Windows Analysis Report
https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60

Overview

General Information

Sample URL:	https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60
Analysis ID:	1432213
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nr-full-1.257.0.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://eng2e.seismic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=93b6e874-5233-482c-8362-ef68a6f3547b&et=20240426185012&isfullcontainername=True&sig=1n%2BweGZwFmtv9zXN%2F0Iu88%2BvLq%2FDHY1glGlTP%2F6BTMQ%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=2acae5d3-2811-4025-aea0-7972a7f5879b&et=20240426185012&isfullcontainername=True&sig=oGhRNaO96VhOfEJXMV4MXVgxs6ivJwFGnjPvm8fZfgg%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=551b630b-f274-454a-a270-9fbd8cbd7632&et=20240426185012&isfullcontainername=True&sig=HRtJpGlXjXBYT5eLg%2FzXs4J%2Frot%2F%2BMIZVCBYJPgcCgY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=9ae068b6-c5e0-4162-88d9-0fe8901271a8&et=20240426185012&isfullcontainername=True&sig=qhxabv2STg56bKO7iUzglC4NtauzI8aIhWcSpiVKkrc%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=55c0f2a0-d164-4d6c-871f-2c0a754f72b0&et=20240426185012&isfullcontainername=True&sig=DMbSAwSFNjPgr6Ia5%2FtvoGFeACUX9lbY%2F25LmFuhi9I%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=47820&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60&af=err,xhr,stn,ins&be=1098&fe=71&dc=42&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714145552462,%22n%22:0,%22f%22:4,%22dn%22:334,%22dne%22:334,%22c%22:334,%22s%22:335,%22ce%22:620,%22rq%22:620,%22rp%22:1098,%22rpe%22:1101,%22di%22:1140,%22ds%22:1140,%22de%22:1140,%22dc%22:1168,%22l%22:1168,%22le%22:1169%7D,%22navigation%22:%7B%7D%7D&fp=1640&fcp=12964 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=2acae5d3-2811-4025-aea0-7972a7f5879b&et=20240426185012&isfullcontainername=True&sig=oGhRNaO96VhOfEJXMV4MXVgxs6ivJwFGnjPvm8fZfgg%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=551b630b-f274-454a-a270-9fbd8cbd7632&et=20240426185012&isfullcontainername=True&sig=HRtJpGlXjXBYT5eLg%2FzXs4J%2Frot%2F%2BMIZVCBYJPgcCgY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=93b6e874-5233-482c-8362-ef68a6f3547b&et=20240426185012&isfullcontainername=True&sig=1n%2BweGZwFmtv9zXN%2F0Iu88%2BvLq%2FDHY1glGlTP%2F6BTMQ%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=55c0f2a0-d164-4d6c-871f-2c0a754f72b0&et=20240426185012&isfullcontainername=True&sig=DMbSAwSFNjPgr6Ia5%2FtvoGFeACUX9lbY%2F25LmFuhi9I%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=9ae068b6-c5e0-4162-88d9-0fe8901271a8&et=20240426185012&isfullcontainername=True&sig=qhxabv2STg56bKO7iUzglC4NtauzI8aIhWcSpiVKkrc%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58644&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58647&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58648&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=68654&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=78669&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: eng2e.seismic.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: service-discovery.seismic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn-prod.seismic.com
Source: global traffic	DNS traffic detected: DNS query: newdownload.seismic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: api.seismic.com

Source: unknown

HTTP traffic detected: POST /1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=47820&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60&af=err,xhr,stn,ins&be=1098&fe=71&dc=42&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714145552462,%22n%22:0,%22f%22:4,%22dn%22:334,%22dne%22:334,%22c%22:334,%22s%22:335,%22ce%22:620,%22rq%22:620,%22rp%22:1098,%22rpe%22:1101,%22di%22:1140,%22ds%22:1140,%22de%22:1140,%22dc%22:1168,%22l%22:1168,%22le%22:1169%7D,%22navigation%22:%7B%7D%7D&fp=1640&fcp=12964 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://eng2e.seismic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://sc.symcb.com/sc.crl0W
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://sc.symcb.com/sc.crt0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://sc.symcd.com0&
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://scripts.sil.org/OFLCopyright
Source: chromecache_76.2.dr	String found in binary or memory: http://scripts.sil.org/OFLSource
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://www.symauth.com/cps0(
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://www.symauth.com/rpa04
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: https://d.symcb.com/cps0%
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: https://d.symcb.com/rpa0
Source: chromecache_127.2.dr, chromecache_123.2.dr	String found in binary or memory: https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60
Source: chromecache_99.2.dr	String found in binary or memory: https://js-agent.newrelic.com
Source: chromecache_127.2.dr, chromecache_123.2.dr	String found in binary or memory: https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9
Source: chromecache_93.2.dr, chromecache_75.2.dr, chromecache_129.2.dr, chromecache_110.2.dr	String found in binary or memory: https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb3
Source: chromecache_99.2.dr	String found in binary or memory: https://service-discovery.seismic.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/97@28/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2384,i,13309312840750829887,16417824520483540368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2384,i,13309312840750829887,16417824520483540368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.151.208.67	kubernetes-prod-az-eastus-raptor.seismic.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.64.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.4

Contacted Domains

Name	IP	Active
fastly-tls12-bam.nr-data.net	162.247.243.29	true
js-agent.newrelic.com	162.247.243.39	true
kubernetes-prod-az-eastus-raptor.seismic.com	52.151.208.67	true
www.google.com	142.250.64.196	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true
cdn-prod.seismic.com	unknown	unknown
eng2e.seismic.com	unknown	unknown
newdownload.seismic.com	unknown	unknown
service-discovery.seismic.com	unknown	unknown
api.seismic.com	unknown	unknown
bam.nr-data.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=551b630b-f274-454a-a270-9fbd8cbd7632&et=20240426185012&isfullcontainername=True&sig=HRtJpGlXjXBYT5eLg%2FzXs4J%2Frot%2F%2BMIZVCBYJPgcCgY%3D	false		high
https://bam.nr-data.net/jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=68654&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown
https://js-agent.newrelic.com/nr-full-1.257.0.min.js	false		high
https://bam.nr-data.net/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=47820&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60&af=err,xhr,stn,ins&be=1098&fe=71&dc=42&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714145552462,%22n%22:0,%22f%22:4,%22dn%22:334,%22dne%22:334,%22c%22:334,%22s%22:335,%22ce%22:620,%22rq%22:620,%22rp%22:1098,%22rpe%22:1101,%22di%22:1140,%22ds%22:1140,%22de%22:1140,%22dc%22:1168,%22l%22:1168,%22le%22:1169%7D,%22navigation%22:%7B%7D%7D&fp=1640&fcp=12964	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58644&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/ins/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=48518&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D	false		high
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=2acae5d3-2811-4025-aea0-7972a7f5879b&et=20240426185012&isfullcontainername=True&sig=oGhRNaO96VhOfEJXMV4MXVgxs6ivJwFGnjPvm8fZfgg%3D	false		high
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=55c0f2a0-d164-4d6c-871f-2c0a754f72b0&et=20240426185012&isfullcontainername=True&sig=DMbSAwSFNjPgr6Ia5%2FtvoGFeACUX9lbY%2F25LmFuhi9I%3D	false		high
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=9ae068b6-c5e0-4162-88d9-0fe8901271a8&et=20240426185012&isfullcontainername=True&sig=qhxabv2STg56bKO7iUzglC4NtauzI8aIhWcSpiVKkrc%3D	false		high
https://bam.nr-data.net/events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58648&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58647&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=93b6e874-5233-482c-8362-ef68a6f3547b&et=20240426185012&isfullcontainername=True&sig=1n%2BweGZwFmtv9zXN%2F0Iu88%2BvLq%2FDHY1glGlTP%2F6BTMQ%3D	false		high
https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60#/	false		high
https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false		high
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D	false		high
https://bam.nr-data.net/jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=78669&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 100	SVG Scalable Vector Graphics image	A4D81B66E7C0CE9ECDEC6CF61636315D	4EAEB1079DA5940D5545C35B25AA249B15F96D71	2D1FBA5C211F126AE1281A9DF79AD49FBE0E442B60EC07618641A720D6EEEE9B
Chrome Cache Entry: 101	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3	2590B8A5B4241A039C09E55AA85E48E3	E339696256984A952F6382571992867AEFCAF9AD	CD358E463EE32CCFC5B958FB22E245A2AA920951C99F2DAFEF3EEEC27EA77C97
Chrome Cache Entry: 102	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x386, components 3	2F07B2E3BCA3056E84DCDF88FDB1D94D	2714B91F477A7D7B26D80F893DD8BA3B368ACDE9	F3FC04A107AAD0F9F07EFB3FEA0653B6D88D730E8EDAC7874A66CAC4929D4E4E
Chrome Cache Entry: 103	GIF image data, version 89a, 1 x 1	BC32ED98D624ACB4008F986349A20D26	2D3DF8C11D2168CE2C27E0937421D11D85016361	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
Chrome Cache Entry: 104	Unicode text, UTF-8 text, with very long lines (65402)	84E1DED8431CD0B100A7E01A852604DA	C2FCAAD23DDA26ACEC89AA0DFF7AEEFCA3272235	D2B9B290BA2A4D165ADDC32080B7DE22757EB7D73C85FED7CEF2F0B1D521FBCF
Chrome Cache Entry: 105	Unicode text, UTF-8 text, with very long lines (65417)	5E1F9BC8F5113223687E64FFACF678A4	CC75350F4E87DE0830A57221335D39AF5A34BDCB	BF6A40EDCB7EC5DCE24A9B489FA87D1C90A3D0529D19F52FEE1FD8A20F747ED1
Chrome Cache Entry: 106	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x386, components 3	833C9D3EEC182CE4E9B2CDAA270F8BA9	6219E20AFACBFDB8CA5856CC50C5F6B07EE33595	23FEA314744D4B53624008E9C758887B19E1724AAC518913DDC4D47EEEDA5723
Chrome Cache Entry: 107	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x386, components 3	833C9D3EEC182CE4E9B2CDAA270F8BA9	6219E20AFACBFDB8CA5856CC50C5F6B07EE33595	23FEA314744D4B53624008E9C758887B19E1724AAC518913DDC4D47EEEDA5723
Chrome Cache Entry: 108	ASCII text, with very long lines (41992)	127B8A4421672B810F35914474E1C26C	022F2C5A3FF6439D94B090DB45F2551C7DEE2147	1700BD4D1514C02C5B6B16652E8E98EF6B82456035F2BA6CA24BE7A1AFA40953
Chrome Cache Entry: 109	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel	90116C06A5E4D1DA106DBD9CB3CECCBE	F366CA0F0DB73F6034DDD86A59DF8B2C064DBE46	6D789CEBA9E5E878A88C1604452AF442FB42C1F794E0650E0A30E1231240619F
Chrome Cache Entry: 110	JSON data	C96DB81C805B4689EF472E49EDB8EA52	4ED035C1BE3D3E0A50D8D1D99EB7E82CA8CF251D	BDAAB9683EC4A7AE3DCC9C3A846F1F76CAD2E35F529DEE89C7E578485332091B
Chrome Cache Entry: 111	JSON data	1399EAFC3BDA6546FF3FB0C759CAD2DC	0DD09434068D2EA6CF6D4A42A8D6B29718D84D3C	5A95427189AC2E27823A22E93E32A93427EAA3273F87B829606390D2A712D38D
Chrome Cache Entry: 112	JSON data	BDAE8BE36E9DFC819F3486870F8434D3	D991EF01679B350A728C665383ABB257CFECA53A	8C5AAAB6E1EFDEC7F7F9F65CC0DE77461C36A46E6B7C9EE7A35299DD6E8449EE
Chrome Cache Entry: 113	GIF image data, version 89a, 1 x 1	BC32ED98D624ACB4008F986349A20D26	2D3DF8C11D2168CE2C27E0937421D11D85016361	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
Chrome Cache Entry: 114	GIF image data, version 89a, 1 x 1	BC32ED98D624ACB4008F986349A20D26	2D3DF8C11D2168CE2C27E0937421D11D85016361	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
Chrome Cache Entry: 115	PNG image data, 2950 x 432, 8-bit/color RGBA, non-interlaced	3248BC4EE970DD9C7BA295D920A09865	EA12D486DEC9F4EFF8D1EBC6FB3FE4E2908F08EE	152EE6427325820BF9ABD816BD02252C1DD2968329917A9FE47A1E3167AE8B70
Chrome Cache Entry: 116	SVG Scalable Vector Graphics image	8C5D4096ED7FD0A95A0786C13645773B	23A9C71B885380954A256B484EBAE06D9253F59F	FE2DCB7298738F6525BBE4788AA72C1204E558F25ACAA2C8D838424D36B7817E
Chrome Cache Entry: 117	JSON data	BDAE8BE36E9DFC819F3486870F8434D3	D991EF01679B350A728C665383ABB257CFECA53A	8C5AAAB6E1EFDEC7F7F9F65CC0DE77461C36A46E6B7C9EE7A35299DD6E8449EE
Chrome Cache Entry: 118	JSON data	840DEC74A02C85B569B8628442FE3751	33D50A8088862CD9822180FEE342B3596613B9B6	F7709DA56B5ABE1DB96AA2EF6E7EDCEA0D58A630EFCC49B154439211147E3EBD
Chrome Cache Entry: 119	JSON data	BDAE8BE36E9DFC819F3486870F8434D3	D991EF01679B350A728C665383ABB257CFECA53A	8C5AAAB6E1EFDEC7F7F9F65CC0DE77461C36A46E6B7C9EE7A35299DD6E8449EE
Chrome Cache Entry: 120	GIF image data, version 89a, 1 x 1	BC32ED98D624ACB4008F986349A20D26	2D3DF8C11D2168CE2C27E0937421D11D85016361	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
Chrome Cache Entry: 121	JSON data	840DEC74A02C85B569B8628442FE3751	33D50A8088862CD9822180FEE342B3596613B9B6	F7709DA56B5ABE1DB96AA2EF6E7EDCEA0D58A630EFCC49B154439211147E3EBD
Chrome Cache Entry: 122	ASCII text, with very long lines (5638)	5615558C15EE0941F1151A958209887C	E8AF1DCE6AB1D75F34EBD5A1C908016CAFC497AB	32C2EB1A689CD0EBC0E55D2C0D003A4FA75D2F85D3B91CBB9F9E53A6769C53E1
Chrome Cache Entry: 123	JSON data	DC498106DCA415CCCC6ADCB9D5139A55	520229FC4BF8CDEE07A7270ED865903250FE24E6	84ECCCAF4111E2B72D77221B5A4A3BA850D78BCAD22EAC5245EA791D4775C149
Chrome Cache Entry: 124	JSON data	F77EA97A60964F78C9CDF4AD2AD2935B	BBD0FDB782A8A496DB85A2A94ED891D426C72C46	610ABEDC41106DB2638E28D20D47B35DE490C5D54AC00159EEB1E8218DA663EA
Chrome Cache Entry: 125	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 386x500, components 3	DD1225E903CE34D2583E5D583CCB761B	DA3D2AE1477CD0C41C384306FE3C46D26B23671A	5A72D6CAF8F817333ED9AF25A75DE082AEF5AA6A07CF7452565A38D759C8DE5C
Chrome Cache Entry: 126	JSON data	7D5A52C0BE5BDEB356BA57ED21AFC86F	022E5420F9C44A0E47C95A70815FCAFFEFA0D8D8	A08D5B5642E391FF1A9B5B9F895909CAA56953FCDDBF7BAF87AA87763DC05C43
Chrome Cache Entry: 127	JSON data	DC498106DCA415CCCC6ADCB9D5139A55	520229FC4BF8CDEE07A7270ED865903250FE24E6	84ECCCAF4111E2B72D77221B5A4A3BA850D78BCAD22EAC5245EA791D4775C149
Chrome Cache Entry: 128	SVG Scalable Vector Graphics image	8C5D4096ED7FD0A95A0786C13645773B	23A9C71B885380954A256B484EBAE06D9253F59F	FE2DCB7298738F6525BBE4788AA72C1204E558F25ACAA2C8D838424D36B7817E
Chrome Cache Entry: 129	JSON data	C96DB81C805B4689EF472E49EDB8EA52	4ED035C1BE3D3E0A50D8D1D99EB7E82CA8CF251D	BDAAB9683EC4A7AE3DCC9C3A846F1F76CAD2E35F529DEE89C7E578485332091B
Chrome Cache Entry: 130	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1020x1320, components 3	91266F12BA6CDF2B2FEFE06BFBA8AA7A	B70FC11866F914D62DE98B89C144543EB45EDD56	77FF8FF56614904615318BCFAE77D6CB3B7EC84FD5815DE37BB336A5397F9F48
Chrome Cache Entry: 131	ASCII text, with very long lines (65465)	607D2B9E759007F3A845A8754E90DEAD	7209B1D82904B736063ADC5DB678EC298E26ECD4	A4DA607DFF6883C615A808176E26FAF06625CD2B347123E186FB2B1C58270A0D
Chrome Cache Entry: 132	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3	2590B8A5B4241A039C09E55AA85E48E3	E339696256984A952F6382571992867AEFCAF9AD	CD358E463EE32CCFC5B958FB22E245A2AA920951C99F2DAFEF3EEEC27EA77C97
Chrome Cache Entry: 71	ASCII text, with very long lines (65442)	5BF6D1FB9ED27B9C796EEAD6B1E6A079	9082FB66ED9BF21B2BD76CCA4517246491ABCD80	85D12A1D2B988B48D3551743D46D6DFD660798C98A27AB0F2D573B78B7ED6418
Chrome Cache Entry: 72	JSON data	8E3DB10AF5A3E1CABE7AA67674E21188	E2314B0038DF2D49DDBE461F33A6797D4586CDE0	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
Chrome Cache Entry: 73	GIF image data, version 89a, 1 x 1	BC32ED98D624ACB4008F986349A20D26	2D3DF8C11D2168CE2C27E0937421D11D85016361	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
Chrome Cache Entry: 74	ASCII text, with very long lines (65459)	8CB0C39D4018510E98809063AC2FF1C7	2A221871F7132D8618BEB8BE3B6EF27E0074214C	05581965CAAE6452F0FA821A3E53BBB0BE72463465A12DF98F92707D8B546565
Chrome Cache Entry: 75	JSON data	C96DB81C805B4689EF472E49EDB8EA52	4ED035C1BE3D3E0A50D8D1D99EB7E82CA8CF251D	BDAAB9683EC4A7AE3DCC9C3A846F1F76CAD2E35F529DEE89C7E578485332091B
Chrome Cache Entry: 76	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 28 names, Macintosh, Copyright 2010, 2012, 2014 Adobe Systems Incorporated (http://www.adobe.com/), with Reserved Fon	774C05CCAE92D11B95A2EF722C9566A8	CC116F72A3684FD57B8852A41828889FBE079560	1ABD7BD14DAEA0C793865E0DF0E17B3F07EC1CBF22855676C4716726B930F17E
Chrome Cache Entry: 77	JSON data	F77EA97A60964F78C9CDF4AD2AD2935B	BBD0FDB782A8A496DB85A2A94ED891D426C72C46	610ABEDC41106DB2638E28D20D47B35DE490C5D54AC00159EEB1E8218DA663EA
Chrome Cache Entry: 78	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 26 names, Macintosh, Copyright 2010, 2012, 2014 Adobe Systems Incorporated (http://www.adobe.com/), with Reserved Fon	0D9B62A03206F739CD34B2936A5929F1	F5CAD74E9791D2EF725F9FF5D53216CFFF4F3678	DA4F442E66843990825ED4757E27AD3442CAD83F9844CC503E8ECE85E00F77F2
Chrome Cache Entry: 79	JSON data	1399EAFC3BDA6546FF3FB0C759CAD2DC	0DD09434068D2EA6CF6D4A42A8D6B29718D84D3C	5A95427189AC2E27823A22E93E32A93427EAA3273F87B829606390D2A712D38D
Chrome Cache Entry: 80	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 386x500, components 3	DD1225E903CE34D2583E5D583CCB761B	DA3D2AE1477CD0C41C384306FE3C46D26B23671A	5A72D6CAF8F817333ED9AF25A75DE082AEF5AA6A07CF7452565A38D759C8DE5C
Chrome Cache Entry: 81	JSON data	7D5A52C0BE5BDEB356BA57ED21AFC86F	022E5420F9C44A0E47C95A70815FCAFFEFA0D8D8	A08D5B5642E391FF1A9B5B9F895909CAA56953FCDDBF7BAF87AA87763DC05C43
Chrome Cache Entry: 82	SVG Scalable Vector Graphics image	A4D81B66E7C0CE9ECDEC6CF61636315D	4EAEB1079DA5940D5545C35B25AA249B15F96D71	2D1FBA5C211F126AE1281A9DF79AD49FBE0E442B60EC07618641A720D6EEEE9B
Chrome Cache Entry: 83	ASCII text, with very long lines (17317), with no line terminators	6ECA72A3909DD911DA645EFC334CC5CE	20D9AAA917CD439AB1BA2A855F860233F6B48F0B	FC0FC24F373C43A90439ADF3A3589B3FC8A3CD367E461EBC1A9DEB557DA4C39D
Chrome Cache Entry: 84	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1020x1320, components 3	91266F12BA6CDF2B2FEFE06BFBA8AA7A	B70FC11866F914D62DE98B89C144543EB45EDD56	77FF8FF56614904615318BCFAE77D6CB3B7EC84FD5815DE37BB336A5397F9F48
Chrome Cache Entry: 85	ASCII text, with very long lines (65536), with no line terminators	F4A49C501A1C64DE0F8AA6CE59FA6A36	06E6B23F01669BCA931A760FD52781CDE40A0D72	02784CE2FDAFAF58194E7D187DD0CE4B0BFA8B025ACC089F02069CC5D9CD3BB0
Chrome Cache Entry: 86	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 26 names, Macintosh, Copyright 2010, 2012, 2014 Adobe Systems Incorporated (http://www.adobe.com/), with Reserved Fon	5182DA425F811908BED9F5B8C72FA44F	17C25475C0369F7F8C8462AF9CF127A4CF6F1332	71D10A86B4C54A5A9C0C8B467E53AC67D79EDB96C956E4E9F65A7074DFB9992A
Chrome Cache Entry: 87	ASCII text, with very long lines (65536), with no line terminators	44983D1EC4170E367F9589BDF79D34B1	88AD1AB343FB9857A3B082EACBE62D309376B16B	C1FADC8794474D1ADC722870A53181DFAB2E2F17DE18585263B064A1C8056A55
Chrome Cache Entry: 88	JSON data	BD9249CAF1B383172256D9859AC2A05A	6D6EDA26243987985BEE224C727689E9B3B4CD44	361776269F00D4CA8985803144A1648898DF9A0EE6C7718E94FDBCB54FCDC1E6
Chrome Cache Entry: 89	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel	90116C06A5E4D1DA106DBD9CB3CECCBE	F366CA0F0DB73F6034DDD86A59DF8B2C064DBE46	6D789CEBA9E5E878A88C1604452AF442FB42C1F794E0650E0A30E1231240619F
Chrome Cache Entry: 90	ASCII text, with no line terminators	832F6270F2061A27F50C8F3B3DF67585	2A472DE1EBE92FD20025A815CE341C3E32EB8128	C831B05C118F15362B0D24289204D68F17EE7679CBB3E35509263681F178221B
Chrome Cache Entry: 91	PNG image data, 2950 x 432, 8-bit/color RGBA, non-interlaced	3248BC4EE970DD9C7BA295D920A09865	EA12D486DEC9F4EFF8D1EBC6FB3FE4E2908F08EE	152EE6427325820BF9ABD816BD02252C1DD2968329917A9FE47A1E3167AE8B70
Chrome Cache Entry: 92	PNG image data, 624 x 319, 8-bit/color RGBA, non-interlaced	587AD130FB08DBD127A3F2DE46688C2B	CA95949AF17F4BEA2ABCA5512D0E13AE346822B2	27495A599659F62C35048CB68F52EB4EF201D1BAA3FBB4A88DD2C1064831D552
Chrome Cache Entry: 93	JSON data	C96DB81C805B4689EF472E49EDB8EA52	4ED035C1BE3D3E0A50D8D1D99EB7E82CA8CF251D	BDAAB9683EC4A7AE3DCC9C3A846F1F76CAD2E35F529DEE89C7E578485332091B
Chrome Cache Entry: 94	ASCII text, with very long lines (51585)	798C2312183513710E56DB7439345B03	95972A721395FA89797FE31029B203C28BD83BAF	F3AB9DFF25E981731B029FD1D6071A68E0FB4A2DAE438B6BE1ED19DF6306B3D0
Chrome Cache Entry: 95	JSON data	BDAE8BE36E9DFC819F3486870F8434D3	D991EF01679B350A728C665383ABB257CFECA53A	8C5AAAB6E1EFDEC7F7F9F65CC0DE77461C36A46E6B7C9EE7A35299DD6E8449EE
Chrome Cache Entry: 96	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x386, components 3	2F07B2E3BCA3056E84DCDF88FDB1D94D	2714B91F477A7D7B26D80F893DD8BA3B368ACDE9	F3FC04A107AAD0F9F07EFB3FEA0653B6D88D730E8EDAC7874A66CAC4929D4E4E
Chrome Cache Entry: 97	JSON data	BD9249CAF1B383172256D9859AC2A05A	6D6EDA26243987985BEE224C727689E9B3B4CD44	361776269F00D4CA8985803144A1648898DF9A0EE6C7718E94FDBCB54FCDC1E6
Chrome Cache Entry: 98	PNG image data, 624 x 319, 8-bit/color RGBA, non-interlaced	587AD130FB08DBD127A3F2DE46688C2B	CA95949AF17F4BEA2ABCA5512D0E13AE346822B2	27495A599659F62C35048CB68F52EB4EF201D1BAA3FBB4A88DD2C1064831D552
Chrome Cache Entry: 99	HTML document, ASCII text, with very long lines (6636)	4262B918993A88F024E744BCE054CF7B	E9D70205A05F453728995090991D2D880AFBE289	EE141B4540C402FF01DB5E36CDDFE2DC6A3CB70A989244F3C23600BAE2243250

There are no high impact signatures.

Source: https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nr-full-1.257.0.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://eng2e.seismic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=93b6e874-5233-482c-8362-ef68a6f3547b&et=20240426185012&isfullcontainername=True&sig=1n%2BweGZwFmtv9zXN%2F0Iu88%2BvLq%2FDHY1glGlTP%2F6BTMQ%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=2acae5d3-2811-4025-aea0-7972a7f5879b&et=20240426185012&isfullcontainername=True&sig=oGhRNaO96VhOfEJXMV4MXVgxs6ivJwFGnjPvm8fZfgg%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=551b630b-f274-454a-a270-9fbd8cbd7632&et=20240426185012&isfullcontainername=True&sig=HRtJpGlXjXBYT5eLg%2FzXs4J%2Frot%2F%2BMIZVCBYJPgcCgY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=9ae068b6-c5e0-4162-88d9-0fe8901271a8&et=20240426185012&isfullcontainername=True&sig=qhxabv2STg56bKO7iUzglC4NtauzI8aIhWcSpiVKkrc%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=55c0f2a0-d164-4d6c-871f-2c0a754f72b0&et=20240426185012&isfullcontainername=True&sig=DMbSAwSFNjPgr6Ia5%2FtvoGFeACUX9lbY%2F25LmFuhi9I%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=47820&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60&af=err,xhr,stn,ins&be=1098&fe=71&dc=42&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714145552462,%22n%22:0,%22f%22:4,%22dn%22:334,%22dne%22:334,%22c%22:334,%22s%22:335,%22ce%22:620,%22rq%22:620,%22rp%22:1098,%22rpe%22:1101,%22di%22:1140,%22ds%22:1140,%22de%22:1140,%22dc%22:1168,%22l%22:1168,%22le%22:1169%7D,%22navigation%22:%7B%7D%7D&fp=1640&fcp=12964 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=2acae5d3-2811-4025-aea0-7972a7f5879b&et=20240426185012&isfullcontainername=True&sig=oGhRNaO96VhOfEJXMV4MXVgxs6ivJwFGnjPvm8fZfgg%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=551b630b-f274-454a-a270-9fbd8cbd7632&et=20240426185012&isfullcontainername=True&sig=HRtJpGlXjXBYT5eLg%2FzXs4J%2Frot%2F%2BMIZVCBYJPgcCgY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=93b6e874-5233-482c-8362-ef68a6f3547b&et=20240426185012&isfullcontainername=True&sig=1n%2BweGZwFmtv9zXN%2F0Iu88%2BvLq%2FDHY1glGlTP%2F6BTMQ%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=55c0f2a0-d164-4d6c-871f-2c0a754f72b0&et=20240426185012&isfullcontainername=True&sig=DMbSAwSFNjPgr6Ia5%2FtvoGFeACUX9lbY%2F25LmFuhi9I%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=9ae068b6-c5e0-4162-88d9-0fe8901271a8&et=20240426185012&isfullcontainername=True&sig=qhxabv2STg56bKO7iUzglC4NtauzI8aIhWcSpiVKkrc%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58644&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58647&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58648&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=68654&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=78669&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: eng2e.seismic.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: service-discovery.seismic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn-prod.seismic.com
Source: global traffic	DNS traffic detected: DNS query: newdownload.seismic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: api.seismic.com

Source: unknown

Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://sc.symcb.com/sc.crl0W
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://sc.symcb.com/sc.crt0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://sc.symcd.com0&
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://scripts.sil.org/OFLCopyright
Source: chromecache_76.2.dr	String found in binary or memory: http://scripts.sil.org/OFLSource
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://www.symauth.com/cps0(
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://www.symauth.com/rpa04
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: https://d.symcb.com/cps0%
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: https://d.symcb.com/rpa0
Source: chromecache_127.2.dr, chromecache_123.2.dr	String found in binary or memory: https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60
Source: chromecache_99.2.dr	String found in binary or memory: https://js-agent.newrelic.com
Source: chromecache_127.2.dr, chromecache_123.2.dr	String found in binary or memory: https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9
Source: chromecache_93.2.dr, chromecache_75.2.dr, chromecache_129.2.dr, chromecache_110.2.dr	String found in binary or memory: https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb3
Source: chromecache_99.2.dr	String found in binary or memory: https://service-discovery.seismic.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/97@28/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2384,i,13309312840750829887,16417824520483540368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2384,i,13309312840750829887,16417824520483540368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

ID:	1432213
Product:	CloudBasic
Start time:	17:31:35
Start date:	26.04.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60