Edit tour

Windows Analysis Report
https://over-haul.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7

Overview

General Information

Sample URL:	https://over-haul.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7
Analysis ID:	1520700
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1996,i,14832063293206750614,15980303740300830099,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://over-haul.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /gen204 HTTP/1.1Host: over-haul.app.box.comConnection: keep-aliveContent-Length: 449sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Box-Client-Version: 21.315.1X-Box-Client-Name: enduserappsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonX-Request-Token: 692422af3205daacd3ec7af308e9ec0a53175ebbc21d925b73d10fbe9b6f3274Request-Token: 692422af3205daacd3ec7af308e9ec0a53175ebbc21d925b73d10fbe9b6f3274sec-ch-ua-platform: "Windows"Origin: https://over-haul.app.box.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; box_visitor_id=66f6daa79ed6b1.08223727; bv=EUG-8342; cn=70; site_preference=desktop

Source: https://over-haul.account.box.com/login	HTTP Parser: Title: Box \| Login does not match URL
Source: https://over-haul.account.box.com/login?redirect_url=https%3A%2F%2Fover-haul.app.box.com%2Fs%2Fk35cpocmye51uknxq6wvkmi025rxeue7	HTTP Parser: Title: Box \| Login does not match URL

Source: https://www.box.com/pricing/individual	HTTP Parser: No favicon
Source: https://www.box.com/pricing/individual	HTTP Parser: No favicon
Source: https://www.box.com/pricing/individual	HTTP Parser: No favicon
Source: https://www.box.com/pricing/individual	HTTP Parser: No favicon
Source: https://www.box.com/pricing/individual	HTTP Parser: No favicon
Source: https://www.box.com/platform	HTTP Parser: No favicon
Source: https://www.box.com/platform	HTTP Parser: No favicon
Source: https://www.box.com/platform	HTTP Parser: No favicon

Source: https://over-haul.account.box.com/login	HTTP Parser: No <meta name="author".. found
Source: https://over-haul.account.box.com/login	HTTP Parser: No <meta name="author".. found
Source: https://over-haul.account.box.com/login?redirect_url=https%3A%2F%2Fover-haul.app.box.com%2Fs%2Fk35cpocmye51uknxq6wvkmi025rxeue7	HTTP Parser: No <meta name="author".. found

Source: https://over-haul.account.box.com/login	HTTP Parser: No <meta name="copyright".. found
Source: https://over-haul.account.box.com/login	HTTP Parser: No <meta name="copyright".. found
Source: https://over-haul.account.box.com/login?redirect_url=https%3A%2F%2Fover-haul.app.box.com%2Fs%2Fk35cpocmye51uknxq6wvkmi025rxeue7	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49763 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_674.2.dr, chromecache_613.2.dr	String found in binary or memory: <a href="https://www.facebook.com/box" class="icon-facebook">Facebook</a> equals www.facebook.com (Facebook)
Source: chromecache_674.2.dr, chromecache_613.2.dr	String found in binary or memory: <a href="https://www.youtube.com/user/box" class="icon-youtube">YouTube</a> equals www.youtube.com (Youtube)
Source: chromecache_674.2.dr, chromecache_613.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/Box" /> equals www.facebook.com (Facebook)
Source: chromecache_597.2.dr, chromecache_686.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=ra(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&vb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?ob(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_597.2.dr, chromecache_686.2.dr	String found in binary or memory: function vb(){var a=new tb,b=["https://www.youtube.com"];b=b===void 0?sb:b;pa(function(c){switch(c.g){case 1:return C(c,ub(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return pa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_349.2.dr, chromecache_405.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_555.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/b0557ce3\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: over-haul.box.com
Source: global traffic	DNS traffic detected: DNS query: over-haul.app.box.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn01.boxcdn.net
Source: global traffic	DNS traffic detected: DNS query: pendo-data-prod.box.com
Source: global traffic	DNS traffic detected: DNS query: cdn.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: api.box.com
Source: global traffic	DNS traffic detected: DNS query: over-haul.account.box.com
Source: global traffic	DNS traffic detected: DNS query: www.box.com
Source: global traffic	DNS traffic detected: DNS query: public.boxcloud.com
Source: global traffic	DNS traffic detected: DNS query: cdn03.boxcdn.net
Source: global traffic	DNS traffic detected: DNS query: vi.ml314.com
Source: global traffic	DNS traffic detected: DNS query: mktg-personalization.box.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: segment-box.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: boxinc.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: 107-coj-713.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: players.brightcove.net
Source: global traffic	DNS traffic detected: DNS query: consent.trustarc.com
Source: global traffic	DNS traffic detected: DNS query: www.everestjs.net
Source: global traffic	DNS traffic detected: DNS query: app.qualified.com
Source: global traffic	DNS traffic detected: DNS query: box.demdex.net
Source: global traffic	DNS traffic detected: DNS query: sanalytics.box.com
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: ws.qualified.com
Source: global traffic	DNS traffic detected: DNS query: edge.api.brightcove.com
Source: global traffic	DNS traffic detected: DNS query: metrics.brightcove.com
Source: global traffic	DNS traffic detected: DNS query: lasteventf-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: cdn.bttrack.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: q.quora.com
Source: global traffic	DNS traffic detected: DNS query: dc.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: cf-images.us-east-1.prod.boltdns.net
Source: global traffic	DNS traffic detected: DNS query: manifest.prod.boltdns.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: bttrack.com
Source: global traffic	DNS traffic detected: DNS query: bcbolt446c5271-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: api.segment.io
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.inpwrd.net
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: content.inpwrd.net
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: js.zi-scripts.com
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: tags.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.mouseflow.com
Source: global traffic	DNS traffic detected: DNS query: 9418626.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Fri, 27 Sep 2024 16:17:57 GMTcontent-type: application/json; charset=utf-8x-envoy-upstream-service-time: 55x-frame-options: SAMEORIGINx-download-options: noopenstrict-transport-security: max-age=31536000access-control-expose-headers: Server-Timingset-cookie: csrf-token=f5tdiVBOO7IIr-ZJe5EGa1WUR7fg8_yOS11ElvaP--p; Secure; SameSite=None; Path=/x-xss-protection: 0x-content-type-options: nosniffbox-request-id: 0bb3995c977d605221c56201561a10f9bserver-timing: traceparent;desc="00-c8b6fe5726070b3f223aa5e5db8e1c61-a16a785cdc203f55-00"cache-control: no-cachevia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Fri, 27 Sep 2024 16:17:58 GMTcontent-type: text/html; charset=UTF-8strict-transport-security: max-age=31536000via: 1.1 googleContent-Length: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Fri, 27 Sep 2024 16:17:58 GMTcontent-type: text/html; charset=UTF-8strict-transport-security: max-age=31536000via: 1.1 googleContent-Length: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 27 Sep 2024 16:18:10 GMTContent-Type: text/htmlContent-Length: 15Connection: closeServer: cloudflareCF-RAY: 8c9ccee009687d08-EWR

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1996,i,14832063293206750614,15980303740300830099,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://over-haul.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1996,i,14832063293206750614,15980303740300830099,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://schema.org	0%	URL Reputation	safe
https://greensock.com/standard-license	0%	URL Reputation	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	URL Reputation	safe
https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic	0%	URL Reputation	safe
https://developers.google.com/youtube/iframe_api_reference#Events	0%	URL Reputation	safe

Name	Source	Malicious	Antivirus Detection	Reputation
https://assets.adobedtm.com/6055abd7bbba/d4daa566f179/d0bc9d320b6f/RCbd0d636b95d446178e28cc28f8edd19	chromecache_535.2.dr	false		unknown
https://assets.adobedtm.com/6055abd7bbba/d4daa566f179/launch-5f423943e551.js	chromecache_511.2.dr, chromecache_656.2.dr	false		unknown
https://assets.adobedtm.com/extensions/EP8757b503532a44a68eee17773f6f10a0/AppMeasurement_Module_Audi	chromecache_480.2.dr, chromecache_380.2.dr	false		unknown
https://ogp.me/ns#	chromecache_674.2.dr, chromecache_613.2.dr	false		unknown
https://www.box.com/en-au/platform	chromecache_613.2.dr	false		unknown
https://www.box.com/pricing	chromecache_674.2.dr	false		unknown
https://www.box.com/overview	chromecache_431.2.dr, chromecache_747.2.dr	false		unknown
https://community.box.com/	chromecache_613.2.dr	false		unknown
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti	chromecache_331.2.dr, chromecache_647.2.dr	false		unknown
https://www.youtube.com	chromecache_686.2.dr, chromecache_579.2.dr, chromecache_555.2.dr	false		unknown
http://yuilibrary.com/license/	chromecache_419.2.dr	false		unknown
http://scrollmagic.io	chromecache_524.2.dr, chromecache_525.2.dr	false		unknown
https://www.box.com/fr-fr/pricing	chromecache_674.2.dr	false		unknown
https://bttrack.com/Pixel/Retarget/3036	chromecache_747.2.dr	false		unknown
https://developer.box.com/	chromecache_613.2.dr	false		unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=vd07lmd&ttd_puid=$	chromecache_716.2.dr, chromecache_535.2.dr	false		unknown
https://app.box.org	chromecache_381.2.dr, chromecache_388.2.dr, chromecache_277.2.dr, chromecache_478.2.dr	false		unknown
https://www.box.com/en-nl/pricing	chromecache_674.2.dr	false		unknown
https://account.box.com/signup/enterprise-plan/buynow	chromecache_674.2.dr	false		unknown
https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2	chromecache_674.2.dr, chromecache_613.2.dr	false		unknown
https://schema.org	chromecache_674.2.dr	false	URL Reputation: safe	unknown
https://careers.box.com/	chromecache_613.2.dr	false		unknown
https://events.box.com/security-trends-2024	chromecache_431.2.dr, chromecache_747.2.dr	false		unknown
https://assets.adobedtm.com/6055abd7bbba/d4daa566f179/d0bc9d320b6f/RC833aaad327f4469bb4b1c15773544aa	chromecache_324.2.dr	false		unknown
https://assets.adobedtm.com/6055abd7bbba/d4daa566f179/d0bc9d320b6f/RCae0f78f0fc444de28fffabeb99c43d5	chromecache_732.2.dr	false		unknown
https://account.box.com/signup/n/starter/buynow?tc=annual	chromecache_674.2.dr	false		unknown
https://greensock.com/standard-license	chromecache_524.2.dr, chromecache_525.2.dr	false	URL Reputation: safe	unknown
https://account.box.com/signup/enterprise-plus/buynow	chromecache_674.2.dr	false		unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_323.2.dr, chromecache_681.2.dr, chromecache_560.2.dr, chromecache_706.2.dr	false	URL Reputation: safe	unknown
https://github.com/js-cookie/js-cookie	chromecache_366.2.dr, chromecache_313.2.dr, chromecache_315.2.dr, chromecache_492.2.dr	false		unknown
https://account.box.com/signup/enterprise-plan	chromecache_674.2.dr	false		unknown
https://assets.adobedtm.com/6055abd7bbba/d4daa566f179/d0bc9d320b6f/RCde7064f7d1364e7a936c153caab5c8f	chromecache_712.2.dr	false		unknown
https://boxinc.tt.omtrdc.net/rest/v1/delivery?client=boxinc&sessionId=1234567890&version=2.2.0	chromecache_381.2.dr, chromecache_388.2.dr, chromecache_277.2.dr, chromecache_478.2.dr	false		unknown
https://consent.trustarc.com/log	chromecache_311.2.dr, chromecache_306.2.dr	false		unknown
https://assets.adobedtm.com/6055abd7bbba/d4daa566f179/d0bc9d320b6f/RC3d909f336dce442391c983a3b3be962	chromecache_447.2.dr	false		unknown
https://x.bidswitch.net/syncd?dsp_id=93&user_group=1&user_id=aaee493b-a84a-4daf-9178-698a635599e6&ex	chromecache_702.2.dr	false		unknown
https://www.box.com/en-au/pricing	chromecache_674.2.dr	false		unknown
https://www.drupal.org/licensing/faq	chromecache_381.2.dr, chromecache_286.2.dr, chromecache_524.2.dr, chromecache_392.2.dr, chromecache_573.2.dr, chromecache_388.2.dr, chromecache_446.2.dr, chromecache_673.2.dr, chromecache_532.2.dr, chromecache_361.2.dr, chromecache_611.2.dr, chromecache_525.2.dr, chromecache_687.2.dr, chromecache_277.2.dr, chromecache_479.2.dr, chromecache_478.2.dr	false		unknown
https://cdn03.boxcdn.net/sites/default/files/box_default_og_sharing_image/box-social.jpg	chromecache_674.2.dr, chromecache_613.2.dr	false		unknown
https://www.box.com/en-gb/pricing	chromecache_674.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.194.27	unknown	United States	54113	FASTLYUS	false
35.160.35.184	unknown	United States	16509	AMAZON-02US	false
151.101.2.27	brightcove.map.fastly.net	United States	54113	FASTLYUS	false
13.224.189.13	unknown	United States	16509	AMAZON-02US	false
66.235.152.225	unknown	United States	15224	OMNITUREUS	false
52.57.45.150	tags.srv.stackadapt.com	United States	16509	AMAZON-02US	false
13.35.58.148	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
74.112.186.157	api.box.com	United States	33011	BOXNETUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
52.49.182.176	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
172.217.18.6	unknown	United States	15169	GOOGLEUS	false
74.112.186.159	pendo-data-prod.box.com	United States	33011	BOXNETUS	false
52.16.68.25	unknown	United States	16509	AMAZON-02US	false
104.16.118.43	ws.zoominfo.com	United States	13335	CLOUDFLARENETUS	false
104.18.16.5	ws.qualified.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.201.104.135	vi.ml314.com	United States	15169	GOOGLEUS	false
13.224.189.92	consent.trustarc.com	United States	16509	AMAZON-02US	false
142.250.185.230	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.194	unknown	United States	15169	GOOGLEUS	false
18.204.85.18	readpage.inpwrd.net	United States	14618	AMAZON-AESUS	false
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.78	youtube.com	United States	15169	GOOGLEUS	false
74.112.186.164	public.boxcloud.com	United States	33011	BOXNETUS	false
108.138.26.37	cdn.inpwrd.net	United States	16509	AMAZON-02US	false
63.35.25.20	unknown	United States	16509	AMAZON-02US	false
35.244.232.184	metrics.brightcove.com	United States	15169	GOOGLEUS	false
34.226.76.148	dry-bastion-1897.fathomless-lake-7710.herokuspace.com	United States	14618	AMAZON-AESUS	false
87.248.119.251	unknown	United Kingdom	203220	YAHOO-DEBDE	false
192.28.147.68	107-coj-713.mktoresp.com	United States	53580	MARKETOUS	false
87.248.119.252	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
37.252.171.21	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
3.160.150.3	unknown	United States	16509	AMAZON-02US	false
3.160.150.127	dh29jf0q5erm3.cloudfront.net	United States	16509	AMAZON-02US	false
104.16.117.43	unknown	United States	13335	CLOUDFLARENETUS	false
63.140.62.222	box.com.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
18.193.54.173	unknown	United States	16509	AMAZON-02US	false

Name	IP	Active	Malicious	Reputation
pendo-data-prod.box.com	74.112.186.159	true	false	unknown
api.box.com	74.112.186.157	true	false	unknown
bttrack.com	192.132.33.67	true	false	unknown
over-haul.app.box.com	74.112.186.157	true	false	unknown
ws.qualified.com	104.18.16.5	true	false	unknown
cm.g.doubleclick.net	142.250.186.162	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
api.segment.io	35.81.90.104	true	false	unknown
107-coj-713.mktoresp.com	192.28.147.68	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
cdn.amplitude.com	18.245.86.101	true	false	unknown
dh29jf0q5erm3.cloudfront.net	3.160.150.127	true	false	unknown
over-haul.box.com	74.112.186.157	true	false	unknown
consent.trustarc.com	13.224.189.92	true	false	unknown
brightcove.map.fastly.net	151.101.2.27	true	false	unknown
over-haul.account.box.com	74.112.186.157	true	false	unknown
youtube-ui.l.google.com	172.217.23.110	true	false	unknown
googleads.g.doubleclick.net	142.250.186.34	true	false	unknown
td.doubleclick.net	142.250.184.194	true	false	unknown
ml314.com	34.117.77.79	true	false	unknown
cdn.inpwrd.net	108.138.26.37	true	false	unknown
js.zi-scripts.com	172.64.150.44	true	false	unknown
dart.l.doubleclick.net	142.250.186.102	true	false	unknown
dry-bastion-1897.fathomless-lake-7710.herokuspace.com	34.226.76.148	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	unknown
adservice.google.com	142.250.185.66	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
segment-box.com	172.64.146.167	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	54.171.122.26	true	false	unknown
box.com.ssl.sc.omtrdc.net	63.140.62.222	true	false	unknown
adobetarget.data.adobedc.net	66.235.152.156	true	false	unknown
insight.adsrvr.org	52.223.40.198	true	false	unknown
d296je7bbdd650.cloudfront.net	13.35.58.148	true	false	unknown
readpage.inpwrd.net	18.204.85.18	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.49.182.176	true	false	unknown
vi.ml314.com	35.201.104.135	true	false	unknown
ws.zoominfo.com	104.16.118.43	true	false	unknown
ad.doubleclick.net	142.250.185.230	true	false	unknown
metrics.brightcove.com	35.244.232.184	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
youtube.com	142.250.185.78	true	false	unknown
public.boxcloud.com	74.112.186.164	true	false	unknown
mc-21665-1925519580.us-west-2.elb.amazonaws.com	44.230.107.242	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	unknown
dualstack.brightcove.map.fastly.net	151.101.130.27	true	false	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	unknown
tags.srv.stackadapt.com	52.57.45.150	true	false	unknown
ib.anycast.adnxs.com	37.252.171.21	true	false	unknown
edge.gycpi.b.yahoodns.net	87.248.119.252	true	false	unknown
manifest.prod.boltdns.net	unknown	unknown	false	unknown
cdn01.boxcdn.net	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	unknown
bcbolt446c5271-a.akamaihd.net	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
q.quora.com	unknown	unknown	false	unknown
content.inpwrd.net	unknown	unknown	false	unknown
js.adsrvr.org	unknown	unknown	false	unknown
box.demdex.net	unknown	unknown	false	unknown
cf-images.us-east-1.prod.boltdns.net	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
s.yimg.com	unknown	unknown	false	unknown
simage2.pubmatic.com	unknown	unknown	false	unknown
sanalytics.box.com	unknown	unknown	false	unknown
mktg-personalization.box.com	unknown	unknown	false	unknown
dc.ads.linkedin.com	unknown	unknown	false	unknown
sp.analytics.yahoo.com	unknown	unknown	false	unknown
edge.api.brightcove.com	unknown	unknown	false	unknown
cdn03.boxcdn.net	unknown	unknown	false	unknown
boxinc.tt.omtrdc.net	unknown	unknown	false	unknown
cdn.segment.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
x.bidswitch.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
9418626.fls.doubleclick.net	unknown	unknown	false	unknown
cdn.mouseflow.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
players.brightcove.net	unknown	unknown	false	unknown
lasteventf-tm.everesttech.net	unknown	unknown	false	unknown
www.everestjs.net	unknown	unknown	false	unknown
www.box.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
app.qualified.com	unknown	unknown	false	unknown
cdn.bttrack.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://content.inpwrd.net/data/aggregate/7f7943bc-955b-4e21-ba29-3728dca7ed11?timeSpent=5032&activeTs=0&scrollPercentage=0&waitBeforeScroll=0&ts=1727453908114&hidden=true&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp5	false		unknown
https://over-haul.app.box.com/app-api/split-proxy/api/mySegments/66f6daa79ed6b1.08223727	false		unknown
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=cdb5a06416be5d0f68969766&account=6232633676001&destination=https%3A%2F%2Fwww.box.com%2Fpricing%2Findividual&platform_version=7.17.2&player=players.brightcove.com%2F6232633676001%2FbVxoAYQdS_default&player_name=Box%20player&source=&event=player_init&time=1727453889960&autoplay=false&seq=0	false		unknown
https://ws.qualified.com/cable?wv=9&token=QJy1YqZaG8LUA72E&vu=30dfd37f-a5ce-4924-b60c-b2ba7959591c&wu=ae3c87f0-279b-4375-bc9d-f08fc24d3095&ca=2024-09-27T16%3A18%3A50.354Z&tz=America%2FNew_York&bis=5&referrer=&pv=1&fv=2024-08-02-ad880cc565&iml=false&ic=false	false		unknown
https://content.inpwrd.net/data/aggregate/7f7943bc-955b-4e21-ba29-3728dca7ed11?timeSpent=1103&activeTs=1103&scrollPercentage=0&waitBeforeScroll=0&ts=1727453948101&hidden=false&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp21	false		unknown
https://content.inpwrd.net/data/aggregate/7f7943bc-955b-4e21-ba29-3728dca7ed11?timeSpent=3002&activeTs=3002&scrollPercentage=0&waitBeforeScroll=0&ts=1727453903082&hidden=false&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp4	false		unknown
https://insight.adsrvr.org/track/conv/?adv=h1lut3x&ct=0:u84rfdn&fmt=3	false		unknown
https://js.zi-scripts.com/unified/v1/master/getSubscriptions	false		unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=vd07lmd&ttd_puid=66f6daa79ed6b1.08223727&ttd_tpi=1	false		unknown
https://ml314.com/utsync.ashx?pub=&adv=&et=0&eid=89990&ct=js&pi=3647309713366319123&fp=&clid=&if=0&ps=&cl=&mlt=&data=&&cp=https%3A%2F%2Fwww.box.com%2Fplatform&pv=1727453929143_rtzh6no4o&bl=en-us&cb=5721826&return=&ht=&d=&dc=&si=1727453889041_sr8lv7s1f&cid=&s=1280x1024&rp=&v=2.7.4.212	false		unknown
https://content.inpwrd.net/data/aggregate/5f299a9c-d995-4431-9e68-beb7fa53432c?timeSpent=3030&activeTs=3030&scrollPercentage=0&waitBeforeScroll=0&ts=1727453938273&hidden=false&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp4	false		unknown
https://content.inpwrd.net/data/15sec/5f299a9c-d995-4431-9e68-beb7fa53432c?ts=1727453950250&hidden=false&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp9	false		unknown
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%228978fceb-a874-4028-a94c-bc5665f88af2%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216175%22%2C%22sessionId%22%3A%22bc6d4c5c-1461-4f4f-8651-f477763685c8%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A4%2C%22url%22%3A%22https%3A%2F%2Fwww.box.com%2Fplatform%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	false		unknown
https://content.inpwrd.net/data/aggregate/5f299a9c-d995-4431-9e68-beb7fa53432c?et=3006&timeSpent=3006&activeTs=3006&scrollPercentage=0&waitBeforeScroll=0&ts=1727453956260&hidden=false&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp13	false		unknown
https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6232633676001/5659218b-e8bf-4dcb-b52b-2ae1a34ed322/54bfad15-7547-4218-ad84-133edf2ce37e/6s/rendition.m3u8?fastly_token=NjZmNzEzNzJfN2Y1YmFmMGQ4OTE3MGVlZjEzNjllZjlhY2RkYjQ3MzViZDdlMWI4ODQzY2VhMzAyMWQ5Y2UxNjg2NDRiNDExMQ%3D%3D	false		unknown
https://vi.ml314.com/get?eid=89990&tk=FcYgppb62fNqb6QZ6PorTVAU12f8kUUl2f2bKrXJV60BHvo3d&fp=3647309713366319123	false		unknown
https://over-haul.account.box.com/login	false		unknown
https://over-haul.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7	false		unknown
https://sanalytics.box.com/b/ss/boxincglobalproduction/10/JS-2.27.0-LEWM/s92490595161922?AQB=1&pccr=true&vidn=337B6D70B439F202-40000A6A24376CE3&g=none&AQE=1	false		unknown
https://pendo-data-prod.box.com/data/guide.json/123e0628-cb29-41d1-466c-c592c7ddcd06?id=7&jzb=eJxNj0FPxCAQhf8L5y10Wetqb9408Wb0ukE6bkkpgzDUGtP_vtNNrN6G95jvvfkRk8uOMD11ohVa7ISxFkug67vas1CS57EnirlVCidIVW-KlyZG-Y6ztDiqrIZDYyPa8RuafRnC_Hn7NQ2jq3WTZihwZBD67u0vLBTvd2IEMp0hI9qtyToy99mEczFn4GwI1esLA9xvR__fO7G3bL3X7es_7s5qNAkCPWweSxy3Luqjqu-VrvUNA_mo7DCsstSHO6lPMWHHRgb_8YiZgJGUCizLBYlYY2E&v=2.238.2_prod&ct=1727453871053	false		unknown
https://content.inpwrd.net/data/aggregate/7f7943bc-955b-4e21-ba29-3728dca7ed11?timeSpent=3127&activeTs=0&scrollPercentage=0&waitBeforeScroll=0&ts=1727453957205&hidden=true&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp24	false		unknown
https://content.inpwrd.net/data/aggregate/7f7943bc-955b-4e21-ba29-3728dca7ed11?timeSpent=2985&activeTs=0&scrollPercentage=0&waitBeforeScroll=0&ts=1727453963928&hidden=true&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp26	false		unknown
https://over-haul.app.box.com/app-api/split-proxy/api/mySegments/-1	false		unknown
https://box.demdex.net/dest5.html?d_nsid=0	false		unknown
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	false		unknown
https://over-haul.app.box.com/app-api/enduserapp/current-user/features/secondary	false		unknown
https://content.inpwrd.net/data/aggregate/7f7943bc-955b-4e21-ba29-3728dca7ed11?timeSpent=2421&activeTs=0&scrollPercentage=0&waitBeforeScroll=0&ts=1727453939450&hidden=true&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp18	false		unknown
https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=aaee493b-a84a-4daf-9178-698a635599e6&google_gid=CAESEK0XhNcNzovG6yHfurWVe_U&google_cver=1	false		unknown
https://js.zi-scripts.com/zi-tag.js	false		unknown
https://content.inpwrd.net/data/15sec/7f7943bc-955b-4e21-ba29-3728dca7ed11?ts=1727453915948&hidden=true&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp9	false		unknown
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=cdb5a06416be5d0f68969766&account=6232633676001&destination=https%3A%2F%2Fwww.box.com%2Fpricing%2Findividual&platform_version=7.17.2&player=players.brightcove.com%2F6232633676001%2FbVxoAYQdS_default&player_name=Box%20player&source=&autoplay=false&ads_enabled=false&media_type=video&time=1727453891446&event=video_impression&video=6293825609001&video_name=What%20is%20Box&custom_fields=&video_data=&video_ads_supported=true&tags=3play&tags=3play_processed&tags=content%20cloud&tags=freemium&video_duration=80&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Fclear%2F6232633676001%2F5659218b-e8bf-4dcb-b52b-2ae1a34ed322%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjZmNzI0ZjBfNTYzZTdhMGFhZjkyNTliMGQxNDg2NmNkNjJjNGNiMTBhZjg4MjNjY2ZlZDY5NGU5OTc5MDI1Y2UxYjA3ZWRiMw%253D%253D&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=4_0&preload=metadata	false		unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic	false	URL Reputation: safe	unknown
https://107-coj-713.mktoresp.com/webevents/visitWebPage?_mchNc=1727453886714&_mchCn=&_mchId=107-COJ-713&_mchTk=_mch-box.com-1727453886713-95903&_mchHo=www.box.com&_mchPo=&_mchRu=%2Fpricing%2Findividual&_mchPc=https%3A&_mchVr=163&_mchEcid=&_mchHa=&_mchRe=&_mchQp=	false		unknown
https://over-haul.app.box.com/app-api/end-user-web/sign-settings?typedIDs=f_1657666501770	false		unknown
https://content.inpwrd.net/data/aggregate/5f299a9c-d995-4431-9e68-beb7fa53432c?timeSpent=3000&activeTs=3000&scrollPercentage=0&waitBeforeScroll=0&ts=1727453947254&hidden=false&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp7	false		unknown
https://segment-box.com/index.54df1281.js	false		unknown
https://9418626.fls.doubleclick.net/activityi;src=9418626;type=engag0;cat=box1_0?	false		unknown
https://ws.qualified.com/cable?wv=9&token=QJy1YqZaG8LUA72E&vu=30dfd37f-a5ce-4924-b60c-b2ba7959591c&wu=2930d00b-84d3-4a76-b6c9-b42f0249ca34&ca=2024-09-27T16%3A18%3A08.923Z&tz=America%2FNew_York&bis=5&referrer=&pv=1&fv=2024-08-02-ad880cc565&iml=false&ic=true	false		unknown
https://s.yimg.com/wi/ytc.js	false		unknown
https://s.yimg.com/wi/config/10099788.json	false		unknown
https://over-haul.account.box.com/css/vendor/fonts/Lato-Regular.woff	false		unknown
https://content.inpwrd.net/data/aggregate/7f7943bc-955b-4e21-ba29-3728dca7ed11?timeSpent=2999&activeTs=0&scrollPercentage=0&waitBeforeScroll=0&ts=1727453915951&hidden=true&refreshCount=0&screenWidth=1280&screenHeight=907&cookieSupported=true&isJsonp=true&ib=false&rs=0&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp10	false		unknown
https://js.adsrvr.org/universal_pixel.1.1.3.js	false		unknown
https://segment-box.com/?key=9mEaWAAXfspF6epYVozDiTF43jJErnJl	false		unknown
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=B9B28F7954BD76240A4C98BC%40AdobeOrg&d_nsid=0&ts=1727453885799	false		unknown
https://content.inpwrd.net/data/lineitem-details/383b8a98-79af-4790-84df-c8da12a902b0?path=%2Fplatform&fullPath=https%3A%2F%2Fwww.box.com%2Fplatform&userId=d4ce88f0-415f-4b57-a554-1312879250e2&siteId=440993564977&callback=__jp1	false		unknown
https://tags.srv.stackadapt.com/events.js	false		unknown
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%228978fceb-a874-4028-a94c-bc5665f88af2%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216175%22%2C%22sessionId%22%3A%22bc6d4c5c-1461-4f4f-8651-f477763685c8%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A7%2C%22url%22%3A%22https%3A%2F%2Fwww.box.com%2Fplatform%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	false		unknown
https://over-haul.app.box.com/	false		unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=aaee493b-a84a-4daf-9178-698a635599e6	false		unknown
https://content.inpwrd.net/data/lineitem-details/383b8a98-79af-4790-84df-c8da12a902b0?path=%2Fpricing%2Findividual&fullPath=https%3A%2F%2Fwww.box.com%2Fpricing%2Findividual&siteId=440993564977&callback=__jp1	false		unknown
https://api.box.com/2.0/files/1657666501770?fields=permissions,shared_link,sha1,file_version,name,size,extension,representations,watermark_info,authenticated_download_url,is_download_available	false		unknown
https://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7	false		unknown
https://edge.api.brightcove.com/playback/v1/accounts/6232633676001/videos/6293825609001	false		unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520700
Start date and time:	2024-09-27 18:16:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://over-haul.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@27/761@256/71
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://over-haul.account.box.com/ref/singlefileshare2 Browse: https://over-haul.app.box.com/ Browse: https://over-haul.account.box.com/login?redirect_url=https%3A%2F%2Fover-haul.app.box.com%2Fs%2Fk35cpocmye51uknxq6wvkmi025rxeue7 Browse: https://www.box.com/platform

Input	Output
URL: https://www.box.com/pricing/individual Model: jbxai	{ "brand":["Box"], "contains_trigger_text":true, "trigger_text":"Upgrade your personal plan for more flexibility, storage and e-signatures", "prominent_button_name":"Buy now", "text_input_field_labels":["Sign up with Google"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7 Model: jbxai	{ "brand":["Schneider Presentation"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"Log in", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.box.com/pricing/individual Model: jbxai	{ "brand":["Box"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get started", "text_input_field_labels":["Sign up with Google", "Buy now"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.box.com/pricing/individual Model: jbxai	{ "brand":["box"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get started", "text_input_field_labels":["Sign up with Google", "Buy now", "Try for free"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.box.com/pricing/individual Model: jbxai	{ "brand":["Box"], "contains_trigger_text":true, "trigger_text":"Upgrade your personal plan for more flexibility, storage and e-signatures", "prominent_button_name":"Buy now", "text_input_field_labels":["Sign up with Google"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://over-haul.account.box.com/login Model: jbxai	{ "brand":["Box"], "contains_trigger_text":true, "trigger_text":"Welcome to Overhaul's document storage", "prominent_button_name":"Continue", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.box.com/platform Model: jbxai	{ "brand":["Box"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get started", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.box.com/platform Model: jbxai	{ "brand":["Box"], "contains_trigger_text":true, "trigger_text":"View developer docs", "prominent_button_name":"Get started", "text_input_field_labels":["NAME", "FINANCIAL STATEMENTS.pdf", "TAX DOCUMENTS", "CLIENT RESOURCES", "MUTUAL FUNDS DISCLOSURE STATEMENT.pdf", "PLAN & PROSPECTUS.pdf", "TAX GUIDE.docx"], "pdf_icon_visible":true, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	17
Entropy (8bit):	3.734521664779752
Encrypted:	false
SSDEEP:	3:gCtwn:l2
MD5:	A54A440C7EED0A7B3E78E6B985E12FEE
SHA1:	92EF2F2008EBBC5635B71F5D6C9831C5F2F4514F
SHA-256:	62CE950AD0D7F664B316B4253BBC993BF0BF8310970F64B150FDA6F1FA59DFEA
SHA-512:	F82E417DFAA9DAAE2A74DE3564D9DF703E4A2849D60752F6A9C4C2C5053CD72D3F5ED036EF683CA586CE17D7A2DA3E9D3DA6311560296929C70B23BC05A57631
Malicious:	false
Reputation:	low
Preview:	_ml.setIM(false);

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:42 UTC	694	OUT	GET /s/k35cpocmye51uknxq6wvkmi025rxeue7 HTTP/1.1 Host: over-haul.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:17:42 UTC	344	IN	HTTP/1.1 301 Moved Permanently date: Fri, 27 Sep 2024 16:17:42 GMT content-type: text/html; charset=UTF-8 location: https://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7 strict-transport-security: max-age=31536000 via: 1.1 google Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:43 UTC	698	OUT	GET /s/k35cpocmye51uknxq6wvkmi025rxeue7 HTTP/1.1 Host: over-haul.app.box.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:17:44 UTC	1055	IN	HTTP/1.1 200 OK date: Fri, 27 Sep 2024 16:17:44 GMT content-type: text/html; charset=utf-8 x-robots-tag: noindex, nofollow strict-transport-security: max-age=31536000 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; path=/; domain=.app.box.com; secure; HttpOnly set-cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; Path=/; Domain=.app.box.com; Secure; HttpOnly; SameSite=None set-cookie: box_visitor_id=66f6daa79ed6b1.08223727; expires=Sat, 27-Sep-2025 16:17:43 GMT; Max-Age=31536000; path=/; domain=.box.com; secure; SameSite=None set-cookie: bv=EUG-8342; expires=Fri, 04-Oct-2024 16:17:43 GMT; Max-Age=604800; path=/; domain=.app.box.com; secure set-cookie: cn=70; expires=Sat, 27-Sep-2025 16:17:43 GMT; Max-Age=31536000; path=/; domain=.app.box.com; secure set-cookie: site_preference=desktop; path=/; domain=.box.com; secure via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-27 16:17:44 UTC	335	IN	Data Raw: 31 61 33 39 0d 0a 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 61 74 61 2d 72 65 73 69 6e 2d 63 6c 69 65 6e 74 3d 22 77 65 62 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 20 20 3c 74 69 74 6c 65 3e 42 6f 78 Data Ascii: 1a39 <!DOCTYPE html><html lang="en-US" data-resin-client="web"><head><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="robots" content="noindex, nofollow"> <title>Box
2024-09-27 16:17:44 UTC	1390	IN	Data Raw: 22 73 75 6d 6d 61 72 79 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 42 6f 78 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 53 63 68 6e 65 69 64 65 72 20 50 72 65 73 65 6e 74 61 74 69 6f 6e 20 2d 20 4f 76 65 72 68 61 75 6c 2e 70 70 74 78 20 7c 20 50 6f 77 65 72 65 64 20 62 79 20 42 6f 78 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 Data Ascii: "summary"><meta name="twitter:site" content="@Box"><meta property="og:title" content="Schneider Presentation - Overhaul.pptx \| Powered by Box"><meta property="og:type" content="website"><meta property="og:description" content=""><meta property="og:image"
2024-09-27 16:17:44 UTC	1390	IN	Data Raw: 76 65 6e 64 6f 72 73 7e 73 68 61 72 65 64 2e 34 30 64 36 65 63 30 66 62 37 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 65 6e 64 75 73 65 72 2f 76 65 6e 64 6f 72 73 7e 6f 62 73 65 72 76 61 62 69 6c 69 74 79 2e 39 37 33 66 33 64 61 38 33 36 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c Data Ascii: vendors~shared.40d6ec0fb7.js" as="script" type="text/javascript" crossorigin="anonymous"> <link rel="preload" href="https://cdn01.boxcdn.net/enduser/vendors~observability.973f3da836.js" as="script" type="text/javascript" crossorigin="anonymous"> <link rel
2024-09-27 16:17:44 UTC	1390	IN	Data Raw: 31 2e 31 30 38 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 73 69 67 6e 2d 61 73 73 65 74 73 2f 62 6f 78 5f 73 69 67 6e 5f 63 6c 69 65 6e 74 5f 72 65 6d 6f 74 65 2e 31 2e 36 35 35 2e 31 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 Data Ascii: 1.108.js" as="script" type="text/javascript" crossorigin="anonymous"> <link rel="preload" href="https://cdn01.boxcdn.net/sign-assets/box_sign_client_remote.1.655.1.js" as="script" type="text/javascript" crossorigin="anonymous"> <link rel="preload" href="h
2024-09-27 16:17:44 UTC	1390	IN	Data Raw: 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 32 30 78 31 32 30 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 5f 61 73 73 65 74 73 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 31 32 30 78 31 32 30 2d 4b 2d 75 34 55 35 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 34 34 78 31 34 34 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 5f 61 73 73 65 74 73 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 31 34 Data Ascii: g"><link rel="apple-touch-icon" sizes="120x120" href="https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-120x120-K-u4U5.png"><link rel="apple-touch-icon" sizes="144x144" href="https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-14
2024-09-27 16:17:44 UTC	826	IN	Data Raw: 73 69 7a 65 73 3d 22 31 36 78 31 36 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 5f 61 73 73 65 74 73 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 73 2f 6d 61 6e 69 66 65 73 74 2d 72 77 31 41 45 50 2e 6a 73 6f 6e 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 73 6b 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 5f 61 73 73 65 74 73 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 73 2f 73 61 66 61 72 69 2d 70 69 6e 6e 65 64 2d 74 61 62 2d 6a 79 74 32 57 34 2e 73 76 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f Data Ascii: sizes="16x16"><link rel="manifest" href="https://cdn01.boxcdn.net/_assets/img/favicons/manifest-rw1AEP.json"><link rel="mask-icon" href="https://cdn01.boxcdn.net/_assets/img/favicons/safari-pinned-tab-jyt2W4.svg"><link rel="shortcut icon" href="https:/
2024-09-27 16:17:44 UTC	1390	IN	Data Raw: 66 66 61 0d 0a 20 3c 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 73 63 72 69 70 74 2d 77 61 72 6e 69 6e 67 22 3e 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 64 69 73 61 62 6c 65 64 20 69 6e 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6d 75 73 74 20 68 61 76 65 20 4a 61 76 61 53 63 72 69 70 74 20 65 6e 61 62 6c 65 64 20 74 6f 20 74 61 6b 65 20 66 75 6c 6c 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 42 6f 78 2e 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 20 69 64 3d 22 61 70 70 22 20 63 6c 61 73 73 3d 22 72 65 61 63 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 42 6f 78 20 3d 20 77 69 6e 64 6f 77 2e 42 6f 78 20 7c 7c Data Ascii: ffa <noscript><div class="noscript-warning"> JavaScript is currently disabled in your browser. You must have JavaScript enabled to take full advantage of Box.</div></noscript><div id="app" class="react-container"></div><script>window.Box = window.Box \|\|
2024-09-27 16:17:44 UTC	1390	IN	Data Raw: 35 74 33 6f 76 6d 31 72 32 6b 65 61 72 36 69 34 6b 76 6d 65 62 34 32 61 22 2c 22 65 6e 74 65 72 70 72 69 73 65 22 3a 5b 5d 2c 22 74 68 65 6d 65 22 3a 7b 22 69 64 22 3a 31 37 31 30 39 33 30 39 36 36 2c 22 69 73 44 65 66 61 75 6c 74 54 68 65 6d 65 22 3a 66 61 6c 73 65 2c 22 70 72 69 6d 61 72 79 43 6f 6c 6f 72 22 3a 22 23 46 34 46 34 46 34 22 2c 22 6c 6f 67 6f 55 52 4c 73 22 3a 7b 22 73 6d 61 6c 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6f 76 65 72 2d 68 61 75 6c 2e 61 70 70 2e 62 6f 78 2e 63 6f 6d 5c 2f 69 6e 64 65 78 2e 70 68 70 3f 72 6d 3d 70 69 63 5f 73 74 6f 72 61 67 65 5f 61 75 74 68 26 70 69 63 3d 65 75 6b 73 21 70 61 63 33 6b 76 30 31 21 48 75 58 6a 76 41 33 48 61 77 6f 6f 77 55 65 6e 56 75 55 70 57 78 5a 6a 4f 62 53 49 48 35 2d 37 33 31 76 64 77 49 Data Ascii: 5t3ovm1r2kear6i4kvmeb42a","enterprise":[],"theme":{"id":1710930966,"isDefaultTheme":false,"primaryColor":"#F4F4F4","logoURLs":{"small":"https:\/\/over-haul.app.box.com\/index.php?rm=pic_storage_auth&pic=euks!pac3kv01!HuXjvA3HawoowUenVuUpWxZjObSIH5-731vdwI
2024-09-27 16:17:44 UTC	1317	IN	Data Raw: 30 78 68 4a 53 6f 79 37 7a 35 64 36 78 38 57 35 38 62 32 70 34 5f 56 41 4e 64 65 4a 69 4c 43 6c 68 55 78 64 56 57 53 67 62 31 59 5a 35 7a 59 66 46 42 76 74 33 36 66 32 58 43 71 52 44 49 58 49 32 49 79 77 56 63 71 63 6c 31 37 6f 62 4b 36 37 39 6d 61 38 43 76 52 58 72 6d 70 49 50 2d 47 33 65 4c 55 44 61 36 46 76 43 47 53 30 30 4a 64 5a 77 50 35 58 6e 44 73 78 69 2d 72 54 4c 4c 49 31 78 39 58 36 4e 47 67 46 6b 61 45 46 7a 71 79 53 41 45 51 79 67 58 47 7a 4d 43 4e 77 62 45 39 6c 46 6c 57 5a 5a 59 33 73 65 53 5a 48 44 30 54 44 62 59 45 4f 64 69 4d 4f 4b 6d 6f 37 2d 4d 6d 75 6d 6f 6d 76 43 78 74 52 67 4e 39 45 45 7a 53 62 34 2e 22 2c 22 78 73 6d 61 6c 6c 32 78 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6f 76 65 72 2d 68 61 75 6c 2e 61 70 70 2e 62 6f 78 2e 63 6f 6d Data Ascii: 0xhJSoy7z5d6x8W58b2p4_VANdeJiLClhUxdVWSgb1YZ5zYfFBvt36f2XCqRDIXI2IywVcqcl17obK679ma8CvRXrmpIP-G3eLUDa6FvCGS00JdZwP5XnDsxi-rTLLI1x9X6NGgFkaEFzqySAEQygXGzMCNwbE9lFlWZZY3seSZHD0TDbYEOdiMOKmo7-MmumomvCxtRgN9EEzSb4.","xsmall2x":"https:\/\/over-haul.app.box.com
2024-09-27 16:17:44 UTC	1390	IN	Data Raw: 31 66 66 38 0d 0a 67 4d 78 32 43 71 65 73 6c 4b 45 72 39 78 32 48 6a 50 4d 48 4e 53 39 31 51 2e 2e 22 2c 22 6c 61 72 67 65 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6f 76 65 72 2d 68 61 75 6c 2e 61 70 70 2e 62 6f 78 2e 63 6f 6d 5c 2f 69 6e 64 65 78 2e 70 68 70 3f 72 6d 3d 70 69 63 5f 73 74 6f 72 61 67 65 5f 61 75 74 68 26 70 69 63 3d 65 75 6b 73 21 70 61 63 33 6b 76 30 31 21 79 4a 50 34 31 53 45 5f 36 66 73 39 57 62 6d 78 77 53 72 53 69 59 6a 48 32 74 2d 52 33 77 49 61 6a 31 44 38 38 4b 6a 5f 35 75 59 66 4c 33 68 57 4a 75 33 35 31 55 76 61 6b 66 5a 5a 34 48 5f 47 56 51 71 2d 56 4d 6a 71 67 33 42 49 59 2d 4f 33 53 61 55 61 56 34 57 46 46 30 69 5a 51 5f 4a 70 79 79 67 75 61 61 4c 4b 2d 67 38 6d 77 41 42 7a 36 75 64 55 61 6c 2d 6d 4d 65 45 35 32 4b 4f 6d 36 76 Data Ascii: 1ff8gMx2CqeslKEr9x2HjPMHNS91Q..","large":"https:\/\/over-haul.app.box.com\/index.php?rm=pic_storage_auth&pic=euks!pac3kv01!yJP41SE_6fs9WbmxwSrSiYjH2t-R3wIaj1D88Kj_5uYfL3hWJu351UvakfZZ4H_GVQq-VMjqg3BIY-O3SaUaV4WFF0iZQ_JpyyguaaLK-g8mwABz6udUal-mMeE52KOm6v

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:47 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 16:17:47 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25952 Date: Fri, 27 Sep 2024 16:17:47 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 16:17:48 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25994 Date: Fri, 27 Sep 2024 16:17:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 16:17:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:49 UTC	823	OUT	GET /app-api/enduserapp/current-user/features/secondary HTTP/1.1 Host: over-haul.app.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Box-Client-Version: 21.315.1 X-Box-Client-Name: enduserapp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; box_visitor_id=66f6daa79ed6b1.08223727; bv=EUG-8342; cn=70; site_preference=desktop
2024-09-27 16:17:50 UTC	749	IN	HTTP/1.1 200 OK date: Fri, 27 Sep 2024 16:17:49 GMT content-type: application/json; charset=utf-8 strict-transport-security: max-age=31536000 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; Path=/; Domain=.app.box.com; Secure; HttpOnly; SameSite=None set-cookie: box_visitor_id=66f6daa79ed6b1.08223727; expires=Sat, 27-Sep-2025 16:17:49 GMT; Max-Age=31536000; path=/; domain=.box.com; secure; SameSite=None set-cookie: site_preference=desktop; path=/; domain=.box.com; secure x-enduserapp-currentversion: 21.315.1 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-27 16:17:50 UTC	157	IN	Data Raw: 39 32 0d 0a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 61 6e 41 64 64 53 65 61 74 73 22 3a 66 61 6c 73 65 2c 22 63 68 61 74 62 6f 74 22 3a 66 61 6c 73 65 2c 22 70 65 72 73 69 73 74 65 6e 74 44 72 69 76 65 50 72 6f 6d 6f 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 75 70 67 72 61 64 65 49 6e 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 63 61 6e 55 70 67 72 61 64 65 54 72 69 61 6c 22 3a 66 61 6c 73 65 7d 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 5b 5d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 92{"features":{"canAddSeats":false,"chatbot":false,"persistentDrivePromotion":false,"upgradeInline":false,"canUpgradeTrial":false},"experiments":[]}0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://over-haul.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Windows Analysis Report
https://over-haul.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:49 UTC	859	OUT	GET /app-api/split-proxy/api/mySegments/-1 HTTP/1.1 Host: over-haul.app.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 SplitSDKVersion: javascript-10.23.0 Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42a User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; box_visitor_id=66f6daa79ed6b1.08223727; bv=EUG-8342; cn=70; site_preference=desktop
2024-09-27 16:17:50 UTC	354	IN	HTTP/1.1 200 OK date: Fri, 27 Sep 2024 16:17:50 GMT content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 6 strict-transport-security: max-age=31536000 box-request-id: 0f987fb71b59b1d3de6c0aee1e6069769 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-27 16:17:50 UTC	28	IN	Data Raw: 31 31 0d 0a 7b 22 6d 79 53 65 67 6d 65 6e 74 73 22 3a 5b 5d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 11{"mySegments":[]}0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:49 UTC	867	OUT	GET /app-api/split-proxy/api/splitChanges?since=-1 HTTP/1.1 Host: over-haul.app.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 SplitSDKVersion: javascript-10.23.0 Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42a User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; box_visitor_id=66f6daa79ed6b1.08223727; bv=EUG-8342; cn=70; site_preference=desktop
2024-09-27 16:17:50 UTC	355	IN	HTTP/1.1 200 OK date: Fri, 27 Sep 2024 16:17:50 GMT content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 10 strict-transport-security: max-age=31536000 box-request-id: 0e4a56487e0aa12169c10fa492482d9a7 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-27 16:17:50 UTC	1035	IN	Data Raw: 33 65 63 62 0d 0a 7b 22 74 69 6c 6c 22 3a 31 37 32 37 34 35 33 38 32 31 33 37 35 2c 22 73 69 6e 63 65 22 3a 2d 31 2c 22 73 70 6c 69 74 73 22 3a 5b 7b 22 63 68 61 6e 67 65 4e 75 6d 62 65 72 22 3a 31 36 38 39 32 34 37 39 30 33 36 38 30 2c 22 74 72 61 66 66 69 63 54 79 70 65 4e 61 6d 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 2c 22 6e 61 6d 65 22 3a 22 63 68 61 6e 67 65 5f 63 6f 6e 74 72 6f 6c 5f 64 65 6d 6f 22 2c 22 74 72 61 66 66 69 63 41 6c 6c 6f 63 61 74 69 6f 6e 22 3a 31 30 30 2c 22 74 72 61 66 66 69 63 41 6c 6c 6f 63 61 74 69 6f 6e 53 65 65 64 22 3a 39 37 37 31 34 30 38 39 37 2c 22 73 65 65 64 22 3a 2d 31 32 38 33 32 33 35 35 34 31 2c 22 73 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 6b 69 6c 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 Data Ascii: 3ecb{"till":1727453821375,"since":-1,"splits":[{"changeNumber":1689247903680,"trafficTypeName":"enterprise_id","name":"change_control_demo","trafficAllocation":100,"trafficAllocationSeed":977140897,"seed":-1283235541,"status":"ACTIVE","killed":false,"de
2024-09-27 16:17:50 UTC	1390	IN	Data Raw: 3a 22 41 43 54 49 56 45 22 2c 22 6b 69 6c 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 66 61 75 6c 74 54 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 61 6c 67 6f 22 3a 32 2c 22 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 63 6f 6e 64 69 74 69 6f 6e 54 79 70 65 22 3a 22 52 4f 4c 4c 4f 55 54 22 2c 22 6d 61 74 63 68 65 72 47 72 6f 75 70 22 3a 7b 22 63 6f 6d 62 69 6e 65 72 22 3a 22 41 4e 44 22 2c 22 6d 61 74 63 68 65 72 73 22 3a 5b 7b 22 6b 65 79 53 65 6c 65 63 74 6f 72 22 3a 7b 22 74 72 61 66 66 69 63 54 79 70 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 2c 22 61 74 74 72 69 62 75 74 65 22 3a 6e 75 6c 6c 7d 2c 22 6d 61 74 63 68 65 72 54 79 70 65 22 3a 22 49 4e 5f 53 50 4c 49 54 5f 54 52 45 41 54 4d 45 4e 54 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 Data Ascii: :"ACTIVE","killed":false,"defaultTreatment":"off","algo":2,"conditions":[{"conditionType":"ROLLOUT","matcherGroup":{"combiner":"AND","matchers":[{"keySelector":{"trafficType":"enterprise_id","attribute":null},"matcherType":"IN_SPLIT_TREATMENT","negate":fa
2024-09-27 16:17:50 UTC	1390	IN	Data Raw: 54 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 61 6c 67 6f 22 3a 32 2c 22 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 63 6f 6e 64 69 74 69 6f 6e 54 79 70 65 22 3a 22 52 4f 4c 4c 4f 55 54 22 2c 22 6d 61 74 63 68 65 72 47 72 6f 75 70 22 3a 7b 22 63 6f 6d 62 69 6e 65 72 22 3a 22 41 4e 44 22 2c 22 6d 61 74 63 68 65 72 73 22 3a 5b 7b 22 6b 65 79 53 65 6c 65 63 74 6f 72 22 3a 7b 22 74 72 61 66 66 69 63 54 79 70 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 2c 22 61 74 74 72 69 62 75 74 65 22 3a 6e 75 6c 6c 7d 2c 22 6d 61 74 63 68 65 72 54 79 70 65 22 3a 22 41 4c 4c 5f 4b 45 59 53 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 75 73 65 72 44 65 66 69 6e 65 64 53 65 67 6d 65 6e 74 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 77 Data Ascii: Treatment":"off","algo":2,"conditions":[{"conditionType":"ROLLOUT","matcherGroup":{"combiner":"AND","matchers":[{"keySelector":{"trafficType":"enterprise_id","attribute":null},"matcherType":"ALL_KEYS","negate":false,"userDefinedSegmentMatcherData":null,"w
2024-09-27 16:17:50 UTC	1390	IN	Data Raw: 22 6e 61 6d 65 22 3a 22 75 73 65 72 5f 62 6f 78 2d 63 61 6e 76 61 73 2d 70 65 72 73 6f 6e 61 6c 2d 75 73 65 72 73 2d 67 61 2d 65 6e 61 62 6c 65 64 22 2c 22 74 72 61 66 66 69 63 41 6c 6c 6f 63 61 74 69 6f 6e 22 3a 31 30 30 2c 22 74 72 61 66 66 69 63 41 6c 6c 6f 63 61 74 69 6f 6e 53 65 65 64 22 3a 31 37 30 33 31 31 34 32 30 32 2c 22 73 65 65 64 22 3a 34 35 33 38 32 31 37 35 39 2c 22 73 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 6b 69 6c 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 66 61 75 6c 74 54 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 61 6c 67 6f 22 3a 32 2c 22 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 63 6f 6e 64 69 74 69 6f 6e 54 79 70 65 22 3a 22 57 48 49 54 45 4c 49 53 54 22 2c 22 6d 61 74 63 68 65 72 47 72 6f 75 70 22 3a 7b 22 63 Data Ascii: "name":"user_box-canvas-personal-users-ga-enabled","trafficAllocation":100,"trafficAllocationSeed":1703114202,"seed":453821759,"status":"ACTIVE","killed":false,"defaultTreatment":"off","algo":2,"conditions":[{"conditionType":"WHITELIST","matcherGroup":{"c
2024-09-27 16:17:50 UTC	1390	IN	Data Raw: 4d 61 74 63 68 65 72 44 61 74 61 22 3a 7b 22 77 68 69 74 65 6c 69 73 74 22 3a 5b 22 70 72 6f 66 65 73 73 69 6f 6e 61 6c 22 5d 7d 2c 22 75 6e 61 72 79 4e 75 6d 65 72 69 63 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 62 65 74 77 65 65 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 64 65 70 65 6e 64 65 6e 63 79 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 62 6f 6f 6c 65 61 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 73 74 72 69 6e 67 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 7d 5d 7d 2c 22 70 61 72 74 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 6e 22 2c 22 73 69 7a 65 22 3a 31 30 30 7d 2c 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 73 69 7a 65 22 3a 30 Data Ascii: MatcherData":{"whitelist":["professional"]},"unaryNumericMatcherData":null,"betweenMatcherData":null,"dependencyMatcherData":null,"booleanMatcherData":null,"stringMatcherData":null}]},"partitions":[{"treatment":"on","size":100},{"treatment":"off","size":0
2024-09-27 16:17:50 UTC	1390	IN	Data Raw: 74 61 22 3a 6e 75 6c 6c 2c 22 62 65 74 77 65 65 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 64 65 70 65 6e 64 65 6e 63 79 4d 61 74 63 68 65 72 44 61 74 61 22 3a 7b 22 73 70 6c 69 74 22 3a 22 67 78 70 5f 66 65 61 74 75 72 65 73 5f 6e 6f 5f 73 65 67 6d 65 6e 74 73 5f 71 32 32 34 22 2c 22 74 72 65 61 74 6d 65 6e 74 73 22 3a 5b 22 6f 66 66 22 5d 7d 2c 22 62 6f 6f 6c 65 61 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 73 74 72 69 6e 67 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 7d 5d 7d 2c 22 70 61 72 74 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 6e 22 2c 22 73 69 7a 65 22 3a 30 7d 2c 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 73 69 7a 65 22 3a 31 30 30 7d 5d 2c 22 6c 61 62 65 Data Ascii: ta":null,"betweenMatcherData":null,"dependencyMatcherData":{"split":"gxp_features_no_segments_q224","treatments":["off"]},"booleanMatcherData":null,"stringMatcherData":null}]},"partitions":[{"treatment":"on","size":0},{"treatment":"off","size":100}],"labe
2024-09-27 16:17:50 UTC	1390	IN	Data Raw: 22 62 65 74 77 65 65 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 64 65 70 65 6e 64 65 6e 63 79 4d 61 74 63 68 65 72 44 61 74 61 22 3a 7b 22 73 70 6c 69 74 22 3a 22 67 78 70 5f 66 65 61 74 75 72 65 73 5f 71 32 32 33 22 2c 22 74 72 65 61 74 6d 65 6e 74 73 22 3a 5b 22 6f 66 66 22 5d 7d 2c 22 62 6f 6f 6c 65 61 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 73 74 72 69 6e 67 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 7d 5d 7d 2c 22 70 61 72 74 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 6e 22 2c 22 73 69 7a 65 22 3a 30 7d 2c 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 73 69 7a 65 22 3a 31 30 30 7d 5d 2c 22 6c 61 62 65 6c 22 3a 22 69 6e 20 73 70 6c 69 74 20 67 78 70 5f 66 65 61 74 Data Ascii: "betweenMatcherData":null,"dependencyMatcherData":{"split":"gxp_features_q223","treatments":["off"]},"booleanMatcherData":null,"stringMatcherData":null}]},"partitions":[{"treatment":"on","size":0},{"treatment":"off","size":100}],"label":"in split gxp_feat
2024-09-27 16:17:50 UTC	1390	IN	Data Raw: 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 64 65 70 65 6e 64 65 6e 63 79 4d 61 74 63 68 65 72 44 61 74 61 22 3a 7b 22 73 70 6c 69 74 22 3a 22 67 78 70 5f 66 65 61 74 75 72 65 73 5f 71 34 32 33 22 2c 22 74 72 65 61 74 6d 65 6e 74 73 22 3a 5b 22 6f 66 66 22 5d 7d 2c 22 62 6f 6f 6c 65 61 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 73 74 72 69 6e 67 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 7d 5d 7d 2c 22 70 61 72 74 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 6e 22 2c 22 73 69 7a 65 22 3a 30 7d 2c 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 73 69 7a 65 22 3a 31 30 30 7d 5d 2c 22 6c 61 62 65 6c 22 3a 22 69 6e 20 73 70 6c 69 74 20 67 78 70 5f 66 65 61 74 75 72 65 73 5f 71 34 32 33 20 74 72 65 61 74 Data Ascii: Data":null,"dependencyMatcherData":{"split":"gxp_features_q423","treatments":["off"]},"booleanMatcherData":null,"stringMatcherData":null}]},"partitions":[{"treatment":"on","size":0},{"treatment":"off","size":100}],"label":"in split gxp_features_q423 treat
2024-09-27 16:17:50 UTC	1390	IN	Data Raw: 22 64 65 70 65 6e 64 65 6e 63 79 4d 61 74 63 68 65 72 44 61 74 61 22 3a 7b 22 73 70 6c 69 74 22 3a 22 67 78 70 5f 66 65 61 74 75 72 65 73 5f 6e 6f 5f 73 65 67 6d 65 6e 74 73 5f 71 32 32 34 22 2c 22 74 72 65 61 74 6d 65 6e 74 73 22 3a 5b 22 6f 66 66 22 5d 7d 2c 22 62 6f 6f 6c 65 61 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 73 74 72 69 6e 67 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 7d 5d 7d 2c 22 70 61 72 74 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 6e 22 2c 22 73 69 7a 65 22 3a 30 7d 2c 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 73 69 7a 65 22 3a 31 30 30 7d 5d 2c 22 6c 61 62 65 6c 22 3a 22 69 6e 20 73 70 6c 69 74 20 67 78 70 5f 66 65 61 74 75 72 65 73 5f 6e 6f 5f 73 65 67 6d 65 6e Data Ascii: "dependencyMatcherData":{"split":"gxp_features_no_segments_q224","treatments":["off"]},"booleanMatcherData":null,"stringMatcherData":null}]},"partitions":[{"treatment":"on","size":0},{"treatment":"off","size":100}],"label":"in split gxp_features_no_segmen
2024-09-27 16:17:50 UTC	1390	IN	Data Raw: 62 6f 6f 6c 65 61 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 73 74 72 69 6e 67 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 7d 5d 7d 2c 22 70 61 72 74 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 6e 22 2c 22 73 69 7a 65 22 3a 31 30 30 7d 2c 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 73 69 7a 65 22 3a 30 7d 5d 2c 22 6c 61 62 65 6c 22 3a 22 64 65 66 61 75 6c 74 20 72 75 6c 65 22 7d 5d 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 73 65 74 73 22 3a 5b 5d 7d 2c 7b 22 63 68 61 6e 67 65 4e 75 6d 62 65 72 22 3a 31 37 32 37 30 38 36 32 32 37 37 38 33 2c 22 74 72 61 66 66 69 63 54 79 70 65 4e 61 6d 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: booleanMatcherData":null,"stringMatcherData":null}]},"partitions":[{"treatment":"on","size":100},{"treatment":"off","size":0}],"label":"default rule"}],"configurations":{},"sets":[]},{"changeNumber":1727086227783,"trafficTypeName":"enterprise_id","name":"

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:52 UTC	1019	OUT	POST /gen204 HTTP/1.1 Host: over-haul.app.box.com Connection: keep-alive Content-Length: 449 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Box-Client-Version: 21.315.1 X-Box-Client-Name: enduserapp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json X-Request-Token: 692422af3205daacd3ec7af308e9ec0a53175ebbc21d925b73d10fbe9b6f3274 Request-Token: 692422af3205daacd3ec7af308e9ec0a53175ebbc21d925b73d10fbe9b6f3274 sec-ch-ua-platform: "Windows" Origin: https://over-haul.app.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; box_visitor_id=66f6daa79ed6b1.08223727; bv=EUG-8342; cn=70; site_preference=desktop
2024-09-27 16:17:52 UTC	449	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 7b 22 63 61 74 65 67 6f 72 79 22 3a 22 65 75 61 5f 70 65 72 66 6f 72 6d 61 6e 63 65 22 2c 22 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 77 65 62 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 79 62 67 78 35 64 68 75 32 71 63 75 70 75 65 6b 22 2c 22 62 72 6f 77 73 65 72 5f 6e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 22 2c 22 6f 73 5f 6e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 64 65 76 69 63 65 5f 6e 61 6d 65 22 3a 22 75 6e 6b 6e 6f 77 6e 22 2c 22 70 65 72 66 6f 72 6d 61 6e 63 65 5f 69 64 22 3a 22 73 70 6c 69 74 22 2c 22 73 74 61 72 74 5f 73 74 61 74 65 22 3a 22 69 6e 69 74 69 61 6c 22 2c 22 65 Data Ascii: {"data":[{"category":"eua_performance","event_type":"web","country_code":"US","request_id":"ybgx5dhu2qcupuek","browser_name":"Chrome","browser_version":"117.0","os_name":"Windows","device_name":"unknown","performance_id":"split","start_state":"initial","e
2024-09-27 16:17:52 UTC	782	IN	HTTP/1.1 204 No Content date: Fri, 27 Sep 2024 16:17:52 GMT content-type: text/html;charset=UTF-8 strict-transport-security: max-age=31536000 access-control-allow-origin: https://over-haul.app.box.com access-control-allow-credentials: true expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; Path=/; Domain=.app.box.com; Secure; HttpOnly; SameSite=None set-cookie: box_visitor_id=66f6daa79ed6b1.08223727; expires=Sat, 27-Sep-2025 16:17:52 GMT; Max-Age=31536000; path=/; domain=.box.com; secure; SameSite=None set-cookie: site_preference=desktop; path=/; domain=.box.com; secure via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:52 UTC	943	OUT	GET /data/guide.json/123e0628-cb29-41d1-466c-c592c7ddcd06?id=7&jzb=eJxNj0FPxCAQhf8L5y10Wetqb9408Wb0ukE6bkkpgzDUGtP_vtNNrN6G95jvvfkRk8uOMD11ohVa7ISxFkug67vas1CS57EnirlVCidIVW-KlyZG-Y6ztDiqrIZDYyPa8RuafRnC_Hn7NQ2jq3WTZihwZBD67u0vLBTvd2IEMp0hI9qtyToy99mEczFn4GwI1esLA9xvR__fO7G3bL3X7es_7s5qNAkCPWweSxy3Luqjqu-VrvUNA_mo7DCsstSHO6lPMWHHRgb_8YiZgJGUCizLBYlYY2E&v=2.238.2_prod&ct=1727453871053 HTTP/1.1 Host: pendo-data-prod.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://over-haul.app.box.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://over-haul.app.box.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:17:52 UTC	545	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 content-type: application/json x-content-type-options: nosniff date: Fri, 27 Sep 2024 16:17:52 GMT x-envoy-upstream-service-time: 7 server: istio-envoy via: 1.1 google, 1.1 google strict-transport-security: max-age=63072000 alt-svc: clear Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-27 16:17:52 UTC	845	IN	Data Raw: 33 35 37 66 0d 0a 7b 22 67 75 69 64 65 73 22 3a 5b 5d 2c 22 6e 6f 72 6d 61 6c 69 7a 65 64 55 72 6c 22 3a 22 68 74 74 70 3a 2f 2f 6f 76 65 72 2d 68 61 75 6c 2e 61 70 70 2e 62 6f 78 2e 63 6f 6d 2f 73 2f 6b 33 35 63 70 6f 63 6d 79 65 35 31 75 6b 6e 78 71 36 77 76 6b 6d 69 30 32 35 72 78 65 75 65 37 22 2c 22 6c 61 73 74 47 75 69 64 65 53 74 65 70 53 65 65 6e 22 3a 7b 22 69 73 4d 75 6c 74 69 53 74 65 70 22 3a 66 61 6c 73 65 2c 22 73 74 61 74 65 22 3a 22 22 7d 2c 22 67 75 69 64 65 57 69 64 67 65 74 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 50 6f 77 65 72 65 64 42 79 22 3a 66 61 6c 73 65 2c 22 64 61 74 61 22 3a 7b 22 67 75 69 64 65 43 73 73 55 72 6c 22 3a 22 22 2c 22 6f 6e 62 6f 61 72 64 69 6e 67 22 3a 66 61 6c 73 65 7d 7d 2c 22 67 Data Ascii: 357f{"guides":[],"normalizedUrl":"http://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7","lastGuideStepSeen":{"isMultiStep":false,"state":""},"guideWidget":{"enabled":false,"hidePoweredBy":false,"data":{"guideCssUrl":"","onboarding":false}},"g
2024-09-27 16:17:52 UTC	1390	IN	Data Raw: 73 65 6c 65 63 74 6f 72 22 3a 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 70 61 67 65 5d 22 2c 22 74 79 70 65 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 22 3a 22 22 7d 5d 2c 22 70 61 67 65 49 64 22 3a 22 22 2c 22 66 65 61 74 75 72 65 49 64 22 3a 22 63 72 37 6a 47 43 34 4d 45 6f 37 4d 6a 52 6a 52 43 66 66 74 6f 55 49 6e 45 66 45 22 2c 22 66 65 61 74 75 72 65 52 75 6c 65 22 3a 5b 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 5c 22 68 65 61 64 65 72 5c 22 5d 5b 64 61 74 61 2d 72 65 73 69 6e 2d 66 65 61 74 75 72 65 3d 5c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 5c 22 5d 5b 64 61 74 61 2d 72 65 73 69 6e 2d 74 61 72 67 65 74 3d 5c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 69 63 6f 6e 5c 22 5d 22 5d 7d 2c 7b 22 65 76 65 6e 74 50 72 6f 70 65 72 74 Data Ascii: selector":"[data-resin-page]","type":"","pattern":""}],"pageId":"","featureId":"cr7jGC4MEo7MjRjRCfftoUInEfE","featureRule":["[data-resin-component=\"header\"][data-resin-feature=\"notifications\"][data-resin-target=\"notificationsicon\"]"]},{"eventPropert
2024-09-27 16:17:52 UTC	1390	IN	Data Raw: 64 61 74 61 73 65 74 2e 72 65 73 69 6e 50 61 67 65 5c 22 7d 22 2c 22 69 73 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 70 61 74 68 22 3a 22 64 61 74 61 73 65 74 2e 72 65 73 69 6e 50 61 67 65 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 70 61 67 65 5d 22 2c 22 74 79 70 65 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 22 3a 22 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 72 65 73 69 6e 5f 66 6f 6c 64 65 72 5f 69 64 22 2c 22 72 75 6c 65 22 3a 22 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 72 65 73 69 6e 5f 66 6f 6c 64 65 72 5f 69 64 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 66 6f 6c 64 65 72 5f 69 64 5d 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 64 61 74 61 73 65 74 2e 72 65 73 69 6e 46 6f 6c 64 65 72 5f 69 64 Data Ascii: dataset.resinPage\"}","isActive":true,"path":"dataset.resinPage","selector":"[data-resin-page]","type":"","pattern":""},{"name":"resin_folder_id","rule":"{\"name\":\"resin_folder_id\",\"source\":\"[data-resin-folder_id]\",\"path\":\"dataset.resinFolder_id
2024-09-27 16:17:52 UTC	1390	IN	Data Raw: 73 69 6e 2d 70 61 67 65 5d 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 64 61 74 61 73 65 74 2e 72 65 73 69 6e 50 61 67 65 5c 22 7d 22 2c 22 69 73 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 70 61 74 68 22 3a 22 64 61 74 61 73 65 74 2e 72 65 73 69 6e 50 61 67 65 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 70 61 67 65 5d 22 2c 22 74 79 70 65 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 22 3a 22 22 7d 5d 2c 22 70 61 67 65 49 64 22 3a 22 22 2c 22 66 65 61 74 75 72 65 49 64 22 3a 22 31 47 4c 62 65 53 61 50 78 4b 44 7a 57 73 69 39 75 30 6b 4c 59 58 47 34 56 6b 51 22 2c 22 66 65 61 74 75 72 65 52 75 6c 65 22 3a 5b 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 5c 22 6d 6f 64 61 6c 5c 22 5d 20 5b 64 61 74 61 2d 72 65 Data Ascii: sin-page]\",\"path\":\"dataset.resinPage\"}","isActive":true,"path":"dataset.resinPage","selector":"[data-resin-page]","type":"","pattern":""}],"pageId":"","featureId":"1GLbeSaPxKDzWsi9u0kLYXG4VkQ","featureRule":["[data-resin-component=\"modal\"] [data-re
2024-09-27 16:17:52 UTC	1390	IN	Data Raw: 74 4e 55 65 62 73 4d 45 4f 55 73 49 70 69 4f 34 6f 4c 67 22 2c 22 66 65 61 74 75 72 65 52 75 6c 65 22 3a 5b 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 5c 22 62 6f 64 79 5c 22 5d 20 5b 64 61 74 61 2d 72 65 73 69 6e 2d 66 65 61 74 75 72 65 3d 5c 22 75 70 67 72 61 64 65 43 68 65 63 6b 6f 75 74 53 74 65 70 5c 22 5d 20 5b 64 61 74 61 2d 72 65 73 69 6e 2d 74 61 72 67 65 74 3d 5c 22 61 64 64 72 65 73 73 43 6f 6e 74 69 6e 75 65 64 5c 22 5d 22 5d 7d 2c 7b 22 65 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 72 65 73 69 6e 5f 70 61 67 65 22 2c 22 72 75 6c 65 22 3a 22 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 72 65 73 69 6e 5f 70 61 67 65 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 5b 64 61 74 61 2d 72 65 73 69 Data Ascii: tNUebsMEOUsIpiO4oLg","featureRule":["[data-resin-component=\"body\"] [data-resin-feature=\"upgradeCheckoutStep\"] [data-resin-target=\"addressContinued\"]"]},{"eventProperties":[{"name":"resin_page","rule":"{\"name\":\"resin_page\",\"source\":\"[data-resi
2024-09-27 16:17:52 UTC	1390	IN	Data Raw: 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 72 65 73 69 6e 5f 70 61 67 65 22 2c 22 72 75 6c 65 22 3a 22 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 72 65 73 69 6e 5f 70 61 67 65 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 70 61 67 65 5d 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 64 61 74 61 73 65 74 2e 72 65 73 69 6e 50 61 67 65 5c 22 7d 22 2c 22 69 73 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 70 61 74 68 22 3a 22 64 61 74 61 73 65 74 2e 72 65 73 69 6e 50 61 67 65 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 70 61 67 65 5d 22 2c 22 74 79 70 65 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 22 3a 22 22 7d 5d 2c 22 70 61 67 65 49 64 22 3a 22 22 2c 22 66 65 61 74 75 72 65 49 64 22 3a 22 Data Ascii: operties":[{"name":"resin_page","rule":"{\"name\":\"resin_page\",\"source\":\"[data-resin-page]\",\"path\":\"dataset.resinPage\"}","isActive":true,"path":"dataset.resinPage","selector":"[data-resin-page]","type":"","pattern":""}],"pageId":"","featureId":"
2024-09-27 16:17:52 UTC	1390	IN	Data Raw: 68 22 3a 22 64 61 74 61 73 65 74 2e 72 65 73 69 6e 50 61 67 65 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 70 61 67 65 5d 22 2c 22 74 79 70 65 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 22 3a 22 22 7d 5d 2c 22 70 61 67 65 49 64 22 3a 22 22 2c 22 66 65 61 74 75 72 65 49 64 22 3a 22 37 59 75 35 4c 33 65 76 42 4e 31 38 43 2d 39 31 43 6e 76 5f 68 59 6f 59 65 48 6f 22 2c 22 66 65 61 74 75 72 65 52 75 6c 65 22 3a 5b 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 5c 22 6d 6f 64 61 6c 5c 22 5d 20 5b 64 61 74 61 2d 72 65 73 69 6e 2d 66 65 61 74 75 72 65 3d 5c 22 75 70 67 72 61 64 65 43 68 65 63 6b 6f 75 74 53 74 65 70 5c 22 5d 20 5b 64 61 74 61 2d 72 65 73 69 6e 2d 74 61 72 67 65 74 3d 5c 22 63 68 61 6e 67 65 50 Data Ascii: h":"dataset.resinPage","selector":"[data-resin-page]","type":"","pattern":""}],"pageId":"","featureId":"7Yu5L3evBN18C-91Cnv_hYoYeHo","featureRule":["[data-resin-component=\"modal\"] [data-resin-feature=\"upgradeCheckoutStep\"] [data-resin-target=\"changeP
2024-09-27 16:17:52 UTC	1390	IN	Data Raw: 66 65 61 74 75 72 65 49 64 22 3a 22 38 41 41 36 77 70 61 50 4a 39 73 4b 50 4c 37 45 4e 4e 5a 46 37 68 63 58 36 71 4d 22 2c 22 66 65 61 74 75 72 65 52 75 6c 65 22 3a 5b 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 5c 22 6d 6f 64 61 6c 5c 22 5d 20 5b 64 61 74 61 2d 72 65 73 69 6e 2d 66 65 61 74 75 72 65 3d 5c 22 75 70 67 72 61 64 65 43 68 65 63 6b 6f 75 74 53 74 65 70 5c 22 5d 20 5b 64 61 74 61 2d 72 65 73 69 6e 2d 74 61 72 67 65 74 3d 5c 22 73 74 72 65 65 74 41 64 64 72 65 73 73 46 69 65 6c 64 5c 22 5d 22 5d 7d 2c 7b 22 65 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 72 65 73 69 6e 5f 70 61 67 65 22 2c 22 72 75 6c 65 22 3a 22 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 72 65 73 69 6e 5f 70 61 67 65 5c 22 2c Data Ascii: featureId":"8AA6wpaPJ9sKPL7ENNZF7hcX6qM","featureRule":["[data-resin-component=\"modal\"] [data-resin-feature=\"upgradeCheckoutStep\"] [data-resin-target=\"streetAddressField\"]"]},{"eventProperties":[{"name":"resin_page","rule":"{\"name\":\"resin_page\",
2024-09-27 16:17:52 UTC	1390	IN	Data Raw: 61 74 61 2d 72 65 73 69 6e 2d 66 65 61 74 75 72 65 3d 5c 22 75 70 67 72 61 64 65 43 68 65 63 6b 6f 75 74 53 74 65 70 5c 22 5d 20 5b 64 61 74 61 2d 72 65 73 69 6e 2d 74 61 72 67 65 74 3d 5c 22 63 69 74 79 46 69 65 6c 64 5c 22 5d 22 5d 7d 2c 7b 22 65 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 72 65 73 69 6e 5f 70 61 67 65 22 2c 22 72 75 6c 65 22 3a 22 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 72 65 73 69 6e 5f 70 61 67 65 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 70 61 67 65 5d 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 64 61 74 61 73 65 74 2e 72 65 73 69 6e 50 61 67 65 5c 22 7d 22 2c 22 69 73 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 70 61 74 68 22 3a 22 64 61 74 61 73 65 74 2e 72 65 73 Data Ascii: ata-resin-feature=\"upgradeCheckoutStep\"] [data-resin-target=\"cityField\"]"]},{"eventProperties":[{"name":"resin_page","rule":"{\"name\":\"resin_page\",\"source\":\"[data-resin-page]\",\"path\":\"dataset.resinPage\"}","isActive":true,"path":"dataset.res
2024-09-27 16:17:52 UTC	1390	IN	Data Raw: 68 5c 22 3a 5c 22 69 6e 6e 65 72 54 65 78 74 5c 22 7d 22 2c 22 69 73 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 70 61 74 68 22 3a 22 69 6e 6e 65 72 54 65 78 74 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 2e 69 73 2d 76 69 73 69 62 6c 65 22 2c 22 74 79 70 65 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 22 3a 22 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 72 65 73 69 6e 5f 70 61 67 65 22 2c 22 72 75 6c 65 22 3a 22 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 72 65 73 69 6e 5f 70 61 67 65 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 5b 64 61 74 61 2d 72 65 73 69 6e 2d 70 61 67 65 5d 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 64 61 74 61 73 65 74 2e 72 65 73 69 6e 50 61 67 65 5c 22 7d 22 2c 22 69 73 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 70 61 74 68 22 3a 22 64 61 74 61 73 65 74 Data Ascii: h\":\"innerText\"}","isActive":true,"path":"innerText","selector":".is-visible","type":"","pattern":""},{"name":"resin_page","rule":"{\"name\":\"resin_page\",\"source\":\"[data-resin-page]\",\"path\":\"dataset.resinPage\"}","isActive":true,"path":"dataset

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:52 UTC	678	OUT	GET /data/guide.gif/123e0628-cb29-41d1-466c-c592c7ddcd06?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1727453871054&v=2.238.2_prod HTTP/1.1 Host: pendo-data-prod.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://over-haul.app.box.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://over-haul.app.box.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:17:52 UTC	530	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 content-type: image/gif x-content-type-options: nosniff date: Fri, 27 Sep 2024 16:17:52 GMT Content-Length: 42 x-envoy-upstream-service-time: 8 server: istio-envoy via: 1.1 google, 1.1 google strict-transport-security: max-age=63072000 alt-svc: clear Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:17:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:52 UTC	1230	OUT	GET /data/ptm.gif/123e0628-cb29-41d1-466c-c592c7ddcd06?v=2.238.2_prod&ct=1727453871037&jzb=eJzFUUnPmzAU_C8-Exaz55ZW6qb20OU7tFWFDBhiYTCfFxL6Kf89z0mEkKq2pyiczIzfzHjezxek55GiLWI1HTRrZuSgUoqDorLQrAcmSHEaxWGW-nmWO2hiimkhC1bDEIbbpKqEGfQV2ASAGMnhuNd6VFvPExOVmz0x3CXj6Jbi6Fai95TXhXE1iqqfaRyYbjg-J4ep65mPY3mkhqYgNEoxKrR9QYLXxdp4MJw7F3TtfkX_G_AEwkTCa7-R8v0ypq8_6MPut_kyvX5rVPNZZD9KEGgk6emF9J9THr6Kuu9t1or80xtb1qwpZAyxf3KWMnuqyb-KzIMHFXkztUcQ-EiG1pDWJqbD5ukr3FzS8DVXAAe13RLa6T_K3C0cQDXRdhCnnp972McRCEJ6xcRgYReHmYsLSFUDoShv3gmlKUhqaehd9hP54Wo_XBDr_Pf94Aftxwa7xUnyJHLDfPmiu_SCk_T06wzTZEux HTTP/1.1 Host: pendo-data-prod.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://over-haul.app.box.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=66f6daa79ed6b1.08223727; site_preference=desktop
2024-09-27 16:17:52 UTC	531	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 content-type: image/gif x-content-type-options: nosniff date: Fri, 27 Sep 2024 16:17:52 GMT Content-Length: 42 x-envoy-upstream-service-time: 20 server: istio-envoy via: 1.1 google, 1.1 google strict-transport-security: max-age=63072000 alt-svc: clear Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:17:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:53 UTC	536	OUT	GET /data/guide.gif/123e0628-cb29-41d1-466c-c592c7ddcd06?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1727453871054&v=2.238.2_prod HTTP/1.1 Host: pendo-data-prod.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=66f6daa79ed6b1.08223727; site_preference=desktop
2024-09-27 16:17:53 UTC	530	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 content-type: image/gif x-content-type-options: nosniff date: Fri, 27 Sep 2024 16:17:53 GMT Content-Length: 42 x-envoy-upstream-service-time: 1 server: istio-envoy via: 1.1 google, 1.1 google strict-transport-security: max-age=63072000 alt-svc: clear Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:17:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:55 UTC	858	OUT	GET /app-api/split-proxy/api/mySegments/2 HTTP/1.1 Host: over-haul.app.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 SplitSDKVersion: javascript-10.23.0 Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42a User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; box_visitor_id=66f6daa79ed6b1.08223727; bv=EUG-8342; cn=70; site_preference=desktop
2024-09-27 16:17:55 UTC	354	IN	HTTP/1.1 200 OK date: Fri, 27 Sep 2024 16:17:55 GMT content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 5 strict-transport-security: max-age=31536000 box-request-id: 03827921c07fec5261d8d022be351eac4 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-27 16:17:55 UTC	28	IN	Data Raw: 31 31 0d 0a 7b 22 6d 79 53 65 67 6d 65 6e 74 73 22 3a 5b 5d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 11{"mySegments":[]}0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:57 UTC	1132	OUT	POST /app-api/enduserapp/elements/tokens HTTP/1.1 Host: over-haul.app.box.com Connection: keep-alive Content-Length: 29 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Box-Client-Version: 21.315.1 X-Box-Client-Name: enduserapp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Box-EndUser-API: sharedName=k35cpocmye51uknxq6wvkmi025rxeue7 Content-Type: application/json Accept: application/json X-Request-Token: 692422af3205daacd3ec7af308e9ec0a53175ebbc21d925b73d10fbe9b6f3274 Request-Token: 692422af3205daacd3ec7af308e9ec0a53175ebbc21d925b73d10fbe9b6f3274 sec-ch-ua-platform: "Windows" Origin: https://over-haul.app.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; box_visitor_id=66f6daa79ed6b1.08223727; bv=EUG-8342; cn=70; site_preference=desktop; anonymousbanner=seen
2024-09-27 16:17:57 UTC	29	OUT	Data Raw: 7b 22 66 69 6c 65 49 44 73 22 3a 5b 22 31 36 35 37 36 36 36 35 30 31 37 37 30 22 5d 7d Data Ascii: {"fileIDs":["1657666501770"]}
2024-09-27 16:17:57 UTC	749	IN	HTTP/1.1 200 OK date: Fri, 27 Sep 2024 16:17:57 GMT content-type: application/json; charset=utf-8 strict-transport-security: max-age=31536000 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; Path=/; Domain=.app.box.com; Secure; HttpOnly; SameSite=None set-cookie: box_visitor_id=66f6daa79ed6b1.08223727; expires=Sat, 27-Sep-2025 16:17:57 GMT; Max-Age=31536000; path=/; domain=.box.com; secure; SameSite=None set-cookie: site_preference=desktop; path=/; domain=.box.com; secure x-enduserapp-currentversion: 21.315.1 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-27 16:17:57 UTC	641	IN	Data Raw: 32 38 37 0d 0a 7b 22 31 36 35 37 36 36 36 35 30 31 37 37 30 22 3a 7b 22 72 65 61 64 22 3a 22 31 21 48 54 34 6f 43 32 63 70 64 59 36 58 41 6f 41 33 44 6d 49 78 71 77 48 2d 65 71 6e 53 62 44 32 4f 50 34 35 74 34 71 77 5f 61 64 53 56 34 4c 41 45 53 65 59 6a 54 38 43 54 61 33 51 7a 50 6e 74 30 67 37 63 52 56 43 69 6a 4f 38 52 35 73 56 73 76 70 37 32 38 76 44 45 4e 48 49 64 37 30 45 63 4b 55 6d 70 73 50 4d 4e 2d 74 56 4b 71 6e 69 55 71 46 43 62 69 57 61 45 35 52 63 67 48 32 7a 4b 47 4f 59 73 52 6c 45 53 53 46 53 36 52 66 70 62 35 35 73 54 6b 6e 79 34 4f 56 48 39 64 74 4d 4e 39 4f 49 47 57 6c 64 31 73 78 33 5a 44 6f 46 75 42 66 53 73 4b 53 50 57 39 2d 74 79 62 46 71 62 67 76 58 59 74 4d 47 54 31 5f 57 2d 56 63 4a 53 70 37 4a 61 30 73 7a 5a 39 69 55 49 59 66 79 Data Ascii: 287{"1657666501770":{"read":"1!HT4oC2cpdY6XAoA3DmIxqwH-eqnSbD2OP45t4qw_adSV4LAESeYjT8CTa3QzPnt0g7cRVCijO8R5sVsvp728vDENHId70EcKUmpsPMN-tVKqniUqFCbiWaE5RcgH2zKGOYsRlESSFS6Rfpb55sTkny4OVH9dtMN9OIGWld1sx3ZDoFuBfSsKSPW9-tybFqbgvXYtMGT1_W-VcJSp7Ja0szZ9iUIYfy
2024-09-27 16:17:57 UTC	18	IN	Data Raw: 48 70 44 67 7a 37 6b 54 22 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: HpDgz7kT"}}0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:17:57 UTC	1094	OUT	GET /index.php?rm=pic_storage_auth&pic=euks!pac3kv01!o5GTqyRMvPmVqXZgyuRiaK565fXrSzBvJLfhXJSN-lKc34SVFdKybnOwNTWiDd_YjsGkG2eR6lMzWfhW8tTZqZQ3IWr_dKBRu7O5DKz0Lf5SNRW17obMtehsyx1GwnL12z3_SqrIQbX28KNlyyqirJ9YpF0v6CyHDRS1AlP5IU9iRV2QPLK1j858sDJ8tGGsDARU-bmjT9W2JUGhQCV9G4Lmw5EnMgiuMT4hoggKRSiXhp68feFuWxdAXRPWMgCfkbAw2p5ajDwIBSHFQxmoEQ.. HTTP/1.1 Host: over-haul.app.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://over-haul.app.box.com/s/k35cpocmye51uknxq6wvkmi025rxeue7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; box_visitor_id=66f6daa79ed6b1.08223727; bv=EUG-8342; cn=70; site_preference=desktop; anonymousbanner=seen
2024-09-27 16:17:57 UTC	708	IN	HTTP/1.1 200 OK date: Fri, 27 Sep 2024 16:17:57 GMT content-type: image/jpg Content-Length: 2886 set-cookie: z=ct2ak9pg239g8lt2n57v3f6n8m; Path=/; Domain=.app.box.com; Secure; HttpOnly; SameSite=None set-cookie: box_visitor_id=66f6daa79ed6b1.08223727; expires=Sat, 27-Sep-2025 16:17:57 GMT; Max-Age=31536000; path=/; domain=.box.com; secure; SameSite=None set-cookie: site_preference=desktop; path=/; domain=.box.com; secure expires: Sat, 28 Sep 2024 03:04:37 -0700 cache-control: store, cache x-robots-tag: noindex, nofollow access-control-allow-origin: * strict-transport-security: max-age=31536000 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:17:57 UTC	682	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 66 00 00 00 33 08 06 00 00 00 65 9c 7d 26 00 00 0b 0d 49 44 41 54 78 da ed 9c 7b 8c 1d 55 1d c7 3f 67 e6 de 99 fb de 6d 77 db 6d b7 f6 45 1f 60 49 b7 a6 8a 2d 29 95 57 0a 48 a4 0a 81 52 21 42 89 06 0d 96 87 20 18 63 48 90 c4 c4 68 6b 8c 88 0f 88 d6 02 3e a0 2a 08 44 04 2a d4 a2 b4 c8 ab f4 61 b3 6d 2d 95 be 28 ec 76 f7 ee 7d cf cc 39 c7 3f 66 b6 ee d6 dd 7b ef 76 ef 3e 0a fd 26 b3 73 ef ce 39 67 ce f9 7d e7 f7 3b bf f3 3b bf 3b 42 6b ad e9 81 47 1f 7d 92 b5 bf 79 8a 2d 5b 77 d3 91 ce 22 04 80 e0 14 6a 09 8d d6 30 26 95 60 5e cb 2c ae bf e6 32 96 2f 5f da ab 84 e8 26 66 cf 9e bd cc 9a 75 2e a0 41 c4 c1 0a 81 61 8c f4 08 3e d8 50 0a 5c 0f 54 0e 80 d6 d6 0d cc 9e 3d 13 08 88 79 f3 cd ed cc 9f ff 49 b0 Data Ascii: PNGIHDRf3e}&IDATx{U?gmwmE`I-)WHR!B cHhk>Dam-(v}9?f{v>&s9g};;;BkG}y-[w"j0&`^,2/_&fu.Aa>P\T=yI
2024-09-27 16:17:57 UTC	1390	IN	Data Raw: 51 d5 35 ff 9e 0e 04 ba 28 02 a7 40 60 04 e7 10 82 30 f9 cd bb e8 fa ce ab 14 9e de 0e a1 24 58 fd 2c 4f 4e 2a 62 f4 b1 3f c4 af 3a 8d c4 8a 16 88 1a a8 a3 45 74 ce 45 17 24 da d5 be 49 93 1a ed 06 67 a9 c1 55 68 a9 11 4a 07 da 13 cc 21 52 a2 25 20 fd 7a da d5 20 15 da d3 e0 f8 75 90 1a ed f8 6d f9 9f 25 48 fc 6b 25 89 3c 98 23 3c 77 2c 8d 8f 5d 8c b0 8d 32 9d f7 e7 23 83 08 5e b6 8b 03 53 7e 81 ee 28 f5 ed 30 8c 7a 62 94 86 a2 07 21 c3 7f ba ba c9 29 4a d0 3d b5 a2 92 79 ea be ae 8f ab 23 a8 56 2b fe 1f be 86 34 3c b2 94 d4 b5 f3 91 64 ab 1c 94 06 4c 4c e2 ec ab 5f 85 ce 4b 08 1f 27 f7 80 98 d1 e7 95 29 0d 45 07 50 d4 7f fb 53 e4 ff b2 17 e7 b5 f7 83 01 08 88 86 a8 e8 4c ba 41 d4 16 09 b8 f8 6e 71 0c d1 18 47 58 06 3a ef a1 3b b3 81 80 2d bf 3d c3 84 48 Data Ascii: Q5(@`0$X,ON*b?:EtE$IgUhJ!R% z um%Hk%<#<w,]2#^S~(0zb!)J=y#V+4<dLL_K')EPSLAnqGX:;-=H
2024-09-27 16:17:57 UTC	708	IN	Data Raw: 17 02 79 30 8f ef d1 94 81 d6 98 76 24 08 19 0e fd fc 12 22 c9 be a6 1f a0 33 1e c4 ac c1 37 38 08 0c 2e 40 96 77 11 f1 10 d3 bc 3b f0 23 b8 03 58 5f a8 ea 8a 69 51 65 c1 41 0b 22 ca fb b7 3c 85 7a 2f 53 f3 54 a4 13 eb cf 89 22 ef 22 52 16 53 33 5f 3b 2e dc 50 0d 34 e6 84 68 e5 3a 86 c0 7b 37 3b a8 0c 96 6a c5 20 bb 32 64 ee 7b 19 a2 95 27 e6 e1 c0 89 11 53 f0 20 16 66 6a fa b6 60 3e 19 e8 53 ad 09 c5 ea fd 7a e5 b6 36 42 06 74 75 a2 6a 1e dd 3d 5e 08 16 6d 5f 5a 0f 24 46 cd 6f b4 06 4e 4c 51 82 01 53 73 b7 9e 20 29 dd 50 18 93 9a c0 ad 64 fe 6c f2 4f ef 42 0c 61 90 42 10 a6 b0 6e 6b 75 3b a5 c3 84 81 11 e3 2a 50 2e 53 bd db 82 49 fe c4 ed bf c6 23 ba 64 aa ff 83 9d b2 08 91 f9 c9 36 04 16 83 df 39 ec 0b 26 85 2d 6f e3 27 e7 8d 12 75 61 20 c4 48 0d 6e 8e Data Ascii: y0v$"378.@w;#X_iQeA"<z/ST""RS3_;.P4h:{7;j 2d{'S fj`>Sz6Btuj=^m_Z$FoNLQSs )PdlOBaBnku;*P.SI#d69&-o'ua Hn
2024-09-27 16:17:57 UTC	106	IN	Data Raw: ef cf 03 3d de 57 b6 6d fb 4e 5a e6 5e 88 1f 65 0d de 57 f6 61 79 39 c3 48 41 6b 70 ba df 57 e6 f1 e6 96 f5 7c 6c de 99 40 0f 62 ba f1 d0 c3 bf 67 ed 23 4f f1 c6 5b bb c8 e4 0a 88 51 14 0a ff 20 41 2b 4d 32 1e 65 fe bc d9 7c e1 9a cf b0 e2 fa ab 7a 5d ff 2f c7 50 9f 6d 97 6a c3 40 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: =WmNZ^eWay9HAkpW\|l@bg#O[Q A+M2e\|z]/Pmj@IENDB`