Edit tour

Windows Analysis Report
https://www.dropbox.com/l/scl/AACoEj8MwJvgoVsaEdOzfnita1SALx7nEnI

Overview

General Information

Sample URL:	https://www.dropbox.com/l/scl/AACoEj8MwJvgoVsaEdOzfnita1SALx7nEnI
Analysis ID:	1523782
Infos:

Detection

Score:	4
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected hidden input values containing email addresses (often used in phishing pages)

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1980,i,8264472513006495090,14481917755883218887,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/l/scl/AACoEj8MwJvgoVsaEdOzfnita1SALx7nEnI" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0

HTTP Parser: lydia.evans@redfin.com

Source: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&should_show_floating_button=undefined&should_auto_open_options=undefined&locale_override=en&default_non_ccpa=true&redesign_flag=true&width=1280
Source: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_657971_779739&as=lR2EX9llacyIJ81LXdG3hw&hl=en
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&should_show_floating_button=true&should_auto_open_options=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-10-02T00%253A24%253A29.649Z%2522%252C%2522expireDate%2522%253A%25222025-04-02T00%253A24%253A29.649Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A1%257D&default_non_ccpa=true&redesign_flag=true&width=1280
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: Iframe src: https://marketing.dropbox.com/forgot?referrer=
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&should_show_floating_button=true&should_auto_open_options=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-10-02T00%253A24%253A29.649Z%2522%252C%2522expireDate%2522%253A%25222025-04-02T00%253A24%253A29.649Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A1%257D&default_non_ccpa=true&redesign_flag=true&width=1280
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: Iframe src: https://marketing.dropbox.com/forgot?referrer=

HTTP Parser: Number of links: 0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?dl=0&oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1

HTTP Parser: Base64 decoded: e_viewer/static/scl_page_file(54086638beb629b182921a25e0d73aa673306ae3prod

HTTP Parser: Title: Sign In - Google Accounts does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0	HTTP Parser: No favicon
Source: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No favicon
Source: https://help.dropbox.com/security/password-reset	HTTP Parser: No favicon
Source: https://help.dropbox.com/security/password-reset	HTTP Parser: No favicon
Source: https://help.dropbox.com/security/password-reset	HTTP Parser: No favicon

Source: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No <meta name="author".. found

Source: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/forgot?email_from_login=lydia.evans@redfin.com	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49841 version: TLS 1.0

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.5:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.5:50113 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49841 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183

Source: global traffic	HTTP traffic detected: GET /l/scl/AACoEj8MwJvgoVsaEdOzfnita1SALx7nEnI HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?dl=0&oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Focmxhujczma623yxj6y29%2FAttention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper&request_id=3b76dba40c8843bf9ed164e01f7551fe&time=1727828636 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?dl=0&oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Focmxhujczma623yxj6y29%2FAttention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper&request_id=3b76dba40c8843bf9ed164e01f7551fe&time=1727828636 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&should_show_floating_button=undefined&should_auto_open_options=undefined&locale_override=en&default_non_ccpa=true&redesign_flag=true&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?default_non_ccpa=true&gpc_signal=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fwww.dropbox.com&redesign_flag=true&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=dropbox.com&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bWuzpBLRPHwvWmD&MD=kVSpabXn HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?dl=0&oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?dl=0&oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=918aac62942e4146a4f155f36bbbe1fd&time=1727828646 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?default_non_ccpa=true&gpc_signal=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fwww.dropbox.com&redesign_flag=true&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=dropbox.com&width=1280Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=918aac62942e4146a4f155f36bbbe1fd&time=1727828646 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /log/blocked HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /2/auth_logger/log_auth_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:15.789Z","expireDate":"2025-04-02T00:24:15.789Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_fingerprintjs_fpjs-pro-static_fp-vflEZBZN8.js HTTP/1.1Host: www.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sso_state HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:15.789Z","expireDate":"2025-04-02T00:24:15.789Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?hl=en&onload=recaptchaOnloadCallback&render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_fingerprintjs_fpjs-pro-static_fp-vflEZBZN8.js HTTP/1.1Host: www.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/account/check_user_with_email_exists HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:15.789Z","expireDate":"2025-04-02T00:24:15.789Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /web-grpc/edison/fingerprintjs.FingerPrintJSService/FetchConstants HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:15.789Z","expireDate":"2025-04-02T00:24:15.789Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:15.789Z","expireDate":"2025-04-02T00:24:15.789Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?hl=en&onload=recaptchaOnloadCallback&render=explicit HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=rTTCnt0JMp_DxTthZWvkvx27; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:15.789Z","expireDate":"2025-04-02T00:24:15.789Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: dropboxcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /funcaptcha.js HTTP/1.1Host: dropboxcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dropboxcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /funcaptcha.js HTTP/1.1Host: dropboxcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /alternate_wtl_browser_performance_info HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:29.649Z","expireDate":"2025-04-02T00:24:29.649Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:29.649Z","expireDate":"2025-04-02T00:24:29.649Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:29.649Z","expireDate":"2025-04-02T00:24:29.649Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:29.649Z","expireDate":"2025-04-02T00:24:29.649Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:29.649Z","expireDate":"2025-04-02T00:24:29.649Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:29.649Z","expireDate":"2025-04-02T00:24:29.649Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzI0Mzg0ODkzNDAzNjY4ODI4OTUzNTY1ODE4NzAyMTg2OTMxMjY5; t=rTTCnt0JMp_DxTthZWvkvx27; __Host-js_csrf=rTTCnt0JMp_DxTthZWvkvx27; __Host-ss=xFIaxnjNlU; locale=en; ets=Ad1Kbb0YMxFo7lLKtZjkIYUCiFqIF4qME12Agg7GHNRMDsH%2BcomnWdFmUGAgZuNs7pnG3f27%2BGJRi0samxBBuK%2BL7DVdM8gXgLhznNIKHqllLDPPdpmikCT78/7xIBmeBGCfuYbRmHix%2BjpxS%2B1NZPHYat%2BFub6aaMjW/le/xAOa3Q%3D%3D; __Host-logged-out-session=ChAVYYtUMv%2Fxu0AKtTlGXBNUEJul8rcGGi5BTEh1alByVExhYzFMblhHUTJYdlg2ZHZMUmYzMTZtcjBHTTFOeG02aG5zSTdR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-02T00:24:29.649Z","expireDate":"2025-04-02T00:24:29.649Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /forgot?email_from_login=lydia.evans@redfin.com HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8"

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report
https://www.dropbox.com/l/scl/AACoEj8MwJvgoVsaEdOzfnita1SALx7nEnI

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.dropbox.com/l/scl/AACoEj8MwJvgoVsaEdOzfnita1SALx7nEnI

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

Windows Analysis Report
https://www.dropbox.com/l/scl/AACoEj8MwJvgoVsaEdOzfnita1SALx7nEnI