5{margin-top:var(--dwg-spacing__unit--0_5);order:2}._text-input-error-wrapper_1nlfs_4,._text-input-error-wrapper_1nlfs_4 span._error-message_1nlfs_11{color:var(--color__alert__text);font-size:10px;line-height:15px}._text-input-success-wrapper_1nlfs_5,._text-input-success-wrapper_1nlfs_5 span._success-message_1nlfs_18{color:var(--color__success__text);font-size:10px;line-height:15px}._text-input-error-wrapper_1nlfs_4:empty,._text-input-success-wrapper_1nlfs_5:empty{display:none}._text-input-error-wrapper_1nlfs_4:empty+._text-input-wrapper_1nlfs_29 ._password-input_1nlfs_29{margin-bottom:var(--dwg-spacing__unit--0_5,4px)}._text-input-error-hidden_1nlfs_33{font-size:0}./# sourceMappingURL=auth_error.module.out.css.map /

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (665)
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.837004615391955
Encrypted:	false
SSDEEP:	12:jS5RgWH7oWH79hWH7DR//j+sRueMqcDGuX8s2ZiNHyYSbVe9ofU:GPX7P79g7Dp/K0tMPDGussuOrP
MD5:	A0EF15CB4F52D5F152A361C4A4208C73
SHA1:	62E8A6612C09E571E1266353758F61DC379401B0
SHA-256:	7EB159511D44A621FB5DC9FF210E67E3621EC4000806F3D9255920F8A7B3DBF6
SHA-512:	AA68B22A2003B7EAA605BC3D710103459D68901BCB03E65528ADCB2A5C01018EF8370FD4F7D82E707FD8B9C58441FD395605A33AFBE45AADFD21C1AAE6648ACF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/components/tooltip-vfloO8Vy0.css
Preview:	.tooltip-wrapper{display:inline-block;position:relative}.tooltip-wrapper .tooltip-prompt{position:relative}.tooltip-wrapper .tooltip-prompt .sprite{cursor:pointer}.tooltip-wrapper .tooltip-prompt .sprite:focus{box-shadow:0 0 0 3px #428bff;border-radius:3px}.tooltip-bubble{display:none;font-size:13px;line-height:normal;position:absolute;background:#fff;background-clip:padding-box;border:1px solid rgba(61,70,77,0.1);cursor:default;padding:9px 15px;z-index:9999;border-radius:3px;box-shadow:0px 1px 2px rgba(0,0,0,0.1)}.tooltip-bubble .tooltip-inner{position:relative}.tooltip-bubble ul li{list-style-position:outside;margin-left:2em}.tooltip-target{display:table}.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3657)
Category:	downloaded
Size (bytes):	3723
Entropy (8bit):	5.175949592660426
Encrypted:	false
SSDEEP:	96:DYLjvkcvImrXnQFPkinY4r4sXELdjwZuxFHcnsKA96zPBTq7gSbF:cPk2ImrXnQxGgspj7xhZKAkBq7gSp
MD5:	24D4EF1243188608BCB4FE06409FC18E
SHA1:	905ADE43BFA098039C735D832BE08A98D585843D
SHA-256:	E07EDDEB71ACD2969392459A0EF77D768AB517BB090F15ECB4C268FCA0B3BCD6
SHA-512:	FE785844522EC43CE2219D2B821104D853D23741DB170B44192B678BD0D460BCF3F2E77D5791095DB591F96D072A92B6ED74951A0CF3FDE832F216787A87A848
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_stormcrow_gating_factory-vflJNTvEk.js
Preview:	define(["exports","./e_edison_scl_invitation_signup","./c_api_v2_noauth_client","./c_stormcrow_types_log_exposure","./c_src_sink_index","react","./e_core_exception","./c_react_query_helpers_helpers","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_uri","./c_init_data_runtime","metaserver/static/js/modules/constants/viewer","./e_edison","./c_apex-metrics_src_types","./c_init_data_edison","./c_core_xhr","./c_rfc4648_lib_rfc4648","./c_core_attribution_header","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","react-dom","metaserver/static/js/modules/constants/web_experience_constants","./c_lodash-es_lodash","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","metaserver/static/js/modules/constants/file_viewer_configuration","metaserver/static/js/modules/constants/file_viewer_feature_experiments","metaserver/static/js/modules/constants/locales"],(function(t,e,s,a,n,r,o,i,u,c,_,l,m,p,d,g,v,f,h,A,V,w,x,C,I,P,L,y,E){"use

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12980)
Category:	downloaded
Size (bytes):	13036
Entropy (8bit):	5.383570978346016
Encrypted:	false
SSDEEP:	384:nQIZxpDm2qiMGIGG6i9/4oJCYBHXcZFKh3pZkEpsxZShNj:nJDmfmk4UdHXuFK9pZkEpsxZS3
MD5:	48E3CF3B41636EF6A51CDBC950C4EB1D
SHA1:	6AFCA96B7FBD0F0E467B28D5314305BF0339FAAF
SHA-256:	071A37CB10715EAFA60E1388A4F466E8CABE50B4F90288768D73A37F6D6CD4B1
SHA-512:	BC74095B9A7165BF5A1ABDB5F89721115DB932A9A6ACF944FB2F6C8CA8B79759AC4FB2E98E3F1A6E5BBFB32FD1D2664F92AE97F8A6FCDBE1E15A309AF5430D24
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/e_core_exception-vflSOPPO0.js
Preview:	define(["exports"],(function(e){"use strict";var n="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}let r=new Set;if(globalThis.ensemble){const e=globalThis;e.REGISTERED_EXCEPTION_TAGS\|\|(e.REGISTERED_EXCEPTION_TAGS=new Set),r=e.REGISTERED_EXCEPTION_TAGS}var c,i={exports:{}};c=i,function(e,n){if(e){var t={},r=e.TraceKit,i=[].slice,o="?";t.noConflict=function(){return e.TraceKit=r,t},t.wrap=function(e){return function(){try{return e.apply(this,arguments)}catch(e){throw t.report(e),e}}},t.report=function(){var n,r,c=[],o=null,s=null,u=null;function a(e,n){var r=null;if(!n\|\|t.collectWindowErrors){for(var o in c)if(l(c,o))try{c[o].apply(null,[e].concat(i.call(arguments,2)))}catch(e){r=e}if(r)throw r}}function f(e,r,c,i,o){if(u)t.computeStackTrace.augmentStackTraceWithInitialElement(u,r,c,e),p();else

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11110)
Category:	downloaded
Size (bytes):	11169
Entropy (8bit):	5.202146354168322
Encrypted:	false
SSDEEP:	192:1A6Ak/Bszk6RwyTIOqjzsN5hiFykUgSRMNOsYZmr0N8FGA4ZzwCMDC45Laqvzuq:u6Ak/BsY6RT8Oqjzu5hiFqgYkO3ZmQNs
MD5:	FF1CE802509E2FAD7F5D9E5B2C6A4569
SHA1:	B76A581B129BD8B4DFB72631CCC2F571158DFC8D
SHA-256:	476D028A8E77E5C0F8B9CECF57FE68345B94AF5E54982539213CC71BE7B1CD85
SHA-512:	639448CE272119146B83F1763C2EE5E4E188FC8E37F7475982ADC0880E4558F56550606491AD5379FBA05C7E111149AF93CC268873E4E8FF905C83FB58D8DFCE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_strings_trademark-vfl_xzoAl.js
Preview:	define(["exports","react"],(function(e,t){"use strict";function n(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}var r=n(t);const l=()=>"Legacy";e.AnalyticsLine=e=>r.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},r.createElement("path",{fillRule:"evenodd",clipRule:"evenodd",d:"M17.5 6H6v11.5h11.5V6Zm-13-1.5V19H19V4.5H4.5Z",fill:"currentColor",vectorEffect:"non-scaling-stroke"}),r.createElement("path",{d:"M8 11.5h1.5V15H8v-3.5Zm3-1.5h1.5v5H11v-5Zm3-1.5h1.5V15H14V8.5Z",fill:"currentColor",vectorEffect:"non-scaling-stroke"})),e.ArrowRightLine=e=>r.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},r.createElement("path",{d:"M5 11.75h12m-5.25-6.5 6.25 6.5-6.25 6.5",stroke:"currentColor",strokeWidth:1.5,strokeMiterlimit:10,vectorEffect:"non-scali

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30422)
Category:	downloaded
Size (bytes):	30470
Entropy (8bit):	5.212278467154293
Encrypted:	false
SSDEEP:	768:EY0Yug4/5h150X6FNx8gJ5Nc+xs1T6CevMmRATZyvczXgEynZQPYBxPtiEQ:6YZ4/iTFFWM+v8wvQ
MD5:	43CC9DFF703848C5EC4DED5560DA6DD9
SHA1:	E9F7D74671E37EA0F7161E39518586F629D01A81
SHA-256:	A82524C3A0208F8F53FD611D23DEAEF0A952D83614A452548D73C5FBF919D370
SHA-512:	D07BCC2A62DA2156B376E2EEF2D3321A76094245EACFB3BCBA1BFE44FF7F55088467BD6D4748E1C1C6532F2411A6C02EF2DB9D3371C2EA721074471991788327
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/e_edison-vflQ8yd_3.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./e_core_exception"],(function(e,t,r,n,s,i,o){"use strict";const a=["edison:preloadCss","js:requireCssWithComponent","js:require_css","loadCssWithCache","ensemble","CssEntryPoint","css-modules"],d=["css-modules"];function c(e,t,r){if(r[t].length>0){if(d.includes(t)){const n=r[t];for(let t=0;t<n.length;t++){const{elem:r,path:s}=n[t];if(s>e.path)return[r,t]}}return[r[t][r[t].length-1].elem.nextElementSibling,null]}const n=a.indexOf(t);for(let e=n-1;e>=0;e--){const t=r[a[e]]\|\|[];if(t.length>0)return[t[t.length-1].elem.nextElementSibling,null]}for(let e=n+1;e<a.length;e++){const t=r[a[e]]\|\|[];if(t.length>0)return[t[0].elem,null]}return[null,null]}function l(e,t,r,n,s){e.elem.setAttribute("data-loader",t),e.elem instanceof HTMLStyleElement&&e.elem.setAttribute("path",e.path);let i=null,o=null;if(!s){if(d.includes(t)&&function(e,t,r){if(r.hasOwnProperty(t)&&null!=r[t]&&r[t]

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/langpack/icu-en-vflmZFLky.json
Preview:	{}

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	289154
Entropy (8bit):	5.441185006898793
Encrypted:	false
SSDEEP:	6144:aAlTuAXQWgYJfvty7x/4XbO4w75aCv31W7dTAa:G7xgX64w75aCPa
MD5:	A8B1690E8D79F1F171627F72378B92F8
SHA1:	1DA2E0BE4B366DFAE8B6D2A66691C8516CA394F3
SHA-256:	08DFC14154A8BEE625908184ACE24AE961800B7DBB9E05CA0505C5C412B27D2E
SHA-512:	76039D202F681956FA54AACA3C060A5940CCC09D4D7CF6E94F54DFE0E5CB92C7F3616F0E5130BC3FF07585C1F7F4FE9BE0BD1FF2EEE2CBB9EB37134A4D4B5AE7
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_privacy_consent_static_ccpa_iframe-vflqLFpDo.js
Preview:	define(["require","exports","react","./c_init_data_runtime","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_viewer","./c_src_sink_index","./c_browser_browser_detection","./e_core_exception","./c_core_notify","./c_core_i18n","react-dom","./c_core_xhr","./c_core_uri","./c_csrf","./c_core_attribution_header","./e_edison","metaserver/static/js/modules/constants/viewer","metaserver/static/js/langpack","./c_init_data_edison"],(function(e,t,n,i,o,r,a,s,c,l,d,u,m,p,f,g,h,_,v,b,y){"use strict";function E(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var i=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,i.get?i:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}var w,S,C,T,x,N=E(n),k=E(m);class O extends i.Message{constructor(e){super(),this.userAgent="",this.sessionId="",this.anonIp="",this.localeUserSelected="",this.localeBrowserH

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57547)
Category:	downloaded
Size (bytes):	57598
Entropy (8bit):	5.562917423166901
Encrypted:	false
SSDEEP:	1536:pEN3NpnQ2oY8LGuA3vD0KUcvt/TRQ+4rN3NpnQ2oY8fGvlPoKpObLyUhXRZhoWh:iN3NpnQ2oY8LGuA3vD0KUcF/8N3NpnQx
MD5:	EDB1B6F279D6A33DED91AA34B23CEE63
SHA1:	A9C604D641C90B95124A20EAF411FD8968054E53
SHA-256:	60C2622F549664EEF7622C8B121EB1E705B013D1943B8BF872703FA5425C5641
SHA-512:	33E3CE1980DBB9BF82D42C75813F8CE1573CBCBF64094339557224285C881A1D4FA6C7DB8D77C62ADA1375C976F0BF6F859C9B335327AA6441673C53C03CC63E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_core_i18n-vfl7bG28n.js
Preview:	define(["exports","./e_core_exception","./c_src_sink_index","./c_init_data_runtime","metaserver/static/js/langpack","react"],(function(e,t,r,n,i,o){"use strict";function a(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)}var s=a(i),u=a(o);function l(e){return e?"zh-TW"===(e=e.replace(/_/gi,"-"))?"zh-Hant-TW":"zh-CN"===e?"zh-Hans-CN":"es"===e?"es-419":"es-ES"===e?"es":e:e}var c=function(e,t){return c=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},c(e,t)};var f=function(){return f=Object.assign\|\|function(e){for(var t,r=1,n=arguments.length;r<n;r++)for(var i in t=arguments[r])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},f.app

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1290), with no line terminators
Category:	downloaded
Size (bytes):	1290
Entropy (8bit):	5.7953673690783605
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJlWr6+KVCLTLv138EgFB5vtTGJTlWtB31ngirLOGsLqo40RWt:VKEcieNKonR3evtTA8/1/OXLrwUnG
MD5:	0D866C424BA99C756DD2588CD38BF519
SHA1:	584471F2D282A4B2973CDDDC6E5CF5A6FF00B317
SHA-256:	8C54B2BEC97CF664E35560189EEE5195967E5C525DFBAD366364B2CE71EF4083
SHA-512:	FA2DC0355697255023B6EDF7B5FC64FFB3F2C075CF6631084B1C71FB3BA322D97E89E32F2FD1331052693EF18A58BEB18EFF57936ECEC9EF4B32C872C4A5E107
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?hl=en&onload=recaptchaOnloadCallback&render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('recaptchaOnloadCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js';po.crossOrigin='anon

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21020)
Category:	downloaded
Size (bytes):	403306
Entropy (8bit):	4.881429968346981
Encrypted:	false
SSDEEP:	768:xiLxLWwBFD0D3RF/phVFtDFZtVahF9FchFdrQhFqpyhFHP+hFyIZhFOQrtM/oHyX:x9HDrtM/oHyvjOZOCbDlcl
MD5:	F3FC7E84C200E23061AFBB9EFFEC4EDA
SHA1:	117852AD6C4C8F33FCC7A79A5FB1FC3481E8E50D
SHA-256:	AD461001D7C4618C5CE70C1C9AF1E0C9CF5C85AF48B19CA02E52AE35EE91760E
SHA-512:	6A159C46ABEE870E3D044A23D3DC16056B7732A4AF6C7DFB374B6A51EA1E0C65175CD20617EA1E428946AB97514C186BCE71414D5A7AF9098D1D42C2BA4701C3
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/typescript/component_libraries/dwg-components/src/index.web-vfl8_x-hM.css
Preview:	./* -- typescript/component_libraries/dwg-components/src/atoms/dwg-box/index.web.css /..dwg-box{-webkit-tap-highlight-color:transparent;box-sizing:border-box}./ -- typescript/component_libraries/dwg-components/src/atoms/dwg-flex-grid/index.web.css */..dwg-flex-grid{--dwg-flex-grid__columns:var(--dwg-flex-grid__columns--mobile);width:100%}.dwg-flex-grid__cell{--dwg-flex-grid__col-span:var(--dwg-flex-grid__col-span--mobile,1);--dwg-flex-grid__col-pad-left:var(--dwg-flex-grid__col-pad-left--mobile,0);--dwg-flex-grid__col-pad-right:var(--dwg-flex-grid__col-pad-right--mobile,0)}@media (min-width:480px){.dwg-flex-grid{--dwg-flex-grid__columns:var(. --dwg-flex-grid__columns--mobile-lg,var(--dwg-flex-grid__columns--mobile). )}.dwg-flex-grid__cell{--dwg-flex-grid__col-span:var(. --dwg-flex-grid__col-span--mobile-lg,var(--dwg-flex-grid__col-span--mobile). );--dwg-flex-grid__col-pad-left:var(. --dwg-flex-grid__col-pad-left--mobile-lg,var(--dwg-flex

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70978
Entropy (8bit):	5.253959904171217
Encrypted:	false
SSDEEP:	768:FY6t5OhBfVj9mT9ICB3awSG/r/Pl7VTzyioU49sa+JFd7gzFl51n/QFIsVWaikrS:bHHuDLFDVWpYu/v2lEDFRc7rd
MD5:	8DBC0706F5212D80C502A8051C043EDA
SHA1:	77752E8212625EB7616A13E4DC95B6FF206DD5BC
SHA-256:	9878701B53780F1FDF10A1783651826BA3571C2FB28FDA3F2E6FC0952F080BB0
SHA-512:	CB0473835219947EF6D744EB3BDD877273AB9D8DE69E05E667F2442B90C7E20A2EE2BA11DC4756A1D3F3E2CE1D0EF75EF46D4D1B9135C35BDC3C24A86869C458
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/e_core_exception_reporter-vfljbwHBv.js
Preview:	define(["require","exports","./c_init_data_runtime","./e_core_exception","./c_core_xhr","./c_rfc4648_lib_rfc4648","./c_core_attribution_header"],(function(t,e,n,r,s,i,o){"use strict";const a=new Set(["page_alameda_failures","pagelet_info"]),c=new Set(["dws_page_info","pagelet_info"]),u=t=>!t.startsWith("browser-id:");function _(t){const e={};for(const n of t)e[n.pagelet_name]=n;return e}const d=Object.prototype.toString;function l(t){switch(d.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return S(t,Error)}}function p(t,e){return d.call(t)===`[object ${e}]`}function h(t){return p(t,"ErrorEvent")}function f(t){return p(t,"DOMError")}function g(t){return p(t,"String")}function m(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function y(t){return p(t,"Object")}function E(t){return"undefined"!=typeof Event&&S(t,Event)}function v(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function S(t,e){try{return t instanceof

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	downloaded
Size (bytes):	616
Entropy (8bit):	5.147204843039308
Encrypted:	false
SSDEEP:	12:HbKAcDPGqNBPr5P5iE+Sq8/JPb9AHb2E8VSFe6hHvLxVaPbvEaPb98E4:HeAUNjPNPIT8/xxKysRhHTxq1x8E4
MD5:	6D92292A133E794F5C1FADC6361DD5AC
SHA1:	9F9C7C2DB732A64AB4A014E2AFDA0AA446D3A04B
SHA-256:	DC21D296459DD21437B246D4768E05C86DAE1180277C8A5AAC07E241665CF8B5
SHA-512:	A04A657802EAAD3B9047CC20BDF8245FFAC4B79014BE6A0588FA527B245F90ADEE8F4A2DE7F89436FFD9E15D6B37DADA12905D2BED120097226C5A2B78B6AA66
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/common/helpers.module.out-vflbZIpKh.css
Preview:	._hr-label_1rzgs_4{clear:both;margin:var(--dwg-spacing__unit--2,16px) 0;overflow:hidden;position:relative;text-align:center}._hr-label-text_1rzgs_12{color:var(--color__standard__text);font-family:var(--__dwgAtlasGroteskStack);font-size:16px;margin:0 var(--dwg-spacing__unit--2,16px)}._hr-label_1rzgs_4:after,._hr-label_1rzgs_4:before{background-color:hsla(36,10%,61%,.3);content:"";display:inline-block;height:1px;position:relative;vertical-align:middle;width:50%}._hr-label_1rzgs_4:before{margin-left:-50%;right:0}._hr-label_1rzgs_4:after{left:0;margin-right:-50%}./# sourceMappingURL=helpers.module.out.css.map /

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 54666, version 1.0
Category:	downloaded
Size (bytes):	54666
Entropy (8bit):	7.996310405191114
Encrypted:	true
SSDEEP:	768:mxXl0PgYjIjF4TgXYxK9cESKs97eV05TWW2J1KJzO467QEWDvOWEGOFddkmEbY:N24DkPfs9quTWNIVO46dWDDEDkmOY
MD5:	EBEE194A9B773F166DC16096F8614AAA
SHA1:	9D6A893AF295C90E9E9792D7E54A80034192255B
SHA-256:	00F90DB31F42975FCDC5FA1F70660568BE68792EC11BE2AAC36362F435A6E555
SHA-512:	B1E67F381C8266FF60E09CCCBA6CB17FE0DF4CC8D373E15F20F14B6E8C2F6BAB4C0E91163E57C3C2F4593AC23512A43B2129CABA1945870BE4493D1DEF2DDCD5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBBook20-vfl6-4ZSp.woff2
Preview:	wOF2.............KX...c.........................@...2..D.`..@................6.$..f..v.. ..R.....V[.....rW..y.@...=/.%}....W..=7.eA.Z[..m*1....h........'Y.......r.....>...i.~h.\.j...4..M.......Ch.0.@d"........J.......L.4..hdD..`F.=..S.... #.n....9.G...2.t...m..-.M..>,qv.rI.LN............1....{.o......xxD..G.jt.......Y....g'..G......g7.O...c.@6..uuS.C:....:.Z.!......0.u}...;J..%.q$.......... ...........KE...Gt..xw.....x....{...B.9.gvV...;...'s.%.nd:..k...1..z.T.........^..o..{...K@..^@.hc..._..&....g.%.@...E....f...]..[UIuR...:.....f.<g.....$..pj.(]...zF.......cc.o....-..1F.......u.^..yzi....U2.f%...w......:.R.{.lOP[L..r..B`2...s.u.?...)l.P#...!.#>.....Na..Tx./.]..K.....E)..0g..MO..?U.4.1...]..M\..6...............n..'....3rD9....{.{.....d..R5F.@a.6.6b7V"...$...h..J.Y.....'.=.....ga.X.............u.>..Y6P.6..bGB%:%x..e.IB.q............!F%b.......{.w] .6.w....9.~,......u#(.QS...$..n?.......{.$D_...Ht.Q.2.i%.._S`j+.~..~.e...$......L..q`.^.-+.'.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	255
Entropy (8bit):	5.181110946732397
Encrypted:	false
SSDEEP:	6:FWQDThmWX+L77MRL3B6T2Y3xT3aF7XliARIR8eFWQD8kM/XLKQsI:FWkThXw8RL3B6TLxT3kIARIbWk1YD
MD5:	5CDC20BEC764EEDD4CB5275BF0AAF4D0
SHA1:	A6DF9646C37996C4F8A118621B404925EEA353EE
SHA-256:	05E1FBE4401829DB2CA3ECB53F1F748CA2F47E7907A8D2E90D1641E0FC6CFB7C
SHA-512:	4E7F02CECBA9C7197ABDB0C1338FDC6A06B78FA424658DB3C2D080051E540D37350417A10BCB5107CEAD781D526E58CC56044DAD8CFABC6992A6ED6848EF302F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/unified_susi.module.out-vflXNwgvs.css
Preview:	._unified-susi_s59m6_4{display:inline-block;margin-bottom:0;margin-top:0;max-width:350px;vertical-align:middle;width:350px}@media only screen and (max-width:414px){._unified-susi_s59m6_4{width:100%}}./# sourceMappingURL=unified_susi.module.out.css.map /

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 22:08:08.123075962 CEST	49676	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:08:08.123090982 CEST	49678	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:08:10.049314976 CEST	49706	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.049349070 CEST	443	49706	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.049397945 CEST	49706	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.050245047 CEST	49706	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.050256968 CEST	443	49706	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.373131990 CEST	443	49706	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.373610973 CEST	49706	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.373645067 CEST	443	49706	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.374804020 CEST	443	49706	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.374897003 CEST	49706	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.375998974 CEST	49706	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.376087904 CEST	443	49706	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.376188040 CEST	49706	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.376209021 CEST	443	49706	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.420084953 CEST	49706	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.917283058 CEST	443	49706	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.917347908 CEST	443	49706	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.917511940 CEST	443	49706	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.927791119 CEST	49706	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.929728031 CEST	49706	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.929757118 CEST	443	49706	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.930521965 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.930562973 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:10.930650949 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.930869102 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:10.930885077 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.253403902 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.253794909 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.253833055 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.254982948 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.255300045 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.255445004 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.255451918 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.255477905 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.309097052 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.774490118 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.774506092 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.774524927 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.774533033 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.774624109 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.774652004 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.774701118 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.881886005 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.881915092 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.882097960 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.882160902 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.882239103 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.924335957 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.924367905 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.924535990 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.924555063 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.924596071 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.937349081 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.937437057 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.977360010 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.977411985 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.977538109 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.977555990 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.977602959 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.984262943 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.991317987 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.991352081 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.991400003 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:11.991410971 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:11.991457939 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.007002115 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.007075071 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.007086039 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.012265921 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.012325048 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.012335062 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.019490957 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.019556046 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.019566059 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.023377895 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.023442984 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.023451090 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.031455040 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.031553984 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.031563044 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.075078964 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.364445925 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.364583015 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.364717960 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.364831924 CEST	443	49709	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.364900112 CEST	49709	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.367038012 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.367120981 CEST	443	49712	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.367212057 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.367475033 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.367518902 CEST	443	49712	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.687618017 CEST	443	49712	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.688024044 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.688052893 CEST	443	49712	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.689172983 CEST	443	49712	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.689259052 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.689559937 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.689624071 CEST	443	49712	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.689749956 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:12.689757109 CEST	443	49712	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:12.744070053 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:13.061306953 CEST	443	49712	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:13.061373949 CEST	443	49712	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:13.061431885 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:13.061707020 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:13.061721087 CEST	443	49712	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:13.061731100 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:13.061778069 CEST	49712	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:14.667300940 CEST	49739	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:14.667331934 CEST	443	49739	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:14.667409897 CEST	49739	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:14.667687893 CEST	49739	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:14.667701006 CEST	443	49739	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:14.876815081 CEST	49741	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:08:14.876832962 CEST	443	49741	64.233.177.104	192.168.2.17
Apr 16, 2024 22:08:14.876909971 CEST	49741	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:08:14.877163887 CEST	49741	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:08:14.877177000 CEST	443	49741	64.233.177.104	192.168.2.17
Apr 16, 2024 22:08:14.983844995 CEST	443	49739	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:14.984184980 CEST	49739	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:14.984215975 CEST	443	49739	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:14.984524012 CEST	443	49739	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:14.984932899 CEST	49739	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:14.984989882 CEST	443	49739	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:14.985142946 CEST	49739	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:14.985160112 CEST	49739	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:14.985171080 CEST	443	49739	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.104518890 CEST	443	49741	64.233.177.104	192.168.2.17
Apr 16, 2024 22:08:15.104692936 CEST	49741	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:08:15.104707003 CEST	443	49741	64.233.177.104	192.168.2.17
Apr 16, 2024 22:08:15.106359005 CEST	443	49741	64.233.177.104	192.168.2.17
Apr 16, 2024 22:08:15.106441021 CEST	49741	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:08:15.113101959 CEST	49741	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:08:15.113189936 CEST	443	49741	64.233.177.104	192.168.2.17
Apr 16, 2024 22:08:15.155389071 CEST	49741	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:08:15.155406952 CEST	443	49741	64.233.177.104	192.168.2.17
Apr 16, 2024 22:08:15.203077078 CEST	49741	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:08:15.267426968 CEST	443	49739	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.267476082 CEST	443	49739	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.267561913 CEST	49739	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.267977953 CEST	49739	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.267996073 CEST	443	49739	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.380373001 CEST	49748	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.380405903 CEST	443	49748	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.380470991 CEST	49748	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.380656004 CEST	49748	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.380672932 CEST	443	49748	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.391582966 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.391675949 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.391778946 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.392127037 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.392160892 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.699582100 CEST	443	49748	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.699904919 CEST	49748	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.699924946 CEST	443	49748	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.703541994 CEST	443	49748	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.703619957 CEST	49748	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.703841925 CEST	49748	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.703936100 CEST	49748	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.703941107 CEST	443	49748	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.704001904 CEST	443	49748	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.710232973 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.710414886 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.710472107 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.710977077 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.711241961 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.711322069 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.711332083 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.745059967 CEST	49748	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.745079041 CEST	443	49748	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.752137899 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.761271000 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.793126106 CEST	49748	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.865025043 CEST	49757	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.865070105 CEST	443	49757	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.865557909 CEST	49757	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.865742922 CEST	49757	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.865772009 CEST	443	49757	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.883596897 CEST	443	49748	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.883759975 CEST	443	49748	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:15.884665012 CEST	49748	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.885004997 CEST	49748	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:15.885027885 CEST	443	49748	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.185486078 CEST	443	49757	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.185695887 CEST	49757	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.185729980 CEST	443	49757	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.186836958 CEST	443	49757	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.187117100 CEST	49757	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.187283039 CEST	49757	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.187283993 CEST	49757	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.187309027 CEST	443	49757	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.222367048 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.222388983 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.222466946 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.222491026 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.222527981 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.222580910 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.224385023 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.224399090 CEST	443	49749	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.224420071 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.224453926 CEST	49749	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.225056887 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.225076914 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.225142956 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.225347996 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.225356102 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.228157043 CEST	443	49757	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.238193035 CEST	49757	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.544585943 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.544780970 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.544796944 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.545833111 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.546107054 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.546205997 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.546220064 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.546264887 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.581836939 CEST	443	49757	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.581994057 CEST	443	49757	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.582067966 CEST	49757	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.582348108 CEST	49757	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.582382917 CEST	443	49757	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.586524010 CEST	49762	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.586556911 CEST	443	49762	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.586616039 CEST	49762	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.586997032 CEST	49762	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.587009907 CEST	443	49762	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.589373112 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.877038956 CEST	49770	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.877067089 CEST	443	49770	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.877146006 CEST	49770	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.877372026 CEST	49770	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.877387047 CEST	443	49770	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.887907982 CEST	49773	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.887936115 CEST	443	49773	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.888020039 CEST	49773	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.888273954 CEST	49773	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.888293028 CEST	443	49773	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.904395103 CEST	443	49762	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.904648066 CEST	49762	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.904665947 CEST	443	49762	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.905020952 CEST	443	49762	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.905322075 CEST	49762	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.905385017 CEST	443	49762	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.905461073 CEST	49762	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.932008028 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.932039976 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.932229996 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.932281017 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.932349920 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.932414055 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.935931921 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.947135925 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.947221994 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.947238922 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:16.947304010 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:16.952156067 CEST	443	49762	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.046624899 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.046658039 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.046756029 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.061016083 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.061115026 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.061141014 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.061183929 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.074441910 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.074506044 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.080992937 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.081078053 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.087341070 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.087421894 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.087443113 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.087466002 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.087505102 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.087599039 CEST	49759	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.087615013 CEST	443	49759	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.182482004 CEST	443	49762	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.182537079 CEST	443	49762	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.182626009 CEST	49762	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.182980061 CEST	49762	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.183023930 CEST	443	49762	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.195890903 CEST	443	49770	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.196171045 CEST	49770	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.196192980 CEST	443	49770	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.197285891 CEST	443	49770	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.197665930 CEST	49770	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.197861910 CEST	443	49770	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.197869062 CEST	49770	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.197952986 CEST	49770	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.197966099 CEST	443	49770	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.205554008 CEST	443	49773	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.205759048 CEST	49773	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.205781937 CEST	443	49773	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.206110001 CEST	443	49773	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.206588984 CEST	49773	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.206650019 CEST	443	49773	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.206784964 CEST	49773	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.206801891 CEST	49773	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.206814051 CEST	443	49773	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.217048883 CEST	49779	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.217108011 CEST	443	49779	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.217205048 CEST	49779	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.217576981 CEST	49779	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.217612028 CEST	443	49779	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.401305914 CEST	49784	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.401335955 CEST	443	49784	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.401398897 CEST	49784	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.401602983 CEST	49784	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.401614904 CEST	443	49784	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.537420988 CEST	443	49779	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.537655115 CEST	49779	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.537677050 CEST	443	49779	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.538826942 CEST	443	49779	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.539247990 CEST	49779	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.539429903 CEST	443	49779	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.539561987 CEST	49779	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.539589882 CEST	443	49779	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.539618969 CEST	49779	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.539750099 CEST	443	49779	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.589514971 CEST	443	49770	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.589675903 CEST	443	49770	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.589731932 CEST	49770	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.590174913 CEST	49770	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.590194941 CEST	443	49770	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.595020056 CEST	49786	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.595079899 CEST	443	49786	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.595164061 CEST	49786	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.595402956 CEST	49786	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.595432043 CEST	443	49786	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.674107075 CEST	443	49773	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.674184084 CEST	443	49773	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.674243927 CEST	49773	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.674521923 CEST	49773	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.674530029 CEST	443	49773	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.700567961 CEST	49792	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.700589895 CEST	443	49792	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.700634003 CEST	49792	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.701433897 CEST	49792	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.701447964 CEST	443	49792	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.716169119 CEST	443	49784	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.716440916 CEST	49784	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.716449976 CEST	443	49784	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.716803074 CEST	443	49784	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.717194080 CEST	49784	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.717258930 CEST	443	49784	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.717361927 CEST	49784	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.764113903 CEST	443	49784	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.913841963 CEST	443	49786	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.914235115 CEST	49786	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.914290905 CEST	443	49786	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.914963961 CEST	443	49786	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.915390015 CEST	49786	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.915539026 CEST	443	49786	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.915539026 CEST	49786	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.960134983 CEST	443	49786	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.969144106 CEST	49786	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.995512962 CEST	443	49779	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.995606899 CEST	443	49779	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.995667934 CEST	49779	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.996438980 CEST	49779	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.996452093 CEST	443	49779	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.999582052 CEST	49796	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:17.999649048 CEST	443	49796	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:17.999757051 CEST	49796	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.000001907 CEST	49796	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.000035048 CEST	443	49796	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.019624949 CEST	443	49792	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.020030975 CEST	49792	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.020087957 CEST	443	49792	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.021233082 CEST	443	49792	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.021630049 CEST	49792	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.021780014 CEST	49792	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.021790028 CEST	443	49792	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.021804094 CEST	443	49792	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.064094067 CEST	49792	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.150249958 CEST	443	49784	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.150321007 CEST	443	49784	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.150383949 CEST	49784	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.150839090 CEST	49784	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.150847912 CEST	443	49784	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.197175026 CEST	443	49786	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.197263956 CEST	443	49786	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.197333097 CEST	49786	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.197648048 CEST	49786	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.197660923 CEST	443	49786	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.202121973 CEST	443	49792	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.202195883 CEST	443	49792	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.202251911 CEST	49792	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.202577114 CEST	49792	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.202589989 CEST	443	49792	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.213404894 CEST	443	49796	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.213673115 CEST	49796	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.213687897 CEST	443	49796	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.213995934 CEST	443	49796	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.214272976 CEST	49796	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.214318037 CEST	443	49796	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.214395046 CEST	49796	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.260144949 CEST	443	49796	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.312705994 CEST	49802	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.312732935 CEST	443	49802	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.312922955 CEST	49802	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.312993050 CEST	49802	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.313000917 CEST	443	49802	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.574099064 CEST	443	49796	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.574265003 CEST	443	49796	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.574333906 CEST	49796	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.574742079 CEST	49796	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.574754953 CEST	443	49796	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.628307104 CEST	443	49802	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.628520966 CEST	49802	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.628536940 CEST	443	49802	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.629044056 CEST	443	49802	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.629446030 CEST	49802	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.629511118 CEST	443	49802	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.629658937 CEST	49802	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.629669905 CEST	443	49802	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:18.629678965 CEST	49802	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:18.672116995 CEST	443	49802	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.116898060 CEST	443	49802	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.116961956 CEST	443	49802	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.116976976 CEST	49802	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.117024899 CEST	49802	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.118249893 CEST	49802	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.118266106 CEST	443	49802	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.121773958 CEST	49816	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.121800900 CEST	443	49816	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.121884108 CEST	49816	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.122421980 CEST	49817	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.122456074 CEST	443	49817	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.122519016 CEST	49817	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.122764111 CEST	49816	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.122778893 CEST	443	49816	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.122981071 CEST	49817	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.123002052 CEST	443	49817	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.264832020 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.264889002 CEST	443	49821	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.264996052 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.265216112 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.265248060 CEST	443	49821	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.437244892 CEST	443	49816	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.437479973 CEST	49816	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.437489033 CEST	443	49816	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.437849998 CEST	443	49816	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.438294888 CEST	49816	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.438374043 CEST	443	49816	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.438627005 CEST	49816	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.439152956 CEST	443	49817	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.439444065 CEST	49817	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.439476013 CEST	443	49817	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.439959049 CEST	443	49817	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.440346003 CEST	49817	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.440438032 CEST	443	49817	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.440582991 CEST	49817	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.440603971 CEST	49817	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.440622091 CEST	443	49817	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.480149984 CEST	443	49816	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.583412886 CEST	443	49821	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.583775043 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.583832979 CEST	443	49821	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.584208012 CEST	443	49821	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.584671021 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.584748030 CEST	443	49821	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.585040092 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.585071087 CEST	443	49821	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.585120916 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.628139019 CEST	443	49821	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.715584993 CEST	443	49816	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.715665102 CEST	443	49816	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.715714931 CEST	49816	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.716249943 CEST	49816	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.716264963 CEST	443	49816	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.755503893 CEST	49828	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.755589962 CEST	443	49828	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.755692005 CEST	49828	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.760242939 CEST	49828	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.760278940 CEST	443	49828	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.822110891 CEST	443	49817	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.822201014 CEST	443	49817	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.822257042 CEST	49817	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.822813988 CEST	49817	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.822833061 CEST	443	49817	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.829555035 CEST	49829	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.829591036 CEST	443	49829	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.829721928 CEST	49829	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.830089092 CEST	49829	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.830105066 CEST	443	49829	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.832012892 CEST	49830	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.832046986 CEST	443	49830	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.832122087 CEST	49830	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.832670927 CEST	49830	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.832685947 CEST	443	49830	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.853813887 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.853857040 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.853923082 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.854154110 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.854166985 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.861671925 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.861711979 CEST	443	49833	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.861784935 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.862598896 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.862612963 CEST	443	49833	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.895092964 CEST	443	49821	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.895168066 CEST	443	49821	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.895173073 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.895222902 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.896795034 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.896795988 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.896828890 CEST	443	49821	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.896897078 CEST	49821	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.897779942 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.897835970 CEST	443	49837	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:19.897912025 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.898582935 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:19.898614883 CEST	443	49837	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.071623087 CEST	49844	443	192.168.2.17	18.165.116.50
Apr 16, 2024 22:08:20.071676016 CEST	443	49844	18.165.116.50	192.168.2.17
Apr 16, 2024 22:08:20.071757078 CEST	49844	443	192.168.2.17	18.165.116.50
Apr 16, 2024 22:08:20.071907997 CEST	49844	443	192.168.2.17	18.165.116.50
Apr 16, 2024 22:08:20.071938992 CEST	443	49844	18.165.116.50	192.168.2.17
Apr 16, 2024 22:08:20.077960014 CEST	443	49828	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.078283072 CEST	49828	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.078341007 CEST	443	49828	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.078836918 CEST	443	49828	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.079256058 CEST	49828	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.079344034 CEST	443	49828	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.079749107 CEST	49828	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.079785109 CEST	443	49828	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.079816103 CEST	49828	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.124118090 CEST	443	49828	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.145766020 CEST	443	49829	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.146020889 CEST	49829	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.146028996 CEST	443	49829	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.146342039 CEST	443	49829	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.146774054 CEST	49829	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.146841049 CEST	443	49829	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.147002935 CEST	49829	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.147022009 CEST	443	49829	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.147058010 CEST	49829	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.147075891 CEST	443	49829	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.149064064 CEST	443	49830	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.149312973 CEST	49830	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.149336100 CEST	443	49830	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.149846077 CEST	443	49830	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.150160074 CEST	49830	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.150247097 CEST	443	49830	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.150268078 CEST	49830	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.171914101 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.172121048 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.172135115 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.175658941 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.175852060 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.176153898 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.176321983 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.176357985 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.176372051 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.176383972 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.180084944 CEST	443	49833	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.180335999 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.180366039 CEST	443	49833	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.183927059 CEST	443	49833	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.184000969 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.184243917 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.184379101 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.184379101 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.184389114 CEST	443	49833	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.184421062 CEST	443	49833	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.190128088 CEST	49830	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.190138102 CEST	443	49830	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.219465017 CEST	443	49837	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.219687939 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.219711065 CEST	443	49837	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.221183062 CEST	443	49837	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.221261024 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.221738100 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.221820116 CEST	443	49837	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.221966028 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.221973896 CEST	443	49837	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.222047091 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.222136021 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.222157001 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.238106966 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.238137007 CEST	443	49833	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.264151096 CEST	443	49837	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.270179033 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.286093950 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.295103073 CEST	443	49844	18.165.116.50	192.168.2.17
Apr 16, 2024 22:08:20.295393944 CEST	49844	443	192.168.2.17	18.165.116.50
Apr 16, 2024 22:08:20.295406103 CEST	443	49844	18.165.116.50	192.168.2.17
Apr 16, 2024 22:08:20.296444893 CEST	443	49844	18.165.116.50	192.168.2.17
Apr 16, 2024 22:08:20.296525955 CEST	49844	443	192.168.2.17	18.165.116.50
Apr 16, 2024 22:08:20.297688007 CEST	49844	443	192.168.2.17	18.165.116.50
Apr 16, 2024 22:08:20.297751904 CEST	443	49844	18.165.116.50	192.168.2.17
Apr 16, 2024 22:08:20.297811985 CEST	49844	443	192.168.2.17	18.165.116.50
Apr 16, 2024 22:08:20.297821999 CEST	443	49844	18.165.116.50	192.168.2.17
Apr 16, 2024 22:08:20.349116087 CEST	49844	443	192.168.2.17	18.165.116.50
Apr 16, 2024 22:08:20.425055981 CEST	443	49830	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.425137043 CEST	443	49830	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.425522089 CEST	49830	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.425522089 CEST	49830	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.436820030 CEST	443	49829	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.436896086 CEST	443	49829	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.437441111 CEST	49829	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.437441111 CEST	49829	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.440809965 CEST	49849	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.440834045 CEST	443	49849	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.441051006 CEST	49849	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.441329956 CEST	49849	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.441356897 CEST	443	49849	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.443542004 CEST	443	49828	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.445743084 CEST	443	49828	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.446005106 CEST	49828	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.446156025 CEST	49828	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.446170092 CEST	443	49828	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.448020935 CEST	49850	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.448045015 CEST	443	49850	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.448263884 CEST	49850	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.448447943 CEST	49850	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.448460102 CEST	443	49850	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.490634918 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.490737915 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.490761042 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.490809917 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.491422892 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.491982937 CEST	49832	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.492002964 CEST	443	49832	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.498419046 CEST	443	49833	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.498555899 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.498577118 CEST	443	49833	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.498668909 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.499085903 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.499085903 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.499105930 CEST	443	49833	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.499365091 CEST	49833	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.515924931 CEST	443	49844	18.165.116.50	192.168.2.17
Apr 16, 2024 22:08:20.516251087 CEST	443	49844	18.165.116.50	192.168.2.17
Apr 16, 2024 22:08:20.516407013 CEST	49844	443	192.168.2.17	18.165.116.50
Apr 16, 2024 22:08:20.516638994 CEST	49844	443	192.168.2.17	18.165.116.50
Apr 16, 2024 22:08:20.516657114 CEST	443	49844	18.165.116.50	192.168.2.17
Apr 16, 2024 22:08:20.542299032 CEST	443	49837	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.542382956 CEST	443	49837	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.542428970 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.542958021 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.542990923 CEST	443	49837	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.543026924 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.543262959 CEST	49837	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.627521992 CEST	49851	443	192.168.2.17	18.165.116.52
Apr 16, 2024 22:08:20.627559900 CEST	443	49851	18.165.116.52	192.168.2.17
Apr 16, 2024 22:08:20.627720118 CEST	49851	443	192.168.2.17	18.165.116.52
Apr 16, 2024 22:08:20.629585028 CEST	49851	443	192.168.2.17	18.165.116.52
Apr 16, 2024 22:08:20.629612923 CEST	443	49851	18.165.116.52	192.168.2.17
Apr 16, 2024 22:08:20.727188110 CEST	49830	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.727216005 CEST	443	49830	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.743387938 CEST	49829	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.743407011 CEST	443	49829	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.756505966 CEST	443	49849	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.756748915 CEST	49849	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.756772041 CEST	443	49849	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.757100105 CEST	443	49849	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.757682085 CEST	49849	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.757682085 CEST	49849	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.757700920 CEST	443	49849	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.757744074 CEST	443	49849	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.766774893 CEST	443	49850	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.767318010 CEST	49850	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.767328024 CEST	443	49850	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.768487930 CEST	443	49850	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.769694090 CEST	49850	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.769694090 CEST	49850	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.769716024 CEST	443	49850	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.769865990 CEST	443	49850	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.805493116 CEST	49849	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.821221113 CEST	49850	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.839871883 CEST	443	49851	18.165.116.52	192.168.2.17
Apr 16, 2024 22:08:20.842484951 CEST	49851	443	192.168.2.17	18.165.116.52
Apr 16, 2024 22:08:20.842508078 CEST	443	49851	18.165.116.52	192.168.2.17
Apr 16, 2024 22:08:20.843485117 CEST	443	49851	18.165.116.52	192.168.2.17
Apr 16, 2024 22:08:20.843806028 CEST	49851	443	192.168.2.17	18.165.116.52
Apr 16, 2024 22:08:20.843976021 CEST	49851	443	192.168.2.17	18.165.116.52
Apr 16, 2024 22:08:20.844023943 CEST	443	49851	18.165.116.52	192.168.2.17
Apr 16, 2024 22:08:20.844178915 CEST	49851	443	192.168.2.17	18.165.116.52
Apr 16, 2024 22:08:20.844185114 CEST	443	49851	18.165.116.52	192.168.2.17
Apr 16, 2024 22:08:20.884206057 CEST	49851	443	192.168.2.17	18.165.116.52
Apr 16, 2024 22:08:20.941504955 CEST	443	49849	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.942219019 CEST	443	49849	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:20.942645073 CEST	49849	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.943731070 CEST	49849	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:20.943748951 CEST	443	49849	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:21.066931963 CEST	443	49851	18.165.116.52	192.168.2.17
Apr 16, 2024 22:08:21.067097902 CEST	443	49851	18.165.116.52	192.168.2.17
Apr 16, 2024 22:08:21.068661928 CEST	49851	443	192.168.2.17	18.165.116.52
Apr 16, 2024 22:08:21.069027901 CEST	49851	443	192.168.2.17	18.165.116.52
Apr 16, 2024 22:08:21.069046974 CEST	443	49851	18.165.116.52	192.168.2.17
Apr 16, 2024 22:08:21.170345068 CEST	443	49850	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:21.170433998 CEST	443	49850	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:21.170639992 CEST	49850	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:21.170941114 CEST	49850	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:21.170963049 CEST	443	49850	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:21.398922920 CEST	49853	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:21.398963928 CEST	443	49853	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:21.399035931 CEST	49853	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:21.399399996 CEST	49853	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:21.399415970 CEST	443	49853	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:21.715008974 CEST	443	49853	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:21.715306997 CEST	49853	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:21.715331078 CEST	443	49853	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:21.715792894 CEST	443	49853	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:21.716223001 CEST	49853	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:21.716325045 CEST	443	49853	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:21.716423988 CEST	49853	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:21.716434956 CEST	443	49853	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:21.716444016 CEST	49853	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:21.764113903 CEST	443	49853	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:22.035972118 CEST	443	49853	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:22.036048889 CEST	443	49853	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:22.036108971 CEST	49853	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:22.036165953 CEST	49853	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:22.036818981 CEST	49853	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:22.036839008 CEST	443	49853	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:22.716861963 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:22.716952085 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:22.717132092 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:22.768426895 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:22.768462896 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.282957077 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.283152103 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:23.286171913 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:23.286180973 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.286454916 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.328234911 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:23.421351910 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:23.464116096 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.765758038 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.765790939 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.765796900 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.765805006 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.765841007 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.765886068 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:23.765923023 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.765949011 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:23.765957117 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.765990973 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:23.766017914 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:23.869467974 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:23.869467974 CEST	49855	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:08:23.869534969 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:23.869568110 CEST	443	49855	20.114.59.183	192.168.2.17
Apr 16, 2024 22:08:25.095192909 CEST	443	49741	64.233.177.104	192.168.2.17
Apr 16, 2024 22:08:25.095271111 CEST	443	49741	64.233.177.104	192.168.2.17
Apr 16, 2024 22:08:25.095366001 CEST	49741	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:08:25.100361109 CEST	49741	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:08:25.100380898 CEST	443	49741	64.233.177.104	192.168.2.17
Apr 16, 2024 22:08:25.110845089 CEST	49857	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.110883951 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.111093998 CEST	49857	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.111434937 CEST	49857	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.111475945 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.116508961 CEST	49858	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.116539955 CEST	443	49858	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.116614103 CEST	49858	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.117098093 CEST	49858	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.117114067 CEST	443	49858	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.206784010 CEST	49860	443	192.168.2.17	64.233.177.106
Apr 16, 2024 22:08:25.206821918 CEST	443	49860	64.233.177.106	192.168.2.17
Apr 16, 2024 22:08:25.206912041 CEST	49860	443	192.168.2.17	64.233.177.106
Apr 16, 2024 22:08:25.207154036 CEST	49860	443	192.168.2.17	64.233.177.106
Apr 16, 2024 22:08:25.207170010 CEST	443	49860	64.233.177.106	192.168.2.17
Apr 16, 2024 22:08:25.220282078 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.220313072 CEST	443	49861	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.220416069 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.220594883 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.220608950 CEST	443	49861	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.322384119 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.322787046 CEST	49857	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.322815895 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.323956966 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.324353933 CEST	49857	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.324534893 CEST	49857	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.324542046 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.324559927 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.324573994 CEST	49857	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.324692011 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.367172956 CEST	49857	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.419888020 CEST	443	49860	64.233.177.106	192.168.2.17
Apr 16, 2024 22:08:25.420207024 CEST	49860	443	192.168.2.17	64.233.177.106
Apr 16, 2024 22:08:25.420268059 CEST	443	49860	64.233.177.106	192.168.2.17
Apr 16, 2024 22:08:25.421708107 CEST	443	49860	64.233.177.106	192.168.2.17
Apr 16, 2024 22:08:25.421797037 CEST	49860	443	192.168.2.17	64.233.177.106
Apr 16, 2024 22:08:25.422106028 CEST	49860	443	192.168.2.17	64.233.177.106
Apr 16, 2024 22:08:25.422197104 CEST	443	49860	64.233.177.106	192.168.2.17
Apr 16, 2024 22:08:25.422249079 CEST	49860	443	192.168.2.17	64.233.177.106
Apr 16, 2024 22:08:25.432676077 CEST	443	49858	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.432878971 CEST	49858	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.432909966 CEST	443	49858	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.433362007 CEST	443	49858	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.433644056 CEST	49858	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.433710098 CEST	443	49858	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.433753967 CEST	49858	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.463222027 CEST	49860	443	192.168.2.17	64.233.177.106
Apr 16, 2024 22:08:25.463253975 CEST	443	49860	64.233.177.106	192.168.2.17
Apr 16, 2024 22:08:25.479161024 CEST	49858	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.479187965 CEST	443	49858	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.511277914 CEST	49860	443	192.168.2.17	64.233.177.106
Apr 16, 2024 22:08:25.541421890 CEST	443	49861	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.541748047 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.541785955 CEST	443	49861	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.545675039 CEST	443	49861	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.545802116 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.546080112 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.546217918 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.546236992 CEST	443	49861	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.546272993 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.546277046 CEST	443	49861	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.591161966 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.591223955 CEST	443	49861	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.637166023 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.648433924 CEST	443	49860	64.233.177.106	192.168.2.17
Apr 16, 2024 22:08:25.648684978 CEST	443	49860	64.233.177.106	192.168.2.17
Apr 16, 2024 22:08:25.648756981 CEST	49860	443	192.168.2.17	64.233.177.106
Apr 16, 2024 22:08:25.649115086 CEST	49860	443	192.168.2.17	64.233.177.106
Apr 16, 2024 22:08:25.649133921 CEST	443	49860	64.233.177.106	192.168.2.17
Apr 16, 2024 22:08:25.670567036 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.670698881 CEST	49857	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.670722961 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.670769930 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.670824051 CEST	49857	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.671226978 CEST	49857	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.671241999 CEST	443	49857	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.845971107 CEST	443	49861	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.846056938 CEST	443	49861	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.846055031 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.846118927 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.847453117 CEST	49861	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.847471952 CEST	443	49861	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.853847027 CEST	443	49858	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.853921890 CEST	443	49858	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.853975058 CEST	49858	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.854600906 CEST	49858	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.854625940 CEST	443	49858	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.854641914 CEST	49858	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.854681969 CEST	49858	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.855151892 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.855189085 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:25.855274916 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.855463028 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:25.855474949 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.175126076 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.175578117 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.175599098 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.177109003 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.177562952 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.177771091 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.177778959 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.177798033 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.197022915 CEST	49866	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.197048903 CEST	443	49866	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.197150946 CEST	49866	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.197329998 CEST	49866	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.197348118 CEST	443	49866	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.220165014 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.440073967 CEST	443	49866	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.440289021 CEST	49866	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.440318108 CEST	443	49866	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.441198111 CEST	443	49866	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.441291094 CEST	49866	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.442096949 CEST	49866	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.442150116 CEST	443	49866	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.442364931 CEST	49866	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.442373991 CEST	443	49866	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.490173101 CEST	49866	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.494779110 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.494847059 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.494868040 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.494882107 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.494894981 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.494915962 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.494934082 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.494934082 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.494949102 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.494955063 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.495062113 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.495119095 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.495913029 CEST	49865	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.495929956 CEST	443	49865	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.671555042 CEST	443	49866	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.671722889 CEST	443	49866	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.671770096 CEST	49866	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.672512054 CEST	49866	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.672529936 CEST	443	49866	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.695005894 CEST	49870	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.695055962 CEST	443	49870	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.695132017 CEST	49870	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.695846081 CEST	49870	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.695869923 CEST	443	49870	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.909104109 CEST	49871	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.909147024 CEST	443	49871	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.909220934 CEST	49871	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.909583092 CEST	49871	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.909611940 CEST	443	49871	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.942454100 CEST	443	49870	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.942727089 CEST	49870	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.942759037 CEST	443	49870	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.943073034 CEST	443	49870	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.943448067 CEST	49870	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.943517923 CEST	443	49870	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:26.943581104 CEST	49870	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:26.968750954 CEST	49872	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.968784094 CEST	443	49872	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.968883038 CEST	49872	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.969330072 CEST	49872	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:26.969351053 CEST	443	49872	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:26.988136053 CEST	443	49870	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:27.180670023 CEST	443	49870	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:27.180728912 CEST	443	49870	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:27.180824995 CEST	443	49870	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:27.180819988 CEST	49870	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:27.180881977 CEST	49870	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:27.181616068 CEST	49870	443	192.168.2.17	18.160.48.194
Apr 16, 2024 22:08:27.181642056 CEST	443	49870	18.160.48.194	192.168.2.17
Apr 16, 2024 22:08:27.226866961 CEST	443	49871	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.227478027 CEST	49871	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.227514982 CEST	443	49871	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.228708029 CEST	443	49871	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.229115963 CEST	49871	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.229294062 CEST	443	49871	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.229319096 CEST	49871	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.229401112 CEST	443	49871	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.269228935 CEST	49871	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.286468983 CEST	443	49872	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.286835909 CEST	49872	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.286869049 CEST	443	49872	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.288331985 CEST	443	49872	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.288731098 CEST	49872	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.288913012 CEST	443	49872	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.288938046 CEST	49872	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.288978100 CEST	49872	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.289031029 CEST	443	49872	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.559519053 CEST	443	49871	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.559747934 CEST	443	49871	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.559828043 CEST	49871	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.559828043 CEST	49871	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.560574055 CEST	49871	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.560606003 CEST	443	49871	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.564261913 CEST	49873	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.564313889 CEST	443	49873	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.564400911 CEST	49873	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.564608097 CEST	49873	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.564627886 CEST	443	49873	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.565877914 CEST	49874	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.565957069 CEST	443	49874	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.566034079 CEST	49874	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.566266060 CEST	49874	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.566301107 CEST	443	49874	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.570317030 CEST	49875	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.570355892 CEST	443	49875	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.570415020 CEST	49875	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.570619106 CEST	49875	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.570638895 CEST	443	49875	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.571697950 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.571727991 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.571783066 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.571979046 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.571995020 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.585119963 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.585202932 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.585366964 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.585515022 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.585536957 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.587682009 CEST	49878	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.587759972 CEST	443	49878	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.587861061 CEST	49878	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.588078022 CEST	49878	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.588131905 CEST	443	49878	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.640605927 CEST	443	49872	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.640727997 CEST	443	49872	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.640820026 CEST	49872	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.641379118 CEST	49872	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.641428947 CEST	443	49872	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.641895056 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.641983986 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.642060995 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.642313957 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.642349005 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.646933079 CEST	49881	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.646977901 CEST	443	49881	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.647058964 CEST	49881	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.647465944 CEST	49881	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.647483110 CEST	443	49881	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.802690983 CEST	443	49878	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.803128004 CEST	49878	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.803154945 CEST	443	49878	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.807883024 CEST	443	49878	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.808044910 CEST	49878	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.808417082 CEST	49878	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.808505058 CEST	443	49878	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.808653116 CEST	49878	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.808662891 CEST	443	49878	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.808681011 CEST	49878	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.808693886 CEST	443	49878	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.858163118 CEST	49878	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.881591082 CEST	443	49873	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.881913900 CEST	49873	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.881979942 CEST	443	49873	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.882323027 CEST	443	49873	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.882627010 CEST	49873	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.882700920 CEST	443	49873	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.882754087 CEST	49873	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.883500099 CEST	443	49874	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.883687973 CEST	49874	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.883723021 CEST	443	49874	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.884093046 CEST	443	49874	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.884354115 CEST	49874	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.884426117 CEST	443	49874	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.884462118 CEST	49874	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.884462118 CEST	49874	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.884504080 CEST	443	49874	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.887392998 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.887568951 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.887590885 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.888375998 CEST	443	49875	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.888571978 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.888637066 CEST	49875	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.888642073 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.888667107 CEST	443	49875	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.888868093 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.888943911 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.888957024 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.888967037 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.888993025 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.889175892 CEST	443	49875	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.889435053 CEST	49875	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.889511108 CEST	49875	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.889525890 CEST	443	49875	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.889534950 CEST	49875	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.889579058 CEST	443	49875	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.904817104 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.905129910 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.905168056 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.908667088 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.908755064 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.909050941 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.909117937 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.909189939 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.909204960 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.909239054 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.909248114 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.909260988 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.909300089 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.909324884 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.909339905 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.924160004 CEST	443	49873	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.937165022 CEST	49874	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.937174082 CEST	49873	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.937236071 CEST	49875	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.937237024 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.937258959 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.961751938 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.962069035 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.962090015 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.964448929 CEST	443	49881	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.964704037 CEST	49881	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.964735985 CEST	443	49881	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.965244055 CEST	443	49881	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.965631962 CEST	49881	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.965696096 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.965727091 CEST	443	49881	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.965775967 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.965826988 CEST	49881	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.966164112 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.966330051 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.966345072 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.966378927 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:27.966515064 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:27.984160900 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.012116909 CEST	443	49881	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.016190052 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.016213894 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.063195944 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.091763020 CEST	443	49873	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.091867924 CEST	443	49873	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.092044115 CEST	49873	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.092216015 CEST	49873	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.092257977 CEST	443	49873	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.129746914 CEST	443	49878	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.129836082 CEST	443	49878	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.129909992 CEST	49878	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.130388975 CEST	49878	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.130405903 CEST	443	49878	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.130801916 CEST	49883	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.130898952 CEST	443	49883	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.130983114 CEST	49883	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.131230116 CEST	49883	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.131263971 CEST	443	49883	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.133243084 CEST	49884	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.133275032 CEST	443	49884	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.133348942 CEST	49884	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.133524895 CEST	49884	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.133534908 CEST	443	49884	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.147337914 CEST	443	49881	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.147407055 CEST	443	49881	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.147464991 CEST	49881	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.147768021 CEST	49881	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.147785902 CEST	443	49881	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.211143970 CEST	443	49874	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.211245060 CEST	49874	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.211302042 CEST	443	49874	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.211333990 CEST	443	49874	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.211380959 CEST	49874	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.212165117 CEST	49874	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.212203979 CEST	443	49874	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.212690115 CEST	49885	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.212718010 CEST	443	49885	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.212783098 CEST	49885	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.213670015 CEST	49885	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.213682890 CEST	443	49885	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.216010094 CEST	49886	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.216053009 CEST	443	49886	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.216135979 CEST	49886	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.216300964 CEST	49886	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.216315985 CEST	443	49886	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.216362953 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.216420889 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.216429949 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.216439962 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.216469049 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.216841936 CEST	49876	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.216850042 CEST	443	49876	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.217181921 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.217272997 CEST	443	49887	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.217363119 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.217628956 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.217643023 CEST	443	49887	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.219178915 CEST	49888	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.219189882 CEST	443	49888	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.219269037 CEST	49888	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.219459057 CEST	49888	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.219470978 CEST	443	49888	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.260065079 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.260189056 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.260221004 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.260349035 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.260401011 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.266472101 CEST	49877	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.266499996 CEST	443	49877	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.276731968 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 16, 2024 22:08:28.313066006 CEST	443	49875	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.313173056 CEST	49875	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.313194036 CEST	443	49875	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.313256025 CEST	443	49875	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.313316107 CEST	49875	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.313775063 CEST	49875	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.313791037 CEST	443	49875	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.316481113 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.316576958 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.316610098 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.316668987 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.316716909 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.317120075 CEST	49880	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.317140102 CEST	443	49880	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.320189953 CEST	49889	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.320225000 CEST	443	49889	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.320321083 CEST	49889	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.320523024 CEST	49889	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.320533991 CEST	443	49889	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.428841114 CEST	443	49888	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.429069042 CEST	49888	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.429094076 CEST	443	49888	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.430248976 CEST	443	49888	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.430320978 CEST	49888	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.430600882 CEST	49888	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.430660963 CEST	443	49888	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.430740118 CEST	49888	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.430748940 CEST	443	49888	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.446482897 CEST	443	49883	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.446707964 CEST	49883	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.446780920 CEST	443	49883	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.447153091 CEST	443	49883	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.447530985 CEST	49883	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.447576046 CEST	49883	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.447608948 CEST	443	49883	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.447616100 CEST	49883	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.447644949 CEST	443	49883	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.449940920 CEST	443	49884	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.450126886 CEST	49884	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.450139999 CEST	443	49884	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.451237917 CEST	443	49884	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.451500893 CEST	49884	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.451591015 CEST	49884	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.451600075 CEST	443	49884	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.451669931 CEST	443	49884	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.477189064 CEST	49888	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.493153095 CEST	49883	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.493300915 CEST	49884	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.531436920 CEST	443	49886	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.531511068 CEST	443	49885	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.531688929 CEST	49886	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.531713963 CEST	443	49886	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.531796932 CEST	49885	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.531811953 CEST	443	49885	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.532133102 CEST	443	49886	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.532371998 CEST	443	49885	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.532397032 CEST	443	49887	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.532417059 CEST	49886	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.532490969 CEST	443	49886	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.532632113 CEST	49885	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.532713890 CEST	443	49885	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.532768011 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.532792091 CEST	443	49887	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.532850981 CEST	49886	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.532958984 CEST	49885	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.532972097 CEST	49885	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.532989025 CEST	443	49885	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.533821106 CEST	443	49887	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.533893108 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.534121990 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.534197092 CEST	443	49887	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.534276962 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.534276962 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.534315109 CEST	443	49887	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.580116034 CEST	443	49886	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.587199926 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.587291002 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 16, 2024 22:08:28.640522003 CEST	443	49889	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.640945911 CEST	49889	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.641005039 CEST	443	49889	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.645869017 CEST	443	49889	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.645967960 CEST	49889	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.646243095 CEST	49889	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.646373034 CEST	443	49884	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.646379948 CEST	49889	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.646394014 CEST	443	49889	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.646419048 CEST	443	49889	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.646560907 CEST	443	49884	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.646617889 CEST	49884	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.647156000 CEST	49884	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.647167921 CEST	443	49884	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.698183060 CEST	49889	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.698196888 CEST	443	49889	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.723472118 CEST	443	49886	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.723543882 CEST	443	49886	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.723623037 CEST	49886	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.724441051 CEST	49891	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.724466085 CEST	443	49891	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.724490881 CEST	49886	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.724514008 CEST	443	49886	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.724535942 CEST	49891	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.725023985 CEST	49891	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.725037098 CEST	443	49891	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.746176004 CEST	49889	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.764780998 CEST	443	49883	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.764846087 CEST	443	49883	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.764863968 CEST	49883	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.764905930 CEST	49883	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.765418053 CEST	49883	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.765438080 CEST	443	49883	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.828391075 CEST	443	49888	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.828471899 CEST	443	49888	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.828533888 CEST	49888	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.828989029 CEST	49888	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.829005957 CEST	443	49888	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.846571922 CEST	443	49885	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.846653938 CEST	443	49885	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.846667051 CEST	49885	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.846702099 CEST	49885	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.847145081 CEST	49885	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.847156048 CEST	443	49885	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.872484922 CEST	443	49889	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.872586966 CEST	443	49889	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.872679949 CEST	49889	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.873003006 CEST	49889	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.873034954 CEST	443	49889	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.907362938 CEST	443	49887	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.907438040 CEST	443	49887	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:28.907536030 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.907536030 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.908018112 CEST	49887	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:28.908051968 CEST	443	49887	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.044343948 CEST	443	49891	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.044722080 CEST	49891	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.044740915 CEST	443	49891	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.045890093 CEST	443	49891	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.046174049 CEST	49891	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.046322107 CEST	49891	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.046325922 CEST	443	49891	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.046344042 CEST	443	49891	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.059751987 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.059845924 CEST	443	49892	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.059947014 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.060269117 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.060307980 CEST	443	49892	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.095282078 CEST	49891	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.190184116 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 16, 2024 22:08:29.239314079 CEST	443	49891	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.239500046 CEST	443	49891	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.239574909 CEST	49891	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.240372896 CEST	49893	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.240400076 CEST	49891	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.240417957 CEST	443	49891	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.240456104 CEST	443	49893	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.240573883 CEST	49893	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.240912914 CEST	49893	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.240947008 CEST	443	49893	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.374721050 CEST	443	49892	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.375046968 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.375075102 CEST	443	49892	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.375385046 CEST	443	49892	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.375674009 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.375736952 CEST	443	49892	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.375871897 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.375871897 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.375902891 CEST	443	49892	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.556818008 CEST	443	49893	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.557135105 CEST	49893	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.557199955 CEST	443	49893	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.557771921 CEST	443	49893	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.558052063 CEST	49893	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.558136940 CEST	443	49893	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.558186054 CEST	49893	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.600131035 CEST	443	49893	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.602215052 CEST	49893	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.769587994 CEST	443	49893	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.769690990 CEST	443	49893	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.769768953 CEST	49893	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.770721912 CEST	49894	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.770762920 CEST	49893	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.770768881 CEST	443	49894	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.770801067 CEST	443	49893	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:29.770840883 CEST	49894	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.771133900 CEST	49894	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:29.771157026 CEST	443	49894	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.039315939 CEST	443	49892	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.039397955 CEST	443	49892	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.039602041 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.039602041 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.040133953 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.040133953 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.040180922 CEST	443	49892	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.040251970 CEST	49892	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.091202021 CEST	443	49894	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.091543913 CEST	49894	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.091603041 CEST	443	49894	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.092864037 CEST	443	49894	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.093157053 CEST	49894	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.093271971 CEST	49894	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.093283892 CEST	443	49894	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.093332052 CEST	443	49894	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.114003897 CEST	49895	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.114034891 CEST	443	49895	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.114118099 CEST	49895	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.114409924 CEST	49895	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.114423037 CEST	443	49895	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.144259930 CEST	49894	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.281914949 CEST	443	49894	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.282099009 CEST	443	49894	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.282315969 CEST	49894	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.282382965 CEST	49894	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.282414913 CEST	443	49894	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.400338888 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 16, 2024 22:08:30.428913116 CEST	443	49895	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.430757046 CEST	49895	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.430783987 CEST	443	49895	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.431103945 CEST	443	49895	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.431998968 CEST	49895	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.432058096 CEST	443	49895	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.433326960 CEST	49895	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.433356047 CEST	443	49895	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.433417082 CEST	49895	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.476144075 CEST	443	49895	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.624414921 CEST	49896	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:30.624481916 CEST	443	49896	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:30.624592066 CEST	49896	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:30.625551939 CEST	49896	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:30.625585079 CEST	443	49896	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:30.747764111 CEST	443	49895	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.747839928 CEST	49895	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.747843981 CEST	443	49895	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.747894049 CEST	49895	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.748503923 CEST	49895	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:30.748522997 CEST	443	49895	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:30.852005959 CEST	443	49896	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:30.852133989 CEST	49896	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:30.854907990 CEST	49896	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:30.854933977 CEST	443	49896	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:30.855289936 CEST	443	49896	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:30.895198107 CEST	49896	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:30.896401882 CEST	49896	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:30.944125891 CEST	443	49896	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.048361063 CEST	443	49896	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.048455000 CEST	443	49896	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.048531055 CEST	49896	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.048722029 CEST	49896	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.048722029 CEST	49896	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.048749924 CEST	443	49896	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.048764944 CEST	443	49896	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.090007067 CEST	49897	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.090097904 CEST	443	49897	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.090233088 CEST	49897	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.090508938 CEST	49897	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.090539932 CEST	443	49897	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.309798002 CEST	443	49897	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.310054064 CEST	49897	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.311105013 CEST	49897	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.311124086 CEST	443	49897	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.311595917 CEST	443	49897	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.312658072 CEST	49897	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.360117912 CEST	443	49897	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.513284922 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.513322115 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.513422966 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.513608932 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.513624907 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.520122051 CEST	443	49897	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.520294905 CEST	443	49897	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.520385027 CEST	49897	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.521219969 CEST	49897	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.521219969 CEST	49897	443	192.168.2.17	23.201.212.130
Apr 16, 2024 22:08:31.521262884 CEST	443	49897	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.521291971 CEST	443	49897	23.201.212.130	192.168.2.17
Apr 16, 2024 22:08:31.727364063 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.727874994 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.727900028 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.728632927 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.728717089 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.729640961 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.729710102 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.730772018 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.730967999 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.730972052 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.732197046 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.787209988 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.787231922 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.835423946 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.941665888 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.941874027 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.941956043 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.942436934 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.942454100 CEST	443	49898	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.942466021 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.942504883 CEST	49898	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.943537951 CEST	49899	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.943572044 CEST	443	49899	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:31.943648100 CEST	49899	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.944026947 CEST	49899	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:31.944039106 CEST	443	49899	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:32.160984993 CEST	443	49899	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:32.161345005 CEST	49899	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:32.161370039 CEST	443	49899	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:32.161895990 CEST	443	49899	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:32.162172079 CEST	49899	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:32.162301064 CEST	49899	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:32.162406921 CEST	443	49899	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:32.203267097 CEST	49899	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:32.378462076 CEST	443	49899	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:32.378665924 CEST	443	49899	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:32.378742933 CEST	49899	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:32.379101992 CEST	49899	443	192.168.2.17	142.251.15.101
Apr 16, 2024 22:08:32.379115105 CEST	443	49899	142.251.15.101	192.168.2.17
Apr 16, 2024 22:08:32.427634001 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 16, 2024 22:08:32.500988960 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:32.501075029 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.501200914 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:32.501398087 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:32.501439095 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.715641975 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.715941906 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:32.715979099 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.716557980 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.716631889 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:32.717566967 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.717628956 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:32.717781067 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:32.717856884 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.717928886 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:32.717937946 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.743805885 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 16, 2024 22:08:32.772201061 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:32.804548025 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 16, 2024 22:08:32.930449963 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.930555105 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.930706978 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:32.930742979 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.931294918 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:32.931395054 CEST	443	49900	64.233.177.102	192.168.2.17
Apr 16, 2024 22:08:32.931466103 CEST	49900	443	192.168.2.17	64.233.177.102
Apr 16, 2024 22:08:33.344290018 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 16, 2024 22:08:34.065726042 CEST	49901	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:34.065774918 CEST	443	49901	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:34.065937042 CEST	49901	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:34.066248894 CEST	49901	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:34.066270113 CEST	443	49901	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:34.385097027 CEST	443	49901	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:34.385504007 CEST	49901	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:34.385530949 CEST	443	49901	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:34.386703014 CEST	443	49901	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:34.387013912 CEST	49901	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:34.387195110 CEST	443	49901	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:34.387197018 CEST	49901	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:34.387226105 CEST	49901	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:34.387314081 CEST	443	49901	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:34.430229902 CEST	49901	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:34.558239937 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 16, 2024 22:08:34.813180923 CEST	443	49901	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:34.813287973 CEST	49901	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:34.813307047 CEST	443	49901	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:34.813370943 CEST	443	49901	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:34.814201117 CEST	49901	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:34.814214945 CEST	443	49901	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:34.814230919 CEST	49901	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.120346069 CEST	49902	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.120398045 CEST	443	49902	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:35.120531082 CEST	49902	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.121136904 CEST	49902	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.121151924 CEST	443	49902	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:35.439424038 CEST	443	49902	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:35.439824104 CEST	49902	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.439852953 CEST	443	49902	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:35.441082001 CEST	443	49902	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:35.441862106 CEST	49902	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.442024946 CEST	443	49902	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:35.442061901 CEST	49902	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.442061901 CEST	49902	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.442130089 CEST	443	49902	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:35.486238956 CEST	49902	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.767019987 CEST	443	49902	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:35.767117023 CEST	443	49902	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:35.767227888 CEST	49902	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.767227888 CEST	49902	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.767791986 CEST	49902	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.767811060 CEST	443	49902	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:35.842849970 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.842941046 CEST	443	49905	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:35.843041897 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.843302965 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:35.843327999 CEST	443	49905	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:36.053873062 CEST	443	49905	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:36.054214954 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:36.054244041 CEST	443	49905	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:36.054600954 CEST	443	49905	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:36.054902077 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:36.054965019 CEST	443	49905	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:36.055094957 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:36.055094957 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:36.055125952 CEST	443	49905	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:36.419078112 CEST	443	49905	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:36.419267893 CEST	443	49905	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:36.419440031 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:36.419440031 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:36.420017958 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:36.420066118 CEST	443	49905	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:36.420094013 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:36.420144081 CEST	49905	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:36.969367027 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 16, 2024 22:08:37.608270884 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 16, 2024 22:08:37.630122900 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:37.630167007 CEST	443	49906	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:37.630256891 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:37.630570889 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:37.630590916 CEST	443	49906	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:37.949943066 CEST	443	49906	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:37.950267076 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:37.950295925 CEST	443	49906	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:37.951384068 CEST	443	49906	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:37.951659918 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:37.951805115 CEST	443	49906	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:37.951812983 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:37.951812983 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:37.951909065 CEST	443	49906	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:38.007285118 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:38.319104910 CEST	443	49906	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:38.319221973 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:38.319252968 CEST	443	49906	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:38.319302082 CEST	443	49906	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:38.319360018 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:38.319694996 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:38.319717884 CEST	443	49906	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:38.319730043 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:38.319763899 CEST	49906	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:40.635054111 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:40.635140896 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:40.635258913 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:40.635476112 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:40.635504007 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:40.881624937 CEST	49682	80	192.168.2.17	192.229.211.108
Apr 16, 2024 22:08:40.954479933 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:40.956181049 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:40.956207037 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:40.956619978 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:40.958463907 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:40.958527088 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:40.959027052 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:40.959054947 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:40.959055901 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:41.004137039 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:41.185273886 CEST	49682	80	192.168.2.17	192.229.211.108
Apr 16, 2024 22:08:41.294899940 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:41.294990063 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:41.295011997 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:41.295083046 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:41.295142889 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:41.295761108 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:41.295777082 CEST	443	49907	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:41.295785904 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:41.295819998 CEST	49907	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:41.775324106 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 16, 2024 22:08:41.791387081 CEST	49682	80	192.168.2.17	192.229.211.108
Apr 16, 2024 22:08:42.991403103 CEST	49682	80	192.168.2.17	192.229.211.108
Apr 16, 2024 22:08:44.861586094 CEST	49908	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:44.861627102 CEST	443	49908	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:44.861789942 CEST	49908	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:44.862025023 CEST	49908	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:44.862041950 CEST	443	49908	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.185300112 CEST	443	49908	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.186389923 CEST	49908	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.186424971 CEST	443	49908	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.187546015 CEST	443	49908	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.188941002 CEST	49908	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.189023972 CEST	443	49908	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.190577984 CEST	49908	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.190608025 CEST	443	49908	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.190761089 CEST	49908	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.190792084 CEST	443	49908	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.402337074 CEST	49682	80	192.168.2.17	192.229.211.108
Apr 16, 2024 22:08:45.522386074 CEST	443	49908	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.522505999 CEST	443	49908	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.522663116 CEST	49908	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.523300886 CEST	49908	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.523336887 CEST	443	49908	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.525988102 CEST	49909	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.526079893 CEST	443	49909	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.526206017 CEST	49909	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.526422977 CEST	49909	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.526451111 CEST	443	49909	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.644462109 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.644499063 CEST	443	49910	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.644576073 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.644869089 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.644881010 CEST	443	49910	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.842248917 CEST	443	49909	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.842695951 CEST	49909	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.842758894 CEST	443	49909	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.843252897 CEST	443	49909	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.843559980 CEST	49909	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.843637943 CEST	443	49909	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.843718052 CEST	49909	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.884147882 CEST	443	49909	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.897300959 CEST	49909	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.961004019 CEST	443	49910	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.961298943 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.961323977 CEST	443	49910	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.962482929 CEST	443	49910	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.962790012 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.962953091 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.962964058 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:45.962965012 CEST	443	49910	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:45.963074923 CEST	443	49910	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:46.009296894 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:46.113528013 CEST	443	49909	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:46.113639116 CEST	443	49909	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:46.113707066 CEST	49909	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:46.114182949 CEST	49909	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:46.114227057 CEST	443	49909	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:46.285183907 CEST	443	49910	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:46.285362005 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:46.285387039 CEST	443	49910	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:46.285413980 CEST	443	49910	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:46.285471916 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:46.285986900 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:46.286004066 CEST	443	49910	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:46.286012888 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:46.286051989 CEST	49910	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:47.223366022 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 16, 2024 22:08:49.062509060 CEST	49911	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:49.062544107 CEST	443	49911	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:49.062779903 CEST	49911	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:49.063014030 CEST	49911	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:49.063036919 CEST	443	49911	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:49.380609989 CEST	443	49911	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:49.381115913 CEST	49911	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:49.381141901 CEST	443	49911	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:49.381469011 CEST	443	49911	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:49.381947041 CEST	49911	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:49.382013083 CEST	443	49911	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:49.382216930 CEST	49911	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:49.382216930 CEST	49911	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:49.382256031 CEST	443	49911	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:49.686844110 CEST	443	49911	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:49.686930895 CEST	443	49911	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:49.686949968 CEST	49911	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:49.687001944 CEST	49911	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:49.687645912 CEST	49911	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:49.687680960 CEST	443	49911	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:50.207386971 CEST	49682	80	192.168.2.17	192.229.211.108
Apr 16, 2024 22:08:50.631145954 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:50.631187916 CEST	443	49912	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:50.631273985 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:50.631541967 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:50.631560087 CEST	443	49912	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:50.844223022 CEST	443	49912	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:50.844558954 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:50.844587088 CEST	443	49912	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:50.845716000 CEST	443	49912	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:50.845994949 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:50.846132040 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:50.846132040 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:50.846174955 CEST	443	49912	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:50.894361019 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:51.207560062 CEST	443	49912	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:51.207658052 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:51.207695961 CEST	443	49912	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:51.207726002 CEST	443	49912	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:51.207791090 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:51.208327055 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:51.208369970 CEST	443	49912	162.125.9.18	192.168.2.17
Apr 16, 2024 22:08:51.208395958 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:51.208434105 CEST	49912	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:08:51.390362978 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 16, 2024 22:08:57.160723925 CEST	49699	80	192.168.2.17	199.232.214.172
Apr 16, 2024 22:08:57.160763025 CEST	49700	80	192.168.2.17	199.232.214.172
Apr 16, 2024 22:08:57.264472961 CEST	80	49700	199.232.214.172	192.168.2.17
Apr 16, 2024 22:08:57.264534950 CEST	80	49700	199.232.214.172	192.168.2.17
Apr 16, 2024 22:08:57.264664888 CEST	49700	80	192.168.2.17	199.232.214.172
Apr 16, 2024 22:08:57.264719009 CEST	80	49699	199.232.214.172	192.168.2.17
Apr 16, 2024 22:08:57.264813900 CEST	49699	80	192.168.2.17	199.232.214.172
Apr 16, 2024 22:08:59.807527065 CEST	49682	80	192.168.2.17	192.229.211.108
Apr 16, 2024 22:09:00.583138943 CEST	49913	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:09:00.583174944 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:00.583286047 CEST	49913	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:09:00.583720922 CEST	49913	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:09:00.583735943 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:01.089617968 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:01.089756966 CEST	49913	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:09:01.091731071 CEST	49913	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:09:01.091737032 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:01.092041016 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:01.093556881 CEST	49913	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:09:01.140113115 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:01.581990004 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:01.582020044 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:01.582039118 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:01.582139015 CEST	49913	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:09:01.582154989 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:01.582186937 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:01.582231998 CEST	49913	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:09:01.582262039 CEST	49913	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:09:01.589104891 CEST	49913	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:09:01.589118958 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:01.589138031 CEST	49913	443	192.168.2.17	20.114.59.183
Apr 16, 2024 22:09:01.589143991 CEST	443	49913	20.114.59.183	192.168.2.17
Apr 16, 2024 22:09:05.634002924 CEST	49914	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:05.634052038 CEST	443	49914	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:05.634195089 CEST	49914	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:05.634527922 CEST	49914	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:05.634558916 CEST	443	49914	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:05.956540108 CEST	443	49914	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:05.956851959 CEST	49914	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:05.956882954 CEST	443	49914	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:05.958014965 CEST	443	49914	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:05.958311081 CEST	49914	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:05.958467960 CEST	49914	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:05.958467960 CEST	49914	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:05.958511114 CEST	443	49914	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:06.012413979 CEST	49914	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:06.277276039 CEST	443	49914	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:06.277381897 CEST	49914	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:06.277396917 CEST	443	49914	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:06.277477026 CEST	443	49914	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:06.277533054 CEST	49914	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:06.278115034 CEST	49914	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:06.278132915 CEST	443	49914	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:11.643481016 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:11.643563032 CEST	443	49916	40.126.29.6	192.168.2.17
Apr 16, 2024 22:09:11.643656015 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:11.643841982 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:11.643862009 CEST	443	49916	40.126.29.6	192.168.2.17
Apr 16, 2024 22:09:12.043219090 CEST	443	49916	40.126.29.6	192.168.2.17
Apr 16, 2024 22:09:12.043395042 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:12.058787107 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:12.058877945 CEST	443	49916	40.126.29.6	192.168.2.17
Apr 16, 2024 22:09:12.059854031 CEST	443	49916	40.126.29.6	192.168.2.17
Apr 16, 2024 22:09:12.060384035 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:12.060458899 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:12.060600042 CEST	443	49916	40.126.29.6	192.168.2.17
Apr 16, 2024 22:09:12.192905903 CEST	49917	443	192.168.2.17	13.107.5.88
Apr 16, 2024 22:09:12.192948103 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.193017960 CEST	49917	443	192.168.2.17	13.107.5.88
Apr 16, 2024 22:09:12.222908020 CEST	49917	443	192.168.2.17	13.107.5.88
Apr 16, 2024 22:09:12.222924948 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.330457926 CEST	443	49916	40.126.29.6	192.168.2.17
Apr 16, 2024 22:09:12.330487967 CEST	443	49916	40.126.29.6	192.168.2.17
Apr 16, 2024 22:09:12.330523014 CEST	443	49916	40.126.29.6	192.168.2.17
Apr 16, 2024 22:09:12.330599070 CEST	443	49916	40.126.29.6	192.168.2.17
Apr 16, 2024 22:09:12.330647945 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:12.330648899 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:12.330853939 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:12.330853939 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:12.333440065 CEST	49916	443	192.168.2.17	40.126.29.6
Apr 16, 2024 22:09:12.333453894 CEST	443	49916	40.126.29.6	192.168.2.17
Apr 16, 2024 22:09:12.479526997 CEST	49918	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:09:12.479614019 CEST	443	49918	204.79.197.200	192.168.2.17
Apr 16, 2024 22:09:12.480097055 CEST	49918	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:09:12.483061075 CEST	49918	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:09:12.483094931 CEST	443	49918	204.79.197.200	192.168.2.17
Apr 16, 2024 22:09:12.572587967 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.572696924 CEST	49917	443	192.168.2.17	13.107.5.88
Apr 16, 2024 22:09:12.576378107 CEST	49917	443	192.168.2.17	13.107.5.88
Apr 16, 2024 22:09:12.576401949 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.576811075 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.617103100 CEST	49917	443	192.168.2.17	13.107.5.88
Apr 16, 2024 22:09:12.660140991 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.737237930 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.737369061 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.737432003 CEST	49917	443	192.168.2.17	13.107.5.88
Apr 16, 2024 22:09:12.737452984 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.737519979 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.737601042 CEST	49917	443	192.168.2.17	13.107.5.88
Apr 16, 2024 22:09:12.737610102 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.737637997 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.737678051 CEST	49917	443	192.168.2.17	13.107.5.88
Apr 16, 2024 22:09:12.737710953 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.738034010 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.738122940 CEST	49917	443	192.168.2.17	13.107.5.88
Apr 16, 2024 22:09:12.744067907 CEST	49917	443	192.168.2.17	13.107.5.88
Apr 16, 2024 22:09:12.744088888 CEST	443	49917	13.107.5.88	192.168.2.17
Apr 16, 2024 22:09:12.812671900 CEST	443	49918	204.79.197.200	192.168.2.17
Apr 16, 2024 22:09:12.812783957 CEST	49918	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:09:12.813771963 CEST	443	49918	204.79.197.200	192.168.2.17
Apr 16, 2024 22:09:12.813834906 CEST	49918	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:09:12.870879889 CEST	49918	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:09:12.870896101 CEST	443	49918	204.79.197.200	192.168.2.17
Apr 16, 2024 22:09:12.871933937 CEST	443	49918	204.79.197.200	192.168.2.17
Apr 16, 2024 22:09:12.871995926 CEST	49918	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:09:12.873466015 CEST	49918	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:09:12.873528957 CEST	443	49918	204.79.197.200	192.168.2.17
Apr 16, 2024 22:09:13.086041927 CEST	443	49918	204.79.197.200	192.168.2.17
Apr 16, 2024 22:09:13.086143970 CEST	49918	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:09:13.086170912 CEST	443	49918	204.79.197.200	192.168.2.17
Apr 16, 2024 22:09:13.086255074 CEST	443	49918	204.79.197.200	192.168.2.17
Apr 16, 2024 22:09:13.086321115 CEST	49918	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:09:13.088521004 CEST	49918	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:09:13.088536024 CEST	443	49918	204.79.197.200	192.168.2.17
Apr 16, 2024 22:09:14.830002069 CEST	49919	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:09:14.830064058 CEST	443	49919	64.233.177.104	192.168.2.17
Apr 16, 2024 22:09:14.830333948 CEST	49919	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:09:14.830379963 CEST	49919	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:09:14.830387115 CEST	443	49919	64.233.177.104	192.168.2.17
Apr 16, 2024 22:09:15.045409918 CEST	443	49919	64.233.177.104	192.168.2.17
Apr 16, 2024 22:09:15.045814037 CEST	49919	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:09:15.045829058 CEST	443	49919	64.233.177.104	192.168.2.17
Apr 16, 2024 22:09:15.046478987 CEST	443	49919	64.233.177.104	192.168.2.17
Apr 16, 2024 22:09:15.051801920 CEST	49919	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:09:15.051888943 CEST	443	49919	64.233.177.104	192.168.2.17
Apr 16, 2024 22:09:15.100512028 CEST	49919	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:09:16.525918961 CEST	49920	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:16.525964022 CEST	443	49920	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:16.526242018 CEST	49920	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:16.526242018 CEST	49920	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:16.526273012 CEST	443	49920	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:16.845093012 CEST	443	49920	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:16.847142935 CEST	49920	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:16.847163916 CEST	443	49920	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:16.847651958 CEST	443	49920	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:16.848128080 CEST	49920	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:16.848128080 CEST	49920	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:16.848128080 CEST	49920	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:16.848159075 CEST	443	49920	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:16.848217964 CEST	443	49920	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:16.901812077 CEST	49920	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.149149895 CEST	443	49920	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.149178982 CEST	443	49920	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.149261951 CEST	443	49920	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.149477005 CEST	49920	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.149517059 CEST	49920	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.152699947 CEST	49920	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.152717113 CEST	443	49920	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.258873940 CEST	49921	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.258908033 CEST	443	49921	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.259198904 CEST	49921	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.259198904 CEST	49921	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.259227991 CEST	443	49921	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.576066017 CEST	443	49921	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.576569080 CEST	49921	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.576627970 CEST	443	49921	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.577789068 CEST	443	49921	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.578073978 CEST	49921	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.578191996 CEST	49921	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.578205109 CEST	443	49921	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.578259945 CEST	443	49921	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.620538950 CEST	49921	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.816334009 CEST	443	49921	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.816432953 CEST	443	49921	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:17.816545010 CEST	49921	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.817172050 CEST	49921	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:17.817219019 CEST	443	49921	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:19.077774048 CEST	49922	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:19.077817917 CEST	443	49922	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:19.077910900 CEST	49922	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:19.078193903 CEST	49922	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:19.078207970 CEST	443	49922	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:19.397658110 CEST	443	49922	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:19.398061037 CEST	49922	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:19.398082972 CEST	443	49922	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:19.398541927 CEST	443	49922	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:19.398869991 CEST	49922	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:19.398936987 CEST	443	49922	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:19.399043083 CEST	49922	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:19.399061918 CEST	443	49922	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:19.399069071 CEST	49922	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:19.444116116 CEST	443	49922	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:19.743290901 CEST	443	49922	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:19.743463993 CEST	443	49922	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:19.743503094 CEST	49922	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:19.743520975 CEST	49922	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:19.746031046 CEST	49922	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:19.746051073 CEST	443	49922	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:25.063277960 CEST	443	49919	64.233.177.104	192.168.2.17
Apr 16, 2024 22:09:25.063368082 CEST	443	49919	64.233.177.104	192.168.2.17
Apr 16, 2024 22:09:25.063446045 CEST	49919	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:09:26.194211960 CEST	49919	443	192.168.2.17	64.233.177.104
Apr 16, 2024 22:09:26.194272041 CEST	443	49919	64.233.177.104	192.168.2.17
Apr 16, 2024 22:09:27.601826906 CEST	49923	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:27.601912975 CEST	443	49923	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:27.602020979 CEST	49923	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:27.602231026 CEST	49923	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:27.602242947 CEST	443	49923	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:27.918068886 CEST	443	49923	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:27.919991016 CEST	49923	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:27.920025110 CEST	443	49923	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:27.920382023 CEST	443	49923	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:27.920670033 CEST	49923	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:27.920743942 CEST	443	49923	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:27.920831919 CEST	49923	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:27.920831919 CEST	49923	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:27.920877934 CEST	443	49923	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.239819050 CEST	443	49923	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.239917040 CEST	49923	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.239938021 CEST	443	49923	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.240020037 CEST	443	49923	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.240067959 CEST	49923	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.240510941 CEST	49923	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.240525961 CEST	443	49923	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.242906094 CEST	49924	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.242986917 CEST	443	49924	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.243098021 CEST	49924	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.243275881 CEST	49924	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.243310928 CEST	443	49924	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.564554930 CEST	443	49924	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.565052032 CEST	49924	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.565112114 CEST	443	49924	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.566251993 CEST	443	49924	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.566593885 CEST	49924	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.566734076 CEST	49924	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.566746950 CEST	443	49924	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.566772938 CEST	443	49924	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.621684074 CEST	49924	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.756902933 CEST	443	49924	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.757112980 CEST	443	49924	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:28.757195950 CEST	49924	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.757755041 CEST	49924	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:28.757797003 CEST	443	49924	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:35.634382010 CEST	49925	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:35.634426117 CEST	443	49925	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:35.634535074 CEST	49925	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:35.634828091 CEST	49925	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:35.634841919 CEST	443	49925	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:35.951287031 CEST	443	49925	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:35.951668978 CEST	49925	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:35.951733112 CEST	443	49925	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:35.952111959 CEST	443	49925	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:35.952503920 CEST	49925	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:35.952593088 CEST	443	49925	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:35.952707052 CEST	49925	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:35.952744961 CEST	49925	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:35.952747107 CEST	443	49925	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:36.000122070 CEST	443	49925	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:36.262965918 CEST	443	49925	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:36.263026953 CEST	443	49925	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:36.263185024 CEST	49925	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:36.263185024 CEST	49925	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:36.263838053 CEST	49925	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:09:36.263855934 CEST	443	49925	162.125.9.18	192.168.2.17
Apr 16, 2024 22:09:48.847062111 CEST	49702	80	192.168.2.17	192.229.211.108
Apr 16, 2024 22:09:48.950754881 CEST	80	49702	192.229.211.108	192.168.2.17
Apr 16, 2024 22:09:48.950939894 CEST	49702	80	192.168.2.17	192.229.211.108
Apr 16, 2024 22:09:49.869024992 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 16, 2024 22:10:04.489420891 CEST	49927	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:10:04.489439964 CEST	443	49927	162.125.9.18	192.168.2.17
Apr 16, 2024 22:10:04.489538908 CEST	49927	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:10:04.489825964 CEST	49927	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:10:04.489839077 CEST	443	49927	162.125.9.18	192.168.2.17
Apr 16, 2024 22:10:04.806030989 CEST	443	49927	162.125.9.18	192.168.2.17
Apr 16, 2024 22:10:04.806377888 CEST	49927	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:10:04.806387901 CEST	443	49927	162.125.9.18	192.168.2.17
Apr 16, 2024 22:10:04.806869030 CEST	443	49927	162.125.9.18	192.168.2.17
Apr 16, 2024 22:10:04.807190895 CEST	49927	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:10:04.807265997 CEST	443	49927	162.125.9.18	192.168.2.17
Apr 16, 2024 22:10:04.807358980 CEST	49927	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:10:04.807379007 CEST	49927	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:10:04.807389975 CEST	443	49927	162.125.9.18	192.168.2.17
Apr 16, 2024 22:10:05.170938969 CEST	443	49927	162.125.9.18	192.168.2.17
Apr 16, 2024 22:10:05.171039104 CEST	49927	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:10:05.171062946 CEST	443	49927	162.125.9.18	192.168.2.17
Apr 16, 2024 22:10:05.171140909 CEST	443	49927	162.125.9.18	192.168.2.17
Apr 16, 2024 22:10:05.171299934 CEST	49927	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:10:05.171713114 CEST	49927	443	192.168.2.17	162.125.9.18
Apr 16, 2024 22:10:05.171724081 CEST	443	49927	162.125.9.18	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 22:08:09.940109968 CEST	55895	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:09.940520048 CEST	55704	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:10.044708014 CEST	53	55895	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:10.044905901 CEST	53	63338	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:10.045070887 CEST	53	55704	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:10.206123114 CEST	53	55750	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:10.802469015 CEST	53	56648	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:11.799257994 CEST	58532	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:11.799395084 CEST	57698	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:13.943871975 CEST	51513	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:13.944052935 CEST	58982	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:14.770267963 CEST	52831	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:14.770647049 CEST	63051	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:14.875691891 CEST	53	63051	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:14.875854969 CEST	53	52831	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:15.271003008 CEST	51143	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:15.271195889 CEST	61725	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:15.379270077 CEST	53	61725	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:15.379312992 CEST	53	51143	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:18.343518019 CEST	53	57253	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:18.430885077 CEST	53	52515	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:19.362433910 CEST	53	55305	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:19.870562077 CEST	53	61299	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:19.964111090 CEST	52015	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:19.964256048 CEST	54769	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:20.069363117 CEST	53	54769	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:20.071088076 CEST	53	52015	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:20.519773960 CEST	64210	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:20.520019054 CEST	55141	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:20.624775887 CEST	53	64210	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:20.625802040 CEST	53	55141	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:21.512598991 CEST	53	60351	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:25.100795031 CEST	54162	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:25.101083994 CEST	51297	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:25.118257999 CEST	53123	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:25.118489027 CEST	56998	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:25.118741035 CEST	62240	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:25.119199991 CEST	52740	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:25.205871105 CEST	53	54162	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:25.206012011 CEST	53	51297	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:25.222716093 CEST	53	56998	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:25.223011971 CEST	53	62240	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:25.223534107 CEST	53	52740	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:25.223812103 CEST	53	53123	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:25.223895073 CEST	62709	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:25.224657059 CEST	53141	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:25.226078987 CEST	53076	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:25.264693022 CEST	64293	19302	192.168.2.17	74.125.250.129
Apr 16, 2024 22:08:25.329418898 CEST	53	53141	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:25.331051111 CEST	53	53076	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:25.331394911 CEST	53	62709	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:25.352428913 CEST	53077	19302	192.168.2.17	74.125.250.129
Apr 16, 2024 22:08:25.369030952 CEST	19302	64293	74.125.250.129	192.168.2.17
Apr 16, 2024 22:08:25.456818104 CEST	19302	53077	74.125.250.129	192.168.2.17
Apr 16, 2024 22:08:25.782273054 CEST	53	61096	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:26.089553118 CEST	57772	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:26.089808941 CEST	57830	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:26.194919109 CEST	53	57772	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:26.196585894 CEST	53	57830	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:27.854458094 CEST	53	53652	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:31.407566071 CEST	54561	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:31.408078909 CEST	60874	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:31.512481928 CEST	53	60874	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:31.512711048 CEST	53	54561	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:32.382203102 CEST	65381	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:32.382342100 CEST	65130	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:08:32.486881018 CEST	53	65130	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:32.500089884 CEST	53	65381	1.1.1.1	192.168.2.17
Apr 16, 2024 22:08:46.784943104 CEST	53	54937	1.1.1.1	192.168.2.17
Apr 16, 2024 22:09:09.620251894 CEST	53	60844	1.1.1.1	192.168.2.17
Apr 16, 2024 22:09:10.022047043 CEST	53	64502	1.1.1.1	192.168.2.17
Apr 16, 2024 22:09:16.419035912 CEST	57072	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:09:16.419192076 CEST	62064	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:09:16.524185896 CEST	53	57072	1.1.1.1	192.168.2.17
Apr 16, 2024 22:09:16.525465965 CEST	53	62064	1.1.1.1	192.168.2.17
Apr 16, 2024 22:09:17.152702093 CEST	54486	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:09:17.152947903 CEST	53247	53	192.168.2.17	1.1.1.1
Apr 16, 2024 22:09:17.257523060 CEST	53	53247	1.1.1.1	192.168.2.17
Apr 16, 2024 22:09:17.258368015 CEST	53	54486	1.1.1.1	192.168.2.17
Apr 16, 2024 22:09:29.649482012 CEST	138	138	192.168.2.17	192.168.2.255
Apr 16, 2024 22:09:37.271812916 CEST	53	54499	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 16, 2024 22:08:09.940109968 CEST	192.168.2.17	1.1.1.1	0x1eb9	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:09.940520048 CEST	192.168.2.17	1.1.1.1	0x6682	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 16, 2024 22:08:11.799257994 CEST	192.168.2.17	1.1.1.1	0xea0b	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:11.799395084 CEST	192.168.2.17	1.1.1.1	0xb13e	Standard query (0)	cfl.dropboxstatic.com	65	IN (0x0001)	false
Apr 16, 2024 22:08:13.943871975 CEST	192.168.2.17	1.1.1.1	0xceec	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:13.944052935 CEST	192.168.2.17	1.1.1.1	0x5182	Standard query (0)	cfl.dropboxstatic.com	65	IN (0x0001)	false
Apr 16, 2024 22:08:14.770267963 CEST	192.168.2.17	1.1.1.1	0x894d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:14.770647049 CEST	192.168.2.17	1.1.1.1	0x30b3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 22:08:15.271003008 CEST	192.168.2.17	1.1.1.1	0x3c7d	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:15.271195889 CEST	192.168.2.17	1.1.1.1	0xf022	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 16, 2024 22:08:19.964111090 CEST	192.168.2.17	1.1.1.1	0x8a8e	Standard query (0)	fp.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:19.964256048 CEST	192.168.2.17	1.1.1.1	0xb8ea	Standard query (0)	fp.dropbox.com	65	IN (0x0001)	false
Apr 16, 2024 22:08:20.519773960 CEST	192.168.2.17	1.1.1.1	0x5a5a	Standard query (0)	fp.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:20.520019054 CEST	192.168.2.17	1.1.1.1	0x8298	Standard query (0)	fp.dropbox.com	65	IN (0x0001)	false
Apr 16, 2024 22:08:25.100795031 CEST	192.168.2.17	1.1.1.1	0x358d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.101083994 CEST	192.168.2.17	1.1.1.1	0x8bdd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 22:08:25.118257999 CEST	192.168.2.17	1.1.1.1	0x775	Standard query (0)	stun.fpapi.io	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.118489027 CEST	192.168.2.17	1.1.1.1	0xa3c4	Standard query (0)	stun.l.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.118741035 CEST	192.168.2.17	1.1.1.1	0x9b37	Standard query (0)	stun.fpapi.io	28	IN (0x0001)	false
Apr 16, 2024 22:08:25.119199991 CEST	192.168.2.17	1.1.1.1	0x9e62	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Apr 16, 2024 22:08:25.223895073 CEST	192.168.2.17	1.1.1.1	0x59d6	Standard query (0)	stun.fpapi.io	28	IN (0x0001)	false
Apr 16, 2024 22:08:25.224657059 CEST	192.168.2.17	1.1.1.1	0x4662	Standard query (0)	stun.fpapi.io	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.226078987 CEST	192.168.2.17	1.1.1.1	0xb966	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Apr 16, 2024 22:08:26.089553118 CEST	192.168.2.17	1.1.1.1	0xaa65	Standard query (0)	dropboxcaptcha.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:26.089808941 CEST	192.168.2.17	1.1.1.1	0x425f	Standard query (0)	dropboxcaptcha.com	65	IN (0x0001)	false
Apr 16, 2024 22:08:31.407566071 CEST	192.168.2.17	1.1.1.1	0x5ce1	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:31.408078909 CEST	192.168.2.17	1.1.1.1	0xb4a7	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 16, 2024 22:08:32.382203102 CEST	192.168.2.17	1.1.1.1	0x19c2	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:32.382342100 CEST	192.168.2.17	1.1.1.1	0x2f51	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 16, 2024 22:09:16.419035912 CEST	192.168.2.17	1.1.1.1	0x5948	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:09:16.419192076 CEST	192.168.2.17	1.1.1.1	0x5ef1	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 16, 2024 22:09:17.152702093 CEST	192.168.2.17	1.1.1.1	0x8e57	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:09:17.152947903 CEST	192.168.2.17	1.1.1.1	0x9cda	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 16, 2024 22:08:10.044708014 CEST	1.1.1.1	192.168.2.17	0x1eb9	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:08:10.044708014 CEST	1.1.1.1	192.168.2.17	0x1eb9	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:10.045070887 CEST	1.1.1.1	192.168.2.17	0x6682	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:08:11.903738976 CEST	1.1.1.1	192.168.2.17	0xea0b	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:08:11.906572104 CEST	1.1.1.1	192.168.2.17	0xb13e	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:08:14.048912048 CEST	1.1.1.1	192.168.2.17	0xceec	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:08:14.050098896 CEST	1.1.1.1	192.168.2.17	0x5182	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:08:14.875691891 CEST	1.1.1.1	192.168.2.17	0x30b3	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 22:08:14.875854969 CEST	1.1.1.1	192.168.2.17	0x894d	No error (0)	www.google.com		64.233.177.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:14.875854969 CEST	1.1.1.1	192.168.2.17	0x894d	No error (0)	www.google.com		64.233.177.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:14.875854969 CEST	1.1.1.1	192.168.2.17	0x894d	No error (0)	www.google.com		64.233.177.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:14.875854969 CEST	1.1.1.1	192.168.2.17	0x894d	No error (0)	www.google.com		64.233.177.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:14.875854969 CEST	1.1.1.1	192.168.2.17	0x894d	No error (0)	www.google.com		64.233.177.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:14.875854969 CEST	1.1.1.1	192.168.2.17	0x894d	No error (0)	www.google.com		64.233.177.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:15.379270077 CEST	1.1.1.1	192.168.2.17	0xf022	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:08:15.379312992 CEST	1.1.1.1	192.168.2.17	0x3c7d	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:08:15.379312992 CEST	1.1.1.1	192.168.2.17	0x3c7d	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:20.071088076 CEST	1.1.1.1	192.168.2.17	0x8a8e	No error (0)	fp.dropbox.com		18.165.116.50	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:20.071088076 CEST	1.1.1.1	192.168.2.17	0x8a8e	No error (0)	fp.dropbox.com		18.165.116.57	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:20.071088076 CEST	1.1.1.1	192.168.2.17	0x8a8e	No error (0)	fp.dropbox.com		18.165.116.121	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:20.071088076 CEST	1.1.1.1	192.168.2.17	0x8a8e	No error (0)	fp.dropbox.com		18.165.116.52	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:20.624775887 CEST	1.1.1.1	192.168.2.17	0x5a5a	No error (0)	fp.dropbox.com		18.165.116.52	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:20.624775887 CEST	1.1.1.1	192.168.2.17	0x5a5a	No error (0)	fp.dropbox.com		18.165.116.121	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:20.624775887 CEST	1.1.1.1	192.168.2.17	0x5a5a	No error (0)	fp.dropbox.com		18.165.116.57	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:20.624775887 CEST	1.1.1.1	192.168.2.17	0x5a5a	No error (0)	fp.dropbox.com		18.165.116.50	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.205871105 CEST	1.1.1.1	192.168.2.17	0x358d	No error (0)	www.google.com		64.233.177.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.205871105 CEST	1.1.1.1	192.168.2.17	0x358d	No error (0)	www.google.com		64.233.177.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.205871105 CEST	1.1.1.1	192.168.2.17	0x358d	No error (0)	www.google.com		64.233.177.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.205871105 CEST	1.1.1.1	192.168.2.17	0x358d	No error (0)	www.google.com		64.233.177.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.205871105 CEST	1.1.1.1	192.168.2.17	0x358d	No error (0)	www.google.com		64.233.177.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.205871105 CEST	1.1.1.1	192.168.2.17	0x358d	No error (0)	www.google.com		64.233.177.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.206012011 CEST	1.1.1.1	192.168.2.17	0x8bdd	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 22:08:25.222716093 CEST	1.1.1.1	192.168.2.17	0xa3c4	No error (0)	stun.l.google.com	stun-anycast.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:08:25.222716093 CEST	1.1.1.1	192.168.2.17	0xa3c4	No error (0)	stun-anycast.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.223011971 CEST	1.1.1.1	192.168.2.17	0x9b37	Name error (3)	stun.fpapi.io	none	none	28	IN (0x0001)	false
Apr 16, 2024 22:08:25.223534107 CEST	1.1.1.1	192.168.2.17	0x9e62	No error (0)	stun.l.google.com	stun-anycast.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:08:25.223534107 CEST	1.1.1.1	192.168.2.17	0x9e62	No error (0)	stun-anycast.l.google.com			28	IN (0x0001)	false
Apr 16, 2024 22:08:25.223812103 CEST	1.1.1.1	192.168.2.17	0x775	Name error (3)	stun.fpapi.io	none	none	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.329418898 CEST	1.1.1.1	192.168.2.17	0x4662	Name error (3)	stun.fpapi.io	none	none	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:25.331051111 CEST	1.1.1.1	192.168.2.17	0xb966	No error (0)	stun.l.google.com	stun-anycast.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:08:25.331051111 CEST	1.1.1.1	192.168.2.17	0xb966	No error (0)	stun-anycast.l.google.com			28	IN (0x0001)	false
Apr 16, 2024 22:08:25.331394911 CEST	1.1.1.1	192.168.2.17	0x59d6	Name error (3)	stun.fpapi.io	none	none	28	IN (0x0001)	false
Apr 16, 2024 22:08:26.194919109 CEST	1.1.1.1	192.168.2.17	0xaa65	No error (0)	dropboxcaptcha.com		18.160.48.194	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:31.512711048 CEST	1.1.1.1	192.168.2.17	0x5ce1	No error (0)	play.google.com		142.251.15.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:31.512711048 CEST	1.1.1.1	192.168.2.17	0x5ce1	No error (0)	play.google.com		142.251.15.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:31.512711048 CEST	1.1.1.1	192.168.2.17	0x5ce1	No error (0)	play.google.com		142.251.15.102	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:31.512711048 CEST	1.1.1.1	192.168.2.17	0x5ce1	No error (0)	play.google.com		142.251.15.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:31.512711048 CEST	1.1.1.1	192.168.2.17	0x5ce1	No error (0)	play.google.com		142.251.15.113	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:31.512711048 CEST	1.1.1.1	192.168.2.17	0x5ce1	No error (0)	play.google.com		142.251.15.100	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:32.500089884 CEST	1.1.1.1	192.168.2.17	0x19c2	No error (0)	play.google.com		64.233.177.102	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:32.500089884 CEST	1.1.1.1	192.168.2.17	0x19c2	No error (0)	play.google.com		64.233.177.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:32.500089884 CEST	1.1.1.1	192.168.2.17	0x19c2	No error (0)	play.google.com		64.233.177.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:32.500089884 CEST	1.1.1.1	192.168.2.17	0x19c2	No error (0)	play.google.com		64.233.177.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:32.500089884 CEST	1.1.1.1	192.168.2.17	0x19c2	No error (0)	play.google.com		64.233.177.113	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:08:32.500089884 CEST	1.1.1.1	192.168.2.17	0x19c2	No error (0)	play.google.com		64.233.177.100	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:09:16.524185896 CEST	1.1.1.1	192.168.2.17	0x5948	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:09:16.524185896 CEST	1.1.1.1	192.168.2.17	0x5948	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:09:16.525465965 CEST	1.1.1.1	192.168.2.17	0x5ef1	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:09:17.257523060 CEST	1.1.1.1	192.168.2.17	0x9cda	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:09:17.258368015 CEST	1.1.1.1	192.168.2.17	0x8e57	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:09:17.258368015 CEST	1.1.1.1	192.168.2.17	0x8e57	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.dropbox.com

https:

fp.dropbox.com

www.google.com

dropboxcaptcha.com

slscr.update.microsoft.com

fs.microsoft.com

play.google.com

evoke-windowsservices-tas.msedge.net

www.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49706	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:10 UTC	699	OUT	GET /l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:08:10 UTC	3935	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Location: /scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1 Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; expires=Sun, 15 Apr 2029 20:08:10 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: t=ReUI7oB54eFRG9-sGlJXBmCx; Domain=dropbox.com; expires=Fri, 16 Apr 2027 20:08:10 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; expires=Fri, 16 Apr 2027 20:08:10 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=W8NDtkCu28; expires=Fri, 16 Apr 2027 20:08:10 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: locale=en; Domain=dropbox.com; expires=Sun, 15 Apr 2029 20:08:10 GMT; Path=/; SameSite=None; Secure Set-Cookie: ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; Domain=www.dropbox.com; expires=Tue, 16 Apr 2024 21:08:10 GMT; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Dropbox-Internal-Redirect: 1 X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7095a60df6174f968fa70c9da27c1a58 Connection: close Transfer-Encoding: chunked
2024-04-16 20:08:10 UTC	705	IN	Data Raw: 32 62 35 0d 0a 33 30 32 20 46 6f 75 6e 64 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 2f 73 63 6c 2f 66 69 2f 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 2f 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 3f 64 6c 3d 30 26 6f 72 65 66 3d 65 26 72 3d 41 43 4c 64 70 62 6a 73 71 51 4c 34 41 5f 33 67 37 44 71 59 6e 4f 55 69 64 6a 48 34 55 4c 32 61 5f 4e 54 54 52 69 68 2d 49 71 4b 66 6f 33 65 61 45 77 2d 71 6a 65 57 30 31 63 57 67 70 37 4e 71 58 79 49 47 57 30 67 33 46 52 65 75 5a 39 66 55 69 4d 75 57 78 71 6b 49 63 4a 73 5f 6f 55 52 45 34 38 57 33 30 51 79 5f 33 78 77 5a 47 51 69 77 52 31 6b 48 6a 72 74 4f 67 6d 4f 39 77 35 77 6b 75 72 44 48 55 55 34 30 35 4c 34 6b 55 38 55 70 67 4c 37 79 5f 67 61 32 Data Ascii: 2b5302 FoundThe resource was found at /scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49709	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:11 UTC	1323	OUT	GET /scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D
2024-04-16 20:08:11 UTC	3495	IN	HTTP/1.1 200 OK Content-Security-Policy: img-src https://* data: blob: ; frame-ancestors 'self' https://.dropbox.com ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55njH0JCc=' ; base-uri 'self' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; font-src https:// data: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; media-src https:// blob: ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; style-src https://* 'unsafe-inline' 'unsafe-eval' Content-Security-Policy: script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55njH0JCc=' 'nonce-wD9EuzeCJzuBzi/zOUFgIZRXRtQ=' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; Path=/; HttpOnly; Secure; SameSite=None X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 94973927328f48bc90f3a86eccb3af0f Connection: close Transfer-Encoding: chunked
2024-04-16 20:08:11 UTC	7037	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a 34 31 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6d 61 67 65 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>19<meta charset="utf-8" />41<meta content="noindex, nofollow, noimageindex" name="robots" />47<meta content="width=device-widt
2024-04-16 20:08:11 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 6e 5f 66 6f 72 6d 61 74 73 5f 6c 69 6e 6b 5f 63 61 6d 70 61 69 67 6e 5f 6c 69 6e 6b 5f 72 65 6e 64 65 72 65 72 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 69 6e 76 69 74 61 74 69 6f 6e 5f 73 69 67 6e 75 70 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 63 61 6d 70 61 69 67 6e 5f 66 6f 72 6d 61 74 73 5f 6c 69 6e 6b 5f 63 61 6d 70 61 69 67 6e 5f 6c 69 6e 6b 5f 72 65 6e 64 65 72 65 72 2d 76 66 6c 41 53 4d 6e 32 4a 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 69 6e 76 69 74 61 74 69 6f 6e 5f 73 69 67 6e 75 70 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 63 61 6d 70 61 69 67 6e 5f 66 6f 72 6d 61 74 73 5f 6d 65 6e 75 5f 63 61 6d 70 61 Data Ascii: 4000n_formats_link_campaign_link_renderer": "static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_campaign_formats_link_campaign_link_renderer-vflASMn2J", "atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_campaign_formats_menu_campa
2024-04-16 20:08:11 UTC	8	IN	Data Raw: 77 65 72 2f 73 63 0d 0a Data Ascii: wer/sc
2024-04-16 20:08:11 UTC	16384	IN	Data Raw: 32 64 34 38 0d 0a 6c 5f 69 6e 76 69 74 61 74 69 6f 6e 5f 73 69 67 6e 75 70 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 75 69 5f 62 69 6c 6c 69 6e 67 5f 6d 6f 64 61 6c 5f 63 61 6d 70 61 69 67 6e 5f 62 69 6c 6c 69 6e 67 5f 6d 6f 64 61 6c 2d 76 66 6c 74 76 72 4c 34 30 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 69 6e 76 69 74 61 74 69 6f 6e 5f 73 69 67 6e 75 70 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 75 69 5f 64 61 74 61 5f 70 72 65 66 65 74 63 68 55 74 69 6c 73 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 69 6e 76 69 74 61 74 69 6f 6e 5f 73 69 67 6e 75 70 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 75 69 5f 64 61 74 61 5f 70 72 Data Ascii: 2d48l_invitation_signup_bundle_amd/dist/c_ui_billing_modal_campaign_billing_modal-vfltvrL40", "atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_ui_data_prefetchUtils": "static/atlas/file_viewer/scl_invitation_signup_bundle_amd/dist/c_ui_data_pr
2024-04-16 20:08:11 UTC	2873	IN	Data Raw: 44 46 68 4e 6b 6b 74 61 7a 46 32 58 33 70 71 64 55 56 6e 56 6e 63 6d 63 32 30 39 4d 53 6f 4c 5a 6d 6c 73 5a 56 39 32 61 57 56 33 5a 58 49 79 46 58 4e 6a 62 46 39 70 62 6e 5a 70 64 47 46 30 61 57 39 75 58 33 4e 70 5a 32 35 31 63 41 3d 3d 22 2c 22 45 76 67 46 43 69 56 7a 61 57 64 75 64 58 42 66 63 32 6c 6e 62 6d 6c 75 4c 6b 31 68 5a 32 6c 6a 54 47 6c 75 61 30 56 6b 61 58 4e 76 62 6c 42 79 5a 57 5a 6c 64 47 4e 6f 45 68 46 48 62 32 39 6e 62 47 56 50 62 6d 56 55 59 58 42 47 5a 58 52 6a 61 42 71 58 42 52 4b 55 42 56 4c 48 41 6d 68 30 64 48 42 7a 4f 69 38 76 64 33 64 33 4c 6d 52 79 62 33 42 69 62 33 67 75 59 32 39 74 4c 33 4e 6a 62 43 39 6d 61 53 39 30 4e 44 4e 6a 4d 47 56 70 62 6e 4a 6f 4d 7a 63 33 63 6d 30 35 5a 48 52 35 64 6d 45 76 53 57 35 32 62 32 6c 6a 5a Data Ascii: DFhNkktazF2X3pqdUVnVncmc209MSoLZmlsZV92aWV3ZXIyFXNjbF9pbnZpdGF0aW9uX3NpZ251cA==","EvgFCiVzaWdudXBfc2lnbmluLk1hZ2ljTGlua0VkaXNvblByZWZldGNoEhFHb29nbGVPbmVUYXBGZXRjaBqXBRKUBVLHAmh0dHBzOi8vd3d3LmRyb3Bib3guY29tL3NjbC9maS90NDNjMGVpbnJoMzc3cm05ZHR5dmEvSW52b2ljZ
2024-04-16 20:08:11 UTC	11409	IN	Data Raw: 31 39 34 64 0d 0a 6d 56 57 6c 4e 64 56 64 34 63 57 74 4a 59 30 70 7a 58 32 39 56 55 6b 55 30 4f 46 63 7a 4d 46 46 35 58 7a 4e 34 64 31 70 48 55 57 6c 33 55 6a 46 72 53 47 70 79 64 45 39 6e 62 55 38 35 64 7a 56 33 61 33 56 79 52 45 68 56 56 54 51 77 4e 55 77 30 61 31 55 34 56 58 42 6e 54 44 64 35 58 32 64 68 4d 6b 5a 66 64 45 6c 31 56 6d 30 31 57 58 63 31 53 30 70 4c 53 46 42 69 62 30 78 57 62 48 70 79 57 44 46 74 4d 45 73 30 62 6a 56 57 52 6c 68 4c 53 54 56 73 51 57 52 72 64 56 39 50 51 33 42 4b 4d 7a 5a 48 56 6b 74 50 5a 54 42 61 5a 6c 55 74 5a 44 42 73 56 56 4a 31 54 6c 4a 70 54 32 77 78 59 54 5a 4a 4c 57 73 78 64 6c 39 36 61 6e 56 46 5a 31 5a 33 4a 6e 4e 74 50 54 45 71 43 32 5a 70 62 47 56 66 64 6d 6c 6c 64 32 56 79 4d 68 56 7a 59 32 78 66 61 57 35 32 Data Ascii: 194dmVWlNdVd4cWtJY0pzX29VUkU0OFczMFF5XzN4d1pHUWl3UjFrSGpydE9nbU85dzV3a3VyREhVVTQwNUw0a1U4VXBnTDd5X2dhMkZfdEl1Vm01WXc1S0pLSFBib0xWbHpyWDFtMEs0bjVWRlhLSTVsQWRrdV9PQ3BKMzZHVktPZTBaZlUtZDBsVVJ1TlJpT2wxYTZJLWsxdl96anVFZ1Z3JnNtPTEqC2ZpbGVfdmlld2VyMhVzY2xfaW52
2024-04-16 20:08:11 UTC	1173	IN	Data Raw: 32 36 64 0d 0a 35 37 5c 5c 75 30 34 33 64 5c 5c 75 30 34 34 31 5c 5c 75 30 34 34 63 5c 5c 75 30 34 33 61 5c 5c 75 30 34 33 30 5c 22 2c 20 5c 22 64 65 63 6f 72 61 74 6f 72 5c 22 3a 20 5c 22 5c 22 7d 2c 20 7b 5c 22 6c 6f 63 61 6c 65 43 6f 64 65 5c 22 3a 20 5c 22 74 68 5f 54 48 5c 22 2c 20 5c 22 6c 6f 63 61 6c 65 4e 61 6d 65 5c 22 3a 20 5c 22 5c 5c 75 30 65 34 34 5c 5c 75 30 65 31 37 5c 5c 75 30 65 32 32 5c 22 2c 20 5c 22 64 65 63 6f 72 61 74 6f 72 5c 22 3a 20 5c 22 5c 22 7d 2c 20 7b 5c 22 6c 6f 63 61 6c 65 43 6f 64 65 5c 22 3a 20 5c 22 7a 68 5f 43 4e 5c 22 2c 20 5c 22 6c 6f 63 61 6c 65 4e 61 6d 65 5c 22 3a 20 5c 22 5c 5c 75 34 65 32 64 5c 5c 75 36 35 38 37 5c 5c 75 66 66 30 38 5c 5c 75 37 62 38 30 5c 5c 75 34 66 35 33 5c 5c 75 66 66 30 39 5c 22 2c 20 5c 22 Data Ascii: 26d57\\u043d\\u0441\\u044c\\u043a\\u0430\", \"decorator\": \"\"}, {\"localeCode\": \"th_TH\", \"localeName\": \"\\u0e44\\u0e17\\u0e22\", \"decorator\": \"\"}, {\"localeCode\": \"zh_CN\", \"localeName\": \"\\u4e2d\\u6587\\uff08\\u7b80\\u4f53\\uff09\", \"
2024-04-16 20:08:11 UTC	1262	IN	Data Raw: 34 65 37 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 69 63 73 6e 79 57 4f 50 6f 47 55 36 47 4f 69 69 57 35 35 6e 6a 48 30 4a 43 63 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 76 41 46 43 68 68 77 63 6d 39 74 63 48 51 75 55 48 4a 76 62 58 42 30 52 57 52 70 63 32 39 75 52 6d 56 30 59 32 67 53 46 Data Ascii: 4e7<script nonce="XicsnyWOPoGU6GOiiW55njH0JCc=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EvAFChhwcm9tcHQuUHJvbXB0RWRpc29uRmV0Y2gSF
2024-04-16 20:08:11 UTC	1306	IN	Data Raw: 35 31 33 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 69 63 73 6e 79 57 4f 50 6f 47 55 36 47 4f 69 69 57 35 35 6e 6a 48 30 4a 43 63 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 76 49 46 43 69 4a 6d 61 57 35 6e 5a 58 4a 77 63 6d 6c 75 64 47 70 7a 4c 6b 5a 70 62 6d 64 6c 63 6c 42 79 61 57 35 30 53 Data Ascii: 513<script nonce="XicsnyWOPoGU6GOiiW55njH0JCc=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EvIFCiJmaW5nZXJwcmludGpzLkZpbmdlclByaW50S
2024-04-16 20:08:11 UTC	1298	IN	Data Raw: 35 30 62 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 69 63 73 6e 79 57 4f 50 6f 47 55 36 47 4f 69 69 57 35 35 6e 6a 48 30 4a 43 63 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 76 67 46 43 69 4e 33 5a 57 4a 66 63 47 78 68 64 47 5a 76 63 6d 30 75 56 32 56 69 55 47 78 68 64 47 5a 76 63 6d 31 46 5a Data Ascii: 50b<script nonce="XicsnyWOPoGU6GOiiW55njH0JCc=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EvgFCiN3ZWJfcGxhdGZvcm0uV2ViUGxhdGZvcm1FZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49712	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:12 UTC	1509	OUT	GET /page_success/end?edison_page_name=scl_invitation_signup&path=%2Fscl%2Ffi%2Ft43c0einrh377rm9dtyva%2FInvoice-0786.pdf&request_id=94973927328f48bc90f3a86eccb3af0f&time=1713298092 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:13 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 1 Date: Tue, 16 Apr 2024 20:08:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cb269bc36cc9470aba784ce5dc8ad297 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49739	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:14 UTC	1556	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 381 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: ReUI7oB54eFRG9-sGlJXBmCx X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:14 UTC	381	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 36 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 22 7d 7d 2c 22 74 72 69 67 67 65 72 22 3a 7b 22 2e 74 61 67 22 3a 22 74 72 69 67 67 65 72 5f 68 Data Ascii: {"scopes":[],"known_namespaces":[],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":26,"implementation":{".tag":"typescript"}},"trigger":{".tag":"trigger_h
2024-04-16 20:08:15 UTC	594	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 87 X-Webkit-Csp: sandbox Content-Length: 137 Date: Tue, 16 Apr 2024 20:08:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 50a67300e1c345f9abb048521ad39f38 Connection: close
2024-04-16 20:08:15 UTC	137	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 73 74 6f 70 5f 70 75 62 6c 69 63 61 74 69 6f 6e 5f 66 6f 72 5f 73 65 63 6f 6e 64 73 22 3a 30 7d Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[],"stop_publication_for_seconds":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49748	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:15 UTC	848	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:15 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Tue, 16 Apr 2024 20:08:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: dc4935057a6f460399acc626dc0ad8fa Connection: close
2024-04-16 20:08:15 UTC	116	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49749	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:15 UTC	1407	OUT	GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:16 UTC	5127	IN	HTTP/1.1 302 Found Content-Security-Policy: base-uri 'self' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; font-src https://* data: ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; default-src 'none' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55njH0JCc=' ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55njH0JCc=' 'nonce-wD9EuzeCJzuBzi/zOUFgIZRXRtQ=' Content-Type: text/html; charset=utf-8 Location: /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 79ee5658910343abb06a43095b59a15c Connection: close Transfer-Encoding: chunked
2024-04-16 20:08:16 UTC	28	IN	Data Raw: 31 31 0d 0a 3c 21 2d 2d 73 74 61 74 75 73 3d 32 30 30 2d 2d 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 11...status=200-->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49757	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:16 UTC	2220	OUT	POST /web-grpc/edison/prompt.PromptEdisonFetch/EdisonPromptPropsFetch HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 665 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept-language: en x-edison-prompt-controller: shared_content_link x-edison-atlasservlet: file_viewer x-grpc-web: 1 x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" x-dropbox-browser-id: 9cd013c709769cbe945ef09bb321df58 x-user-agent: @bufbuild/connect-web x-dropbox-authority: www.dropbox.com x-edison-page-name: scl_invitation_signup sec-ch-ua-mobile: ?0 x-edison-prompt-action: shared_content_link_view_file_and_folder User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/grpc-web+proto x-edison-original-url: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:16 UTC	665	OUT	Data Raw: 00 00 00 02 94 52 c7 02 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 2f 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 3f 64 6c 3d 30 26 6f 72 65 66 3d 65 26 72 3d 41 43 4c 64 70 62 6a 73 71 51 4c 34 41 5f 33 67 37 44 71 59 6e 4f 55 69 64 6a 48 34 55 4c 32 61 5f 4e 54 54 52 69 68 2d 49 71 4b 66 6f 33 65 61 45 77 2d 71 6a 65 57 30 31 63 57 67 70 37 4e 71 58 79 49 47 57 30 67 33 46 52 65 75 5a 39 66 55 69 4d 75 57 78 71 6b 49 63 4a 73 5f 6f 55 52 45 34 38 57 33 30 51 79 5f 33 78 77 5a 47 51 69 77 52 31 6b 48 6a 72 74 4f 67 6d 4f 39 77 35 77 6b 75 72 44 48 55 55 34 30 35 4c 34 6b 55 38 55 70 67 4c 37 79 5f 67 61 32 46 5f 74 49 75 56 6d 35 59 77 35 Data Ascii: Rhttps://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5
2024-04-16 20:08:16 UTC	465	IN	HTTP/1.1 200 OK Content-Type: application/grpc-web+proto Grpc-Accept-Encoding: identity, deflate, gzip Date: Tue, 16 Apr 2024 20:08:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f0f8f8b884a649feb9405a1faea56197 Connection: close Transfer-Encoding: chunked
2024-04-16 20:08:16 UTC	41	IN	Data Raw: 35 0d 0a 00 00 00 00 00 0d 0a 31 34 0d 0a 80 00 00 00 0f 67 72 70 63 2d 73 74 61 74 75 73 3a 30 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 514grpc-status:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49759	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:16 UTC	1410	OUT	GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:16 UTC	4865	IN	HTTP/1.1 200 OK Content-Security-Policy: base-uri 'self' ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55njH0JCc=' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; font-src https://* data: ; img-src https://* data: blob: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; media-src https://* blob: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; default-src 'none' ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ Content-Security-Policy: script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55njH0JCc=' 'nonce-wD9EuzeCJzuBzi/zOUFgIZRXRtQ=' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8897cfc2bf474bc2b5440b4de5ca7d80 Connection: close Transfer-Encoding: chunked
2024-04-16 20:08:16 UTC	418	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a 34 31 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6d 61 67 65 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>19<meta charset="utf-8" />41<meta content="noindex, nofollow, noimageindex" name="robots" />47<meta content="width=device-widt
2024-04-16 20:08:16 UTC	1487	IN	Data Raw: 31 37 0d 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 3c 2f 74 69 74 6c 65 3e 0a 0d 0a 36 64 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 0a 0d 0a 63 38 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 63 63 70 61 5f 69 66 72 61 6d 65 2f 63 63 70 61 5f 69 66 Data Ascii: 17<title>Dropbox</title>6d<link rel="shortcut icon" href="https://cfl.dropboxstatic.com/static/metaserver/static/images/favicon.ico"/>c8<link rel="stylesheet" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/ccpa_iframe/ccpa_if
2024-04-16 20:08:16 UTC	1341	IN	Data Raw: 33 35 66 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 69 63 73 6e 79 57 4f 50 6f 47 55 36 47 4f 69 69 57 35 35 6e 6a 48 30 4a 43 63 3d 22 3e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 77 69 6e 64 6f 77 3b 6c 65 74 20 61 3b 63 6f 6e 73 74 20 72 3d 28 29 3d 3e 7b 61 3d 5b 5d 2c 65 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 3d 65 3d 3e 61 2e 70 75 73 68 28 65 29 2c 65 2e 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 65 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 28 28 29 3d 3e 65 2e 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 Data Ascii: 35f<script nonce="XicsnyWOPoGU6GOiiW55njH0JCc=">(()=>{"use strict";const e=window;let a;const r=()=>{a=[],e.addRequireLoadCallback=e=>a.push(e),e.configureRequire=function(){const a=arguments;e.addRequireLoadCallback((()=>e.configureRequire.apply(null,a
2024-04-16 20:08:16 UTC	4115	IN	Data Raw: 36 0d 0a 3c 62 6f 64 79 3e 0d 0a 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 69 63 73 6e 79 57 4f 50 6f 47 55 36 47 4f 69 69 57 35 35 6e 6a 48 30 4a 43 63 3d 22 3e 77 69 6e 64 6f 77 2e 52 55 4e 4e 49 4e 47 5f 49 4e 5f 45 44 49 53 4f 4e 20 3d 20 74 72 75 65 3b 0a 77 69 6e 64 6f 77 2e 5f 5f 53 45 52 56 45 44 5f 42 59 5f 45 44 49 53 4f 4e 5f 57 45 42 5f 53 45 52 56 45 52 5f 5f 20 3d 20 74 72 75 65 3b 0a 76 61 72 20 72 65 71 75 69 72 65 43 6f 6e 66 69 67 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 22 2c 20 22 77 61 69 74 53 65 63 6f 6e 64 73 22 3a 20 33 30 2c 20 22 70 61 74 68 73 22 3a 20 7b 22 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e Data Ascii: 6<body>1000<script nonce="XicsnyWOPoGU6GOiiW55njH0JCc=">window.RUNNING_IN_EDISON = true;window.__SERVED_BY_EDISON_WEB_SERVER__ = true;var requireConfig = {"baseUrl": "https://cfl.dropboxstatic.com/", "waitSeconds": 30, "paths": {"atlas/privacy_con
2024-04-16 20:08:17 UTC	7418	IN	Data Raw: 31 63 66 32 0d 0a 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 2d 76 66 6c 61 5a 6b 51 4f 42 22 2c 20 22 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 5f 65 64 69 73 6f 6e 5f 72 65 61 63 74 5f 70 61 67 65 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f Data Ascii: 1cf2pa_iframe_bundle_amd/dist/e_edison": "static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison-vflaZkQOB", "atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison_edison_react_page": "static/atlas/privacy_consent/ccpa_iframe_bundle_amd/
2024-04-16 20:08:17 UTC	6310	IN	Data Raw: 62 34 34 0d 0a 3b 0a 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 28 72 65 71 75 69 72 65 43 6f 6e 66 69 67 2c 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6e 74 72 79 4f 70 74 69 6f 6e 73 3a 20 7b 22 72 65 6c 65 61 73 65 22 3a 22 37 64 39 63 38 65 39 31 64 63 34 36 62 66 36 66 62 61 66 37 37 39 37 35 38 36 35 61 32 62 38 62 62 39 31 64 61 37 66 63 22 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 74 61 67 73 22 3a 7b 22 65 64 69 73 6f 6e 5f 70 61 67 65 5f 6e 61 6d 65 22 3a 22 63 63 70 61 5f 69 66 72 61 6d 65 22 2c 22 62 72 6f 77 73 65 72 5f 69 64 22 3a 22 32 30 38 34 33 39 39 Data Ascii: b44;window.addRequireLoadCallback(function() { window.configureRequire(requireConfig, { sentryOptions: {"release":"7d9c8e91dc46bf6fbaf77975865a2b8bb91da7fc","environment":"prod","tags":{"edison_page_name":"ccpa_iframe","browser_id":"2084399
2024-04-16 20:08:17 UTC	545	IN	Data Raw: 32 31 61 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 69 63 73 6e 79 57 4f 50 6f 47 55 36 47 4f 69 69 57 35 35 6e 6a 48 30 4a 43 63 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 44 61 74 61 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 73 74 61 6e 74 73 2f Data Ascii: 21a<script nonce="XicsnyWOPoGU6GOiiW55njH0JCc=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedDataModule("metaserver/static/js/modules/constants/
2024-04-16 20:08:17 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 69 63 73 6e 79 57 4f 50 6f 47 55 36 47 4f 69 69 57 35 35 6e 6a 48 30 4a 43 63 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 6f 41 46 43 69 5a 31 65 46 39 68 62 6d 46 73 65 58 52 70 59 33 4d 75 56 58 68 42 62 6d 46 73 65 58 52 70 59 33 4e 46 Data Ascii: 1000<script nonce="XicsnyWOPoGU6GOiiW55njH0JCc=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EoAFCiZ1eF9hbmFseXRpY3MuVXhBbmFseXRpY3NF
2024-04-16 20:08:17 UTC	4120	IN	Data Raw: 31 30 30 30 0d 0a 74 58 32 64 6a 62 47 6c 6b 49 69 77 67 49 6e 42 68 63 6d 46 74 58 32 74 33 49 69 77 67 49 6e 42 68 63 6d 46 74 58 32 31 7a 59 32 78 72 61 57 51 69 4c 43 41 69 63 47 46 79 59 57 31 66 62 6d 56 30 49 69 77 67 49 6e 42 68 63 6d 46 74 58 32 39 78 59 53 49 73 49 43 4a 77 59 58 4a 68 62 56 39 30 5a 6d 38 69 4c 43 41 69 63 47 46 79 59 57 31 66 64 47 73 69 4c 43 41 69 63 47 46 79 59 57 31 66 64 48 4a 70 5a 32 64 6c 63 69 49 73 49 43 4a 77 59 58 4a 68 62 56 39 31 64 47 31 66 59 32 46 74 63 47 46 70 5a 32 34 69 4c 43 41 69 63 47 46 79 59 57 31 66 64 58 52 74 58 32 4e 76 62 6e 52 6c 62 6e 51 69 4c 43 41 69 63 47 46 79 59 57 31 66 64 58 52 74 58 32 31 6c 5a 47 6c 31 62 53 49 73 49 43 4a 77 59 58 4a 68 62 56 39 31 64 47 31 66 63 32 39 31 63 6d 4e 6c Data Ascii: 1000tX2djbGlkIiwgInBhcmFtX2t3IiwgInBhcmFtX21zY2xraWQiLCAicGFyYW1fbmV0IiwgInBhcmFtX29xYSIsICJwYXJhbV90Zm8iLCAicGFyYW1fdGsiLCAicGFyYW1fdHJpZ2dlciIsICJwYXJhbV91dG1fY2FtcGFpZ24iLCAicGFyYW1fdXRtX2NvbnRlbnQiLCAicGFyYW1fdXRtX21lZGl1bSIsICJwYXJhbV91dG1fc291cmNl
2024-04-16 20:08:17 UTC	1590	IN	Data Raw: 34 34 33 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 69 63 73 6e 79 57 4f 50 6f 47 55 36 47 4f 69 69 57 35 35 6e 6a 48 30 4a 43 63 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 76 51 45 43 68 78 77 61 58 52 6f 62 33 4d 75 52 57 52 70 63 32 39 75 55 48 4a 6c 5a 6d 56 30 59 32 68 54 5a 58 4a 32 61 Data Ascii: 443<script nonce="XicsnyWOPoGU6GOiiW55njH0JCc=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EvQEChxwaXRob3MuRWRpc29uUHJlZmV0Y2hTZXJ2a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49762	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:16 UTC	888	OUT	GET /web-grpc/edison/prompt.PromptEdisonFetch/EdisonPromptPropsFetch HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:17 UTC	397	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Apr 2024 20:08:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c92d750b05674c378f4d0a82c3335f82 Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49770	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:17 UTC	1561	OUT	POST /2/auth_logger/log_auth_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 385 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: ReUI7oB54eFRG9-sGlJXBmCx X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:17 UTC	385	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 77 65 62 5f 73 69 67 6e 75 70 5f 69 6e 74 65 6e 74 22 7d 2c 22 65 76 65 6e 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 2f 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 3f 6f 72 65 66 3d 65 26 72 3d 41 43 4c 64 70 62 6a 73 71 51 4c 34 41 5f 33 67 37 44 71 59 6e 4f 55 69 64 6a 48 34 55 4c 32 61 5f 4e 54 54 52 69 68 2d 49 71 4b 66 6f 33 65 61 45 77 2d 71 6a 65 57 30 31 63 57 67 70 37 4e 71 58 79 49 47 57 30 67 33 46 52 65 75 5a 39 66 55 69 4d 75 57 78 71 6b 49 63 4a 73 5f 6f 55 52 45 34 38 57 33 30 51 79 5f 33 78 77 5a 47 51 69 77 52 31 6b 48 6a 72 74 4f Data Ascii: {"event_name":{".tag":"web_signup_intent"},"event_url":"https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtO
2024-04-16 20:08:17 UTC	637	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Disposition: attachment; filename=unspecified Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 13 X-Webkit-Csp: sandbox Date: Tue, 16 Apr 2024 20:08:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 4 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 154ea0961e634770bdfea95ca82d8ce8 Connection: close
2024-04-16 20:08:17 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49773	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:17 UTC	1580	OUT	POST /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 252 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: ReUI7oB54eFRG9-sGlJXBmCx X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:17 UTC	252	OUT	Data Raw: 7b 22 63 61 6d 70 61 69 67 6e 5f 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 67 65 22 3a 22 22 2c 22 70 61 74 68 22 3a 22 2f 73 63 6c 2f 66 69 2f 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 2f 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 22 7d 2c 22 65 76 65 6e 74 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 70 61 67 65 5f 70 61 74 68 22 3a 22 2f 73 63 6c 2f 66 69 2f 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 2f 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 22 7d 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 6c 6f 61 64 5f 6d 65 74 68 6f 64 22 3a 22 65 64 69 73 6f 6e 22 2c 22 6f 72 63 68 65 73 74 72 61 74 69 6f 6e 5f 73 74 61 74 65 22 3a 7b 22 63 61 6d 70 61 69 67 6e 73 5f 73 68 6f 77 6e 22 3a 5b 5d 7d 7d Data Ascii: {"campaign_properties":{"page":"","path":"/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf"},"event_context":{"page_path":"/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf"},"locale":"en","load_method":"edison","orchestration_state":{"campaigns_shown":[]}}
2024-04-16 20:08:17 UTC	595	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 128 X-Webkit-Csp: sandbox Content-Length: 141 Date: Tue, 16 Apr 2024 20:08:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 038bec3729864022820c7811ebe06233 Connection: close
2024-04-16 20:08:17 UTC	141	IN	Data Raw: 7b 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 5d 2c 22 63 61 6d 70 61 69 67 6e 73 5f 72 65 73 75 6c 74 22 3a 7b 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 5d 2c 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 30 33 38 62 65 63 33 37 32 39 38 36 34 30 32 32 38 32 30 63 37 38 31 31 65 62 65 30 36 32 33 33 22 2c 22 76 61 6c 69 64 5f 66 6f 72 22 3a 33 36 30 30 7d 2c 22 63 61 6d 70 61 69 67 6e 73 5f 74 6f 5f 73 6c 6f 74 73 22 3a 7b 7d 7d Data Ascii: {"campaigns":[],"campaigns_result":{"campaigns":[],"request_id":"038bec3729864022820c7811ebe06233","valid_for":3600},"campaigns_to_slots":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49779	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:17 UTC	1488	OUT	POST /jse HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1806 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:17 UTC	1806	OUT	Data Raw: 65 3d 55 6e 65 78 70 65 63 74 65 64 25 32 30 65 6e 64 25 32 30 6f 66 25 32 30 4a 53 4f 4e 25 32 30 69 6e 70 75 74 26 6c 6f 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 25 32 46 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 25 33 46 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 4c 64 70 62 6a 73 71 51 4c 34 41 5f 33 67 37 44 71 59 6e 4f 55 69 64 6a 48 34 55 4c 32 61 5f 4e 54 54 52 69 68 2d 49 71 4b 66 6f 33 65 61 45 77 2d 71 6a 65 57 30 31 63 57 67 70 37 4e 71 58 79 49 47 57 30 67 33 46 52 65 75 5a 39 66 55 69 4d 75 57 78 71 6b 49 63 4a 73 5f 6f 55 52 45 34 38 57 33 30 51 79 5f 33 78 77 5a 47 51 69 Data Ascii: e=Unexpected%20end%20of%20JSON%20input&loc=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Ft43c0einrh377rm9dtyva%2FInvoice-0786.pdf%3Foref%3De%26r%3DACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQi
2024-04-16 20:08:17 UTC	533	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 118 Date: Tue, 16 Apr 2024 20:08:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 187d569b68284080b2a35e4a51503c20 Connection: close
2024-04-16 20:08:17 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49784	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:17 UTC	1407	OUT	GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=8897cfc2bf474bc2b5440b4de5ca7d80&time=1713298096 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:18 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 0 Date: Tue, 16 Apr 2024 20:08:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 134ce8d453984f8e8bf75a8a288d1548 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49786	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:17 UTC	853	OUT	GET /2/auth_logger/log_auth_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:18 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Tue, 16 Apr 2024 20:08:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3dd69dfb1cdf4e5c86584e2065b501f5 Connection: close
2024-04-16 20:08:18 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49792	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:18 UTC	872	OUT	GET /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:18 UTC	411	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 140 Date: Tue, 16 Apr 2024 20:08:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 43e410d8f7fc4e08a4092d02e819ddd5 Connection: close
2024-04-16 20:08:18 UTC	140	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 61 6d 70 61 69 67 6e 73 5f 74 6f 6f 6c 6b 69 74 2f 67 65 74 5f 62 65 73 74 5f 63 61 6d 70 61 69 67 6e 73 5f 66 6f 72 5f 75 73 65 72 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "campaigns_toolkit/get_best_campaigns_for_user": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49796	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:18 UTC	828	OUT	GET /jse HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:18 UTC	531	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 3 Date: Tue, 16 Apr 2024 20:08:18 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ca8c5a1334c24826b0dbf38f393bb39a Connection: close
2024-04-16 20:08:18 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49802	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:18 UTC	1507	OUT	POST /sso_state HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 75 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:18 UTC	75	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 26 65 6d 61 69 6c 3d 61 63 63 6f 75 6e 74 73 70 61 79 61 62 6c 65 25 34 30 6f 6c 67 6f 6f 6e 69 6b 2e 63 6f 6d Data Ascii: is_xhr=true&t=ReUI7oB54eFRG9-sGlJXBmCx&email=accountspayable%40olgoonik.com
2024-04-16 20:08:19 UTC	1904	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 82 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:18 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 26 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f9db7312d1ff4211b87f31f86950e18e Connection: close
2024-04-16 20:08:19 UTC	26	IN	Data Raw: 7b 22 75 73 65 72 5f 73 73 6f 5f 73 74 61 74 65 22 3a 20 22 6e 6f 6e 65 22 7d Data Ascii: {"user_sso_state": "none"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49816	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:19 UTC	834	OUT	GET /sso_state HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:19 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Tue, 16 Apr 2024 20:08:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0ee750066ffd4294af98f6bb7b9d3146 Connection: close
2024-04-16 20:08:19 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49817	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:19 UTC	1570	OUT	POST /2/account/check_user_with_email_exists HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 40 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: ReUI7oB54eFRG9-sGlJXBmCx X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:19 UTC	40	OUT	Data Raw: 7b 22 65 6d 61 69 6c 22 3a 22 61 63 63 6f 75 6e 74 73 70 61 79 61 62 6c 65 40 6f 6c 67 6f 6f 6e 69 6b 2e 63 6f 6d 22 7d Data Ascii: {"email":"accountspayable@olgoonik.com"}
2024-04-16 20:08:19 UTC	638	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Disposition: attachment; filename=unspecified Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 38 X-Webkit-Csp: sandbox Date: Tue, 16 Apr 2024 20:08:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 17 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: fc994005df954435a418984ec3e969ee Connection: close
2024-04-16 20:08:19 UTC	17	IN	Data Raw: 7b 22 65 78 69 73 74 73 22 3a 20 66 61 6c 73 65 7d Data Ascii: {"exists": false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49821	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:19 UTC	1459	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1227 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryAOwsmrL834bnYs6g Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:19 UTC	1227	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 4f 77 73 6d 72 4c 38 33 34 62 6e 59 73 36 67 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 4f 77 73 6d 72 4c 38 33 34 62 6e 59 73 36 67 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 4f 77 73 6d 72 4c 38 33 34 62 6e 59 73 36 67 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryAOwsmrL834bnYs6gContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryAOwsmrL834bnYs6gContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundaryAOwsmrL834bnYs6gCont
2024-04-16 20:08:19 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 72c6fa854a17464fb018fa2e4f075a2f Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49828	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:20 UTC	2222	OUT	POST /web-grpc/edison/fingerprintjs.FingerPrintJSService/FetchConstants HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 665 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept-language: en x-edison-prompt-controller: shared_content_link x-edison-atlasservlet: file_viewer x-grpc-web: 1 x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" x-dropbox-browser-id: 9cd013c709769cbe945ef09bb321df58 x-user-agent: @bufbuild/connect-web x-dropbox-authority: www.dropbox.com x-edison-page-name: scl_invitation_signup sec-ch-ua-mobile: ?0 x-edison-prompt-action: shared_content_link_view_file_and_folder User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/grpc-web+proto x-edison-original-url: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:20 UTC	665	OUT	Data Raw: 00 00 00 02 94 52 c7 02 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 2f 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 3f 64 6c 3d 30 26 6f 72 65 66 3d 65 26 72 3d 41 43 4c 64 70 62 6a 73 71 51 4c 34 41 5f 33 67 37 44 71 59 6e 4f 55 69 64 6a 48 34 55 4c 32 61 5f 4e 54 54 52 69 68 2d 49 71 4b 66 6f 33 65 61 45 77 2d 71 6a 65 57 30 31 63 57 67 70 37 4e 71 58 79 49 47 57 30 67 33 46 52 65 75 5a 39 66 55 69 4d 75 57 78 71 6b 49 63 4a 73 5f 6f 55 52 45 34 38 57 33 30 51 79 5f 33 78 77 5a 47 51 69 77 52 31 6b 48 6a 72 74 4f 67 6d 4f 39 77 35 77 6b 75 72 44 48 55 55 34 30 35 4c 34 6b 55 38 55 70 67 4c 37 79 5f 67 61 32 46 5f 74 49 75 56 6d 35 59 77 35 Data Ascii: Rhttps://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?dl=0&oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5
2024-04-16 20:08:20 UTC	465	IN	HTTP/1.1 200 OK Content-Type: application/grpc-web+proto Grpc-Accept-Encoding: identity, deflate, gzip Date: Tue, 16 Apr 2024 20:08:20 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e4a9f8a0efc44fb18b8a7d93acfec66d Connection: close Transfer-Encoding: chunked
2024-04-16 20:08:20 UTC	39	IN	Data Raw: 32 31 0d 0a 00 00 00 00 1c 0a 14 68 53 72 67 56 45 6a 73 33 61 6d 78 4c 6f 6c 6f 63 51 31 38 10 01 1a 02 75 73 0d 0a Data Ascii: 21hSrgVEjs3amxLolocQ18us
2024-04-16 20:08:20 UTC	31	IN	Data Raw: 31 34 0d 0a 80 00 00 00 0f 67 72 70 63 2d 73 74 61 74 75 73 3a 30 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 14grpc-status:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49829	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:20 UTC	1564	OUT	POST /2/pap_event_logging/log_events HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 3099 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: ReUI7oB54eFRG9-sGlJXBmCx X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:20 UTC	3099	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 65 6e 74 72 69 65 73 22 3a 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 5f 66 69 65 6c 64 73 22 3a 7b 22 62 75 69 6c 64 5f 63 68 61 6e 6e 65 6c 22 3a 7b 22 2e 74 61 67 22 3a 22 73 74 61 62 6c 65 22 7d 2c 22 70 72 6f 64 75 63 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 63 6f 72 65 5f 64 72 6f 70 62 6f 78 22 7d 7d 2c 22 64 65 76 69 63 65 5f 66 69 65 6c 64 73 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 70 6c 61 74 66 6f 72 6d 5f 66 69 65 6c 64 73 22 3a 7b 22 2e 74 61 67 22 3a 22 63 6c 69 65 6e 74 5f 77 65 62 5f 64 65 76 69 63 65 5f 66 69 65 6c 64 73 22 2c 22 75 61 5f 62 72 6f 77 73 65 72 5f 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 69 73 5f 62 72 5f 63 6f 6f 6b 69 65 73 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 Data Ascii: {"event_entries":{"application_fields":{"build_channel":{".tag":"stable"},"product_name":{".tag":"core_dropbox"}},"device_fields":{"locale":"en-US","platform_fields":{".tag":"client_web_device_fields","ua_browser_lang":"en-US","is_br_cookies_enabled":true
2024-04-16 20:08:20 UTC	571	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 107 X-Webkit-Csp: sandbox Content-Length: 17 Date: Tue, 16 Apr 2024 20:08:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 64f2efa6b3d4476fa418439b24c1e75d Connection: close
2024-04-16 20:08:20 UTC	17	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 74 72 75 65 22 7d Data Ascii: {"result":"true"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49830	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:20 UTC	863	OUT	GET /2/account/check_user_with_email_exists HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:20 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Tue, 16 Apr 2024 20:08:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5a52b9499d664f4c9b21e538a5cd805d Connection: close
2024-04-16 20:08:20 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49832	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:20 UTC	1459	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1171 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary5qSv8x4PUe5ZlmKz Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:20 UTC	1171	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 35 71 53 76 38 78 34 50 55 65 35 5a 6c 6d 4b 7a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 35 71 53 76 38 78 34 50 55 65 35 5a 6c 6d 4b 7a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 35 71 53 76 38 78 34 50 55 65 35 5a 6c 6d 4b 7a 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary5qSv8x4PUe5ZlmKzContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary5qSv8x4PUe5ZlmKzContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundary5qSv8x4PUe5ZlmKzCont
2024-04-16 20:08:20 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 20 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:20 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 204ef303b8bf4bbcb16bfbbb1c85f9de Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49833	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:20 UTC	1459	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1435 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryxTzYRsSKeQCVBiVp Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:20 UTC	1435	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 78 54 7a 59 52 73 53 4b 65 51 43 56 42 69 56 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 78 54 7a 59 52 73 53 4b 65 51 43 56 42 69 56 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 78 54 7a 59 52 73 53 4b 65 51 43 56 42 69 56 70 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryxTzYRsSKeQCVBiVpContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryxTzYRsSKeQCVBiVpContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundaryxTzYRsSKeQCVBiVpCont
2024-04-16 20:08:20 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 30 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:20 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1de5093b498b452788f36658042ba880 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49837	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:20 UTC	1459	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1177 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarysRyFkB2GY3axihjK Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:20 UTC	1177	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 73 52 79 46 6b 42 32 47 59 33 61 78 69 68 6a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 73 52 79 46 6b 42 32 47 59 33 61 78 69 68 6a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 73 52 79 46 6b 42 32 47 59 33 61 78 69 68 6a 4b 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarysRyFkB2GY3axihjKContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarysRyFkB2GY3axihjKContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundarysRyFkB2GY3axihjKCont
2024-04-16 20:08:20 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 13 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:20 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6862411afb4148fe95138163161dd409 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49844	18.165.116.50	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:20 UTC	590	OUT	GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1 Host: fp.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:08:20 UTC	741	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Length: 96 Connection: close Date: Tue, 16 Apr 2024 20:08:20 GMT Cache-Control: max-age=31536000, immutable, private Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex X-Cache: Miss from cloudfront Via: 1.1 9991dee74df517ccd6f97b8bb475fe4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: 8dPsV7mfxDo860dAdXcNUr6QI8KF4eXAv15kjxeo9TBWvCsGNmIEOA== Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Vary: Origin
2024-04-16 20:08:20 UTC	96	IN	Data Raw: 37 6d 68 6e 56 71 33 6e 35 57 51 38 59 33 79 49 51 4c 4c 5a 46 65 2b 58 64 72 6a 52 7a 52 5a 33 50 66 48 66 2f 45 62 30 51 33 39 50 77 68 75 44 32 6c 6d 45 2b 6f 48 6c 6c 50 4f 4a 70 6f 6e 72 74 63 71 45 2b 74 34 68 52 4b 74 46 49 78 6e 67 46 53 62 5a 75 34 47 6e 78 4e 4f 50 77 51 3d 3d Data Ascii: 7mhnVq3n5WQ8Y3yIQLLZFe+XdrjRzRZ3PfHf/Eb0Q39PwhuD2lmE+oHllPOJponrtcqE+t4hRKtFIxngFSbZu4GnxNOPwQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49849	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:20 UTC	855	OUT	GET /2/pap_event_logging/log_events HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:20 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 123 Date: Tue, 16 Apr 2024 20:08:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 225cbd27010a4e77a21acc5e106966d9 Connection: close
2024-04-16 20:08:20 UTC	123	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 70 61 70 5f 65 76 65 6e 74 5f 6c 6f 67 67 69 6e 67 2f 6c 6f 67 5f 65 76 65 6e 74 73 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "pap_event_logging/log_events": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49850	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:20 UTC	890	OUT	GET /web-grpc/edison/fingerprintjs.FingerPrintJSService/FetchConstants HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:21 UTC	397	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Apr 2024 20:08:20 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f1f630910e434c50ad5a00dd70a5600f Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49851	18.165.116.52	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:20 UTC	434	OUT	GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1 Host: fp.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=ReUI7oB54eFRG9-sGlJXBmCx; locale=en
2024-04-16 20:08:21 UTC	647	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Length: 96 Connection: close Date: Tue, 16 Apr 2024 20:08:20 GMT Cache-Control: max-age=31536000, immutable, private Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex X-Cache: Miss from cloudfront Via: 1.1 c735e59ec25449beec4868052527263c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: yhuvMMew4pZTuExeNhUCLUtKS3zbJ6i9EWYiVrK2W77lx8NVzTlzWg== Vary: Origin
2024-04-16 20:08:21 UTC	96	IN	Data Raw: 32 66 63 72 61 52 71 50 7a 41 46 41 6e 44 71 63 79 4a 2b 39 49 6c 6d 6b 62 67 32 4d 61 56 39 6a 2f 69 54 45 4b 31 75 46 63 54 57 7a 58 53 47 47 47 4b 76 34 4c 33 46 33 6b 77 35 48 31 4f 30 72 4a 72 77 6a 47 45 30 5a 78 35 2f 62 68 4e 34 52 4a 75 67 70 6f 58 64 48 38 45 57 31 75 77 3d 3d Data Ascii: 2fcraRqPzAFAnDqcyJ+9Ilmkbg2MaV9j/iTEK1uFcTWzXSGGGKv4L3F3kw5H1O0rJrwjGE0Zx5/bhN4RJugpoXdH8EW1uw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49853	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:21 UTC	1459	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1189 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryY4kGCInlmWiwXAc0 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:21 UTC	1189	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 59 34 6b 47 43 49 6e 6c 6d 57 69 77 58 41 63 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 59 34 6b 47 43 49 6e 6c 6d 57 69 77 58 41 63 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 59 34 6b 47 43 49 6e 6c 6d 57 69 77 58 41 63 30 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryY4kGCInlmWiwXAc0Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryY4kGCInlmWiwXAc0Content-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundaryY4kGCInlmWiwXAc0Cont
2024-04-16 20:08:22 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:21 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cee37f1f7579420998a0a5aae779435a Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49855	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:23 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=VmfxbbkHsZ7DPxc&MD=osDo5xyD HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-16 20:08:23 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 7f61b081-5bb9-4e44-ad05-a536794e1a30 MS-RequestId: 5133c51c-31d0-4c64-9639-bf165eb7c2e1 MS-CV: 60T0MTbhx0W3LO1z.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 20:08:22 GMT Connection: close Content-Length: 24490
2024-04-16 20:08:23 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-16 20:08:23 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49857	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:25 UTC	1498	OUT	POST /log/telemetry HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 2212 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:25 UTC	2212	OUT	Data Raw: 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 31 26 62 61 74 63 68 65 73 3d 25 37 42 25 32 32 68 69 76 65 25 33 41 77 65 62 2d 6f 72 63 68 65 73 74 72 61 74 69 6f 6e 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 73 25 32 32 25 33 41 25 32 32 25 35 42 25 37 42 25 35 43 25 32 32 63 61 74 65 67 6f 72 79 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 2d 6f 72 63 68 65 73 74 72 61 74 69 6f 6e 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 73 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 73 65 72 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 61 63 74 69 6f 6e 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 70 61 67 65 2d 6c 6f 61 64 65 64 25 35 43 25 32 Data Ascii: data-version=1&batches=%7B%22hive%3Aweb-orchestration_client_events%22%3A%22%5B%7B%5C%22category%5C%22%3A%5C%22web-orchestration_client_events%5C%22%2C%5C%22user_id%5C%22%3Anull%2C%5C%22session_id%5C%22%3Anull%2C%5C%22action%5C%22%3A%5C%22page-loaded%5C%2
2024-04-16 20:08:25 UTC	2675	IN	HTTP/1.1 204 No Content Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8e5e09b2604d49cab0fd00d606fc48e4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49860	64.233.177.106	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:25 UTC	679	OUT	GET /recaptcha/api.js?hl=en&onload=recaptchaOnloadCallback&render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:08:25 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 16 Apr 2024 20:08:25 GMT Date: Tue, 16 Apr 2024 20:08:25 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 20:08:25 UTC	727	IN	Data Raw: 35 30 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 50a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-16 20:08:25 UTC	570	IN	Data Raw: 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a Data Ascii: ZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.j
2024-04-16 20:08:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49858	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:25 UTC	1275	OUT	GET /pithos/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:25 UTC	755	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 178 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 61538d4b5be44780909a10457d830789 Connection: close
2024-04-16 20:08:25 UTC	178	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 61 70 69 5f 68 65 6c 70 65 72 5f 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49861	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:25 UTC	1459	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1189 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryXB0d8lU9UNp5Y5K0 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB
2024-04-16 20:08:25 UTC	1189	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 58 42 30 64 38 6c 55 39 55 4e 70 35 59 35 4b 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 58 42 30 64 38 6c 55 39 55 4e 70 35 59 35 4b 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 58 42 30 64 38 6c 55 39 55 4e 70 35 59 35 4b 30 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryXB0d8lU9UNp5Y5K0Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryXB0d8lU9UNp5Y5K0Content-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundaryXB0d8lU9UNp5Y5K0Cont
2024-04-16 20:08:25 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 16 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d4efe4fae4d642f5adf1e4a96078ff10 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49865	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:26 UTC	1488	OUT	GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:26 UTC	2653	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7739 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7f3ea6a2330746d7b0a9e1021a670299 Connection: close
2024-04-16 20:08:26 UTC	7739	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49866	18.160.48.194	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:26 UTC	700	OUT	GET / HTTP/1.1 Host: dropboxcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:08:26 UTC	458	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 267 Connection: close Last-Modified: Wed, 04 May 2022 22:21:08 GMT Server: AmazonS3 Date: Mon, 15 Apr 2024 20:55:40 GMT ETag: "00f53700c90a2edf60a83c7c3b959710" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 96cac0ffcf3fb8fed4b2230b5bdeca6c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P2 X-Amz-Cf-Id: ldO25x6E7mwRYc1xXZIjBny8iDslC-Jsb4xRQDYUNUFJHOovG0iLuw== Age: 83567
2024-04-16 20:08:26 UTC	267	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 20 30 70 78 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 66 75 6e 63 61 70 74 63 68 61 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f Data Ascii: <html> <head> <meta charset="utf-8"> <meta content="IE=edge" http-equiv="X-UA-Compatible"> <title>DropboxCaptcha</title> </head> <body style="margin: 0px"> <script type="text/javascript" src="funcaptcha.js"></script></bo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49870	18.160.48.194	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:26 UTC	534	OUT	GET /funcaptcha.js HTTP/1.1 Host: dropboxcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dropboxcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:08:27 UTC	472	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2102 Connection: close Date: Tue, 16 Apr 2024 13:05:27 GMT Last-Modified: Wed, 04 May 2022 22:21:08 GMT ETag: "fff8e4c34d574be9ac43718ee5accd9e" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9b00405a1ff669043791884b75822050.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P2 X-Amz-Cf-Id: hOjoSp0KfTBjCd_jxj0XPpRVT4NIGIrcyxJMzUyQ-euVIlH3SiUn_A== Age: 25381
2024-04-16 20:08:27 UTC	2102	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 29 7b 69 66 28 6e 5b 6f 5d 29 72 65 74 75 72 6e 20 6e 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 6e 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 74 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 74 2e 6f 28 65 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6f 7d 29 7d 2c 74 2e 72 3d 66 75 6e Data Ascii: !function(e){var n={};function t(o){if(n[o])return n[o].exports;var a=n[o]={i:o,l:!1,exports:{}};return e[o].call(a.exports,a,a.exports,t),a.l=!0,a.exports}t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})},t.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49871	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:27 UTC	1563	OUT	POST /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:27 UTC	2943	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:27 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3aeb443e9dad4e5cbd33733cab79882e Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49872	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:27 UTC	1754	OUT	POST /2/pap_event_logging/log_events HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1223 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: ReUI7oB54eFRG9-sGlJXBmCx X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:27 UTC	1223	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 65 6e 74 72 69 65 73 22 3a 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 5f 66 69 65 6c 64 73 22 3a 7b 22 62 75 69 6c 64 5f 63 68 61 6e 6e 65 6c 22 3a 7b 22 2e 74 61 67 22 3a 22 73 74 61 62 6c 65 22 7d 2c 22 70 72 6f 64 75 63 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 63 6f 72 65 5f 64 72 6f 70 62 6f 78 22 7d 7d 2c 22 64 65 76 69 63 65 5f 66 69 65 6c 64 73 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 70 6c 61 74 66 6f 72 6d 5f 66 69 65 6c 64 73 22 3a 7b 22 2e 74 61 67 22 3a 22 63 6c 69 65 6e 74 5f 77 65 62 5f 64 65 76 69 63 65 5f 66 69 65 6c 64 73 22 2c 22 75 61 5f 62 72 6f 77 73 65 72 5f 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 69 73 5f 62 72 5f 63 6f 6f 6b 69 65 73 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 Data Ascii: {"event_entries":{"application_fields":{"build_channel":{".tag":"stable"},"product_name":{".tag":"core_dropbox"}},"device_fields":{"locale":"en-US","platform_fields":{".tag":"client_web_device_fields","ua_browser_lang":"en-US","is_br_cookies_enabled":true
2024-04-16 20:08:27 UTC	571	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 168 X-Webkit-Csp: sandbox Content-Length: 17 Date: Tue, 16 Apr 2024 20:08:27 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7e8e60838ce84ab797d35882ccdbbd67 Connection: close
2024-04-16 20:08:27 UTC	17	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 74 72 75 65 22 7d Data Ascii: {"result":"true"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49878	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:27 UTC	1678	OUT	POST /jse HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 2893 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:27 UTC	2893	OUT	Data Raw: 65 3d 50 72 69 76 61 63 79 25 32 30 63 6f 6e 73 65 6e 74 25 32 30 6d 6f 64 75 6c 65 25 32 30 69 73 25 32 30 6e 6f 74 25 32 30 76 69 73 69 62 6c 65 25 32 30 6f 6e 25 32 30 70 61 67 65 25 32 30 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 25 32 46 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 26 6c 6f 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 25 32 46 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 25 33 46 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 4c 64 70 62 6a 73 71 51 4c 34 41 5f 33 67 37 44 71 59 6e 4f 55 69 64 6a 48 34 55 4c 32 Data Ascii: e=Privacy%20consent%20module%20is%20not%20visible%20on%20page%20%2Fscl%2Ffi%2Ft43c0einrh377rm9dtyva%2FInvoice-0786.pdf&loc=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Ft43c0einrh377rm9dtyva%2FInvoice-0786.pdf%3Foref%3De%26r%3DACLdpbjsqQL4A_3g7DqYnOUidjH4UL2
2024-04-16 20:08:28 UTC	532	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 13 Date: Tue, 16 Apr 2024 20:08:27 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 76792f247c004272ad08903596535574 Connection: close
2024-04-16 20:08:28 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49873	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:27 UTC	1043	OUT	GET /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:28 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Tue, 16 Apr 2024 20:08:27 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3320c6c4a7964f9ca3f988ceec3ea74a Connection: close
2024-04-16 20:08:28 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49874	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:27 UTC	1712	OUT	POST /alternate_wtl_browser_performance_info HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 714 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:27 UTC	714	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 39 34 39 37 33 39 32 37 33 32 38 66 34 38 62 63 39 30 66 33 61 38 36 65 63 63 62 33 61 66 30 66 26 72 65 66 65 72 72 65 72 3d 26 6e 61 76 69 67 61 74 69 6f 6e 5f 73 74 61 72 74 3d 31 37 31 33 32 39 38 30 38 38 34 37 36 26 75 6e 6c 6f 61 64 5f 65 76 65 6e 74 5f 73 74 61 72 74 3d 30 26 75 6e 6c 6f 61 64 5f 65 76 65 6e 74 5f 65 6e 64 3d 30 26 72 65 64 69 72 65 63 74 5f 73 74 61 72 74 3d 31 37 31 33 32 39 38 30 38 38 34 39 34 26 72 65 64 69 72 65 63 74 5f 65 6e 64 3d 31 37 31 33 32 39 38 30 38 39 35 37 36 26 66 65 74 63 68 5f 73 74 61 72 74 3d 31 37 31 33 32 39 38 30 38 39 35 37 36 26 64 6f 6d 61 69 6e 5f 6c 6f 6f 6b 75 70 5f 73 74 61 72 74 3d 31 37 31 33 32 39 38 30 38 39 35 37 37 26 64 6f 6d 61 69 6e 5f 6c 6f 6f 6b 75 70 5f Data Ascii: request_id=94973927328f48bc90f3a86eccb3af0f&referrer=&navigation_start=1713298088476&unload_event_start=0&unload_event_end=0&redirect_start=1713298088494&redirect_end=1713298089576&fetch_start=1713298089576&domain_lookup_start=1713298089577&domain_lookup_
2024-04-16 20:08:28 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 16 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:27 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 406f5281d08f4877a4bc5b217355380d Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49876	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:27 UTC	1688	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 808 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:27 UTC	808	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 39 34 39 37 33 39 32 37 33 32 38 66 34 38 62 63 39 30 66 33 61 38 36 65 63 63 62 33 61 66 30 66 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 25 32 46 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 25 33 46 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 4c 64 70 62 6a 73 71 51 4c 34 41 5f 33 67 37 44 71 59 6e 4f 55 69 64 6a 48 34 55 4c 32 61 5f 4e 54 54 52 69 68 2d 49 71 4b 66 6f 33 65 61 45 77 2d 71 6a 65 57 30 31 63 57 67 70 37 4e 71 58 79 49 47 57 30 67 33 46 52 65 75 5a 39 66 55 69 4d 75 57 78 71 6b 49 63 4a 73 5f 6f 55 52 45 34 38 57 33 30 51 79 5f 33 78 Data Ascii: request_id=94973927328f48bc90f3a86eccb3af0f&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Ft43c0einrh377rm9dtyva%2FInvoice-0786.pdf%3Foref%3De%26r%3DACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3x
2024-04-16 20:08:28 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 11 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: dccd346f252e4db4adbbd9e7f193f09c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49875	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:27 UTC	1689	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 6191 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:27 UTC	6191	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 39 34 39 37 33 39 32 37 33 32 38 66 34 38 62 63 39 30 66 33 61 38 36 65 63 63 62 33 61 66 30 66 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 25 32 46 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 25 33 46 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 4c 64 70 62 6a 73 71 51 4c 34 41 5f 33 67 37 44 71 59 6e 4f 55 69 64 6a 48 34 55 4c 32 61 5f 4e 54 54 52 69 68 2d 49 71 4b 66 6f 33 65 61 45 77 2d 71 6a 65 57 30 31 63 57 67 70 37 4e 71 58 79 49 47 57 30 67 33 46 52 65 75 5a 39 66 55 69 4d 75 57 78 71 6b 49 63 4a 73 5f 6f 55 52 45 34 38 57 33 30 51 79 5f 33 78 Data Ascii: request_id=94973927328f48bc90f3a86eccb3af0f&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Ft43c0einrh377rm9dtyva%2FInvoice-0786.pdf%3Foref%3De%26r%3DACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3x
2024-04-16 20:08:28 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 01ba4d1aafab4a5981a263257ca63084 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49877	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:27 UTC	1690	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 28444 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:27 UTC	16384	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 39 34 39 37 33 39 32 37 33 32 38 66 34 38 62 63 39 30 66 33 61 38 36 65 63 63 62 33 61 66 30 66 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 25 32 46 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 25 33 46 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 4c 64 70 62 6a 73 71 51 4c 34 41 5f 33 67 37 44 71 59 6e 4f 55 69 64 6a 48 34 55 4c 32 61 5f 4e 54 54 52 69 68 2d 49 71 4b 66 6f 33 65 61 45 77 2d 71 6a 65 57 30 31 63 57 67 70 37 4e 71 58 79 49 47 57 30 67 33 46 52 65 75 5a 39 66 55 69 4d 75 57 78 71 6b 49 63 4a 73 5f 6f 55 52 45 34 38 57 33 30 51 79 5f 33 78 Data Ascii: request_id=94973927328f48bc90f3a86eccb3af0f&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Ft43c0einrh377rm9dtyva%2FInvoice-0786.pdf%3Foref%3De%26r%3DACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3x
2024-04-16 20:08:27 UTC	12060	OUT	Data Raw: 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 63 73 73 25 32 32 25 32 43 25 32 32 63 61 63 68 65 64 25 32 32 25 33 41 25 32 32 66 61 6c 73 65 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 32 25 37 44 25 32 43 25 32 32 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 73 69 67 6e 75 70 5f 73 69 67 6e 69 6e 25 32 46 75 6e 69 66 69 65 64 5f 73 75 73 69 25 32 46 75 6e 69 66 69 65 64 5f 73 75 73 69 2e 6d 6f 64 75 6c 65 2e 6f 75 74 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 73 69 67 6e 75 70 Data Ascii: ons%22%3A%7B%22type%22%3A%22css%22%2C%22cached%22%3A%22false%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A2%7D%2C%22metaserver%2Fstatic%2Fjs%2Fsignup_signin%2Funified_susi%2Funified_susi.module.out%22%3A%7B%22name%22%3A%22metaserver%2Fstatic%2Fjs%2Fsignup
2024-04-16 20:08:28 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: efa9e3ee2a254de19f23dbbe44c1485f Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	49881	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:27 UTC	1045	OUT	GET /2/pap_event_logging/log_events HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:28 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 123 Date: Tue, 16 Apr 2024 20:08:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e2ab03fb2cbf450da863e16789c2e28b Connection: close
2024-04-16 20:08:28 UTC	123	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 70 61 70 5f 65 76 65 6e 74 5f 6c 6f 67 67 69 6e 67 2f 6c 6f 67 5f 65 76 65 6e 74 73 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "pap_event_logging/log_events": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	49880	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:27 UTC	1688	OUT	POST /alternate_wtl HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 2105 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:27 UTC	2105	OUT	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 5f 74 79 70 65 3d 6e 61 76 69 67 61 74 65 26 73 65 72 76 65 72 5f 72 65 71 75 65 73 74 5f 73 74 61 72 74 5f 74 69 6d 65 3d 31 37 31 33 32 39 38 30 39 31 26 65 78 74 72 61 5f 63 6f 6c 75 6d 6e 73 3d 25 37 42 25 32 32 6c 6f 67 5f 73 6f 75 72 63 65 25 32 32 25 33 41 25 32 32 6c 6f 61 64 5f 65 6e 64 25 32 32 25 32 43 25 32 32 73 75 62 74 79 70 65 73 25 32 32 25 33 41 25 32 32 25 37 42 25 35 43 25 32 32 6e 75 6d 50 72 65 66 65 74 63 68 65 73 52 65 71 75 65 73 74 65 64 41 66 74 65 72 44 6f 6e 65 53 74 72 65 61 6d 69 6e 67 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 31 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 6e 75 6d 50 72 65 66 65 74 63 68 65 73 52 65 71 75 65 73 74 65 64 42 65 66 6f 72 65 44 6f 6e 65 53 74 72 65 61 6d 69 6e Data Ascii: navigation_type=navigate&server_request_start_time=1713298091&extra_columns=%7B%22log_source%22%3A%22load_end%22%2C%22subtypes%22%3A%22%7B%5C%22numPrefetchesRequestedAfterDoneStreaming%5C%22%3A%5C%221%5C%22%2C%5C%22numPrefetchesRequestedBeforeDoneStreamin
2024-04-16 20:08:28 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 71accd6e54a64dbab8a51ceb6f78d811 Connection: close
2024-04-16 20:08:28 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	49888	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:28 UTC	1018	OUT	GET /jse HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:28 UTC	531	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 4 Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4f8f8644292645f3888db83731d948e3 Connection: close
2024-04-16 20:08:28 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	49883	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:28 UTC	1689	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1447 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:28 UTC	1447	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 39 34 39 37 33 39 32 37 33 32 38 66 34 38 62 63 39 30 66 33 61 38 36 65 63 63 62 33 61 66 30 66 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 25 32 46 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 25 33 46 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 4c 64 70 62 6a 73 71 51 4c 34 41 5f 33 67 37 44 71 59 6e 4f 55 69 64 6a 48 34 55 4c 32 61 5f 4e 54 54 52 69 68 2d 49 71 4b 66 6f 33 65 61 45 77 2d 71 6a 65 57 30 31 63 57 67 70 37 4e 71 58 79 49 47 57 30 67 33 46 52 65 75 5a 39 66 55 69 4d 75 57 78 71 6b 49 63 4a 73 5f 6f 55 52 45 34 38 57 33 30 51 79 5f 33 78 Data Ascii: request_id=94973927328f48bc90f3a86eccb3af0f&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Ft43c0einrh377rm9dtyva%2FInvoice-0786.pdf%3Foref%3De%26r%3DACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3x
2024-04-16 20:08:28 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 24 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1e6cd864f3df44a6a7e53fe42eac512a Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.17	49884	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:28 UTC	1053	OUT	GET /alternate_wtl_browser_performance_info HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:28 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a53b67a944504dc29b0ffcb56520cdbf Connection: close
2024-04-16 20:08:28 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	49886	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:28 UTC	1029	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:28 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 17701f1a2c3e4c9b8c722e513d3fd923 Connection: close
2024-04-16 20:08:28 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.17	49885	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:28 UTC	1649	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1209 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryhCUrwGsxCXa00Mn5 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:28 UTC	1209	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 68 43 55 72 77 47 73 78 43 58 61 30 30 4d 6e 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 68 43 55 72 77 47 73 78 43 58 61 30 30 4d 6e 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 68 43 55 72 77 47 73 78 43 58 61 30 30 4d 6e 35 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryhCUrwGsxCXa00Mn5Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryhCUrwGsxCXa00Mn5Content-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundaryhCUrwGsxCXa00Mn5Cont
2024-04-16 20:08:28 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 16 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: bf50954551cf48ba9e974c1e99660edc Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.17	49887	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:28 UTC	1649	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1170 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarygPyGuALXnDXrrXun Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:28 UTC	1170	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 67 50 79 47 75 41 4c 58 6e 44 58 72 72 58 75 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 67 50 79 47 75 41 4c 58 6e 44 58 72 72 58 75 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 67 50 79 47 75 41 4c 58 6e 44 58 72 72 58 75 6e 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarygPyGuALXnDXrrXunContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarygPyGuALXnDXrrXunContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundarygPyGuALXnDXrrXunCont
2024-04-16 20:08:28 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 32 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 285887d88e9945f3b6968ea6fe5e0bb4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.17	49889	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:28 UTC	1028	OUT	GET /alternate_wtl HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:28 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 51d3485c78704030a8efca8662f52437 Connection: close
2024-04-16 20:08:28 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.17	49891	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:29 UTC	1029	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:29 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Tue, 16 Apr 2024 20:08:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: dfb90949983945d5b7557ddf41d579f2 Connection: close
2024-04-16 20:08:29 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.17	49892	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:29 UTC	1800	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1191 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarym1EdAmGBjW7IXNFP Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:29 UTC	1191	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6d 31 45 64 41 6d 47 42 6a 57 37 49 58 4e 46 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6d 31 45 64 41 6d 47 42 6a 57 37 49 58 4e 46 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6d 31 45 64 41 6d 47 42 6a 57 37 49 58 4e 46 50 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarym1EdAmGBjW7IXNFPContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarym1EdAmGBjW7IXNFPContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundarym1EdAmGBjW7IXNFPCont
2024-04-16 20:08:30 UTC	3007	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 233 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:29 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3bea8f6cd8aa4ca69d04cc34860fbf15 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.17	49893	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:29 UTC	1029	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:23.898Z","expireDate":"2024-10-16T20:08:23.898Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-16 20:08:29 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Tue, 16 Apr 2024 20:08:29 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b48fa8801d2a46e390e2298315a46b01 Connection: close
2024-04-16 20:08:29 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.17	49894	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:30 UTC	1180	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:30 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Tue, 16 Apr 2024 20:08:30 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 98edb8971b374203ba4e879deaf767df Connection: close
2024-04-16 20:08:30 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.17	49895	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:30 UTC	1838	OUT	POST /log/telemetry HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 854 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:30 UTC	854	OUT	Data Raw: 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 31 26 62 61 74 63 68 65 73 3d 25 37 42 25 32 32 68 69 76 65 25 33 41 77 65 62 2d 74 69 6d 65 5f 74 6f 5f 66 69 72 73 74 5f 62 79 74 65 25 32 32 25 33 41 25 32 32 25 35 42 25 37 42 25 35 43 25 32 32 63 61 74 65 67 6f 72 79 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 2d 74 69 6d 65 5f 74 6f 5f 66 69 72 73 74 5f 62 79 74 65 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 73 65 72 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 63 6f 75 6e 74 72 79 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 72 65 66 65 72 72 65 72 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 Data Ascii: data-version=1&batches=%7B%22hive%3Aweb-time_to_first_byte%22%3A%22%5B%7B%5C%22category%5C%22%3A%5C%22web-time_to_first_byte%5C%22%2C%5C%22user_id%5C%22%3Anull%2C%5C%22country%5C%22%3Anull%2C%5C%22referrer%5C%22%3Anull%2C%5C%22session_id%5C%22%3Anull%2C%5
2024-04-16 20:08:30 UTC	2675	IN	HTTP/1.1 204 No Content Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:30 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 299b566abdc84be6ba74fad874b0285e Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.17	49896	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 20:08:31 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=125659 Date: Tue, 16 Apr 2024 20:08:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.17	49897	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 20:08:31 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=125701 Date: Tue, 16 Apr 2024 20:08:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-16 20:08:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.17	49898	142.251.15.101	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:31 UTC	510	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:08:31 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Tue, 16 Apr 2024 20:08:31 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.17	49899	142.251.15.101	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:32 UTC	729	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 533 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:08:32 UTC	533	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 34 39 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 31 31 32 2c 5b 5b 22 31 37 31 33 32 39 38 31 30 30 30 34 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.149"],[4,0,0,0,0]]],1112,[["1713298100043",null,null,null
2024-04-16 20:08:32 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=CzZwQrc6U5qanx2DfJsgPhPx5Adh0mpRyVwz3bEws1Tzx2jd-1Ih8E94DTFyiRaDwomqXjwCdE5OGk39IqiWRzGhsHq0ubxaAXi08PHWjT-ZRW4j-oNEjr5fIRRrZzPQ6M-4vKraABbZmNO1-oYismQz_l21R2gybkWLMcN5R9M; expires=Wed, 16-Oct-2024 20:08:32 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 16 Apr 2024 20:08:32 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 16 Apr 2024 20:08:32 GMT Connection: close Transfer-Encoding: chunked
2024-04-16 20:08:32 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-16 20:08:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.17	49900	64.233.177.102	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:32 UTC	475	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:08:32 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 16 Apr 2024 20:08:32 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 20:08:32 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-16 20:08:32 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.17	49901	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:34 UTC	1800	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1192 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryEo7As1FBI1q6Sxff Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:34 UTC	1192	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 45 6f 37 41 73 31 46 42 49 31 71 36 53 78 66 66 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 45 6f 37 41 73 31 46 42 49 31 71 36 53 78 66 66 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 45 6f 37 41 73 31 46 42 49 31 71 36 53 78 66 66 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryEo7As1FBI1q6SxffContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryEo7As1FBI1q6SxffContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundaryEo7As1FBI1q6SxffCont
2024-04-16 20:08:34 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:34 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cf011918c1e047ec8bcfe1052bac1611 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.17	49902	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:35 UTC	1838	OUT	POST /log/telemetry HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 831 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:35 UTC	831	OUT	Data Raw: 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 31 26 62 61 74 63 68 65 73 3d 25 37 42 25 32 32 68 69 76 65 25 33 41 77 65 62 2d 6c 61 72 67 65 73 74 5f 63 6f 6e 74 65 6e 74 66 75 6c 5f 70 61 69 6e 74 25 32 32 25 33 41 25 32 32 25 35 42 25 37 42 25 35 43 25 32 32 63 61 74 65 67 6f 72 79 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 2d 6c 61 72 67 65 73 74 5f 63 6f 6e 74 65 6e 74 66 75 6c 5f 70 61 69 6e 74 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 73 65 72 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 63 6f 75 6e 74 72 79 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 72 65 66 65 72 72 65 72 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 35 43 25 32 32 Data Ascii: data-version=1&batches=%7B%22hive%3Aweb-largest_contentful_paint%22%3A%22%5B%7B%5C%22category%5C%22%3A%5C%22web-largest_contentful_paint%5C%22%2C%5C%22user_id%5C%22%3Anull%2C%5C%22country%5C%22%3Anull%2C%5C%22referrer%5C%22%3Anull%2C%5C%22session_id%5C%22
2024-04-16 20:08:35 UTC	2675	IN	HTTP/1.1 204 No Content Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:35 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6629a647362e4f6eb94d4a437a19c16b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.17	49905	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:36 UTC	1743	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1256 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryO6v9Jmk05BTsHwUH Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:36 UTC	1256	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4f 36 76 39 4a 6d 6b 30 35 42 54 73 48 77 55 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4f 36 76 39 4a 6d 6b 30 35 42 54 73 48 77 55 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4f 36 76 39 4a 6d 6b 30 35 42 54 73 48 77 55 48 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryO6v9Jmk05BTsHwUHContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryO6v9Jmk05BTsHwUHContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundaryO6v9Jmk05BTsHwUHCont
2024-04-16 20:08:36 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 18 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:36 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8eb3e4531f8a4277b489b1717041b326 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.17	49906	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:37 UTC	1743	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1217 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary6BJQA3lvrp2rMlOV Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:37 UTC	1217	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 42 4a 51 41 33 6c 76 72 70 32 72 4d 6c 4f 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 42 4a 51 41 33 6c 76 72 70 32 72 4d 6c 4f 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 42 4a 51 41 33 6c 76 72 70 32 72 4d 6c 4f 56 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary6BJQA3lvrp2rMlOVContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary6BJQA3lvrp2rMlOVContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundary6BJQA3lvrp2rMlOVCont
2024-04-16 20:08:38 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:38 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 256ccf801c5a46e19a37879747406dcb Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.17	49907	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:40 UTC	1743	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1217 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryObWwRxqQi3Z4YqsA Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:40 UTC	1217	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4f 62 57 77 52 78 71 51 69 33 5a 34 59 71 73 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4f 62 57 77 52 78 71 51 69 33 5a 34 59 71 73 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4f 62 57 77 52 78 71 51 69 33 5a 34 59 71 73 41 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryObWwRxqQi3Z4YqsAContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryObWwRxqQi3Z4YqsAContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundaryObWwRxqQi3Z4YqsACont
2024-04-16 20:08:41 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 51 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:40 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0a76e3ec107e43a9be498ded6230f77d Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.17	49908	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:45 UTC	1893	OUT	POST /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 13252 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: ReUI7oB54eFRG9-sGlJXBmCx X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:45 UTC	13252	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 65 76 65 6e 74 22 2c 22 6e 61 6d 65 22 3a 22 76 69 65 77 2e 61 75 78 69 6c 69 61 72 79 5f 73 68 61 72 69 6e 67 5f 72 65 63 65 69 76 65 72 5f 70 61 67 65 2e 73 68 61 72 69 6e 67 5f 72 65 63 65 69 76 65 72 22 2c 22 69 64 22 3a 22 38 64 32 66 37 31 31 30 2d 39 64 64 63 2d 34 39 32 36 2d 39 63 32 63 2d 31 64 62 61 31 39 62 64 39 64 30 39 22 2c 22 64 65 74 61 69 6c 22 3a 22 7b 5c 22 73 63 6b 65 79 53 68 61 31 5c 22 3a 5c 22 34 37 64 66 31 35 61 39 38 32 38 32 32 64 37 65 33 62 62 62 37 64 65 63 66 33 66 30 36 30 32 31 34 31 31 34 39 39 63 32 5c 22 2c 5c 22 61 75 78 69 6c 69 61 72 79 53 68 61 72 69 6e 67 52 65 63 65 69 76 65 72 50 61 67 65 5c 22 3a 5c 22 73 63 6c 5f 69 6e 76 69 74 61 74 69 6f 6e 5f 73 Data Ascii: {"events":[{"type":"event","name":"view.auxiliary_sharing_receiver_page.sharing_receiver","id":"8d2f7110-9ddc-4926-9c2c-1dba19bd9d09","detail":"{\"sckeySha1\":\"47df15a982822d7e3bbb7decf3f06021411499c2\",\"auxiliarySharingReceiverPage\":\"scl_invitation_s
2024-04-16 20:08:45 UTC	571	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 147 X-Webkit-Csp: sandbox Content-Length: 53 Date: Tue, 16 Apr 2024 20:08:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 64bbcc8fb72749dfb21801a7552da98f Connection: close
2024-04-16 20:08:45 UTC	53	IN	Data Raw: 7b 22 6d 73 67 22 3a 22 4d 65 61 73 75 72 65 73 20 70 72 6f 63 65 73 73 65 64 3a 20 31 30 20 45 76 65 6e 74 73 20 70 72 6f 63 65 73 73 65 64 3a 20 31 30 22 7d Data Ascii: {"msg":"Measures processed: 10 Events processed: 10"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.17	49909	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:45 UTC	1183	OUT	GET /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:46 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 110 Date: Tue, 16 Apr 2024 20:08:46 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a83128771fed4d97bdda61444a6bfa5e Connection: close
2024-04-16 20:08:46 UTC	110	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 75 64 63 6c 2f 6c 6f 67 5f 74 69 6d 69 6e 67 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "udcl/log_timing": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.17	49910	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:45 UTC	1743	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryeIbKF4H6LfrVngPG Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:45 UTC	1219	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 65 49 62 4b 46 34 48 36 4c 66 72 56 6e 67 50 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 65 49 62 4b 46 34 48 36 4c 66 72 56 6e 67 50 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 65 49 62 4b 46 34 48 36 4c 66 72 56 6e 67 50 47 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryeIbKF4H6LfrVngPGContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryeIbKF4H6LfrVngPGContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundaryeIbKF4H6LfrVngPGCont
2024-04-16 20:08:46 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 29 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:45 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2e287329d1244a538b6cfd4772858207 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.17	49911	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:49 UTC	1800	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1192 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryFS5llDjckmtNfHoW Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:49 UTC	1192	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 46 53 35 6c 6c 44 6a 63 6b 6d 74 4e 66 48 6f 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 46 53 35 6c 6c 44 6a 63 6b 6d 74 4e 66 48 6f 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 46 53 35 6c 6c 44 6a 63 6b 6d 74 4e 66 48 6f 57 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryFS5llDjckmtNfHoWContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryFS5llDjckmtNfHoWContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundaryFS5llDjckmtNfHoWCont
2024-04-16 20:08:49 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 18 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 39cf86312ea5448b9aedada8139fdb9e Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.17	49912	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:08:50 UTC	1743	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary9gm4YRhugsUfCB9E Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:08:50 UTC	1219	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 39 67 6d 34 59 52 68 75 67 73 55 66 43 42 39 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 39 67 6d 34 59 52 68 75 67 73 55 66 43 42 39 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 39 67 6d 34 59 52 68 75 67 73 55 66 43 42 39 45 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary9gm4YRhugsUfCB9EContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary9gm4YRhugsUfCB9EContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundary9gm4YRhugsUfCB9ECont
2024-04-16 20:08:51 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 22 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:08:51 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 96be3a7893d6418586b8eb7845dd20da Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.17	49913	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:09:01 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=VmfxbbkHsZ7DPxc&MD=osDo5xyD HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-16 20:09:01 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 9ec4226f-9f26-404e-b44f-e15c8fb63df2 MS-RequestId: 2d9aa78f-442f-434f-863c-698e3a8441d4 MS-CV: VT1GMwJaKEmuUxYc.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 20:09:00 GMT Connection: close Content-Length: 25457
2024-04-16 20:09:01 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-16 20:09:01 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.17	49914	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:09:05 UTC	1743	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryPi6w0cvXi94kK655 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:09:05 UTC	1219	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 69 36 77 30 63 76 58 69 39 34 6b 4b 36 35 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 69 36 77 30 63 76 58 69 39 34 6b 4b 36 35 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 69 36 77 30 63 76 58 69 39 34 6b 4b 36 35 35 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryPi6w0cvXi94kK655Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryPi6w0cvXi94kK655Content-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundaryPi6w0cvXi94kK655Cont
2024-04-16 20:09:06 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 20 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:09:06 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4c26021f701d4b649537dfff25a2e075 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.17	49916	40.126.29.6	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:09:12 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4788 Host: login.live.com
2024-04-16 20:09:12 UTC	4788	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-16 20:09:12 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 16 Apr 2024 20:08:12 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_SN1 x-ms-request-id: 98240073-9215-4141-97bb-4e4a3635a62a PPServer: PPV: 30 H: SN1PEPF0002F1AA V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:09:12 GMT Connection: close Content-Length: 11153
2024-04-16 20:09:12 UTC	11153	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.17	49917	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:09:12 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-04-16 20:09:12 UTC	436	IN	HTTP/1.1 200 OK Content-Length: 7285 Content-Type: application/json; charset=utf-8 ETag: 556669544_-721343397 Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-ExP-TrackingId: b712cea4-d744-4919-aa4d-3d22a747a261 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4491D2FBF970447F94DD34A69E0F08FD Ref B: ATL331000105035 Ref C: 2024-04-16T20:09:12Z Date: Tue, 16 Apr 2024 20:09:12 GMT Connection: close
2024-04-16 20:09:12 UTC	1024	IN	Data Raw: 7b 22 46 65 61 74 75 72 65 73 22 3a 5b 22 68 69 67 68 71 75 61 6c 69 74 79 63 61 70 74 75 72 65 63 22 2c 22 79 6f 61 6c 77 39 38 30 31 63 66 22 2c 22 79 6f 63 33 37 32 31 22 2c 22 61 61 74 65 73 31 32 31 22 2c 22 79 6f 63 61 6c 38 33 30 22 2c 22 65 6d 70 72 6f 37 30 32 22 2c 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 79 6f 79 70 70 31 31 37 22 2c 22 79 6f 79 70 70 35 36 31 22 2c 22 79 6f 70 68 6f 31 35 36 22 2c 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 79 6f 72 65 6d 37 38 32 22 2c 22 79 6f 72 65 6d 33 32 35 22 2c 22 79 6f 72 6f 6d 39 33 39 22 2c 22 79 6f 79 70 70 36 33 38 22 2c 22 79 6f 61 61 6f 77 63 34 36 63 66 22 2c 22 79 6f 35 35 36 22 2c 22 79 6f 61 61 6f 32 36 37 22 2c 22 79 6f 70 72 69 32 35 Data Ascii: {"Features":["highqualitycapturec","yoalw9801cf","yoc3721","aates121","yocal830","empro702","yonon248","contactsv2synconly","yoypp117","yoypp561","yopho156","ypromeless","yorem782","yorem325","yorom939","yoypp638","yoaaowc46cf","yo556","yoaao267","yopri25
2024-04-16 20:09:12 UTC	1024	IN	Data Raw: 2c 22 31 34 67 36 22 3a 22 61 61 74 65 73 31 32 31 22 2c 22 31 38 66 7a 22 3a 22 79 6f 63 61 6c 38 33 30 22 2c 22 31 68 6a 65 22 3a 22 65 6d 70 72 6f 37 30 32 22 2c 22 31 71 61 38 22 3a 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 31 77 6d 74 22 3a 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 32 69 77 6a 22 3a 22 79 6f 79 70 70 31 31 37 22 2c 22 32 6a 36 61 22 3a 22 79 6f 79 70 70 35 36 31 22 2c 22 32 6b 71 32 22 3a 22 79 6f 70 68 6f 31 35 36 22 2c 22 32 6c 61 64 22 3a 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 32 6f 63 64 22 3a 22 79 6f 72 65 6d 37 38 32 22 2c 22 32 72 65 6b 22 3a 22 79 6f 72 65 6d 33 32 35 22 2c 22 32 73 63 78 22 3a 22 79 6f 72 6f 6d 39 33 39 22 2c 22 32 74 70 33 22 3a 22 79 6f 79 70 70 36 33 38 22 2c 22 33 30 62 38 22 3a 22 Data Ascii: ,"14g6":"aates121","18fz":"yocal830","1hje":"empro702","1qa8":"yonon248","1wmt":"contactsv2synconly","2iwj":"yoypp117","2j6a":"yoypp561","2kq2":"yopho156","2lad":"ypromeless","2ocd":"yorem782","2rek":"yorem325","2scx":"yorom939","2tp3":"yoypp638","30b8":"
2024-04-16 20:09:12 UTC	1024	IN	Data Raw: 32 36 34 22 2c 22 35 39 30 71 22 3a 22 34 61 33 30 64 34 35 35 22 2c 22 35 39 67 67 22 3a 22 32 69 32 68 65 31 31 38 22 2c 22 35 39 67 6a 22 3a 22 34 64 65 35 67 35 34 32 22 2c 22 35 39 76 7a 22 3a 22 62 65 63 34 34 37 35 37 22 2c 22 35 61 39 73 22 3a 22 39 38 34 65 39 37 37 34 22 2c 22 35 61 74 6b 22 3a 22 35 35 35 64 37 39 37 38 22 2c 22 35 62 61 74 22 3a 22 65 6a 66 34 36 37 39 35 22 2c 22 35 63 70 66 22 3a 22 34 39 62 34 67 31 33 33 22 2c 22 35 63 72 73 22 3a 22 33 62 66 39 67 38 35 35 22 2c 22 35 64 77 37 22 3a 22 69 34 37 62 65 31 37 38 22 2c 22 35 65 74 36 22 3a 22 32 34 38 66 61 31 38 36 22 2c 22 35 66 6c 32 22 3a 22 68 35 31 66 30 33 34 32 22 2c 22 35 66 79 6f 22 3a 22 68 64 65 31 67 32 36 37 22 2c 22 35 66 79 71 22 3a 22 34 6a 6a 66 62 37 36 38 Data Ascii: 264","590q":"4a30d455","59gg":"2i2he118","59gj":"4de5g542","59vz":"bec44757","5a9s":"984e9774","5atk":"555d7978","5bat":"ejf46795","5cpf":"49b4g133","5crs":"3bf9g855","5dw7":"i47be178","5et6":"248fa186","5fl2":"h51f0342","5fyo":"hde1g267","5fyq":"4jjfb768
2024-04-16 20:09:12 UTC	1024	IN	Data Raw: 7d 7d 2c 7b 22 49 64 22 3a 22 59 6f 75 72 50 68 6f 6e 65 22 2c 22 50 61 72 61 6d 65 74 65 72 73 22 3a 7b 22 41 41 4f 57 43 34 36 22 3a 36 34 30 30 2c 22 41 41 4f 57 43 34 37 22 3a 37 34 30 30 2c 22 41 41 4f 57 43 36 31 22 3a 31 36 30 30 2c 22 41 41 4f 57 43 36 32 22 3a 32 36 30 30 2c 22 41 41 4f 57 43 36 33 22 3a 33 36 30 30 2c 22 41 69 72 70 6c 61 6e 65 4d 6f 64 65 53 74 61 74 75 73 22 3a 74 72 75 65 2c 22 41 75 74 6f 48 79 64 72 61 74 65 64 49 6d 61 67 65 73 43 6f 75 6e 74 22 3a 30 2c 22 43 61 6c 6c 69 6e 67 41 6c 74 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 45 76 65 6e 74 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 45 78 69 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 4f 53 53 65 72 76 69 63 69 6e 67 46 69 Data Ascii: }},{"Id":"YourPhone","Parameters":{"AAOWC46":6400,"AAOWC47":7400,"AAOWC61":1600,"AAOWC62":2600,"AAOWC63":3600,"AirplaneModeStatus":true,"AutoHydratedImagesCount":0,"CallingAltBluetoothPairingEvent":true,"CallingExitConfirmation":true,"CallingOSServicingFi
2024-04-16 20:09:12 UTC	1024	IN	Data Raw: 3a 74 72 75 65 2c 22 49 73 41 75 74 68 56 32 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 4d 65 64 69 61 50 61 63 6b 43 68 65 63 6b 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 68 61 74 46 69 6c 74 65 72 54 6f 67 67 6c 65 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 73 65 6e 74 56 32 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 76 65 72 73 61 74 69 6f 6e 56 69 65 77 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 48 69 64 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 4d 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 50 69 6e 6e 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 61 72 63 68 22 3a 74 72 75 65 2c 22 Data Ascii: :true,"IsAuthV2Enabled":true,"MediaPackCheck":true,"MessagingChatFilterToggle":true,"MessagingConsentV2":true,"MessagingConversationView":true,"MessagingEnableHiding":true,"MessagingEnableMuting":true,"MessagingEnablePinning":true,"MessagingSearch":true,"
2024-04-16 20:09:12 UTC	1024	IN	Data Raw: 69 6e 67 54 6f 70 30 31 31 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 69 6e 67 54 6f 70 30 31 32 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 69 6e 67 54 6f 70 30 31 35 22 3a 74 72 75 65 2c 22 52 6f 6d 65 44 69 73 61 62 6c 65 64 22 3a 34 34 31 35 30 33 2c 22 53 65 63 75 72 65 43 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 53 68 65 6c 6c 45 78 74 65 6e 64 65 64 4c 65 66 74 50 61 6e 65 22 3a 74 72 75 65 2c 22 54 65 73 74 46 65 61 74 75 72 65 32 22 3a 66 61 6c 73 65 2c 22 55 6e 69 76 65 72 73 61 6c 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 22 3a 74 72 75 65 2c 22 57 68 61 74 73 4e 65 77 43 4e 22 3a 74 72 75 65 2c 22 59 50 50 43 61 74 61 73 74 72 6f 70 68 69 63 45 72 72 6f 72 41 75 74 6f 52 65 73 65 74 22 3a 74 72 75 65 2c 22 59 50 50 43 6f 6e 73 65 63 75 74 69 76 Data Ascii: ingTop011":true,"RemotingTop012":true,"RemotingTop015":true,"RomeDisabled":441503,"SecureContent":true,"ShellExtendedLeftPane":true,"TestFeature2":false,"UniversalBluetoothPairing":true,"WhatsNewCN":true,"YPPCatastrophicErrorAutoReset":true,"YPPConsecutiv
2024-04-16 20:09:12 UTC	1024	IN	Data Raw: 79 6f 35 35 36 3a 33 30 39 38 36 35 35 36 3b 79 6f 61 61 6f 32 36 37 3a 33 30 34 33 34 36 37 32 3b 79 6f 70 72 69 32 35 37 3a 33 30 34 36 34 34 33 33 3b 79 6f 31 37 39 3a 33 30 34 34 35 33 31 30 3b 79 6f 69 73 61 38 36 31 3a 33 30 35 32 35 38 36 38 3b 79 6f 72 65 6d 31 34 31 3a 33 30 34 38 36 33 35 33 3b 79 6f 79 70 70 36 35 32 3a 33 30 35 31 35 34 38 33 3b 79 6f 35 32 35 3a 33 30 35 35 33 39 38 35 3b 79 6f 36 30 36 3a 33 30 35 32 37 38 35 30 3b 79 6f 6e 6f 74 36 33 33 3a 33 30 36 32 36 30 37 38 3b 79 6f 79 70 70 38 35 39 3a 33 30 36 38 37 38 35 39 3b 79 6f 69 6e 64 36 36 35 3a 33 30 35 39 35 31 36 33 3b 79 6f 64 63 67 38 33 30 3a 33 30 37 31 32 39 34 39 3b 6f 6e 6c 79 5f 74 6f 61 73 74 63 6f 6e 74 65 78 74 6d 65 6e 75 3a 33 30 36 34 38 30 38 31 3b 61 6a Data Ascii: yo556:30986556;yoaao267:30434672;yopri257:30464433;yo179:30445310;yoisa861:30525868;yorem141:30486353;yoypp652:30515483;yo525:30553985;yo606:30527850;yonot633:30626078;yoypp859:30687859;yoind665:30595163;yodcg830:30712949;only_toastcontextmenu:30648081;aj
2024-04-16 20:09:12 UTC	117	IN	Data Raw: 38 33 38 35 30 33 3b 35 30 63 37 39 31 30 36 3a 33 30 38 33 38 36 31 39 3b 6a 61 35 63 34 32 34 39 3a 33 31 30 30 36 32 34 34 3b 68 33 65 64 34 31 36 31 3a 33 30 38 39 31 37 38 34 3b 61 62 69 30 67 38 31 37 3a 33 30 39 35 32 38 37 35 3b 61 35 34 66 61 35 37 34 3a 33 30 39 39 33 33 34 39 3b 64 69 66 32 32 32 31 39 3a 33 30 39 36 30 34 30 32 3b 22 7d Data Ascii: 838503;50c79106:30838619;ja5c4249:31006244;h3ed4161:30891784;abi0g817:30952875;a54fa574:30993349;dif22219:30960402;"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.17	49918	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:09:12 UTC	2556	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: 120 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAZ018joKFt9ONlJduRp0qgN4q0hEVgbtyzwhNOAQGHdiJ/WvF5CgahoZEynXJhIj56iTukhgVUPTic3eRyYR66fmSTdDW3LZw/IwxowvJNO42yNYmggOVq0grbDpD4QdDBVM9tWomORZ6Yhc//Dhybj55G1bMVl6gWid3LX185%2BHPvRzCdiW7tPCZaapPO7gKeTL3oDg104em5KKXTB%2BceyTUab5TPh2hCfSfz3ROVCrQakad6ZQ37pn7Jq55%2B49mfT4CA7pYaH/XGU53tm06AVeElWzPkyU/J4Yr1r8h47zRUwOcxGjC0T6BxpX7IwaaJwfyVT2Tevj23PMjumVtDYDZgAACPxIXebpGL%2BGqAGO2uVUIArwYVaEkhQ22OfhliGLM6ZzUHPcq8OgtEdhPx9a2KM7kV/RwIGjE2EaapB0tt9sgi2DzczVtNbBciuvDyQhmON3mDa1QDzs/rOIXlh4sYR9zv7uexEljV/Imrk%2B/sJT99cLZwVV7PMvd1F75eHIs4pX1BFkLWpqZNETz4fG4HhgXcUZelhm/bcvV1vX49JeogYTt2yiFUOMkY5tR4q28QjWv%2B1R691qg7cHA2JVSATROi1m/RUl6KBLCiACeckPxMzA6kQovWH%2ByRmDxA9ra27P9aO9CW75tKVB/3eKzk4rS28lqzzWYSUjYjkYDnCWOo6hDi/m2h1Dt%2BRXipZMn/BGku0N6WS8mtDNm2EzBNliNDUAhKqoAkUnmRP61pvZjFSi/aTpkXR/x8SfYv14rWHbUs9gyYkSjM1N3VP/7siZSJSl1OyMh3vaC8SGfSZrFSlQKjhgXAbTSfEQoWEBjSVKcudN6yE8YHqv4WtfvpibO/Clm/vLeQhq0fDv3br5Mj5jA5mQS7xg53GzMzhJNGn7pMUQ8cMvUPfsCbtlGq6eZAJ62AE%3D%26p%3D X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1713298150 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: E5BE7027061746948210979DA4705F6E X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-04-16 20:09:13 UTC	181	IN	HTTP/1.1 200 OK X-MSEdge-Ref: Ref A: B243E7D614D14426A62B0C8E95B8C31D Ref B: ATL331000104049 Ref C: 2024-04-16T20:09:13Z Date: Tue, 16 Apr 2024 20:09:12 GMT Connection: close
2024-04-16 20:09:13 UTC	875	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 27 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 27 20 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 27 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 27 20 68 74 74 70 2d 65 71 75 69 76 3d 27 63 6f 6e 74 65 6e 74 2d 74 79 70 65 27 2f 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 27 74 65 78 74 Data Ascii: <!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'><html xmlns='http://www.w3.org/1999/xhtml'><head><meta content='text/html; charset=utf-8' http-equiv='content-type'/><style type='text

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.17	49920	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:09:16 UTC	1897	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 531 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: ReUI7oB54eFRG9-sGlJXBmCx X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:09:16 UTC	531	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 22 61 62 75 73 65 22 2c 22 6a 73 5f 65 78 63 65 70 74 69 6f 6e 22 2c 22 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 22 2c 22 75 64 63 6c 22 2c 22 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 22 2c 22 75 78 61 5f 65 76 65 6e 74 73 22 2c 22 77 65 62 5f 61 75 74 68 22 2c 22 77 65 62 5f 70 72 65 76 69 65 77 73 22 2c 22 77 65 62 5f 70 72 6f 64 75 63 74 5f 61 6e 61 6c 79 74 69 63 73 5f 70 69 70 65 6c 69 6e 65 22 2c 22 77 65 62 5f 74 69 6d 69 6e 67 22 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e Data Ascii: {"scopes":[],"known_namespaces":["abuse","js_exception","privacy_consent","udcl","user_centric_perf","uxa_events","web_auth","web_previews","web_product_analytics_pipeline","web_timing"],"environment":"prod","artifact_name":"dropbox-web","artifact_version
2024-04-16 20:09:17 UTC	596	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 109 X-Webkit-Csp: sandbox Content-Length: 3449 Date: Tue, 16 Apr 2024 20:09:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7a8e5d3b310a4194b966bbcbdfcdc03c Connection: close
2024-04-16 20:09:17 UTC	3449	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 7b 22 61 67 67 72 65 67 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 64 72 6f 70 5f 66 72 61 63 74 69 6f 6e 5f 6f 66 5f 68 6f 73 74 73 5f 70 65 72 5f 6d 65 74 72 69 63 22 3a 30 2c 22 64 72 6f 70 5f 70 65 72 69 6f 64 73 22 3a 7b 22 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 73 74 69 63 6b 69 6e 65 73 73 22 3a 7b 22 6c 69 6d 69 74 22 3a 7b 22 2e 74 61 67 22 3a 22 69 6e 64 65 70 65 6e 64 65 6e 74 22 7d 7d 7d 2c 22 64 72 6f Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[{"aggregation_interval_seconds":60,"drop_fraction_of_hosts_per_metric":0,"drop_periods":{"fraction":0,"stickiness":{"limit":{".tag":"independent"}}},"dro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.17	49921	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:09:17 UTC	1189	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:09:17 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Tue, 16 Apr 2024 20:09:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 20ee0a877c58457fa79b6d9834c322b7 Connection: close
2024-04-16 20:09:17 UTC	116	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.17	49922	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:09:19 UTC	1800	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1192 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary0ioSEnhwJzNDAWjH Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:09:19 UTC	1192	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 30 69 6f 53 45 6e 68 77 4a 7a 4e 44 41 57 6a 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 30 69 6f 53 45 6e 68 77 4a 7a 4e 44 41 57 6a 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 30 69 6f 53 45 6e 68 77 4a 7a 4e 44 41 57 6a 48 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary0ioSEnhwJzNDAWjHContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary0ioSEnhwJzNDAWjHContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundary0ioSEnhwJzNDAWjHCont
2024-04-16 20:09:19 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 59 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:09:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: bf9af6b32f1f4d8585c5ade61a0bc1f4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.17	49923	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:09:27 UTC	1839	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 771 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:09:27 UTC	771	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 39 34 39 37 33 39 32 37 33 32 38 66 34 38 62 63 39 30 66 33 61 38 36 65 63 63 62 33 61 66 30 66 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 74 34 33 63 30 65 69 6e 72 68 33 37 37 72 6d 39 64 74 79 76 61 25 32 46 49 6e 76 6f 69 63 65 2d 30 37 38 36 2e 70 64 66 25 33 46 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 4c 64 70 62 6a 73 71 51 4c 34 41 5f 33 67 37 44 71 59 6e 4f 55 69 64 6a 48 34 55 4c 32 61 5f 4e 54 54 52 69 68 2d 49 71 4b 66 6f 33 65 61 45 77 2d 71 6a 65 57 30 31 63 57 67 70 37 4e 71 58 79 49 47 57 30 67 33 46 52 65 75 5a 39 66 55 69 4d 75 57 78 71 6b 49 63 4a 73 5f 6f 55 52 45 34 38 57 33 30 51 79 5f 33 78 Data Ascii: request_id=94973927328f48bc90f3a86eccb3af0f&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Ft43c0einrh377rm9dtyva%2FInvoice-0786.pdf%3Foref%3De%26r%3DACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3x
2024-04-16 20:09:28 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 23 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:09:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 04e647510a974c5f80c4e55e7a168d93 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.17	49924	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:09:28 UTC	1180	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:09:28 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Tue, 16 Apr 2024 20:09:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 506e3f072f7c4399bae9a738d05ee719 Connection: close
2024-04-16 20:09:28 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.17	49925	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:09:35 UTC	1743	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary3Vp4GatIDVC1OUdM Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:09:35 UTC	1219	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 33 56 70 34 47 61 74 49 44 56 43 31 4f 55 64 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 33 56 70 34 47 61 74 49 44 56 43 31 4f 55 64 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 33 56 70 34 47 61 74 49 44 56 43 31 4f 55 64 4d 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary3Vp4GatIDVC1OUdMContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary3Vp4GatIDVC1OUdMContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundary3Vp4GatIDVC1OUdMCont
2024-04-16 20:09:36 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 23 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:09:35 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 028785ed8688404295fc82868477360f Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.17	49927	162.125.9.18	443	1576	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:10:04 UTC	1800	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1218 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary3oO4YeHo5taRg7uj Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/t43c0einrh377rm9dtyva/Invoice-0786.pdf?oref=e&r=ACLdpbjsqQL4A_3g7DqYnOUidjH4UL2a_NTTRih-IqKfo3eaEw-qjeW01cWgp7NqXyIGW0g3FReuZ9fUiMuWxqkIcJs_oURE48W30Qy_3xwZGQiwR1kHjrtOgmO9w5wkurDHUU405L4kU8UpgL7y_ga2F_tIuVm5Yw5KJKHPboLVlzrX1m0K4n5VFXKI5lAdku_OCpJ36GVKOe0ZfU-d0lURuNRiOl1a6I-k1v_zjuEgVw&sm=1&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjA4NDM5OTY2MjI0MTM3Njg4NTc5OTIwMDYxNDAwNzc4NjYxNzIw; t=ReUI7oB54eFRG9-sGlJXBmCx; __Host-js_csrf=ReUI7oB54eFRG9-sGlJXBmCx; __Host-ss=W8NDtkCu28; locale=en; ets=AcVtlBvn5q15i2RcY0Ivwa6WKlfMexLj1J0xBDgYaPgh81%2B2n6ozSjqfFWtS4oWY4%2B8FAlMtuaY8S9FJOwfagP0Y3xjXZFUu5ZcSXKN7eO/55NKg%2BW0AXUS9MQ67ftPK%2BLMu8mlj0nsGfL/WuGZAfzMTW1w7K8xBJq5EE8r6/k076Q%3D%3D; __Host-logged-out-session=ChCwKZ7PZXwSEnuQstJiMfWkEKu1+7AGGi5BSm5BcVhOTjh2eGtJUlZ0ZDNlc0NsejFuY2NnVlItR2FPWWpZS05nUlYzT1hB; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-16T20:08:27.334Z","expireDate":"2024-10-16T20:08:27.334Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
2024-04-16 20:10:04 UTC	1218	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 33 6f 4f 34 59 65 48 6f 35 74 61 52 67 37 75 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 33 6f 4f 34 59 65 48 6f 35 74 61 52 67 37 75 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 52 65 55 49 37 6f 42 35 34 65 46 52 47 39 2d 73 47 6c 4a 58 42 6d 43 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 33 6f 4f 34 59 65 48 6f 35 74 61 52 67 37 75 6a 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary3oO4YeHo5taRg7ujContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary3oO4YeHo5taRg7ujContent-Disposition: form-data; name="t"ReUI7oB54eFRG9-sGlJXBmCx------WebKitFormBoundary3oO4YeHo5taRg7ujCont
2024-04-16 20:10:05 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-XicsnyWOPoGU6GOiiW55' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-XicsnyWOPoGU6GOiiW55' 'nonce-8awKi+HnXpdqzcfoajIX' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:10:04 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 08f5ff9470424b1eb47ebbbb808cf0f9 Connection: close

Target ID:	0
Start time:	22:08:07
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	22:08:08
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	22:08:18
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5748 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	22:08:19
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6064 --field-trial-handle=1952,i,3938342680590147736,1522734001170735203,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.dropbox.com/l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Windows Analysis Report
https://www.dropbox.com/l/scl/AAD-yDt9mP1aiTsUKdpN5XkGmSRGv_2ETnk