Edit tour

Windows Analysis Report
https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0

Overview

General Information

Sample URL:	https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0
Analysis ID:	1558828
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2000,i,17861685394543597990,1945662792594663214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5608 --field-trial-handle=2000,i,17861685394543597990,1945662792594663214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 --field-trial-handle=2000,i,17861685394543597990,1945662792594663214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

String found in binary or memory: _.uq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.uq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.uq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.uq(_.Dq(c))+"&hl="+_.uq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.uq(m)+"/chromebook/termsofservice.html?languageCode="+_.uq(d)+"&regionCode="+_.uq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: uc4bd55cb38b10ec4d5d691ffe93.previews.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: beacon.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: fp.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: use1-turn.fpjs.io
Source: global traffic	DNS traffic detected: DNS query: www.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: c.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com

Source: unknown

HTTP traffic detected: POST /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveContent-Length: 488sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&should_show_floating_button=undefined&should_auto_open_options=undefined&width=1280&locale_override=en&default_non_ccpa=true
Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_74665_532967&as=z%2BSQpyREh2fr%2Br8%2Fj0hGwg&hl=en
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-407468833&timestamp=1732046094728
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-407468833&timestamp=1732046094728
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-407468833&timestamp=1732046094728
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: Iframe src: /_/bscframe

Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: No favicon

Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59	HTTP Parser: No <meta name="author".. found

Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWeitTUXB5UkVoMmZyK3I4L2owaEd3ZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGM3MTg3MTllMGY1ZjZjMDNiNDI4NDRjMjhkZWJlMmUwZjE0OGI3ZmI4MzNmM2VkNDZkZjAzZmI2NDhjZjZlNGE%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S1832604422%3A1732046090731177&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANJ3gB2T-k8xSKSVz2YMZsn_U9z_sQAd3KJ50rjOggXdObTJjlN2fM8_qS93Jlritz3XGiSmTxhU9Rnb6KH3h2tCvoEL9wubuTUBuzKb6XsTqslxmWRcl4Z0GCWaSo-b42Vaa8GEHvEz0cYetbGGUwDl9rI8xf1wweahETjhKR52Zjnasnv-Hd1DNqMIgGnozU6WioDlv5eLOQmHVXpAo59...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:50292 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50307 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:15 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 111f98ea40a04730af9ed21cda3455c5Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:16 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: aba8cfa586234e7a8ba577b59f5fcb47Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:16 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 112c1c85fa544efab90bbc5602dd689dConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: e049d5e77ca043379c4dd33feb0781d9Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:18 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 1353b8f60fd1402d8f12ecb3db87a938Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:30 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 06cf0747c00b4be99f8aeb9c3b2a4572Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:30 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d213314e56e040f68cf77eb5bd3846a4Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:34 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 5769b628736d49b5b35009d1364e1063Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:35 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 675b98070fce4dc9874144f2fdef0583Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:41 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 15cf343507624cc89a205f223563f9e5Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:41 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: aba20c8686784596b8cd6f87eaf98576Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:41 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 970e3e89634146ea89cba3f71110e7a8Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:41 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 4d46f2d20697432fb4e32ff600fcd85dConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:42 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 113e80d6091e4bfda82660d1a4ce8738Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:43 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: a0e6ce7b35164b3480a6efe17d9d40d2Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:54:44 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d7049076c70e40ceaa541d988b00031aConnection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2000,i,17861685394543597990,1945662792594663214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5608 --field-trial-handle=2000,i,17861685394543597990,1945662792594663214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 --field-trial-handle=2000,i,17861685394543597990,1945662792594663214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2000,i,17861685394543597990,1945662792594663214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5608 --field-trial-handle=2000,i,17861685394543597990,1945662792594663214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 --field-trial-handle=2000,i,17861685394543597990,1945662792594663214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: global traffic	HTTP traffic detected: GET /scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip&request_id=7d7b2486e4584a999424ec26c9eafcd6&time=1732046046 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip&request_id=7d7b2486e4584a999424ec26c9eafcd6&time=1732046046 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=DCvvtPZkKBWxuqnbQ6MakiCg; locale=en
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&should_show_floating_button=undefined&should_auto_open_options=undefined&width=1280&locale_override=en&default_non_ccpa=true HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
Source: global traffic	HTTP traffic detected: GET /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
Source: global traffic	HTTP traffic detected: GET /2/stickers/get_stickers HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?default_non_ccpa=true&gpc=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=dropbox.com&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD5GxVuxwyAi1Y4u9JvhEZGEObZ87kGGi5BTGk4TE5PM01TeW9zTU9uSnhCSHpmYldEN19qOFIzLXZ6bm0yR2hid2NBbWNB
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=DCvvtPZkKBWxuqnbQ6MakiCg; locale=en
Source: global traffic	HTTP traffic detected: GET /2/file_presence/logged_out/get_pass_transmitter_token HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=hDCWfexGGxy7DTz&MD=CVFp241N HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /share_tib_log_unauth HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=6b57b0eec79a465786a6af3633ae3b30&time=1732046056 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?default_non_ccpa=true&gpc=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=dropbox.com&width=1280Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=DCvvtPZkKBWxuqnbQ6MakiCg; locale=en
Source: global traffic	HTTP traffic detected: GET /2/comments2/logged_out/list_comments HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=6b57b0eec79a465786a6af3633ae3b30&time=1732046056 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn
Source: global traffic	HTTP traffic detected: GET /2/seen_state/logged_out/log_file_view HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=DCvvtPZkKBWxuqnbQ6MakiCg; locale=en
Source: global traffic	HTTP traffic detected: GET /1/update HTTP/1.1Host: beacon.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=DCvvtPZkKBWxuqnbQ6MakiCg; locale=en
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=DCvvtPZkKBWxuqnbQ6MakiCg; locale=en
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=DCvvtPZkKBWxuqnbQ6MakiCg; locale=en
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=DCvvtPZkKBWxuqnbQ6MakiCg; locale=en
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:54:22.510Z","expireDate":"2025-05-19T18:54:22.510Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:54:22.510Z","expireDate":"2025-05-19T18:54:22.510Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:54:22.510Z","expireDate":"2025-05-19T18:54:22.510Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log/blocked HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:54:22.510Z","expireDate":"2025-05-19T18:54:22.510Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_contentsquare-vfl0UsAF-.js HTTP/1.1Host: www.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_contentsquare-vfl0UsAF-.js HTTP/1.1Host: www.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pageview?ex=&pvt=n&la=en-US&uc=0&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip%3Frlkey%3D7okspommyssur9a8u9bc5p2q4%26e%3D1%26st%3Dac94myew%26dl%3D0&dr=&dw=1280&dh=907&ww=1280&wh=907&sw=1280&sh=1024&uu=3505a668-fdc5-a0e8-9be0-faff4c3fc912&sn=1&hd=1732046073&v=15.16.5&pid=5416&pn=1&r=489993 HTTP/1.1Host: c.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/auth_logger/log_auth_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:54:22.510Z","expireDate":"2025-05-19T18:54:22.510Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; _cs_c=0; _cs_id=3505a668-fdc5-a0e8-9be0-faff4c3fc912.1732046073.1.1732046073.1732046073.1724166274.1766210073201.1; _cs_s=1.0.0.1732047873222
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:54:22.510Z","expireDate":"2025-05-19T18:54:22.510Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; _cs_c=0; _cs_id=3505a668-fdc5-a0e8-9be0-faff4c3fc912.1732046073.1.1732046073.1732046073.1724166274.1766210073201.1; _cs_s=1.0.0.1732047873222
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en; __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:54:22.510Z","expireDate":"2025-05-19T18:54:22.510Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; _cs_c=0; _cs_id=3505a668-fdc5-a0e8-9be0-faff4c3fc912.1732046073.1.1732046073.1732046073.1724166274.1766210073201.1; _cs_s=1.0.0.1732047873222

Source	Detection	Scanner	Label
https://replay.dropbox.com/settings	0%	Avira URL Cloud	safe
https://replay.dropbox.com/?login=true&referrer=july_2024_release	0%	Avira URL Cloud	safe
http://capture.dropbox.com/open	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
use1-turn.fpjs.io	35.157.212.223	true	false	high
csp.withgoogle.com	142.250.186.81	true	false	high
bolt.v.dropbox.com	162.125.21.3	true	false	high
edge-block-previews-env.dropbox-dns.com	162.125.66.16	true	false	high
c.ba.contentsquare.net	54.247.108.216	true	false	high
play.google.com	142.250.186.78	true	false	high
www3.l.google.com	142.250.184.238	true	false	high
static-pdx.v.dropbox.com	162.125.40.3	true	false	high
www-env.dropbox-dns.com	162.125.66.18	true	false	high
d-edge.v.dropbox.com	162.125.1.20	true	false	high
www.google.com	142.250.186.164	true	false	high
googlehosted.l.googleusercontent.com	142.250.185.65	true	false	high
fp.dropbox.com	13.32.121.8	true	false	high
cfl.dropboxstatic.com	unknown	unknown	false	high
lh3.googleusercontent.com	unknown	unknown	false	high
www.dropboxstatic.com	unknown	unknown	false	high
beacon.dropbox.com	unknown	unknown	false	high
accounts.youtube.com	unknown	unknown	false	high
d.dropbox.com	unknown	unknown	false	high
uc4bd55cb38b10ec4d5d691ffe93.previews.dropboxusercontent.com	unknown	unknown	false	unknown
www.dropbox.com	unknown	unknown	false	high
c.contentsquare.net	unknown	unknown	false	high

Name	Malicious	Reputation
https://www.dropbox.com/en/ccpa_iframe?default_non_ccpa=true&gpc=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=dropbox.com&width=1280	false	high
https://fp.dropbox.com/CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18	false	high
https://www.dropbox.com/2/stickers/get_stickers	false	high
https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	false	high
https://www.dropbox.com/log/ux_analytics	false	high
https://www.dropbox.com/2/pap_event_logging/log_events?t=4mr8FYdMzQgOpfFmYVZWcQDxuVKX2ydKkAe9yiesbRU	false	high
https://www.dropbox.com/2/comments2/logged_out/list_comments	false	high
https://www.dropbox.com/2/seen_state/logged_out/log_file_view	false	high
https://www.dropbox.com/2/files/get_file_content_metadata	false	high
https://www.dropbox.com/2/pap_event_logging/log_events	false	high
https://www.dropbox.com/log_js_sw_data	false	high
https://www.dropbox.com/log/file_preview	false	high
https://www.dropbox.com/pithos_api_helper_validation	false	high
https://www.google.com/favicon.ico	false	high
https://www.dropbox.com/sso_state	false	high
https://www.dropboxstatic.com/static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_contentsquare-vfl0UsAF-.js	false	high
https://c.contentsquare.net/pageview?ex=&pvt=n&la=en-US&uc=0&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip%3Frlkey%3D7okspommyssur9a8u9bc5p2q4%26e%3D1%26st%3Dac94myew%26dl%3D0&dr=&dw=1280&dh=907&ww=1280&wh=907&sw=1280&sh=1024&uu=3505a668-fdc5-a0e8-9be0-faff4c3fc912&sn=1&hd=1732046073&v=15.16.5&pid=5416&pn=1&r=489993	false	high
https://www.dropbox.com/pithos/api_helper_validation	false	high
https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation	false	high
https://c.contentsquare.net/v2/events?uu=3505a668-fdc5-a0e8-9be0-faff4c3fc912&sn=1&hd=1732046073&v=15.16.5&pid=5416&pn=1&sr=100&mdh=907&str=763&di=4184&dc=34021&fl=34027&ct=0	false	high
https://lh3.googleusercontent.com/Of9rnPCEVYaQ1lNG-IdCWTPDes_jWXhIJzu9Z5deWtKLrDfmQlW9CychHVNU0HcA1PY	false	high
https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0	false	high
https://www.dropbox.com/2/auth_logger/log_auth_event	false	high
https://www.dropbox.com/page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=6b57b0eec79a465786a6af3633ae3b30&time=1732046056	false	high
https://csp.withgoogle.com/csp/report-to/gse_qebhlk	false	high
https://www.dropbox.com/2/client_metrics/record	false	high
https://www.dropbox.com/log/blocked	false	high
https://www.dropbox.com/share_tib_log_unauth	false	high
https://www.dropbox.com/log/telemetry	false	high

Name	Source	Malicious	Antivirus Detection	Reputation
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/sign-eid-ui/sign-eid	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate	chromecache_711.2.dr, chromecache_298.2.dr	false		high
https://help.dropbox.com/storage-space/team-storage-report	chromecache_716.2.dr, chromecache_360.2.dr	false		high
https://www.dropbox.com/dash	chromecache_558.2.dr	false		high
https://play.google.com/work/enroll?identifier=	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://policies.google.com/terms/service-specific	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-mul	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://g.co/recover	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_306.2.dr	false		high
https://www.dropbox.com/overview	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/jan2024/work-desk/work_desk.png	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://replay.dropbox.com/settings	chromecache_536.2.dr, chromecache_558.2.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/capture-permissions-	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://www.dropbox.com/capture	chromecache_716.2.dr, chromecache_360.2.dr	false		high
https://policies.google.com/technologies/cookies	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	chromecache_488.2.dr, chromecache_461.2.dr	false		high
https://help.dropbox.com/share	chromecache_716.2.dr, chromecache_360.2.dr	false		high
https://policies.google.com/terms	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://www.google.com	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-timeline-editing	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://help.dropbox.com/view-edit/edit-media-files	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://www.dropbox.com/privacy	chromecache_493.2.dr, chromecache_431.2.dr	false		high
https://policies.google.com/terms/location	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://assets.dropbox.com/	chromecache_651.2.dr, chromecache_433.2.dr	false		high
https://www.dropbox.com/dash/get-started	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://help.dropbox.com/organize/dropbox-automations	chromecache_360.2.dr, chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://www.dropbox.com/replay	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://help.dropbox.com/sync/make-files-online-only	chromecache_360.2.dr, chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://www.dropbox.com	chromecache_434.2.dr, chromecache_406.2.dr	false		high
https://play.google.com/apps/testing/com.dropbox.android	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://youtube.com/t/terms?gl=	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://www.google.com/intl/	chromecache_306.2.dr	false		high
https://www.hellosign.com/features/qualified-electronic-signatures	chromecache_716.2.dr, chromecache_360.2.dr, chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_344.2.dr, chromecache_310.2.dr	false		high
https://help.dropbox.com	chromecache_493.2.dr, chromecache_431.2.dr	false		high
https://help.dropbox.com/view-edit/image-search	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://replay.dropbox.com/?login=true&referrer=july_2024_release	chromecache_536.2.dr, chromecache_558.2.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/mobile_app_beta/mobile-	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/replay-transcript-ui	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://www.docsend.com/features/analytics/	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/1a-dash-answer/1a-da	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://help.dropbox.com/view-edit/search	chromecache_360.2.dr	false		high
https://www.dropbox.com/getpasswords	chromecache_716.2.dr, chromecache_360.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_306.2.dr	false		high
https://help.dropbox.com/integrations/move-google-docs	chromecache_608.2.dr, chromecache_378.2.dr	false		high
https://www.hellosign.com/features/mobile	chromecache_716.2.dr, chromecache_360.2.dr	false		high
https://help.dropbox.com/view-edit/add-dropboxsign-signature-PDF	chromecache_716.2.dr, chromecache_360.2.dr	false		high
https://help.dropbox.com/view-edit/video-length	chromecache_716.2.dr, chromecache_360.2.dr	false		high
https://policies.google.com/privacy	chromecache_306.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/coupon/coupon-2048x1	chromecache_536.2.dr, chromecache_558.2.dr	false		high
http://capture.dropbox.com/open	chromecache_536.2.dr, chromecache_558.2.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/replay-	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-ai-for-search/db	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://play.google/intl/	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/search_in_replay/replay	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://families.google.com/intl/	chromecache_306.2.dr	false		high
https://policies.google.com/technologies/location-data	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://dropbox.com/overview	chromecache_716.2.dr, chromecache_360.2.dr	false		high
https://replay.dropbox.com	chromecache_360.2.dr, chromecache_536.2.dr, chromecache_558.2.dr	false		high
http://dropbox.com/search#ai_onboarding	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/storage-organization	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://reactjs.org/link/react-polyfills	chromecache_517.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration	chromecache_488.2.dr, chromecache_461.2.dr	false		high
https://www.dropbox.com/requests	chromecache_716.2.dr, chromecache_360.2.dr, chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://meet.google.com	chromecache_488.2.dr, chromecache_461.2.dr	false		high
https://www.dropbox.com/dash/setup/install-app	chromecache_360.2.dr	false		high
https://help.dropbox.com/account-access/locked-state	chromecache_716.2.dr, chromecache_360.2.dr, chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://help.dropbox.com/teams-admins/team-member/alpha-beta-product	chromecache_536.2.dr, chromecache_558.2.dr	false		high
https://support.google.com/accounts?p=new-si-ui	chromecache_688.2.dr, chromecache_306.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-man	chromecache_536.2.dr, chromecache_558.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
54.247.108.216	c.ba.contentsquare.net	United States	16509	AMAZON-02US	false
18.196.235.131	unknown	United States	16509	AMAZON-02US	false
13.32.121.124	unknown	United States	16509	AMAZON-02US	false
162.125.8.20	unknown	United States	19679	DROPBOXUS	false
172.217.23.110	unknown	United States	15169	GOOGLEUS	false
162.125.40.3	static-pdx.v.dropbox.com	United States	19679	DROPBOXUS	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
162.125.21.3	bolt.v.dropbox.com	United States	19679	DROPBOXUS	false
142.250.185.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
162.125.66.16	edge-block-previews-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
142.250.186.78	play.google.com	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
162.125.66.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
172.217.16.129	unknown	United States	15169	GOOGLEUS	false
13.32.121.8	fp.dropbox.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
162.125.1.20	d-edge.v.dropbox.com	United States	19679	DROPBOXUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.81	csp.withgoogle.com	United States	15169	GOOGLEUS	false
142.250.184.238	www3.l.google.com	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1558828
Start date and time:	2024-11-19 20:53:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/682@58/22

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7449)
Category:	downloaded
Size (bytes):	7853
Entropy (8bit):	5.288973187444755
Encrypted:	false
SSDEEP:	192:Yg0eGZG03T1YgIfW6E3UjnYduhdgRENQKgN2uFj6:Yg0eGZd1PIe6E3UtN4N2v
MD5:	B777B8B1FC447EB6F8367B2E5471F701
SHA1:	AC756ABDC0E25F657568B44FB1E0068C8E7787B5
SHA-256:	26465B28C7C8A0C217D6EB8CCB66D1DCD4F94181B2733ED8AB59E5959993DC91
SHA-512:	DEAB5C51FC1309699F0E929EFD6D13470D37D598B6666073C1F067996FA5787967E02BC020C03ABEC356177434C3672E9680A416C4BE91ADD3408D97DDD180B3
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_shareme24_browse_integration_index.after-display-vflt3e4sf.js
Preview:	!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[n]="c6371c78-eec6-3ee8-9253-cc45fdd77a54")}catch(e){}}();.define(["exports","react","./c_file_transfers_async_browse_entry_point_onboarding_modal_async","./e_file_viewer_static_scl_page_file","./e_data_modules_stormcrow","./e_edison","./c_utils_dsx_dsx-react","./c_common_logging-contexts_session-id-logging-metadata","./c_ts_utils","./e_core_exception","./c_bufbuild_protobuf_service-type","./c_api_v2_routes_password_confirmation_provider","./c_src_sink_index","./c_shareme24_browse_integration_logger","./c_src_common_constants","./c_core_i18n","metaserver/static/js/langpack","./c_lodash","./c_downloads","./c_core_notify","react-dom","./c_upload_kit_lib_types","metaserver/static/js/modules/constants/viewer","./c_api_v2_routes_team_provider","./c_api_v2_routes_folders_info_provider","./

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 19, 2024 20:54:02.473870039 CET	53	61399	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:02.526789904 CET	53	55474	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:03.560847044 CET	53	63982	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:04.143903971 CET	52579	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:04.144040108 CET	63937	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:04.150970936 CET	53	52579	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:04.151784897 CET	53	63937	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:05.784748077 CET	64566	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:05.786067009 CET	54001	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:06.134486914 CET	64721	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:06.135068893 CET	63723	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:06.141904116 CET	53	64721	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:06.142599106 CET	53	63723	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:09.044442892 CET	50938	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:09.044743061 CET	63606	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:09.396810055 CET	60995	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:09.397110939 CET	62763	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:09.403558016 CET	53	60995	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:09.404635906 CET	53	62763	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:11.416273117 CET	61594	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:11.416434050 CET	56732	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:11.423289061 CET	53	61594	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:11.424217939 CET	53	56732	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:12.485829115 CET	53871	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:12.486049891 CET	54377	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:12.496100903 CET	53	53871	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:12.510315895 CET	53	54377	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:13.147480011 CET	64198	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:13.147598982 CET	59398	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:13.165792942 CET	53	59398	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:13.168730021 CET	53	64198	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:15.045329094 CET	53	54786	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:15.864075899 CET	64262	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:15.864386082 CET	50582	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:15.871953964 CET	53	64262	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:15.885153055 CET	53	50582	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:16.384079933 CET	53	51834	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:17.792304039 CET	57720	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:17.792423964 CET	51124	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:17.799792051 CET	53	57720	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:17.800875902 CET	53	51124	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:19.245803118 CET	138	138	192.168.2.4	192.168.2.255
Nov 19, 2024 20:54:19.278145075 CET	50768	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:19.278637886 CET	52815	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:19.286147118 CET	53	52815	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:19.288760900 CET	53	50768	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:19.920538902 CET	59518	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:19.920722008 CET	65221	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:19.927352905 CET	53	59518	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:19.927789927 CET	53	65221	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:20.094640970 CET	62961	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:20.102557898 CET	53	62961	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:20.236125946 CET	60965	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:20.244456053 CET	53	60965	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:20.596220970 CET	52657	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:20.596438885 CET	56005	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:20.603809118 CET	53	56005	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:20.616148949 CET	53	52657	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:20.626514912 CET	53	55649	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:32.456862926 CET	55389	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:32.457045078 CET	63064	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:32.465387106 CET	53	55389	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:32.487289906 CET	53	63064	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:34.027699947 CET	54903	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:34.027837038 CET	58433	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:34.035185099 CET	53	54903	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:34.058592081 CET	53	58433	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:34.097779989 CET	56597	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:34.097959995 CET	62112	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:34.105637074 CET	53	56597	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:34.106137991 CET	53	62112	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:35.522317886 CET	53	50653	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:35.609791994 CET	53	59706	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:39.534107924 CET	53	61495	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:46.912174940 CET	58591	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:46.912322044 CET	65204	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:46.919035912 CET	53	65204	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:46.919296980 CET	53	58591	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:48.826700926 CET	54579	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:48.826812983 CET	51762	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:48.833911896 CET	53	51762	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:48.834062099 CET	53	54579	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:50.901899099 CET	55272	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:50.902087927 CET	52505	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:50.912760019 CET	53	55272	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:50.913168907 CET	53	52505	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:52.004025936 CET	54093	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:52.004224062 CET	60388	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:52.012027025 CET	53	60388	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:52.012043953 CET	53	54093	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:52.987901926 CET	53	63751	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:53.186724901 CET	57602	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:53.186913013 CET	62487	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:53.194250107 CET	53	57602	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:53.194284916 CET	53	62487	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:55.698584080 CET	59400	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:55.698797941 CET	52347	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:55.705666065 CET	53	59400	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:55.706300974 CET	53	52347	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:56.791588068 CET	54826	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:56.791896105 CET	63761	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:56.798831940 CET	53	63761	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:56.798845053 CET	53	54826	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:59.736011028 CET	62755	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:59.736150980 CET	56021	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:54:59.742763996 CET	53	62755	1.1.1.1	192.168.2.4
Nov 19, 2024 20:54:59.742844105 CET	53	56021	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:01.972301960 CET	53	58071	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:02.378329992 CET	53	53443	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:06.639884949 CET	51997	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:55:06.640289068 CET	63975	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:55:06.647018909 CET	53	51997	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:06.648413897 CET	53	63975	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:07.629739046 CET	53	60363	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:11.665806055 CET	52068	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:55:11.666220903 CET	49495	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:55:11.673073053 CET	53	52068	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:11.673758984 CET	53	49495	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:18.663364887 CET	60185	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:55:18.663913965 CET	57369	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:55:18.672650099 CET	53	60185	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:18.672867060 CET	53	57369	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:19.358810902 CET	53	56141	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:19.363719940 CET	52157	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:55:19.364056110 CET	51522	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:55:19.370963097 CET	53	52157	1.1.1.1	192.168.2.4
Nov 19, 2024 20:55:19.390356064 CET	53	51522	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 19, 2024 20:54:12.510395050 CET	192.168.2.4	1.1.1.1	c25b	(Port unreachable)	Destination Unreachable
Nov 19, 2024 20:54:15.885229111 CET	192.168.2.4	1.1.1.1	c24e	(Port unreachable)	Destination Unreachable
Nov 19, 2024 20:54:32.487394094 CET	192.168.2.4	1.1.1.1	c274	(Port unreachable)	Destination Unreachable
Nov 19, 2024 20:54:34.058674097 CET	192.168.2.4	1.1.1.1	c274	(Port unreachable)	Destination Unreachable
Nov 19, 2024 20:55:19.390456915 CET	192.168.2.4	1.1.1.1	c24e	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:04 UTC	752	OUT	GET /scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 19:54:05 UTC	4042	IN	HTTP/1.1 200 OK Content-Security-Policy: font-src https://* data: ; img-src https://* data: blob: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dr [TRUNCATED] Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-yXqIxRaJZ4D75cu/jxT8kasuz2M=' 'nonce-Mw5Bg3/OdU6pm29O0fovTq8ZE7U=' Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; Path=/; Expires=Sun, 18 Nov 2029 19:54:05 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=DCvvtPZkKBWxuqnbQ6MakiCg; Path=/; Domain=dropbox.com; Expires=Wed, 19 Nov 2025 19:54:05 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; Path=/; Expires=Wed, 19 Nov 2025 19:54:05 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=rjk3fYi9tI; Path=/; Expires=Wed, 19 Nov 2025 19:54:05 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Sun, 18 Nov 2029 19:54:05 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Tue, 19 Nov 2024 19:54:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7d7b2486e4584a999424ec26c9eafcd6 Connection: close Transfer-Encoding: chunked
2024-11-19 19:54:05 UTC	2704	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a 34 31 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6d 61 67 65 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>19<meta charset="utf-8" />41<meta content="noindex, nofollow, noimageindex" name="robots" />47<meta content="width=device-widt
2024-11-19 19:54:05 UTC	2658	IN	Data Raw: 63 38 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 61 62 75 73 65 2f 66 69 6e 67 65 72 70 72 69 6e 74 6a 73 5f 63 6f 6d 70 6f 6e 65 6e 74 2d 76 66 6c 54 69 7a 41 6b 66 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 63 32 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 Data Ascii: c8<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/abuse/fingerprintjs_component-vflTizAkf.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>c2<link rel="preload" href="https://cfl.dropbox
2024-11-19 19:54:05 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 79 58 71 49 78 52 61 4a 5a 34 44 37 35 63 75 2f 6a 78 54 38 6b 61 73 75 7a 32 4d 3d 22 3e 77 69 6e 64 6f 77 2e 5f 5f 53 45 52 56 45 44 5f 42 59 5f 45 44 49 53 4f 4e 5f 57 45 42 5f 53 45 52 56 45 52 5f 5f 20 3d 20 74 72 75 65 3b 0a 76 61 72 20 72 65 71 75 69 72 65 43 6f 6e 66 69 67 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 22 2c 20 22 77 61 69 74 53 65 63 6f 6e 64 73 22 3a 20 33 30 2c 20 22 70 61 74 68 73 22 3a 20 7b 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 61 62 75 73 65 5f 66 75 6e 63 61 Data Ascii: 1000<script nonce="yXqIxRaJZ4D75cu/jxT8kasuz2M=">window.__SERVED_BY_EDISON_WEB_SERVER__ = true;var requireConfig = {"baseUrl": "https://cfl.dropboxstatic.com/", "waitSeconds": 30, "paths": {"atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_abuse_funca
2024-11-19 19:54:05 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 6d 64 2f 64 69 73 74 2f 63 5f 61 63 74 69 76 61 74 69 6f 6e 5f 64 61 74 61 5f 73 74 6f 72 65 2d 76 66 6c 35 55 6e 72 36 78 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 61 64 6d 69 6e 5f 61 70 69 5f 61 64 6d 69 6e 5f 63 6f 6e 73 6f 6c 65 5f 61 70 69 5f 63 6c 69 65 6e 74 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 61 64 6d 69 6e 5f 61 70 69 5f 61 64 6d 69 6e 5f 63 6f 6e 73 6f 6c 65 5f 61 70 69 5f 63 6c 69 65 6e 74 2d 76 66 6c 67 56 78 53 63 57 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f Data Ascii: 4000md/dist/c_activation_data_store-vfl5Unr6x", "atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_admin_api_admin_console_api_client": "static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_admin_api_admin_console_api_client-vflgVxScW", "atlas/file_
2024-11-19 19:54:05 UTC	8	IN	Data Raw: 62 75 6e 64 6c 65 0d 0a Data Ascii: bundle
2024-11-19 19:54:05 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 64 61 74 61 5f 61 63 74 69 6f 6e 5f 63 72 65 61 74 6f 72 73 5f 69 6e 64 65 78 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 64 61 74 61 5f 61 63 74 69 6f 6e 5f 63 72 65 61 74 6f 72 73 5f 69 6e 64 65 78 2d 76 66 6c 68 76 41 74 4a 70 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 64 61 74 61 74 79 70 65 73 5f 73 68 61 72 69 6e 67 5f 61 63 63 6f 75 6e 74 2d 6d 65 74 61 64 61 74 61 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 Data Ascii: 4000_amd/dist/c_data_action_creators_index": "static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_data_action_creators_index-vflhvAtJp", "atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_datatypes_sharing_account-metadata": "static/atlas/file_view
2024-11-19 19:54:05 UTC	8	IN	Data Raw: 6c 65 5f 62 75 6e 0d 0a Data Ascii: le_bun
2024-11-19 19:54:05 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 65 64 69 73 6f 6e 5f 63 6f 6f 6b 69 65 73 5f 63 68 65 63 6b 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 65 64 69 73 6f 6e 5f 63 6f 6f 6b 69 65 73 5f 63 68 65 63 6b 2d 76 66 6c 51 33 5f 50 4e 79 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 65 6d 6f 6a 69 2d 6d 61 72 74 5f 64 61 74 61 5f 73 65 74 73 5f 31 34 5f 6e 61 74 69 76 65 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 Data Ascii: 4000dle_amd/dist/c_edison_cookies_check": "static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_edison_cookies_check-vflQ3_PNy", "atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_emoji-mart_data_sets_14_native": "static/atlas/file_viewer/scl_oboe_f
2024-11-19 19:54:05 UTC	16384	IN	Data Raw: 65 5f 62 75 6e 64 0d 0a 34 30 30 30 0d 0a 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 68 6f 6f 6b 73 5f 75 73 65 5f 72 75 6e 5f 6f 6e 63 65 2d 76 66 6c 4a 45 6d 32 53 4e 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 69 63 6f 6e 5f 66 69 6c 65 5f 66 6f 6c 64 65 72 5f 69 63 6f 6e 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 69 63 6f 6e 5f 66 69 6c 65 5f 66 6f 6c 64 65 72 5f 69 63 6f 6e 2d 76 66 6c 36 4f 64 61 65 55 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 Data Ascii: e_bund4000le_amd/dist/c_hooks_use_run_once-vflJEm2SN", "atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_icon_file_folder_icon": "static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_icon_file_folder_icon-vfl6OdaeU", "atlas/file_viewer/scl_oboe_f
2024-11-19 19:54:05 UTC	16	IN	Data Raw: 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 0d 0a Data Ascii: tatic/atlas/fi

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:08 UTC	974	OUT	GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip&request_id=7d7b2486e4584a999424ec26c9eafcd6&time=1732046046 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
2024-11-19 19:54:09 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 2 Date: Tue, 19 Nov 2024 19:54:08 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 43b23b0b7b694b29ba57204c66add0ad Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-19 19:54:09 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=75075 Date: Tue, 19 Nov 2024 19:54:09 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:10 UTC	674	OUT	GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip&request_id=7d7b2486e4584a999424ec26c9eafcd6&time=1732046046 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
2024-11-19 19:54:10 UTC	576	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 2 Date: Tue, 19 Nov 2024 19:54:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Trace-Id: 684aa0a24c924afba9d57c7095d0c33c Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 684aa0a24c924afba9d57c7095d0c33c Connection: close

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Windows Analysis Report
https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:10 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-19 19:54:10 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=75035 Date: Tue, 19 Nov 2024 19:54:10 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-19 19:54:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:12 UTC	742	OUT	POST /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1 Host: d.dropbox.com Connection: keep-alive Content-Length: 488 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 19:54:12 UTC	488	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 31 2d 31 39 54 31 39 3a 35 34 3a 31 30 2e 35 33 30 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 32 37 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 38 66 30 66 62 32 39 34 32 66 32 66 34 66 33 65 61 39 61 31 64 39 38 62 34 35 36 37 39 62 35 33 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 31 31 2d 31 39 54 31 39 3a 35 34 3a 31 30 2e 35 33 30 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 31 2d 31 39 54 31 39 3a 35 34 3a 31 30 2e 35 33 30 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-11-19T19:54:10.530Z","sdk":{"name":"sentry.javascript.browser","version":"8.27.0"}}{"type":"session"}{"sid":"8f0fb2942f2f4f3ea9a1d98b45679b53","init":true,"started":"2024-11-19T19:54:10.530Z","timestamp":"2024-11-19T19:54:10.530Z","stat
2024-11-19 19:54:12 UTC	467	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-sentry-error,x-sentry-rate-limits,retry-after Content-Length: 2 Content-Type: application/json Cross-Origin-Resource-Policy: cross-origin Date: Tue, 19 Nov 2024 19:54:11 GMT Server: envoy Vary: origin,access-control-request-method,access-control-request-headers X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 666757f7049740e7b2a06cb560760f93 Connection: close
2024-11-19 19:54:12 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:13 UTC	524	OUT	GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1 Host: d.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=DCvvtPZkKBWxuqnbQ6MakiCg; locale=en
2024-11-19 19:54:13 UTC	464	IN	HTTP/1.1 405 Method Not Allowed Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-sentry-error,x-sentry-rate-limits,retry-after Allow: POST Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 19 Nov 2024 19:54:12 GMT Server: envoy Vary: origin,access-control-request-method,access-control-request-headers X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3a0b2d94376b441f9f55f6ab903b8b0f Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:13 UTC	1150	OUT	GET /ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&should_show_floating_button=undefined&should_auto_open_options=undefined&width=1280&locale_override=en&default_non_ccpa=true HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
2024-11-19 19:54:14 UTC	5433	IN	HTTP/1.1 302 Found Content-Security-Policy: img-src https://* data: blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; media-src https://* blob: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; font-src https://* data: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; default-src 'none' ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-yXqIxRaJZ4D75cu/jxT8kasuz2M=' ; base-uri 'self' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://sh [TRUNCATED] Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-yXqIxRaJZ4D75cu/jxT8kasuz2M=' 'nonce-Mw5Bg3/OdU6pm29O0fovTq8ZE7U=' Content-Type: text/html; charset=utf-8 Location: /en/ccpa_iframe?default_non_ccpa=true&gpc=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=dropbox.com&width=1280 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: __Host-logged-out-session=ChD7npXsulegsbs5jP1bTqIyEObZ87kGGi5BTGh1ZEEzTUJqTkk4elIyS2FkRS1wc2FLdzlweWFWcFFqUG1UOXlxMUtvRzBn; Path=/; HttpOnly; Secure; SameSite=None X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 19 Nov 2024 19:54:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 86a6c0f526c84fb19fde439eed197da9 Connection: close
2024-11-19 19:54:14 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:13 UTC	1031	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 381 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: DCvvtPZkKBWxuqnbQ6MakiCg X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:canary sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
2024-11-19 19:54:13 UTC	381	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 33 30 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 22 7d 7d 2c 22 74 72 69 67 67 65 72 22 3a 7b 22 2e 74 61 67 22 3a 22 74 72 69 67 67 65 72 5f 68 Data Ascii: {"scopes":[],"known_namespaces":[],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":30,"implementation":{".tag":"typescript"}},"trigger":{".tag":"trigger_h
2024-11-19 19:54:14 UTC	594	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 64 X-Webkit-Csp: sandbox Content-Length: 137 Date: Tue, 19 Nov 2024 19:54:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7fed678f72b84775a617fbd1d5f7227f Connection: close
2024-11-19 19:54:14 UTC	137	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 73 74 6f 70 5f 70 75 62 6c 69 63 61 74 69 6f 6e 5f 66 6f 72 5f 73 65 63 6f 6e 64 73 22 3a 30 7d Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[],"stop_publication_for_seconds":0}

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:13 UTC	1055	OUT	POST /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 459 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: DCvvtPZkKBWxuqnbQ6MakiCg X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:canary sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
2024-11-19 19:54:13 UTC	459	OUT	Data Raw: 7b 22 63 61 6d 70 61 69 67 6e 5f 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 67 65 22 3a 22 70 72 65 76 69 65 77 5f 70 61 67 65 22 2c 22 70 61 74 68 22 3a 22 2f 73 63 6c 2f 66 69 2f 77 30 34 6c 6a 62 31 64 6a 34 7a 32 36 31 69 72 31 33 38 62 31 2f 53 74 72 65 65 74 2d 41 74 6c 61 73 2e 7a 69 70 22 7d 2c 22 65 76 65 6e 74 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 66 69 6c 65 5f 65 78 74 65 6e 73 69 6f 6e 22 3a 22 7a 69 70 22 2c 22 66 69 6c 65 5f 6e 61 6d 65 22 3a 22 53 74 72 65 65 74 20 41 74 6c 61 73 2e 7a 69 70 22 2c 22 66 69 6c 65 5f 70 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 77 30 34 6c 6a 62 31 64 6a 34 7a 32 36 31 69 72 31 33 38 62 31 2f 53 74 72 65 65 74 2d 41 74 6c 61 73 2e 7a 69 Data Ascii: {"campaign_properties":{"page":"preview_page","path":"/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip"},"event_context":{"file_extension":"zip","file_name":"Street Atlas.zip","file_path":"https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zi
2024-11-19 19:54:14 UTC	595	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 115 X-Webkit-Csp: sandbox Content-Length: 141 Date: Tue, 19 Nov 2024 19:54:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a0ff184e803048c79db62a1f7967b0bc Connection: close
2024-11-19 19:54:14 UTC	141	IN	Data Raw: 7b 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 5d 2c 22 63 61 6d 70 61 69 67 6e 73 5f 72 65 73 75 6c 74 22 3a 7b 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 5d 2c 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 61 30 66 66 31 38 34 65 38 30 33 30 34 38 63 37 39 64 62 36 32 61 31 66 37 39 36 37 62 30 62 63 22 2c 22 76 61 6c 69 64 5f 66 6f 72 22 3a 33 36 30 30 7d 2c 22 63 61 6d 70 61 69 67 6e 73 5f 74 6f 5f 73 6c 6f 74 73 22 3a 7b 7d 7d Data Ascii: {"campaigns":[],"campaigns_result":{"campaigns":[],"request_id":"a0ff184e803048c79db62a1f7967b0bc","valid_for":3600},"campaigns_to_slots":{}}

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:13 UTC	1061	OUT	POST /2/file_presence/logged_out/get_pass_transmitter_token HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 159 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: DCvvtPZkKBWxuqnbQ6MakiCg X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:canary sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
2024-11-19 19:54:13 UTC	159	OUT	Data Raw: 7b 22 66 69 6c 65 5f 69 6e 66 6f 22 3a 7b 22 2e 74 61 67 22 3a 22 73 68 61 72 65 64 5f 6c 69 6e 6b 5f 64 65 74 61 69 6c 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 77 30 34 6c 6a 62 31 64 6a 34 7a 32 36 31 69 72 31 33 38 62 31 2f 53 74 72 65 65 74 2d 41 74 6c 61 73 2e 7a 69 70 3f 72 6c 6b 65 79 3d 37 6f 6b 73 70 6f 6d 6d 79 73 73 75 72 39 61 38 75 39 62 63 35 70 32 71 34 26 64 6c 3d 30 22 7d 7d Data Ascii: {"file_info":{".tag":"shared_link_details","url":"https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&dl=0"}}
2024-11-19 19:54:15 UTC	664	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Disposition: attachment; filename=unspecified Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 1278 X-Webkit-Csp: sandbox Date: Tue, 19 Nov 2024 19:54:15 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 839 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3099f7347e51473ca7add563e3879cbd Connection: close
2024-11-19 19:54:15 UTC	839	IN	Data Raw: 7b 22 62 65 61 63 6f 6e 5f 70 72 65 73 65 6e 63 65 5f 69 6e 66 6f 22 3a 20 7b 22 61 75 74 68 5f 6b 65 79 22 3a 20 22 6b 65 79 5f 74 79 70 65 3a 20 5c 22 70 61 73 73 5c 22 5c 6e 73 65 73 73 69 6f 6e 5f 69 64 3a 20 5c 22 31 32 38 37 37 37 30 36 30 35 34 33 30 37 31 37 34 32 35 35 38 30 38 37 33 35 32 30 31 32 33 38 39 31 35 39 36 31 33 5c 22 5c 6e 73 68 61 72 65 64 5f 6c 69 6e 6b 5f 75 72 6c 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 77 30 34 6c 6a 62 31 64 6a 34 7a 32 36 31 69 72 31 33 38 62 31 2f 53 74 72 65 65 74 2d 41 74 6c 61 73 2e 7a 69 70 3f 72 6c 6b 65 79 3d 37 6f 6b 73 70 6f 6d 6d 79 73 73 75 72 39 61 38 75 39 62 63 35 70 32 71 34 26 64 6c 3d 30 5c 22 5c 6e 22 2c 20 22 62 65 61 63 6f 6e Data Ascii: {"beacon_presence_info": {"auth_key": "key_type: \"pass\"\nsession_id: \"128777060543071742558087352012389159613\"\nshared_link_url: \"https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&dl=0\"\n", "beacon

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:13 UTC	1029	OUT	POST /2/stickers/get_stickers HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 4 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: DCvvtPZkKBWxuqnbQ6MakiCg X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:canary sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
2024-11-19 19:54:13 UTC	4	OUT	Data Raw: 6e 75 6c 6c Data Ascii: null
2024-11-19 19:54:14 UTC	664	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Disposition: attachment; filename=unspecified Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 22 X-Webkit-Csp: sandbox Date: Tue, 19 Nov 2024 19:54:14 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 15638 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 96ecf0c97b6a4102802ba9d42d41762c Connection: close
2024-11-19 19:54:14 UTC	15638	IN	Data Raw: 7b 22 73 74 69 63 6b 65 72 5f 73 65 74 73 22 3a 20 5b 7b 22 73 65 74 5f 69 64 22 3a 20 38 2c 20 22 6e 61 6d 65 22 3a 20 22 77 69 7a 61 72 64 73 22 2c 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 57 69 7a 61 72 64 22 2c 20 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 74 69 63 6b 65 72 73 2f 73 65 74 2f 38 22 2c 20 22 73 74 69 63 6b 65 72 73 22 3a 20 5b 7b 22 69 64 22 3a 20 35 35 2c 20 22 6e 61 6d 65 22 3a 20 22 61 70 70 72 65 63 69 61 74 69 6f 6e 22 2c 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 57 69 7a 61 72 64 20 6d 61 6b 69 6e 67 20 61 20 72 61 69 6e 62 6f 77 22 2c 20 22 69 73 5f 6c 69 76 65 5f 73 74 69 63 6b 65 72 22 3a 20 74 72 75 65 2c 20 22 62 61 73 65 5f 75 72 6c 22 3a 20 22 68 74 Data Ascii: {"sticker_sets": [{"set_id": 8, "name": "wizards", "description": "Wizard", "url": "https://www.dropbox.com/stickers/set/8", "stickers": [{"id": 55, "name": "appreciation", "description": "Wizard making a rainbow", "is_live_sticker": true, "base_url": "ht

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:13 UTC	805	OUT	GET /pithos/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI4Nzc3MDYwNTQzMDcxNzQyNTU4MDg3MzUyMDEyMzg5MTU5NjEz; t=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-js_csrf=DCvvtPZkKBWxuqnbQ6MakiCg; __Host-ss=rjk3fYi9tI; locale=en
2024-11-19 19:54:14 UTC	933	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: __Host-logged-out-session=ChD5GxVuxwyAi1Y4u9JvhEZGEObZ87kGGi5BTGk4TE5PM01TeW9zTU9uSnhCSHpmYldEN19qOFIzLXZ6bm0yR2hid2NBbWNB; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Tue, 19 Nov 2024 19:54:14 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 178 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 08d64132cc2943cf98e6b703dae7d421 Connection: close
2024-11-19 19:54:14 UTC	178	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 61 70 69 5f 68 65 6c 70 65 72 5f 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation;you should be redirected automatically.

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:54:13 UTC	908	OUT	OPTIONS /p/archive_tree/ACd5iI405A9fXoQOaHsWmn8yR2NHz1xTNqP69YMeqZYrM_7H7nrMsUsJ9M4AoSbVNKfEo1_4yiv3b2P3Z-BR2hwhM7Wpo0-fVmbkvapBy0EIQhNxeZEpWK6HPzIOOqM_Xtzfe0u7cj3vP-mzn7OBnBiFcx8RS027VngtFhubyjl61afMJvVgfALODtT4jlLhaw66sL7B76AI_A-IiR-dsQBSvZ6_JGielpDxLM-Mqw1AnaAS9UmvmroAGkgBv4JMPI-EOprtGBx-qovjXHPzFtaThXU692ok186wsroCspI1bPalZS1VAFvrFid1GUrMiwc/p.json?is_prewarmed=true HTTP/1.1 Host: uc4bd55cb38b10ec4d5d691ffe93.previews.dropboxusercontent.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.dropbox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 19:54:14 UTC	1220	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Cache-Control, Content-Type, If-Modified-Since, Range, Accept, Accept-Language, Content-Language, Origin, Referer, X-Dropbox-App-Name, X-Dropbox-Request-Id, X-Dropbox-Parent-Request-Id, X-Dropbox-Parent-Span-Id, X-Dropbox-Perform-As-Team-Member, X-Dropbox-Perform-As-User, X-File-Name, X-File-Size, X-File-Type, X-Prototype-Version, X-Requested-With, X-Dropbox-Teamid, X-Dropbox-Team-Authorization, X-Paper-Client-Capabilities, Pad-Sharding-Experiment, X-Dropbox-Client-SSCV-Auth Access-Control-Allow-Methods: HEAD, GET, POST, OPTIONS, PUT Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Max-Age: 600 Cache-Control: no-cache Vary: Origin, Accept-Encoding X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 1 Date: Tue, 19 Nov 2024 19:54:13 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7df8dadf991f4639a2640568d9fc8968 Connection: close Transfer-Encoding: chunked
2024-11-19 19:54:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0