Windows Analysis Report
https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5

Overview

General Information

Sample URL:	https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5
Analysis ID:	1428724
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Classification

Signatures

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /s/ktl5qtvf2us1megbgmjabwqaxcdy69b5 HTTP/1.1Host: app.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notes/1506503934565?s=ktl5qtvf2us1megbgmjabwqaxcdy69b5 HTTP/1.1Host: app.box.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: z=j7masphnumonh18fajjanf5art; box_visitor_id=662251b51c7c34.67511927; bv=EUG-6777; cn=59; site_preference=desktop
Source: global traffic	HTTP traffic detected: GET /p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://app.box.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/unknown HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /split-proxy/splitChanges?since=-1 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /app_init HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/unknown HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /analytics-events/ HTTP/1.1Host: client-log.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/2 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/662251b51c7c34.67511927 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3qPn HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-2c52fe1ff77d1ee218b536f0611d594b-13a893f4ed8bdcb8-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/splitChanges?since=-1 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/662251b51c7c34.67511927 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/2 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3qPn HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0Sec-WebSocket-Key: /J3wj3nPJm4THVgQDajHiQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5O&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-4fd7cc0bbe77dc0f77fc604b3ea8dc4d-b1373f5858c38c47-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFS&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-e7d920b8d99ee5c85dbca0509709772e-c169ce5ef942b7b2-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5O&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5B&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFY&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Sy9W5DN2-2-8u300nbS5VrFuZ9IyYqsdcKlo
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176074 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-6fe2b4fddd1e21e36e7f36d487dca0bc-997cf4bb2e21ff56-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIYX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIY
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=oSDdrs2t-Mk9447SW1APWccMhUC_FV7EO5Uo
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tCg HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-811f476b4a6bd385a3a711102ce32017-1be6c7cc10cf00ef-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=4zHZx9YO-p05aqZhxN7I-KIByt3weokWqenE
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176074 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=4zHZx9YO-p05aqZhxN7I-KIByt3weokWqenE
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQSec-WebSocket-Key: Ih8rT2cmhWVdNd34HYDQUg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tCg HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN5&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-c75dee2fda321551f69d2428f7db85e6-c3a5f54d956de2d7-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN4&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tYJ&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-11e06ddd05e998b3a8dccbc3e63dad45-d5f9f3b6a039f9c4-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN5&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=GXzSYyvy-5EqYVuMy_sICELSe48haLMEgkhk
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176075 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-584e153d2a6def1cdaf2bf965dd33d29-59203c46cbeb9763-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRnoX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRno
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=zYF8l6fC--7mEQlxBZ1JVfBjN1KqeoTMjQcg
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wba HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-f107575ab1fc9bedc144949765f75c7e-98ab8f7196385bc1-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Kx8uvUox-o7LzybsniwSMCfZHZZ--oct6B9Q
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176075 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Kx8uvUox-o7LzybsniwSMCfZHZZ--oct6B9Q
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtISec-WebSocket-Key: q3JpZlGJ39tbC8yiPW3DIQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wba HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnV&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-ddba8de75f933ebf182857cca96d6352-e56e74954625a0bf-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnU&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wxZ&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-61f6c30fab174ca0590f49a1f3574b9f-a860104660a7a6cb-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnV&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wy0&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wxZ&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=fuBzQldR-yl8skRxoC-vPHHpRxH62oZsNlbY
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176076 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-d0589e719fd5bc702499c8834785e6f7-321dc32ee24dd074-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4X-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=mKLDcNZh-kWUBSkTSr7UeP0Lq6i08kNXjRgE
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176076 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=PshyhJSg-V4FOltDvoyVO-HKqb5IqJdP9ZE4
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3ywk HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-ded7a2db0ff89777c514f3b9eaa872f1-e5ed11a739bcc1b1-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=PshyhJSg-V4FOltDvoyVO-HKqb5IqJdP9ZE4
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3ywk HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRISec-WebSocket-Key: SsO1y5w0b9OkiWJvAfjQcA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4j&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-7f96f6e3a2820ac4370c481e3dbd2a7e-a74e439a57e090fd-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEW&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-b3b1795d789b9f88f75abc33d037ab5d-796c25b15e119e6f-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4j&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4i&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEn&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEW&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=H0pjsP8S-aapYvZiL4A7Xvg_cuMen8RhEQHM
Source: global traffic	HTTP traffic detected: GET /analytics-events/ HTTP/1.1Host: client-log.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176077 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-d9bd6d0857b54257ca6fcbb3021ac515-607d120236528613-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: 3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeaboX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=qL421Q3Y-DHbwL3Us026D-6ZnL6wd2hZ7neI
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176077 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=Kra6tEN3-UknRPd-jNPRyeLYyeWWtvFEFzN8
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3_ph HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-1476386ad506d9cf6a46e75ceda94108-da20472302cdf4c8-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=Kra6tEN3-UknRPd-jNPRyeLYyeWWtvFEFzN8
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64Sec-WebSocket-Key: O2NAVvhZJlaMXHv9jRuq6g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__v&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-cc7233bb282713604fad7cd9252cb43b-3cdf72d7c7a1cde5-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3_ph HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__r&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs4099&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-d8780f4ed13d0d9ba15b37202a71f4dd-ce9977725af31c66-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__v&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=wvT7qnim-RAM13BOJK1p8eBmmXR-M1xYK0Lg

Source: unknown

DNS traffic detected: queries for: app.box.com

Source: unknown

HTTP traffic detected: POST /client_log HTTP/1.1Host: notes.services.box.comConnection: keep-aliveContent-Length: 132sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 0traceparent: 00-324efed6eedef3acb1aeb3d98d460abd-967635a6636878a8-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: */*csrf-token: lqJkgTR9-CvXLDJxMiaaaDAiExhmrld9aSQkX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Origin: https://notes.services.box.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; csrf-token=lqJkgTR9-CvXLDJxMiaaaDAiExhmrld9aSQk; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:00 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 10Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:05 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIY; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 4Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:12 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=gCkgo1TL-53Bi6mcxFb2zTEtsKmEqH-lzVvw; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 5Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:15 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRno; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 10Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:26 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=qCCLncGd-BD2jG__VBdfo33kMbWTpSoyZNxA; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 5Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 16Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:36 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 197Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:38 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 2Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:48 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 3Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:50 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=uGsmYeoR-4zfRhu-wJTwE1n8hI1rHeZuG9hM; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 39Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff
Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff2
Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff
Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff2

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@16/64@16/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2352,i,14210594405034482032,7056984617740037461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2352,i,14210594405034482032,7056984617740037461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.112.186.144	notes.services.box.com	United States	33011	BOXNETUS	false
142.250.9.105	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4
192.168.2.13
192.168.2.23

Contacted Domains

Name	IP	Active
notes.services.box.com	74.112.186.144	true
www.google.com	142.250.9.105	true
app.box.com	74.112.186.144	true
client-log.box.com	74.112.186.144	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true
cdn01.boxcdn.net	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN5&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/client_log	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/app_init	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEn&sid=FoOQJGiBEpNtnrgDAOLz	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=FoOQJGiBEpNtnrgDAOLz	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tYL&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs409C&sid=fzxFP2h5MktguRj0AOMI	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=fzxFP2h5MktguRj0AOMI	false	high
https://app.box.com/notes/1506503934565?s=ktl5qtvf2us1megbgmjabwqaxcdy69b5	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=PpSsGChryM9q1WAqAOLo	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnU&sid=PpSsGChryM9q1WAqAOLo	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3ywk	false	high
https://notes.services.box.com/split-proxy/mySegments/2	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wxZ&sid=PpSsGChryM9q1WAqAOLo	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5B&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs40M-&sid=fzxFP2h5MktguRj0AOMI	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFY&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tCg	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__v&sid=fzxFP2h5MktguRj0AOMI	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEW&sid=FoOQJGiBEpNtnrgDAOLz	false	high
https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com	false	high
https://notes.services.box.com/split-proxy/splitChanges?since=-1	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rQC&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wba	false	high
https://client-log.box.com/analytics-events/	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN4&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/ep/pad/diagnosticInfo	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4i&sid=FoOQJGiBEpNtnrgDAOLz	false	high
https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176077	false	high
https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176076	false	high
https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176075	false	high
https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176074	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5O&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3_ph	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnV&sid=PpSsGChryM9q1WAqAOLo	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3qPn	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__r&sid=fzxFP2h5MktguRj0AOMI	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wy0&sid=PpSsGChryM9q1WAqAOLo	false	high
https://notes.services.box.com/split-proxy/mySegments/unknown	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs4099&sid=fzxFP2h5MktguRj0AOMI	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rQ9&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/split-proxy/mySegments/662251b51c7c34.67511927	false	high
https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4j&sid=FoOQJGiBEpNtnrgDAOLz	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tYJ&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tgz&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFS&sid=N_2OZOLR87QXlSdMAOLQ	false	high

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 54	SVG Scalable Vector Graphics image	5AA45DEFD7EBE1558D1F57048DA87EE1	8B76F1D206C5D0FD80A370B237B1FDF55FF4E5DB	4C240FFD620AD5DC2BD4DCD52F3D6E14F0C77CC4E419E6670B493DDE2302E395
Chrome Cache Entry: 55	ASCII text, with no line terminators	E1B468C52D580BB0C563F7DDAC593474	D41AF16632A19F7BEB11A6471387F576EB3D3BA7	179F1CEA3A0D7D6A99E2A7C10A0B27AE9831C71978051A3EDB0743203DA8C10A
Chrome Cache Entry: 56	JSON data	BB98F2F2DE2293F412BF524B39A8CEBA	1F3103421B475438A3FC3A57CC3031DCE61F4AB6	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
Chrome Cache Entry: 57	Web Open Font Format (Version 2), TrueType, length 84992, version 2.983	8B1868B7BCE455BF0DA2712EC5D1A6C8	576498905760A76534FEFC8A6A770B643E10AF01	0ABCEFA9EF9546CAD5811B5A32F096F8B9407E43DE385227A78182C32DC3451B
Chrome Cache Entry: 58	JSON data	8C814C47925E9B2FF056DFA7D3690CC8	4183EC6DCFA17F9BAA7A00977D01B96AC302D801	2070E9EC5EA66461693A174CF782EFA1090E0CA1988968CC1115D019E7B80A95
Chrome Cache Entry: 59	JSON data	D3AB4FDBF9E17A9C1E697A0A0888F2B4	DC5CE469CAF03F699714E1D25626296C1079080F	5F2B7440184F478A2F84E1C45C82617AFC74C97B1EE9BA9C20EAE3DE6758A400
Chrome Cache Entry: 60	JSON data	BB98F2F2DE2293F412BF524B39A8CEBA	1F3103421B475438A3FC3A57CC3031DCE61F4AB6	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
Chrome Cache Entry: 61	ASCII text, with no line terminators	DE9219E425CC35B85E0FA0222F625269	676F3404E2D750681ECA701EFF3D954F1E4423B4	2D857A3660E0240BAC3AE9F98E2287F46EB6AEBF724775FE130AF2A6C7DFC3C4
Chrome Cache Entry: 62	JSON data	BB98F2F2DE2293F412BF524B39A8CEBA	1F3103421B475438A3FC3A57CC3031DCE61F4AB6	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
Chrome Cache Entry: 63	JSON data	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9	69E40D8C48A866A84046FD8BD17AF47FF02B79A4	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
Chrome Cache Entry: 64	ASCII text, with no line terminators	728A552FDE1B2E387C2B30240D2BFEBC	83DD48BFE3AFEE68F6BDD6109F801EB367D4A76F	C9350A79295E126C749B7E05F7856568B494FF778B9BB09A5C3D57DA469A1839
Chrome Cache Entry: 65	JSON data	BB98F2F2DE2293F412BF524B39A8CEBA	1F3103421B475438A3FC3A57CC3031DCE61F4AB6	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
Chrome Cache Entry: 66	JSON data	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9	69E40D8C48A866A84046FD8BD17AF47FF02B79A4	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
Chrome Cache Entry: 67	JSON data	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9	69E40D8C48A866A84046FD8BD17AF47FF02B79A4	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
Chrome Cache Entry: 68	JSON data	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9	69E40D8C48A866A84046FD8BD17AF47FF02B79A4	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
Chrome Cache Entry: 69	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	2105BEE9318C22A57F94DD7FE84CF39A	C12BE9DD779AE740753E91A22391EEFA68457C7C	948771AF40F8089DFCEF398D19228B99F70659331E0EB3C67678472683B9929F
Chrome Cache Entry: 70	JSON data	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9	69E40D8C48A866A84046FD8BD17AF47FF02B79A4	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
Chrome Cache Entry: 71	GIF image data, version 89a, 32 x 16	078DA0AE946B8B0F93E7A519620263B4	A55C769A04123CDD5F0B40EADA86108222EB4C78	B034AF69511E27C742248526B5E3ED0A47E862CB9CC5D18EAD972984A664F388
Chrome Cache Entry: 72	JSON data	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9	69E40D8C48A866A84046FD8BD17AF47FF02B79A4	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
Chrome Cache Entry: 73	Web Open Font Format (Version 2), TrueType, length 84396, version 2.983	8A54EA1AEB67D07C751BD5F03068317B	CFBEE4F2FD7F359A2A60648BB6797CAC1FD4DA3E	4230A20B841519BDBE4B0C154BAD414E017CF80B3918127D45C4F907EEA07280
Chrome Cache Entry: 74	GIF image data, version 89a, 32 x 16	078DA0AE946B8B0F93E7A519620263B4	A55C769A04123CDD5F0B40EADA86108222EB4C78	B034AF69511E27C742248526B5E3ED0A47E862CB9CC5D18EAD972984A664F388
Chrome Cache Entry: 75	ASCII text, with no line terminators	8672D802BB4A0493D39E73BA9D6261B7	0BCB6C17CBD38BC47E95785DBEEE49E799A43131	C507F872DC381ABB17C9CBFF3CBC73241104CC662E5C82224AF019B6A2949ADF
Chrome Cache Entry: 76	ASCII text, with very long lines (1577)	D788F620DAAC96866510DC0A7D9F98AD	8524558C1BA03E37F6E4E8F115A1B2D2D2155B68	9AC94DADD1157C0CF080BE5D444EE2C50285A49863F7212D02CD94B4DE653FA5
Chrome Cache Entry: 77	Unicode text, UTF-8 text, with very long lines (65474), with no line terminators	7E8250DB56CFF1F7D71D910DDEB6B271	AC55571605ED21CC10C43193C2760E7D0BB3B88D	C435971B47F43114516DF13787BB311D36509AAE778898567C599814F26B8BA7
Chrome Cache Entry: 78	ASCII text, with very long lines (65451)	C59BE778048F1A5179DF8BD741429A37	D1E974F439569A07D31BEDAA533B0FD64C1430BA	FE6B003A9ADE80729CAFF5BAD800A95346030540C77CE6456EEFFA35FBD444A9
Chrome Cache Entry: 79	JSON data	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9	69E40D8C48A866A84046FD8BD17AF47FF02B79A4	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
Chrome Cache Entry: 80	JSON data	8C814C47925E9B2FF056DFA7D3690CC8	4183EC6DCFA17F9BAA7A00977D01B96AC302D801	2070E9EC5EA66461693A174CF782EFA1090E0CA1988968CC1115D019E7B80A95
Chrome Cache Entry: 81	SVG Scalable Vector Graphics image	5AA45DEFD7EBE1558D1F57048DA87EE1	8B76F1D206C5D0FD80A370B237B1FDF55FF4E5DB	4C240FFD620AD5DC2BD4DCD52F3D6E14F0C77CC4E419E6670B493DDE2302E395
Chrome Cache Entry: 82	Unicode text, UTF-8 text, with very long lines (52751), with no line terminators	51EEC369503CF284FDB628E0F1A21150	87E9B7CE8CA6DC2C3632956095D6468BB4053198	8BFE7238019E3C4D87E60E2BC55E0E2D290F1BD3B8CD2D17228AF7509E06EF09
Chrome Cache Entry: 83	JSON data	BB98F2F2DE2293F412BF524B39A8CEBA	1F3103421B475438A3FC3A57CC3031DCE61F4AB6	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
Chrome Cache Entry: 84	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	2105BEE9318C22A57F94DD7FE84CF39A	C12BE9DD779AE740753E91A22391EEFA68457C7C	948771AF40F8089DFCEF398D19228B99F70659331E0EB3C67678472683B9929F
Chrome Cache Entry: 85	JSON data	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9	69E40D8C48A866A84046FD8BD17AF47FF02B79A4	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
Chrome Cache Entry: 86	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators	5CF462FE841E41D831BACB15EB193459	AF64A3031A44AF5B78432A60B14B69D33A6C50DF	C75391943BB1CAF2BA1CA658EAB5975B43A423BF450AFC279F74E683B7DC7FB7
Chrome Cache Entry: 87	JSON data	BB98F2F2DE2293F412BF524B39A8CEBA	1F3103421B475438A3FC3A57CC3031DCE61F4AB6	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
Chrome Cache Entry: 88	JSON data	8C814C47925E9B2FF056DFA7D3690CC8	4183EC6DCFA17F9BAA7A00977D01B96AC302D801	2070E9EC5EA66461693A174CF782EFA1090E0CA1988968CC1115D019E7B80A95
Chrome Cache Entry: 89	ASCII text, with no line terminators	37C53670247FD656651CBB50A7116C50	D4F4FE0085C2E8C15EDA0955E8A0562059F0E812	98DD6979DFFCC0205FE53F604C2A96542E5DD391EABF9BEA5D932C9B54566B72
Chrome Cache Entry: 90	JSON data	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9	69E40D8C48A866A84046FD8BD17AF47FF02B79A4	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
Chrome Cache Entry: 91	JSON data	BB98F2F2DE2293F412BF524B39A8CEBA	1F3103421B475438A3FC3A57CC3031DCE61F4AB6	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
Chrome Cache Entry: 92	ASCII text, with no line terminators	DE9219E425CC35B85E0FA0222F625269	676F3404E2D750681ECA701EFF3D954F1E4423B4	2D857A3660E0240BAC3AE9F98E2287F46EB6AEBF724775FE130AF2A6C7DFC3C4
Chrome Cache Entry: 93	JSON data	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9	69E40D8C48A866A84046FD8BD17AF47FF02B79A4	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
Chrome Cache Entry: 94	JSON data	BB98F2F2DE2293F412BF524B39A8CEBA	1F3103421B475438A3FC3A57CC3031DCE61F4AB6	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /s/ktl5qtvf2us1megbgmjabwqaxcdy69b5 HTTP/1.1Host: app.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notes/1506503934565?s=ktl5qtvf2us1megbgmjabwqaxcdy69b5 HTTP/1.1Host: app.box.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: z=j7masphnumonh18fajjanf5art; box_visitor_id=662251b51c7c34.67511927; bv=EUG-6777; cn=59; site_preference=desktop
Source: global traffic	HTTP traffic detected: GET /p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://app.box.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/unknown HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /split-proxy/splitChanges?since=-1 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /app_init HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/unknown HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /analytics-events/ HTTP/1.1Host: client-log.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/2 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/662251b51c7c34.67511927 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3qPn HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-2c52fe1ff77d1ee218b536f0611d594b-13a893f4ed8bdcb8-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/splitChanges?since=-1 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/662251b51c7c34.67511927 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/2 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3qPn HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0Sec-WebSocket-Key: /J3wj3nPJm4THVgQDajHiQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5O&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-4fd7cc0bbe77dc0f77fc604b3ea8dc4d-b1373f5858c38c47-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFS&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-e7d920b8d99ee5c85dbca0509709772e-c169ce5ef942b7b2-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5O&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5B&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFY&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Sy9W5DN2-2-8u300nbS5VrFuZ9IyYqsdcKlo
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176074 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-6fe2b4fddd1e21e36e7f36d487dca0bc-997cf4bb2e21ff56-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIYX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIY
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=oSDdrs2t-Mk9447SW1APWccMhUC_FV7EO5Uo
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tCg HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-811f476b4a6bd385a3a711102ce32017-1be6c7cc10cf00ef-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=4zHZx9YO-p05aqZhxN7I-KIByt3weokWqenE
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176074 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=4zHZx9YO-p05aqZhxN7I-KIByt3weokWqenE
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQSec-WebSocket-Key: Ih8rT2cmhWVdNd34HYDQUg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tCg HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN5&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-c75dee2fda321551f69d2428f7db85e6-c3a5f54d956de2d7-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN4&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tYJ&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-11e06ddd05e998b3a8dccbc3e63dad45-d5f9f3b6a039f9c4-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN5&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=GXzSYyvy-5EqYVuMy_sICELSe48haLMEgkhk
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176075 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-584e153d2a6def1cdaf2bf965dd33d29-59203c46cbeb9763-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRnoX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRno
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=zYF8l6fC--7mEQlxBZ1JVfBjN1KqeoTMjQcg
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wba HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-f107575ab1fc9bedc144949765f75c7e-98ab8f7196385bc1-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Kx8uvUox-o7LzybsniwSMCfZHZZ--oct6B9Q
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176075 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Kx8uvUox-o7LzybsniwSMCfZHZZ--oct6B9Q
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtISec-WebSocket-Key: q3JpZlGJ39tbC8yiPW3DIQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wba HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnV&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-ddba8de75f933ebf182857cca96d6352-e56e74954625a0bf-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnU&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wxZ&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-61f6c30fab174ca0590f49a1f3574b9f-a860104660a7a6cb-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnV&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wy0&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wxZ&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=fuBzQldR-yl8skRxoC-vPHHpRxH62oZsNlbY
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176076 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-d0589e719fd5bc702499c8834785e6f7-321dc32ee24dd074-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4X-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=mKLDcNZh-kWUBSkTSr7UeP0Lq6i08kNXjRgE
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176076 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=PshyhJSg-V4FOltDvoyVO-HKqb5IqJdP9ZE4
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3ywk HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-ded7a2db0ff89777c514f3b9eaa872f1-e5ed11a739bcc1b1-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=PshyhJSg-V4FOltDvoyVO-HKqb5IqJdP9ZE4
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3ywk HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRISec-WebSocket-Key: SsO1y5w0b9OkiWJvAfjQcA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4j&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-7f96f6e3a2820ac4370c481e3dbd2a7e-a74e439a57e090fd-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEW&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-b3b1795d789b9f88f75abc33d037ab5d-796c25b15e119e6f-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4j&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4i&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEn&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEW&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=H0pjsP8S-aapYvZiL4A7Xvg_cuMen8RhEQHM
Source: global traffic	HTTP traffic detected: GET /analytics-events/ HTTP/1.1Host: client-log.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176077 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-d9bd6d0857b54257ca6fcbb3021ac515-607d120236528613-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: 3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeaboX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=qL421Q3Y-DHbwL3Us026D-6ZnL6wd2hZ7neI
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176077 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=Kra6tEN3-UknRPd-jNPRyeLYyeWWtvFEFzN8
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3_ph HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-1476386ad506d9cf6a46e75ceda94108-da20472302cdf4c8-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=Kra6tEN3-UknRPd-jNPRyeLYyeWWtvFEFzN8
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64Sec-WebSocket-Key: O2NAVvhZJlaMXHv9jRuq6g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__v&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-cc7233bb282713604fad7cd9252cb43b-3cdf72d7c7a1cde5-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3_ph HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__r&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs4099&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-d8780f4ed13d0d9ba15b37202a71f4dd-ce9977725af31c66-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__v&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=wvT7qnim-RAM13BOJK1p8eBmmXR-M1xYK0Lg

Source: unknown

DNS traffic detected: queries for: app.box.com

Source: unknown

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:00 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 10Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:05 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIY; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 4Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:12 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=gCkgo1TL-53Bi6mcxFb2zTEtsKmEqH-lzVvw; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 5Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:15 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRno; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 10Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:26 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=qCCLncGd-BD2jG__VBdfo33kMbWTpSoyZNxA; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 5Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 16Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:36 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 197Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:38 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 2Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:48 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 3Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:50 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=uGsmYeoR-4zfRhu-wJTwE1n8hI1rHeZuG9hM; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 39Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff
Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff2
Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff
Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff2

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@16/64@16/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2352,i,14210594405034482032,7056984617740037461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2352,i,14210594405034482032,7056984617740037461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

ID:	1428724
Product:	CloudBasic
Start time:	13:11:53
Start date:	19.04.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5