Play interactive tour
Edit tourWindows Analysis Report Denver Water COVID-19 Response _ City of Denver.pdf
Overview
General Information
| Sample Name: | Denver Water COVID-19 Response _ City of Denver.pdf |
| Analysis ID: | 449950 |
| MD5: | a7bcca2fdf7e02497eea284f085340d9 |
| SHA1: | ecd2f0ba7b1e5f99a3fd7310e2c12c07f68fbe69 |
| SHA256: | 3495047623e0f3271699945ab0018b8b83c55128afb028ee3a07f8f6dfaa6f88 |
| Infos: | |
Most interesting Screenshot:  | |
Detection
| Score: | 5 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 60% |
Signatures
Connects to many different domains
Found iframes
HTML body contains low number of good links
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
No HTML title found
Potential document exploit detected (performs DNS queries)
Potential document exploit detected (performs HTTP gets)
Potential document exploit detected (unknown TCP traffic)
Unable to load, office file is protected or invalid
Classification
Analysis Advice |
|---|
| No malicious behavior found, analyze the document also on other version of Office / Acrobat |
| Uses HTTPS for network communication, use the 'Proxy HTTPS (port 443) to read its encrypted data' cookbook for further analysis |
Process Tree |
|---|
|
Malware Configuration |
|---|
| No configs have been found |
|---|
Yara Overview |
|---|
| No yara matches |
|---|
Sigma Overview |
|---|
| No Sigma rule has matched |
|---|
Jbx Signature Overview |
|---|
Click to jump to signature section
Show All Signature Results
There are no malicious signatures, click here to show all signatures.
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | Directory created: | Jump to behavior | ||
| Source: | Directory created: | Jump to behavior | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | DNS query: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | Network traffic detected: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | JA3 fingerprint: | ||
| Source: | JA3 fingerprint: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Window title found: | ||
| Source: | Classification label: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File read: | Jump to behavior | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | File opened: | ||
| Source: | Window detected: | ||
| Source: | Directory created: | Jump to behavior | ||
| Source: | Directory created: | Jump to behavior | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
Mitre Att&ck Matrix |
|---|
| Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Exfiltration | Command and Control | Network Effects | Remote Service Effects | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Spearphishing Link1 | Exploitation for Client Execution3 | Path Interception | Process Injection2 | Masquerading3 | OS Credential Dumping | Security Software Discovery1 | Remote Services | Data from Local System | Exfiltration Over Other Network Medium | Encrypted Channel2 | Eavesdrop on Insecure Network Communication | Remotely Track Device Without Authorization | Modify System Partition |
| Drive-by Compromise1 | Scheduled Task/Job | Boot or Logon Initialization Scripts | Boot or Logon Initialization Scripts | Process Injection2 | LSASS Memory | Process Discovery1 | Remote Desktop Protocol | Data from Removable Media | Exfiltration Over Bluetooth | Non-Application Layer Protocol2 | Exploit SS7 to Redirect Phone Calls/SMS | Remotely Wipe Data Without Authorization | Device Lockout |
| Domain Accounts | At (Linux) | Logon Script (Windows) | Logon Script (Windows) | Obfuscated Files or Information | Security Account Manager | File and Directory Discovery1 | SMB/Windows Admin Shares | Data from Network Shared Drive | Automated Exfiltration | Application Layer Protocol3 | Exploit SS7 to Track Device Location | Obtain Device Cloud Backups | Delete Device Data |
| Local Accounts | At (Windows) | Logon Script (Mac) | Logon Script (Mac) | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | Scheduled Transfer | Ingress Tool Transfer1 | SIM Card Swap | Carrier Billing Fraud |
Behavior Graph |
|---|
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetScreenshots |
|---|
Thumbnails
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Antivirus, Machine Learning and Genetic Malware Detection |
|---|
Initial Sample |
|---|
| No Antivirus matches |
|---|
Dropped Files |
|---|
| No Antivirus matches |
|---|
Unpacked PE Files |
|---|
| No Antivirus matches |
|---|
Domains |
|---|
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 1% | Virustotal | Browse | ||
| 0% | Virustotal | Browse |
URLs |
|---|
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe |
Domains and IPs |
|---|
Contacted Domains |
|---|
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| la2-c1-ia5.ia5.r.salesforceliveagent.com | 13.110.41.111 | true | false | high | |
| na136-ph2.ph2.r.force.com | 13.110.37.182 | true | false | high | |
| stats.l.doubleclick.net | 108.177.15.154 | true | false | high | |
| cdn.evgnet.com | 151.101.0.114 | true | false |
| unknown |
| p13nlog-1106815646.us-east-1.elb.amazonaws.com | 54.225.136.92 | true | false | high | |
| dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com | 52.211.113.33 | true | false | high | |
| test.l2.salesforce.com | 85.222.152.194 | true | false | high | |
| salesforce.vidyard.com | 54.205.5.87 | true | false | high | |
| d2pj9rkatqbt38.cloudfront.net | 65.9.66.106 | true | false | high | |
| cs6.wpc.omegacdn.net | 93.184.221.26 | true | false |
| unknown |
| na136-ph2.ph2.r.my.salesforce.com | 13.110.39.181 | true | false | high | |
| na128-ia5.ia5.r.my.salesforce.com | 13.110.46.75 | true | false | high | |
| la2-c1-ia4.ia4.r.salesforceliveagent.com | 13.109.191.111 | true | false | high | |
| api.company-target.com | 99.86.162.22 | true | false |
| unknown |
| raw.vidyard.com | 34.234.32.98 | true | false | high | |
| a9010d017688211ea9afe0620acb249f-596514373.us-east-1.elb.amazonaws.com | 3.227.80.201 | true | false | high | |
| location.l.force.com | 161.71.8.169 | true | false | high | |
| force.com | 23.1.35.132 | true | false | high | |
| www.google.ch | 142.250.185.131 | true | false | high | |
| login.l2.salesforce.com | 85.222.155.195 | true | false | high | |
| salesforce.us-1.evergage.com | 34.192.141.216 | true | false | high | |
| geolocation.onetrust.com | 104.20.184.68 | true | false | high | |
| googlehosted.l.googleusercontent.com | 142.250.186.33 | true | false | high | |
| partners.salesforce.com.ssl.d2.sc.omtrdc.net | 15.236.176.210 | true | false |
| unknown |
| milehighunitedway.lightning.force.com | unknown | unknown | false | high | |
| omtr2.partners.salesforce.com | unknown | unknown | false | high | |
| c1.sfdcstatic.com | unknown | unknown | false | high | |
| test.salesforce.com | unknown | unknown | false | high | |
| login.salesforce.com | unknown | unknown | false | high | |
| s.go-mpulse.net | unknown | unknown | false | unknown | |
| kqitim5n3zwnuyhrti7a-pinofr-89940bd62-clientnsv4-s.akamaihd.net | unknown | unknown | false | high | |
| org62.my.salesforce.com | unknown | unknown | false | high | |
| cdn.krxd.net | unknown | unknown | false | high | |
| cm.everesttech.net | unknown | unknown | false | high | |
| kqitim2qinjecyhrtjsa-f-61be14707-clientnsv4-s.akamaihd.net | unknown | unknown | false | high | |
| stats.g.doubleclick.net | unknown | unknown | false | high | |
| clients2.googleusercontent.com | unknown | unknown | false | high | |
| d.la2-c1-ia4.salesforceliveagent.com | unknown | unknown | false | high | |
| c.salesforce.com | unknown | unknown | false | high | |
| trial-eum-clientnsv4-s.akamaihd.net | unknown | unknown | false | high | |
| cdn.vidyard.com | unknown | unknown | false | high | |
| www.salesforce.com | unknown | unknown | false | high | |
| dpm.demdex.net | unknown | unknown | false | high | |
| vfhbo3jsnvrutdkuee1akd0lj.litix.io | unknown | unknown | false | unknown | |
| privacy-policy.truste.com | unknown | unknown | false | high | |
| logx.optimizely.com | unknown | unknown | false | high | |
| 84-17-52-51_s-80-67-82-83_ts-1626446398-clienttons-s.akamaihd.net | unknown | unknown | false | high | |
| a10681260716.cdn.optimizely.com | unknown | unknown | false | high | |
| trial-eum-clienttons-s.akamaihd.net | unknown | unknown | false | high | |
| service.force.com | unknown | unknown | false | high | |
| d.la2-c1-ia5.salesforceliveagent.com | unknown | unknown | false | high | |
| 1737ad5b.akstat.io | unknown | unknown | false | unknown | |
| assets.vidyard.com | unknown | unknown | false | high | |
| play.vidyard.com | unknown | unknown | false | high | |
| cdn.optimizely.com | unknown | unknown | false | high | |
| salesforcecom.demdex.net | unknown | unknown | false | high | |
| milehighunitedway.my.salesforce.com | unknown | unknown | false | high | |
| a.sfdcstatic.com | unknown | unknown | false | high | |
| c.go-mpulse.net | unknown | unknown | false | unknown |
Contacted URLs |
|---|
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false | high | ||
| false | high | ||
| false | high | ||
| false | high |
URLs from Memory and Binaries |
|---|
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false |
| low | ||
| false | high | |||
| false |
| low | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false |
| low | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false |
| low | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| low | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| low | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| low | ||
| false |
| low | ||
| false | high | |||
| false | high | |||
| false | high |
Contacted IPs |
|---|
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
Public |
|---|
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 108.177.15.154 | stats.l.doubleclick.net | United States | 15169 | GOOGLEUS | false | |
| 85.222.152.194 | test.l2.salesforce.com | United Kingdom | 14340 | SALESFORCEUS | false | |
| 13.110.69.75 | unknown | United States | 14340 | SALESFORCEUS | false | |
| 104.20.184.68 | geolocation.onetrust.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 52.211.113.33 | dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com | United States | 16509 | AMAZON-02US | false | |
| 3.227.80.201 | a9010d017688211ea9afe0620acb249f-596514373.us-east-1.elb.amazonaws.com | United States | 14618 | AMAZON-AESUS | false | |
| 52.1.220.4 | unknown | United States | 14618 | AMAZON-AESUS | false | |
| 65.9.66.106 | d2pj9rkatqbt38.cloudfront.net | United States | 16509 | AMAZON-02US | false | |
| 142.250.186.33 | googlehosted.l.googleusercontent.com | United States | 15169 | GOOGLEUS | false | |
| 93.184.221.26 | cs6.wpc.omegacdn.net | European Union | 15133 | EDGECASTUS | false | |
| 34.192.141.216 | salesforce.us-1.evergage.com | United States | 14618 | AMAZON-AESUS | false | |
| 85.222.155.195 | login.l2.salesforce.com | United Kingdom | 14340 | SALESFORCEUS | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 13.110.46.75 | na128-ia5.ia5.r.my.salesforce.com | United States | 14340 | SALESFORCEUS | false | |
| 13.110.37.182 | na136-ph2.ph2.r.force.com | United States | 14340 | SALESFORCEUS | false | |
| 13.109.191.111 | la2-c1-ia4.ia4.r.salesforceliveagent.com | United States | 14340 | SALESFORCEUS | false | |
| 143.204.205.100 | unknown | United States | 16509 | AMAZON-02US | false | |
| 15.236.176.210 | partners.salesforce.com.ssl.d2.sc.omtrdc.net | United States | 16509 | AMAZON-02US | false | |
| 54.225.136.92 | p13nlog-1106815646.us-east-1.elb.amazonaws.com | United States | 14618 | AMAZON-AESUS | false | |
| 13.110.39.181 | na136-ph2.ph2.r.my.salesforce.com | United States | 14340 | SALESFORCEUS | false | |
| 54.76.54.153 | unknown | United States | 16509 | AMAZON-02US | false | |
| 151.101.0.114 | cdn.evgnet.com | United States | 54113 | FASTLYUS | false | |
| 34.234.32.98 | raw.vidyard.com | United States | 14618 | AMAZON-AESUS | false | |
| 161.71.8.169 | location.l.force.com | United States | 14340 | SALESFORCEUS | false | |
| 13.110.41.111 | la2-c1-ia5.ia5.r.salesforceliveagent.com | United States | 14340 | SALESFORCEUS | false | |
| 54.205.5.87 | salesforce.vidyard.com | United States | 14618 | AMAZON-AESUS | false | |
| 34.248.156.174 | unknown | United States | 16509 | AMAZON-02US | false | |
| 151.101.192.114 | unknown | United States | 54113 | FASTLYUS | false | |
| 99.86.162.22 | api.company-target.com | United States | 16509 | AMAZON-02US | false | |
| 142.250.185.131 | www.google.ch | United States | 15169 | GOOGLEUS | false |
Private |
|---|
| IP |
|---|
| 192.168.2.1 |
| 192.168.2.5 |
| 127.0.0.1 |
General Information |
|---|
| Joe Sandbox Version: | 33.0.0 White Diamond |
| Analysis ID: | 449950 |
| Start date: | 16.07.2021 |
| Start time: | 16:37:14 |
| Joe Sandbox Product: | CloudBasic |
| Overall analysis duration: | 0h 9m 29s |
| Hypervisor based Inspection enabled: | false |
| Report type: | light |
| Sample file name: | Denver Water COVID-19 Response _ City of Denver.pdf |
| Cookbook file name: | defaultwindowspdfcookbook.jbs |
| Analysis system description: | Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211 |
| Number of analysed new started processes analysed: | 36 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Detection: | CLEAN |
| Classification: | clean5.winPDF@56/327@67/33 |
| EGA Information: | Failed |
| HDC Information: | Failed |
| HCA Information: |
|
| Cookbook Comments: |
|
| Warnings: | Show All
|
Simulations |
|---|
Behavior and APIs |
|---|
| Time | Type | Description |
|---|---|---|
| 16:38:10 | API Interceptor | |
| 16:39:33 | API Interceptor |
Joe Sandbox View / Context |
|---|
IPs |
|---|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Link | Context |
|---|---|---|---|---|---|
| 104.20.184.68 | Get hash | malicious | Browse | ||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| 93.184.221.26 | Get hash | malicious | Browse | ||
| Get hash | malicious | Browse | |||
| 239.255.255.250 | Get hash | malicious | Browse | ||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse | |||
| Get hash | malicious | Browse |
Domains |
|---|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Link | Context |
|---|---|---|---|---|---|
| cdn.evgnet.com | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| p13nlog-1106815646.us-east-1.elb.amazonaws.com | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| na136-ph2.ph2.r.force.com | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
|
ASN |
|---|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Link | Context |
|---|---|---|---|---|---|
| CLOUDFLARENETUS | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| SALESFORCEUS | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| SALESFORCEUS | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
|
JA3 Fingerprints |
|---|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Link | Context |
|---|---|---|---|---|---|
| b32309a26951912be7dba376398abc3b | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| 37f463bf4616ecd445d4a1937da06e19 | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
|
Dropped Files |
|---|
| No context |
|---|
Created / dropped Files |
|---|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 451603 |
| Entropy (8bit): | 5.009711072558331 |
| Encrypted: | false |
| SSDEEP: | 12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ |
| MD5: | A78AD14E77147E7DE3647E61964C0335 |
| SHA1: | CECC3DD41F4CEA0192B24300C71E1911BD4FCE45 |
| SHA-256: | 0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA |
| SHA-512: | DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101 |
| Malicious: | false |
| Reputation: | moderate, very likely benign file |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 615 |
| Entropy (8bit): | 5.68439113937935 |
| Encrypted: | false |
| SSDEEP: | 12:vDRM9Q/jZiEiHDRM96NkZiEVDRM9XyZiE:7h/8E69NBExePE |
| MD5: | D482DA0C0FA109ED60EC9A58FBE86888 |
| SHA1: | 6E7B9FE3047623CECFEEE49B83345C5FE41E1C9F |
| SHA-256: | CFCB6F355CFA7E9F984862B938244A1D0064D7C460F3F6FF20FE3359CFEC9701 |
| SHA-512: | 90EDDDD820987B3B771069C3E2157A615461C57252870934C88F3B1BE7EF436978FD7158ACA11B803E8C41F4684E6C4F4704D7FF5ACBC54A6F324290B1B1EDF6 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 522 |
| Entropy (8bit): | 5.641208487482032 |
| Encrypted: | false |
| SSDEEP: | 12:V9zkXTZ9PQ+H9zVv1wi9PQh/P9zDS1O39PQ:XzkXTZ9PQ+dzVNf9PQhNzCa9PQ |
| MD5: | 69D905FA84C8E1A388D0ED55513C681F |
| SHA1: | 12E2C20D8F4AF7613A5E5823DB52C519AF67D722 |
| SHA-256: | A6DD02B535D29F90DD702F22C908BFCF36BF3063CE5F78AB16BFD1AAAF33598E |
| SHA-512: | AD3740FC407856BF9E1CBCF79DD21BCA49DCF7BC6E3408337C8B7F9981BEF0C9FF1E4DBEC3B318FEF95D8555BC10C519378859946AAC5A2D84BD09523F04195E |
| Malicious: | false |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 738 |
| Entropy (8bit): | 5.620151304135933 |
| Encrypted: | false |
| SSDEEP: | 12:DyeRVFAFjVFAFnS+ajvlUo6jf2yeRVFAFjVFAF54/ZGuvlUo6jE7yeRVFAFjVFAm:tB4v4nSZjSBGB4v454/ZjSB2B4v4AkSB |
| MD5: | FE0A22C38AF4E9355075A3DA774AD648 |
| SHA1: | F458DA8018AD38D43E000944AA08D6F71B6E6828 |
| SHA-256: | B9A7429C707E082EC16CBFA043524DBC80CC1CE492320994EE961C7F0A4F3642 |
| SHA-512: | 8AF6A275CBF033D5C97245C24583E5BB096685CFECC624EB7D19DD40396589527BACC0EBEB98EA0702E78F4FAA663B9BB0001D2D4FDA4B616A6DAC975E700FD5 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 464 |
| Entropy (8bit): | 5.703793034044621 |
| Encrypted: | false |
| SSDEEP: | 6:mNtVYOFLvEWdFCi5RssU11JiWulHyA1TK6t7U/llMNtVYOFLvEWdFCi5Rsa5Aeew:IbRkiDqSWusshUtYbRkiDhehoWussLt |
| MD5: | 0B13305863C53843D103D96AD92D57BB |
| SHA1: | 7C8615B9B82A47E0F4621E6D90299B5E6DEEA2F8 |
| SHA-256: | CFBEE64D6C9A516E45F72E81B39F74269C05C74C60A4EE8ED7C2027A96BF05D2 |
| SHA-512: | 051B6971ADD5EB2FF007326587B1F76283E357AB0ECD0CD03D2A458C1D650AF1357123ACBDF2BA9A3AEE629299F5621882190CCAB5F963F43F89F4F2C2ADDE73 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 210 |
| Entropy (8bit): | 5.5557033501491 |
| Encrypted: | false |
| SSDEEP: | 6:m+yiXYOFLvEWd7VIGXVu+ejRVyh9PT41TK6t:pyixRuAejRV41TE |
| MD5: | 4F10E3E902C7B4372C3C0D412DE8A8A7 |
| SHA1: | 5F3CB4C87A61C9AD66E847BFE2EE2969F4044910 |
| SHA-256: | 26D4A50C6AB7EC3F746E582D694785C7000891363835723403E8E68B94CCEA01 |
| SHA-512: | D3AE950615F44115FB90ABC809A1CD5720632DB36EFF84615BA87067DA79E2EE4FFA69C780B3FEACAE34F7ECB988357FB6739DDB0339574ACF28CEB1440D65B9 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 216 |
| Entropy (8bit): | 5.593870126904983 |
| Encrypted: | false |
| SSDEEP: | 3:m+lifll08RzYOCGLvHkWBGKuKjXKoyNjXKLuVpi125jlSco2sZI8xeGvP5m1TK5i:mvYOFLvEWdhwjQD2XSLZIl6P41TK6t |
| MD5: | E684B76D93D433E7ED1A216156CE5671 |
| SHA1: | FEE47EE8E8E8932EF805F7515604B1FEAAE62DE2 |
| SHA-256: | C6A9C9FABCD1999E279E1E150AB460660D650B36B06794CD31BC8922F36A7280 |
| SHA-512: | 78CBB228D58DBB36BFCA6A9422F3035AB8381B1AD5B73909F8F83C1F28370FA710E910CD63B3D1EA0465652250B7E94F5106BF9306FF281ADA8C930DD8488558 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 209 |
| Entropy (8bit): | 5.542909074501602 |
| Encrypted: | false |
| SSDEEP: | 6:mJYOFLvEWdGQRQOdQNX22unIV6g1TK6t:2RHRQCa2k1 |
| MD5: | 6004D67AD733977F66A2F8D80ABBC9A3 |
| SHA1: | 0293C62C4008ECA82D9E6ABAF0E05B107CECC8A2 |
| SHA-256: | 53ECDB28739DE64DD1443E7F8C268C7957B39B1FC75E1F2D9102A6FE0AF855A7 |
| SHA-512: | 4999DDF786FE995F05BBD67877175AD7EE9336DC34E6978A4176918E04F2116461D78C4F8DC49FEF31AC232F2A1CFD789CFA0C1C163205349924C7AAB52EE9D3 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 537 |
| Entropy (8bit): | 5.600529414745145 |
| Encrypted: | false |
| SSDEEP: | 12:Z5MZ0NXMuR/E15MJbMuR/Ey5MPe6MuR/E8:ZSWcuR/E1SJYuR/EySWTuR/E8 |
| MD5: | D945C98FEC5B8BDAD8C6970ECB2A1338 |
| SHA1: | D2A7B55ED37F7097039FAE5BFB67C5A9EBF54A93 |
| SHA-256: | 409C22F07EB3AA6D18309D07036A3475C8A6A3EAB914AA2369029E6BF9F806C6 |
| SHA-512: | 7554490982E3EF35FBB972AAC509821775EEB65266017FCBB46CCAC9589AD359DA3E2CF88A996B3D45A3D9941595A7903753792137496AB32810022E9B889763 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 214 |
| Entropy (8bit): | 5.494395677365045 |
| Encrypted: | false |
| SSDEEP: | 6:m4fPYOFLvEWdtuZ8Wr+by0zBUKSAA1TK6tcX:pRS9r+beS |
| MD5: | AB93A45D946A4B44CBCBBF4BC5B748F3 |
| SHA1: | CA918BEAD7C3CDA7B24BFB64F1D1061360E650F3 |
| SHA-256: | 0E191DAC9B4FCE57CAFB49D1F719449C65394E177EE59417C069495E990A4757 |
| SHA-512: | 6FE791565DF1012D7A65B2E44F090F034DF96AFB3AE9916A27E01BA430593D1139A2E443F08B6AB7CE19BB34563F84DFCA5461F9E49C596172CF134A43F7DDF2 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 531 |
| Entropy (8bit): | 5.591467804002959 |
| Encrypted: | false |
| SSDEEP: | 12:KkXxKMSCvU1XtUlMokXxKMSCvY3tUlJkXxKMSCv+DotUl:KkXxiCEXWMokXxiCA3WJkXxiCmkW |
| MD5: | 4A1C22A1083E711C58190076AE07B1E9 |
| SHA1: | 88E1EA8AA0957030A95197F6A5A5FE6B22E099F3 |
| SHA-256: | 23BD21EB5235C9B96764D5BF3D1E0EF38EDE114514B3EAE7C924E2E4B65CFF53 |
| SHA-512: | 17D67089BB406757746A29C4C53A1E62C6CF64A85FD5869EF8CA87251F55445EA66AEB092F08FA189C731AFF898E7E934267F08C12C59BAB30861AFA9D066DA5 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 561 |
| Entropy (8bit): | 5.600433795599596 |
| Encrypted: | false |
| SSDEEP: | 6:mkl9YOFLvEWsfOL97o/jryyM+VY1TK6tXlEkl9YOFLvEWsfOLkFuyyM+VY1TK6t2:5h6OL97o/nkxlbh6OLkwkqh6OLN/k6 |
| MD5: | D214CC16E16A28BA2411DEC02CDC54CD |
| SHA1: | EEAE2E794383A02B7AA979789319A0AA30521441 |
| SHA-256: | 965412CD51780980F72F7EA699F0D92D16CF5BCE3FC78782589F77AB28F90F21 |
| SHA-512: | F7DA1C184BB8BCFFEE52EA420A1DA9EAC8574E1C0686BC64D751A7521722AA59AC08742C08CF904E71E6D0A155E90736DF856E3BED5E48DE4F2575F4A6FB29AB |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 732 |
| Entropy (8bit): | 5.641569761729137 |
| Encrypted: | false |
| SSDEEP: | 12:URVFAFjVFAFeLe2wSeKaTLnfRVFAFjVFAFIFwSeKaTLnxRVFAFjVFAFVzwSeKaTj:UB4v4z2wzXLnfB4v4IFwzXLnxB4v4Vza |
| MD5: | 9E9319CF9E31F49A6655F314EBFF9BBD |
| SHA1: | 966AAD73EA190259B83DBEEB985C45FE8C027624 |
| SHA-256: | 33086754B999045D04F821A21CA19406CED7F79E049773A42581ECE943BF2B2B |
| SHA-512: | D89D9523A1CE8A84BB7EA6F4C0E881D57F1E0B777CFA05194434EC2C34967F93F9F40D755EA8E42CDB682BF8CF080E56E0CC07F9A461A09E1FEC406F911FE38B |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 211 |
| Entropy (8bit): | 5.512522683193305 |
| Encrypted: | false |
| SSDEEP: | 6:ms2VYOFLvEWdvBIEGdeXup1atP11TK6t:BsR2Ese61c |
| MD5: | A6B13744AFCFA72930686FC23E1A9993 |
| SHA1: | 47F1259F7A7432C9EAF1F58201B87C6EC2A808B9 |
| SHA-256: | F98AA3B5F50BAEE4B0202C8BE81A4441682F891234837B78C66604C0F9F4E462 |
| SHA-512: | 98FCA15ECB546B3A3519EFE1B74FA2EAFD8FC62C3E2AF1C4B5BC52A47A7CCAB23B9B4ECC22CA0FB024B81DB22AF7A27F26FD45F2704CB8E0C9AFCAF61D1C4B3F |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 202 |
| Entropy (8bit): | 5.629369456843931 |
| Encrypted: | false |
| SSDEEP: | 6:maVYOFLvEWdwAPCQkch6MB7OhKlvA1TK6tH:RbR16jG6MBJkt |
| MD5: | E78C33F59A82D8A7848F336DAFB31C65 |
| SHA1: | 04EB9FF974B04801A23E55FE60779C9C00ECD78F |
| SHA-256: | EE2CA1B28191B6792B2AE183D86E5DE4FAC87B32091391E6E886BFB2C0330ECC |
| SHA-512: | 360F01679B7C7B02DC7DE474D87E1FED72109A988616B4A98E5B302C1547637FABD602A0C6DC2F9F924CCD6595164330D87C9FF0E30C26A35CE781B2A4503828 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 211 |
| Entropy (8bit): | 5.576255324902857 |
| Encrypted: | false |
| SSDEEP: | 6:ms2gEYOFLvEWdGQRQVuHqYgpnQdFt1TK6tP:B2geRHRQ6qb0 |
| MD5: | 5B83FD08693F458B9863060838CD7A33 |
| SHA1: | 29748B5A25AE4C2E7B63B8D92A8ECEB1823BE239 |
| SHA-256: | 410C1C9840E90B1916567C3B04E9F5E39F82D1113600A21456AC4590C209955E |
| SHA-512: | 8A28C1EC9868C8D2AEBC0B380C1C1D4674C355D6CBA0FA2F022D9C1EDEF5BCA1A8BFBA7F51E6A02D760AC8A9E35CE042E80B3990772C38C7507491A8BD0C7A47 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 618 |
| Entropy (8bit): | 5.646776915978888 |
| Encrypted: | false |
| SSDEEP: | 12:WyeRlk+ct1wJJMyeRltXayt1wNyeRlv1EEt1w:WJMlfwJJMJVXayfwNJl9fw |
| MD5: | E2831B875FCBAA1B4EFBC08853E399CC |
| SHA1: | 631E3AE5FC45B3307000E97C6E54D08457A2A47D |
| SHA-256: | 456FDF3C0C3EFBEBD28D70EF87980638C68977C774F44E2003C070DF10C1896A |
| SHA-512: | 02E63D99E425070887B3F177101E7C46F9ECB2E257B860F94AA52A0265A06CA2CC5B759EA97CEF3499C16CEE6EFE58DDC52C3896646347E731513E7956C6A52F |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 218 |
| Entropy (8bit): | 5.557600412616798 |
| Encrypted: | false |
| SSDEEP: | 6:mnYOFLvEWdhwyu65AeIWDsqwK+41TK6t37l:wRhneerD9wK+Et |
| MD5: | D5A13D2119579D193284CD6727197CB8 |
| SHA1: | EF3F30E1F177AC9BF0C55EEACC0B079A1EB0B126 |
| SHA-256: | 774E6CC13B3A9DDDC1C7C520B91CDD03DA5761DEB62F5EFDAC855625C264F317 |
| SHA-512: | F401A2A6E7B01896A7BC8747661266BAE3F406402DC9058BDD8C8DD4C10E3FBDBC908549384C8AC4B9EF6ACDD8F81CACCD594010C11B0289310518F615FBEABA |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 690 |
| Entropy (8bit): | 5.627778622865002 |
| Encrypted: | false |
| SSDEEP: | 12:/RrROk/NZA/YfLEtRrROk/YV8mfLE43RrROk/tAfLE:/PJ/7AA4tPJ/Pm443PJ/tA4 |
| MD5: | 47117E472137DB0620223E38AE5598AC |
| SHA1: | FFA2D548A64B060C4C122158AE763F4D8BA957C0 |
| SHA-256: | 6A9E4B06C0EA332B4A7E0F9702C807647AEB1A3A051922C6E812097263FA3953 |
| SHA-512: | 814DCE62BFEC90621A565186B69D5FEDA8B145D290E5E4862996BE6028743580651987E778B96124793C84ABA610CA34110F094543F0E20F0FA02FFBD91ADDC4 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 558 |
| Entropy (8bit): | 5.624510768848606 |
| Encrypted: | false |
| SSDEEP: | 12:xqTJU8cCPLniBqTKNDCPLnDqT71iL5CPLn:APcMniQ+DMnGNiFMn |
| MD5: | BC51BA354CE8E8E854E1DEE070BF5DCF |
| SHA1: | DDC7CD6E4446DB2831A72A52A94A279BD9430F03 |
| SHA-256: | E39B7FBBAB700C2BAA5125B511B4745315F820FE8683CFE8AD7CD1AEE2507631 |
| SHA-512: | 82DD2FFC9EAD9E1F9CAE8278C163EDE9011CBA87F7AB24C2214BB9F1F414205D0FBC3EBA8CD0E24BD3FADA7DE1E4BE0A38E1F551ABB3010FCD9CCF6E84FFBEF1 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 621 |
| Entropy (8bit): | 5.659461857538949 |
| Encrypted: | false |
| SSDEEP: | 6:m52YOFLvEWdMAu+v14h91IsEJ41TK6tX52YOFLvEWdMAu6teQkeIsEJ41TK6tsMN:zRMQNUWsDURM+eneIsDeZRMn17WsD |
| MD5: | 11B3ABA71D7FD5F2A993EE2093DA78DE |
| SHA1: | 406740427EEBA318CE3926D5634254077ADB5D73 |
| SHA-256: | 806A0C8A9C20B48F4325CF03C45B930786EAFB4B57724C40966EE8FF60FEF595 |
| SHA-512: | 39D99721DD74916175FB6F981F9C121467FE0B31A8F1C2D958A2D798B8FA9B89882312A00D2810D82F5823C732CC5FAD879E4E1CA89350623A5C5CB406504522 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 630 |
| Entropy (8bit): | 5.644648280041985 |
| Encrypted: | false |
| SSDEEP: | 12:6lJRJeeCFoMoMlJRQeFRTFoMfqMlJRwXFoM:YX/CFoMTvFhFoMFuXFoM |
| MD5: | 6BDD7011ACE4F417564F081D5AC2AF93 |
| SHA1: | 97A501E4162055C4FA8D075692BFEFD65F0AD8A7 |
| SHA-256: | E5921AE23C3C40F6C7543EFEEF14897FD389F802ADFB76E0E66437489CD1C5B9 |
| SHA-512: | 62C02D2749B5B9FE7BAABFA6558C9B6373010A3DAA8C222B5D987C4BFABDC93C8AC77CDF3BDBE51FDF95375FDF4C045FE83C98BB014A0F52DDEDAF3EA773C21E |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 669 |
| Entropy (8bit): | 5.6469193432518585 |
| Encrypted: | false |
| SSDEEP: | 12:F8hRrROk/lSHe2f8hRrROk/+voe2k8hRrROk/fb7e20:UPJ/lS+2KPJ/u72lPJ/f+20 |
| MD5: | 43F798F2A0D713BA1EAC020699345D17 |
| SHA1: | DA7AE2D4B32630619714DE40BFBF38539B20ADD2 |
| SHA-256: | 07D08586C89FDFC2C9CC63B41B50A7528D920AA92BACCFEA2B931ACC5A0841BA |
| SHA-512: | 7CA1CE20136AFE9C5992B87748FFF91AF7A54970E1DB005D5EF89538377268A01F842E42E4E5D2AE119B7AB8429A115C8BD09E76B9ADBAB06340ABB6EBE2760E |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 639 |
| Entropy (8bit): | 5.709541460179313 |
| Encrypted: | false |
| SSDEEP: | 12:ehRcveNrNJIC1uhRcS/jnDirNJIC1hRcyZqrNJIC6:ehJvJICAh5/jnDGJIC1hBIJIC6 |
| MD5: | 74974C22AADC85D980CB6317017C82B0 |
| SHA1: | CF6558CAF9D3B77AB17874705D9E2378561B51FF |
| SHA-256: | D470F697E4949B4AE5BAE40FC761682FDEF20EF4916F72CF504E655067C46B8E |
| SHA-512: | D29129189DD09C355A7F6177C42D7644C4AD9BD421B8040581EB1229FF48CE58626C998158F27F7BA45635302ED2F2D7BD348E931AB5274F6F5977C598A52790 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 624 |
| Entropy (8bit): | 5.627227455194031 |
| Encrypted: | false |
| SSDEEP: | 6:mOEYOFLvEWdrIhuBeeHhLzgm2d/1TK6tkOEYOFLvEWdrIhuBGVhLzgm2d/1TK6tI:0RSe5Re8RyLReLpReX8ReN |
| MD5: | 4DD265C4E7C7401315C7013169037B7F |
| SHA1: | D24BAEB4F91FAC28A8763FF6847B0BC35E29E6DE |
| SHA-256: | 8EEE493FB2A240442FC5C741D0336912E15123246C0556A37AA61D43ECBAD8FA |
| SHA-512: | 7F728983FD19269072A654089DEE5C6EA745436F43EB0FA7D9AFA3A9C435CE9A5420B868B8E7D34BF9F9F428F7168BCC52FB7C8AE494DE60C62F42030AEA6FF8 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 564 |
| Entropy (8bit): | 5.637665100278707 |
| Encrypted: | false |
| SSDEEP: | 6:mAElVYOFLvEW1KveFkx56uvp1TK6tMAElVYOFLvEW1K34e+XqBkx56uvp1TK6tAg:6JJK2G6JJKoPXqq6wJJKaTo |
| MD5: | 479222959953B04CB1FF9D705B8DD4E8 |
| SHA1: | C62878441158B045DC091863B287668AAAB4C8CD |
| SHA-256: | 782547B30E590C6AA956D131D01C81E8EAC49660695DA0F66F7848DDC05087FB |
| SHA-512: | 219C98C7A1162E521185BC3B35375638DAF50AFAD5BE58A5DF9D978F3C21C4C787D9C1E3E172C2D3FCE529664344657D6E34AB56802784840C2D0E91BF0F2536 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 214 |
| Entropy (8bit): | 5.6572895384755695 |
| Encrypted: | false |
| SSDEEP: | 6:mWYOFLvEWdBJvvuq4/XtyhUDLYtmOZn1TK6ti:xRBJ54/RDcFZL |
| MD5: | 6A42612B6E153DD4C92C77AB624FDC7C |
| SHA1: | 23831E8C08108AFC6B84B15450DC897D3440C58E |
| SHA-256: | 4D99EA4ADD1FF4468F05776F6A4376A076BD8A2DABDF33D448E7523C2066C513 |
| SHA-512: | BE1827290E33F1E5DC4B168079514844AE94E1194F27388FA9C8F69D13B226F051B52C5CF8E2509CBAF8DEEE6DE95EA67FD168EC33F5E1B79485ED5DDDCAA95F |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 633 |
| Entropy (8bit): | 5.673181289325866 |
| Encrypted: | false |
| SSDEEP: | 6:msRPYOFLvEWIa7zp7VdefYVPu1TK6trsRPYOFLvEWIa7zp7SARVPu1TK6tq/EsRm:BPHnYfYcaPHEicMrPHboN++RcS |
| MD5: | 73305AB7302BD4B8478D95514C59DAE4 |
| SHA1: | 448CC0BC44E1B571C11E740FDBBC2C716A799495 |
| SHA-256: | 9AB8D544F3CBE682A2EF5C5BB08CAEB04394B2287E7A5DBA14DD4D8E868AC556 |
| SHA-512: | 806E439A05F70F4AE0D9E57245220BAE940F65CD306551DD2D0DAC77152AD780A64DFD5180EF2BBFDEA406D270E8B7B1D41298ECFC90AAE42EFCABE9F9D2AC45 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 208 |
| Entropy (8bit): | 5.594079421597541 |
| Encrypted: | false |
| SSDEEP: | 3:m+lQi9lC8RzYOCGLvHkWBGKuKjXKVRNUpXKLuVY25Aeps4XVAZ+8cV3vRm1TK5kf:mKPYOFLvEWdENU9Qj2ee9iM3Y1TK6t |
| MD5: | 34024D9698E42A1E1ECEE2395914C561 |
| SHA1: | F3D66FE323813A043F3373F73984612B0BE03979 |
| SHA-256: | 994C772DD945355E8C3F3C251099F7678A03AED3AD62DE8B2D09858529D9D122 |
| SHA-512: | 95C5972DE811B1627D6AE28F8EFF26C505F903491DB01CFD4DF92364716F81AEA4D7B8851C5F9FB93E70B6C445A881BFA41B07A13DD33A2B38D7D84FBB229A9D |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | modified |
| Size (bytes): | 208 |
| Entropy (8bit): | 5.611433462340024 |
| Encrypted: | false |
| SSDEEP: | 6:mQt6EYOFLvEWdccAHQffk1QjBRCh/41TK6thgt:XRc94fk1QDi/E4t |
| MD5: | 0B90E2AFAE74559EF3B07D2009AEEF0C |
| SHA1: | 1069AD6F6617276FA293C36D00CFE9D15E4F4FBB |
| SHA-256: | 7EDA4F947E1B1E2311AFF795458F1218838F81E4952EDC8B7A5BAE06375BDFAD |
| SHA-512: | F0745514472FC2744650C738A2BA189FD5E9CED1EFF748ED0FC057BAB99A203193D04299A1B5CA3AA88929831CE54C17FA50AD634502101EBCDAFEE8D2968DEA |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 462 |
| Entropy (8bit): | 5.612111291310032 |
| Encrypted: | false |
| SSDEEP: | 12:bs6xRkiq8uM0LlF4nVhs6xRkionLlF4nZ:brxpDQoVhrxponoZ |
| MD5: | 6877F57A822556D03B743FC8F1E56166 |
| SHA1: | A1AF883DEF935E2A7B6ACE0B59EE2040C56E1C93 |
| SHA-256: | 95A3DCCCACD07E8D2AB9882FA6E47E4D3458CD3C50E15EB76F9F611F67555AE8 |
| SHA-512: | 41FB718DF8051C56C16A961A1C8FF6AC65E88CC47D0F046D733F7351661FA0CF5240965DA0EBA3E3CBD6644DFBE378B32389003E07BBBBC25477D3D1E501DC99 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 215 |
| Entropy (8bit): | 5.501235112003061 |
| Encrypted: | false |
| SSDEEP: | 3:m+lPHYs8RzYOCGLvHkWBGKuKjXKXqjuSKPWFvH4PXB9Z9kfrcu1isLK5m1TK5kt7:mhYOFLvEWd/aFuq/B7Gw941TK6tjV |
| MD5: | 987C414AE8973132FC89C616C804BCDA |
| SHA1: | BCFF1CA52FE83526DA4CBF4EB3E85AB4BF1862CE |
| SHA-256: | 74C7D903DFDF8DC6F2EFF8EFAC8C6FEDC623B993E7E2AE04D5760889541FB8A1 |
| SHA-512: | 2C89E2996564DF85B53D7EE95F1414EE7528551CA0A1A3A9DCACDB2F92F2D0BF3526CB2B984C9C0F152033AB764942A2019CEDDCA4B40BA557908B5C7E0616BD |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 208 |
| Entropy (8bit): | 5.529274736953949 |
| Encrypted: | false |
| SSDEEP: | 6:mR9YOFLvEWd7VIGXOdQ/5v1oDw2oBMqVd3G4K41TK6t7:2DRuRcNUyB9Vd2k |
| MD5: | AA81F7C0F507C5E9FB838960C2A0874D |
| SHA1: | BD1E5077325E34C3AA176DE431DA20FFAB147F1B |
| SHA-256: | 755FCCABF999CA45AAD2235CE25D189604F46B0E788E21F8EF6DCD3E4AB012C5 |
| SHA-512: | 3D5C525891B8EFF7257C060B8B33F1E803D1561DABD95941CC0AB8D6283EFE82F1A79242E5F64796DE8E323A05D718AB61507F29C36B6985C466C12EA8A4FDBE |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 624 |
| Entropy (8bit): | 5.629881707022122 |
| Encrypted: | false |
| SSDEEP: | 6:mkqYOFLvEWd8CAd9QP4eeRGtuA424r1TK6tAtMkqYOFLvEWd8CAd9QEpzgmuA42T:+RQP/Acrnmt8RQXdgZrnxRQXK1qrnB |
| MD5: | DC2BE45210B1F4702A7431EF81308C57 |
| SHA1: | F6839D984D9A94ABED955E0E11C329F5EE10C139 |
| SHA-256: | D2BF91233FBFB4EE5CFA622016424929158375F8DD8ACAA0743FCC56D05163F3 |
| SHA-512: | 3B22C666EBE420F25CDF276F01A71CC885E722EF1BF28DBD543746215F6E90AF2A8DD169446A62C5842B06893600223F871B52DA3211CD9197350083ECFA2EF9 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 210 |
| Entropy (8bit): | 5.577999627407755 |
| Encrypted: | false |
| SSDEEP: | 6:moXXYOFLvEWdENUAuTTN6DAyC8n1TK6t:xhRTRTNh7Q |
| MD5: | 4DFCC05F772EB8FDF7ED57AB266A20BC |
| SHA1: | 76BD0AC2544EC33B722CB7D06618DAFFB7113B01 |
| SHA-256: | 8A0F3A76C395B4C757CF49AE286874CA0C5CAEC2258AE0AC6920A38CB78C335E |
| SHA-512: | DF50F532A47F82F3879C6D2033E7379C1D5D3C0368B692D9965AF01AF4FF06248E3FC00C5C123D41D9B894D3F0A68BC920FE73346307E08C61E3D3CAEF319BDC |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 663 |
| Entropy (8bit): | 5.680431503192727 |
| Encrypted: | false |
| SSDEEP: | 12:nRrROk/VAX7+Vm5ItlRrROk/VxamOfRrROk/VEFm:nPJ/i7n5IPJ/LL+PJ/Kw |
| MD5: | 74E10D5712FCE5FAF373CDDD356E1E4A |
| SHA1: | 9E91C746DE9F507F37495F056B65780431AE967F |
| SHA-256: | E94CCA8EEB61B472597BAFA713587ED6E628A05B807D5C07E51B117E78514A30 |
| SHA-512: | EB6F928C4470B5060A15B883AFD8D7D148245BA4422C882EEB3D24E356ECA11B561567E4ECE109122EA5EAD6B3E5DCDABF7EF424E6B84EC0C2D5604A056A17F9 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 210 |
| Entropy (8bit): | 5.574563992546808 |
| Encrypted: | false |
| SSDEEP: | 6:mZ/lXYOFLvEWdccAWu+rdxAdm9741TK6tA:qxRcEjAdu7E |
| MD5: | D128DEBC01FA3D833B32E225117C56A6 |
| SHA1: | 8AA6C764AD899CABCC804B2238051A9B1DD3C468 |
| SHA-256: | 700848CBCD9B4C5627E6BA83107D36F39DC89AD95C5C148C8F8388CFACF4C282 |
| SHA-512: | 8ADDBDC4A1634E0A1294F33750170D5FB02F75DB52F84C4E2B8BF020815200C4D99C5D9350DC76A2BDE23EC6C88D313B15B4CEE0CEDC66019192E601370B7EF5 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 204 |
| Entropy (8bit): | 5.5683273087969685 |
| Encrypted: | false |
| SSDEEP: | 3:m+lUg18RzYOCGLvHkWBGKuKjXKrAUWiKPWFvKXZiZB6shoq+Nem1TK5kt8tl:mMOYOFLvEWdwAPVugOkJn1TK6tU |
| MD5: | 61983390686F65640FDF6167D19CC2B6 |
| SHA1: | 497C1739B7B8B4FB149623EBBF07C35943679DC6 |
| SHA-256: | B0EAC93F9D2F58AA173F9FE104683AF8FCCDD480A9EE653B20C90DE6864E85F0 |
| SHA-512: | 3036FC364ACC70FC7FA2E7ACE5AD0643483F27EF91AC916603EBD6A65370875CDAD35DD90ABA1AC2D34E2B973BD868D710CCC3CB127D37C83971813BC336FD6D |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 212 |
| Entropy (8bit): | 5.639301173461548 |
| Encrypted: | false |
| SSDEEP: | 6:m3PXYOFLvEWdBJvYQRXLzhcsBXIh1TK6t:mxRBJQiLDB0 |
| MD5: | 6FE2AC6CEF21641428D56F9CD3D102CD |
| SHA1: | 06C98A9059E7F6ACE11FEC68632CCA42B6905800 |
| SHA-256: | AB6E2A5014EA88C9978451F368ECDF157E42DDEE9DCDCCBD989F0E14F6D97E60 |
| SHA-512: | 812DFD75D1449BE7763C6EB255353FBFFCDFBE0202274177320B7672F716A2472941CDBD81F2A5561F036DD2CC6C4F8946D0A44B6A4C4370DBF350B394A80B1C |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 684 |
| Entropy (8bit): | 5.634529829650931 |
| Encrypted: | false |
| SSDEEP: | 12:3RrROk/sbDcvMcaRrROk/s235NecjlfRrROk/serMck:3PJ/aDWaPJ/f5N3JPJ/Tlk |
| MD5: | DEBECAEC9D4EEA1BF353CBB2DDB410AA |
| SHA1: | D9A3E83B9D41894A65D500BEBB8419B16D015426 |
| SHA-256: | F41CDDCDC0CEA0B8AC0EF777CB45E1D7CDC583EAE9F5F3934C6DCDE1C52976D1 |
| SHA-512: | 80053694BDB077B2FF5866434D9BD38CD9A12B0712DEDBA7EF9533152748541BC90B7F303085239084B64B7E36E8629E935F7263BB7132083D1164C4E340CB4C |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2016 |
| Entropy (8bit): | 5.214853352385442 |
| Encrypted: | false |
| SSDEEP: | 24:0I2bYdB8J6MbkeljKqRomvNA7tUDM0mhmpe8smw6l:t2kdhMkCqmvNA7G5ps6l |
| MD5: | 00BB295B2129F5ABD121A738BC3F146A |
| SHA1: | 9C6421F488656A35965AA110FF965E88838FC59A |
| SHA-256: | 03F2409E0C35CF49A4F3BABA241840CCB4B01ADF0457D1A884C3D6EA298F76F1 |
| SHA-512: | 7BAB75829D5D742BA9E11315D3A02B5D9A4B8EC4E3029B8603B05FCEABF0D673DF161E7A4B4A2189270B258ED4D2EC4A1DC47F606FDAB4877A9A1BD84F9A3F87 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 291 |
| Entropy (8bit): | 5.173805976375338 |
| Encrypted: | false |
| SSDEEP: | 6:mgTbM+q2P92nKuAl9OmbnIFUtpTPXZmwPTPqMVkwO92nKuAl9OmbjLJ:jTbM+v4HAahFUtpTP/PTCMV5LHAaSJ |
| MD5: | A1B841FFD5C9976BFD96429A062299C9 |
| SHA1: | CFB1DD9B0F3C758432037FBBF3FB4FB65391D676 |
| SHA-256: | 6A2BA8D83AB1478AE7D4EF4B1C68A09F3299D49C7D84880AA2FAAD5C769767CB |
| SHA-512: | 52B672BB9A694BF78171523BE009D7AE0CFCA4F0412CAA93F765439D34FF7DCFE8134D40DB9E1CE06117ADD3B89C0ABFF574A7E1D16F780BA9ADA23D16D619C4 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1310720 |
| Entropy (8bit): | 0.0084423731585201 |
| Encrypted: | false |
| SSDEEP: | 24:T13rz13r+fUrjUVJjUVJjUVJjUVJjUVJjUVJjUVJ:T13/13KUvUvUvUvUvUvUvU |
| MD5: | 20C2D53F3F6BF479288D699773FA372A |
| SHA1: | D18859D4EF1A2B4F96A6ACD1F09AB61AAAEB323A |
| SHA-256: | D6C5C9640C916DF6010AF982C733684606233C1632676FE69EA946B53C438E0F |
| SHA-512: | 4A2A80FEAFDD414C93E701D268262C8F065DDFEC45211DA8A0A30762731DB0E7A21A44E9CEE09375C731C512652D5CFE20EE7821769E35AB95DF2563AB4493A5 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 71190 |
| Entropy (8bit): | 1.440007236641834 |
| Encrypted: | false |
| SSDEEP: | 384:w6vUcqyeXXKUmXyjXX9XrXXESXPbqvrXkuqkHuJdafA4:R1oo |
| MD5: | 3084DB26F5CDEFA0A79BCE562600EC95 |
| SHA1: | 930E3A33550869DF7AB4510C947E7F61BB77E925 |
| SHA-256: | 58F5D44A7201116F4FA6CABD137A77CA8F88CFAF4AB918D803E51EEBB5FDE553 |
| SHA-512: | 11E7FB98CF0A0FB90461CB538C0BAB4F32D71D53A06963385918C0778D236C55BD61BAEEE22D0496BC5E25459C3F58C0FF8F3BA17673086E97213A198D61E0C5 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe |
| File Type: | |
| Category: | modified |
| Size (bytes): | 32768 |
| Entropy (8bit): | 3.388850501981248 |
| Encrypted: | false |
| SSDEEP: | 96:iR49IVXEBodRBkQOOhFVCsL49IVXEBodRBkRWOOhAVCs749IVXEBodRBklWOOh+Y:iGedRB6edRB/edRBDedRBc |
| MD5: | 9032E659D6A1B676197D6F919666B645 |
| SHA1: | 0BE77D58B9C811A8B0F2101D953B82F9CAE6C28C |
| SHA-256: | 136057138C23255324BD8173234FB10934A05BE9A55A23FDE88A992EF9D380DD |
| SHA-512: | 39FC349D7418A82D8CA4F53301D18A8A462633AB98CB32AC8993BA951DDA993742FC4DB516F5F3088C34BDB705CE097476B37E40E46C18022C5BD3D737A68009 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 34928 |
| Entropy (8bit): | 3.2022612289364374 |
| Encrypted: | false |
| SSDEEP: | 96:m7OhFVCPh949IVXEBodRBkBOOhFVCsyLR49IVXEBodRBkKWOOhAVCsnd49IVXEB0:mdiedRBXLGedRBPCedRBXyedRB9 |
| MD5: | 93AB3D893E2B435B7BF85DD8768A632C |
| SHA1: | 305E9273FB3EF7D62D4CEB5FC21D0FAE1AF8AF27 |
| SHA-256: | AFB77F00097E52A6EC8A407D10A046CFFA4D80EE9F117DD18798C31F22E1E992 |
| SHA-512: | 3568D29732CD769AD73E3E57A60E3AF504083658CA000714022F86CB794F0D7489353F1D3FE632C180644E9DBFDF2D65CA5FED0960E27B8654DD2BC7CA33B863 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1731 |
| Entropy (8bit): | 7.304248760879033 |
| Encrypted: | false |
| SSDEEP: | 48:panitqAtg0KUNFeYnita8lnitq1+Zvl3oXS9As5RmEWqu5H99:pWAtXKokTz1+boavLJpu5 |
| MD5: | 202F2D29B3E8C798A335CDBFA528CA26 |
| SHA1: | 27CCBD68F9EBEA6D255967A47EDC59196A31C85F |
| SHA-256: | 03BF005BA66C5693387352136F127279DF5858255D016ABCBF90D7849573BCDB |
| SHA-512: | 1A2CB656B02EE0008C071F1F16C7A774EE0C522A279680FE82C52264B94CDA60242D6F042695655A06B8E11CA86F57F476FB509DCF38549CAF223ED078D5C0E7 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 183060 |
| Entropy (8bit): | 7.994886945086499 |
| Encrypted: | true |
| SSDEEP: | 3072:0tdeYPiuWAVtlLBGbtdeYPiuWAVtlLBGbtdeYPiuWAVtlLBGm:0rec7VDBGbrec7VDBGbrec7VDBGm |
| MD5: | 7DAFFD77F2D6E43937A4AF91891D572A |
| SHA1: | B00718D20556FAB59D4F815460CE0E657707B125 |
| SHA-256: | D9A5468356659DD4E681FBBEC4EBFECDE08400FC5432BAF92553813A62336A3D |
| SHA-512: | 7E8C0EA36B41D44B914D409F9FD2B1E8BB0F0BD617670E274452E7CF56E61CEC68CC550BA817D9654B6F5C85A0135C45B5ECECC73E61EA0A4D2642D897231928 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1697 |
| Entropy (8bit): | 7.304665468482358 |
| Encrypted: | false |
| SSDEEP: | 48:snitqJSTXORuVnitqsXA49e5REMeZ6+23wQ:UJmtsw49eEMeZ6+Y |
| MD5: | 9A74E06FED8E6D15EC1C4C67C8E1DEB1 |
| SHA1: | 061DD4B990C802C096FB57099054A9C935D7A2EC |
| SHA-256: | 91A83F6E51E8C00851757C6740427E13B9BEB3B11F9AEBBC1F9C834F51112912 |
| SHA-512: | 415B8A9B87B1A39C734368C8A03378E745934E7240016877513A40B613B787E8EA1A7791B877DD2EE3EBEC2E40441BD8811303EF032F2B48B006683BE46C24D2 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 900 |
| Entropy (8bit): | 3.778031175513724 |
| Encrypted: | false |
| SSDEEP: | 12:5368rQESIgsFFV13Mz1mySGqWvXQj39lJ8rQESIgsFFV13Mz1mySGqWvXQB:FTwyPV13MhmyFqWK98wyPV13MhmyFqW0 |
| MD5: | 4A8492564EB9177B57673FF0BAC4CBF4 |
| SHA1: | 22067D689345A76296F626FC05723DF4C6D9711B |
| SHA-256: | 60D3C81F304E7C5CD5BE04996AC829D1B535F65E52EFE1B02CF45D7C2A784307 |
| SHA-512: | BB0FBB1ED5FFE6F47B62A4C6D32144A79460BDFFCEBBF1DDFF9D5CB6AF8906EF5B9111C65571B9260E35495DA6E7EA47A0C8BFB8E4645B3E43F8F0CE331E2F70 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 978 |
| Entropy (8bit): | 3.1474961458003774 |
| Encrypted: | false |
| SSDEEP: | 12:C5kPlE99SNxAhUe0eI5kPlE99SNxAhUe0en05kPlE99SNxAhUe0et:C5kPcUQUfeI5kPcUQUfe05kPcUQUfet |
| MD5: | 11B320858A3C92EE1E947B5D79276806 |
| SHA1: | 660A2058637A191AE9EA6002B8B1A0B4EA6AE60D |
| SHA-256: | BBBF3F47A51F73D59491E4562E06A07C90D21090E6BBC716D84FEA63659BA18A |
| SHA-512: | 5D2BC15E52BF609D12CEC647BC86B2E95528D5155BB2B500C3D8FD5B345AB24E240943AD4A960E448929CFD92D6D6713D0CDEC7840F072EBBF35AA8BE000478C |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 916 |
| Entropy (8bit): | 3.7442787132937903 |
| Encrypted: | false |
| SSDEEP: | 12:uOcj+rQEFDsFrvgxE0P6GANMmZ0jrrL+rQEFDsFrvgxE0P6GANMmZB:uOXV4xaVSGAmmZ0jXSV4xaVSGAmmZB |
| MD5: | 875D72A1C0E024930A288372F090DC58 |
| SHA1: | 4D66592032EC9CC14675975C2927052695A89482 |
| SHA-256: | CA0DDBEB71E9B13F103ED41C5E46D2DA2D0468BCAFF497C516DA7AA73A92CD82 |
| SHA-512: | 4975524917EF90ABC8EC50F990168438B06899ECF7A088EC76B8B97374D7BFDE28BEE640F92DEFC3F698A096C3BF5BF491E0BC17EDD0E3AFDF29B9CEE4924CE8 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 63598 |
| Entropy (8bit): | 5.433041226997456 |
| Encrypted: | false |
| SSDEEP: | 768:PCbGNFYGpiyVFiCUZsNSjIXKkMan2T/rPINA/MsuENYyu:J0GpiyVFiBswjIXKkMuI/rg5SK |
| MD5: | AFF35D42BBE7B71FE5941DA59BE223AB |
| SHA1: | 916A2740D369BCBA1BDB26EBCD08298924EDACFC |
| SHA-256: | 4ED10091C6A36EA520CD1FE5C6CDB16C31DEF8958B58126C34479F94908023B8 |
| SHA-512: | 97C483D140F5496714C8E55932C5D9AE3356BABC0D2418771AF2A9B1CCC321583523B740336EB63D5363A8C19F197D70648E14FA883E76C94D4584C384F4FF2A |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 364342 |
| Entropy (8bit): | 6.015258461027268 |
| Encrypted: | false |
| SSDEEP: | 6144:tgHbsLZIdF21L48Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBs:y7a6F21BxzurRDn9nfNxF4ijZVtilBs |
| MD5: | 3389E1967B9A02DDC0A16B8F5068CF80 |
| SHA1: | 3488BCC95270710A891C087579709ABE25C8A0EF |
| SHA-256: | 7AC17BEF2F678212D965C02FBE095A8EA10BC11A02CEE549826AAACFA237C354 |
| SHA-512: | 2C4D9C828ECEF1BED593EAFB9FA0E2E8D6BECB3CA66CF7479A0296920FC914890956085A8A057DABCF4ABAA6E26D0ED57BE25650A7E5E92276252319A39365BA |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 367926 |
| Entropy (8bit): | 6.0277259258771805 |
| Encrypted: | false |
| SSDEEP: | 6144:/gHbsLZIdF21L48Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBs:o7a6F21BxzurRDn9nfNxF4ijZVtilBs |
| MD5: | 2D20808D31638C30668F942F6DA2D794 |
| SHA1: | 378678507DEDD0CCFCBE431E5993F31573C1CC9B |
| SHA-256: | AF849D9C3AAC81DF033F6D82DA65B2E8C020858E0EFCFDA5A3ECB9979502A10F |
| SHA-512: | C216D99B75966AF48E0A351024C8E3F5AC82395AD13C918F559C7C51074E192285B621F3CE3CCE3465C496E01FC292EC2C22D1BA3F1EF75EE6D5E05CE29AB952 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 92724 |
| Entropy (8bit): | 3.7516032324174002 |
| Encrypted: | false |
| SSDEEP: | 384:Hjfe1Bf4WLjM54NZryvdn3GJjiHz6Gq9rIbxpxWrvTursBmc/43JJh2OH/JNM1xJ:m2Bt2v2eke3BLLIfTCHKh39Fm |
| MD5: | F7B78AC5A34A5F80288A0B6EF11C0442 |
| SHA1: | B5151B632B740182CB78C404E0E8760CB4AF119B |
| SHA-256: | 8FA89949D9764F9A2D068DAA4884C7C8E687DF10E92DE591B0BD230AA2955290 |
| SHA-512: | 85EA39CAAECF4F414983C0BB7140DE5A8C6BA96736900A7AB7F5DB5D56C7A9C3393A01DDD8C2A88EFE22E78B84E63F168C863509E091DCA8595475B83A95B3E1 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 368010 |
| Entropy (8bit): | 6.027845073772459 |
| Encrypted: | false |
| SSDEEP: | 6144:5gHbsLZIdF21L48Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBs:+7a6F21BxzurRDn9nfNxF4ijZVtilBs |
| MD5: | E228AD0CBF5CBC5F0A265958B24778C0 |
| SHA1: | 5F99452EEF5214BAA521CEAF64B85795C42E6E8A |
| SHA-256: | 39AE0CD591B99864F492FE40F7C2EBC235D1277DC6C9F5C261F62E1E11E2AE85 |
| SHA-512: | E4E5177F49EF8C1C10055CECE058551167FAF760CAC050B7436B20658809DE89AE00FF96744A4E24F7BA4137FCEBA8E9B71B09C54C252D7D5EDFD772AF1A0B94 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 364341 |
| Entropy (8bit): | 6.015258531472639 |
| Encrypted: | false |
| SSDEEP: | 6144:9gHbsLZIdF21L48Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBs:C7a6F21BxzurRDn9nfNxF4ijZVtilBs |
| MD5: | C92EB9546680367BF4D9348A54476D3C |
| SHA1: | 6681B8B60DE518B5C659772BF600AE150C072C12 |
| SHA-256: | DD0AAAF502718AB256594F88FEA7F7A447B8BA3E25CF93EAA79915525F23B83C |
| SHA-512: | 3B9E9464A6595A60B1B992314ABCEB42F5A62D506828DAAE110ED16F4F4BBD055AF649F2753985517A664991CBCA761F52C5DF3382E1831FE6323F6F8A4E402C |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 95428 |
| Entropy (8bit): | 3.7518450859757655 |
| Encrypted: | false |
| SSDEEP: | 384:Bjfe1Bf4W/gjLVkq54NZryvdn3GJjiHz6Gq9rIbxpxWrvTursBmcIa43JJh2OH/H:de2Bt2vseke3BLLIfTCHKh39Ff |
| MD5: | B1ECC2EDABCC2766E02EB6D69B80B19A |
| SHA1: | 04B40BB19B2015F404F931AB825838C311A1A2CB |
| SHA-256: | 46A2801512276330693E485D9D6F3F87F63DCA6AC13A72620DFCC7F63C5565A8 |
| SHA-512: | 5B40C45133FED96DD59BE05949987ED820A00172F22E30B3091173CA37E9FF5DE490A1328226985D7C64D74A843BADBD6E23D94F567E6287CCB69DD7833267A4 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 364342 |
| Entropy (8bit): | 6.015258217565408 |
| Encrypted: | false |
| SSDEEP: | 6144:9gHbsLZIdF21L48Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBs:C7a6F21BxzurRDn9nfNxF4ijZVtilBs |
| MD5: | 51D4D0A7843BA78B0DB94C082CB8F8C7 |
| SHA1: | 50DE2EB3F4A8580864E29627926AC9281754323D |
| SHA-256: | 501F4BF926801E0586AF8C02EFA6718336A1C1D9FC4FB6E6E6D640A888FA2310 |
| SHA-512: | 27618F0F47111E6B68B1B651EA06B0BD1411B99AE7B463EEC84B0C06B6C1B872AE442D36E75C6E8396E8CACCD071A810E61C8BA37815B8937AC5D9A757467E82 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 94708 |
| Entropy (8bit): | 3.752323312286085 |
| Encrypted: | false |
| SSDEEP: | 384:xjfe1Bf4W/gjLVkq54NZryvdn3GJjiHz6Gq9rIbxpxWrvTursBmc/43JJh2OH/Jb:Ne2Bt2v2eke3BLLIfTCHKh39FJ |
| MD5: | 207C05405D62B92B349A7CD513054008 |
| SHA1: | 2035783D9FA89240326A404930433E9160577F41 |
| SHA-256: | B40665B72C0144C58DA0BD32785761E484F126B147AB453396AF1DC6C01440E6 |
| SHA-512: | 23B9F500F290EFE36264B751C0E6D1A1016B8A332BA4464E375325885BBADD9898C03457904F3671C346F06F3512FCC53C8DA6D952661433C42333F74304E23D |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 120 |
| Entropy (8bit): | 3.3041625260016576 |
| Encrypted: | false |
| SSDEEP: | 3:FkXYDu6cR9iTXYDu6cR9iTXYDu6cR9n:+Y66cR4TXY66cR4TXY66cR9 |
| MD5: | 569FA64ACAA310B1DE1A6250CC7356B0 |
| SHA1: | 14251450C245F8612958BF94779E8B72AE6D6213 |
| SHA-256: | AEE20ADEBF2D35EB8A39BE2DC391B0E5966EFCB4AFDC971BB3A18115C929F563 |
| SHA-512: | 850914A053EF541046B29260266C17FEFF2466A87784394F9AB3B565D2EA1E656F61F02BDB78F9F9676E90365F837F3709BCC0856B3B844256848F477250E0C7 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1710 |
| Entropy (8bit): | 5.563236357814097 |
| Encrypted: | false |
| SSDEEP: | 48:YQaU4Q6UUhrwUk/gUkNDKUeuGEdUEUoUrUeCgpwUbUeh:QU4ZUUyUkYUUDKU7dU7oUrUHgqUbUc |
| MD5: | 63C8169B62F1D8117E623FF8426BA3DE |
| SHA1: | 1E6E6750F17EC3C0B95B241B1454148BAD3D5FDE |
| SHA-256: | 0D1649C448F0C9F88DAE6555CFFCDF407DF1283C598808517B332676FC14AA01 |
| SHA-512: | 33D6B0834D22D2B08ABC89CAE40EF1B661A1D7C22C0692E425CA59189622470F380FE0A9656FE05F6589420D0DBB81ECA66D69868732CBF19C9B3422DA5914E4 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | 3:L:L |
| MD5: | 5058F1AF8388633F609CADB75A75DC9D |
| SHA1: | 3A52CE780950D4D969792A2559CD519D7EE8C727 |
| SHA-256: | CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8 |
| SHA-512: | 0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2211 |
| Entropy (8bit): | 5.570191687689346 |
| Encrypted: | false |
| SSDEEP: | 48:YQaU4Q6UUhrwUkjjUnbAUdgUkNDKUe8wU20Ub0UoU7UeCgpwUbUeh:QU4ZUUyUkfU8USUUDKUwU3UbLoU7UHgN |
| MD5: | D45A37D7E26BF82D880D5B5A3C5072F2 |
| SHA1: | 82ACD427906205D579EBEA73C6076787C5EAFAC4 |
| SHA-256: | 2245678D026DBBC47474BDDFBF9DAA105A1EF477FE545100894A497C2273F59B |
| SHA-512: | 4548029EE05DBCAAA1100D2ECEB65D6C8D14B731CB98594C437ED12DF3E8F4BAFB426C9DE808C26861AA09984032C7582EAAA6154EC4202B6A667023F7B33ED0 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2693 |
| Entropy (8bit): | 4.871599185186076 |
| Encrypted: | false |
| SSDEEP: | 48:YXs2MHRzsoMHT5s0MHyKsTMHksrDys4Csb7synWsQItFsym6zs6zMHWLsZMH5YhV:+GDGTHGmGHDW1/nOIbmOGlGGhVD |
| MD5: | 829D5654ADF098AD43036E24C47F2A94 |
| SHA1: | 506C8BA397509BA0357787950C538C1879047DF3 |
| SHA-256: | 4D0B852D18FCA5C1A712904CF6DB3811FB905E86D8A7508A2D42F9C8D68E2211 |
| SHA-512: | D9B18E6B0AD1E8E4BECF9E84BBE30D64730CFEC2CBEAF96D5DF52E28B907B03EADF22F020FBE0A56D137A52F4F09798031BC6CA026CFA8A979A608B3445DBCAA |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2379 |
| Entropy (8bit): | 5.571294112202221 |
| Encrypted: | false |
| SSDEEP: | 48:YQaU4Q6UUhrwUkjjUnbAUdgUkNDKUe8wU2CrUFvwU6SUoU7UeCgpwUbUeh:QU4ZUUyUkfU8USUUDKUwUBUWU6NoU7UU |
| MD5: | F8AF76A9DF800B6F9736D0E406836828 |
| SHA1: | DE07751DA27890768B273D82A9824F269AB469DC |
| SHA-256: | 34AFFC67DD3F801D0F355CB76E6F156FF59F28312C3C03443362EF98092BC68D |
| SHA-512: | 19C453FEC8FAEACB513E21382767C6350FE5F150D92C8A912BFE27C202258683772830CB9FE0757E505360AB683ED0DD755A442FB081B3FCDAB6A7B8A2ACDDE7 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2837 |
| Entropy (8bit): | 4.858788685785592 |
| Encrypted: | false |
| SSDEEP: | 48:Y2ntwTCXDHz5sXRLscTsGrrshMsIMHKsciyvOsW3zsrAkq6qm6K2XZ7NiYhbxD:JnOTCXDHzAfXrshsGei+Ihjxm67XZ7Nn |
| MD5: | 4E0F296839DE4134B75579E59FE3196E |
| SHA1: | 18D6932059FC3941D4E05426614DE8ECE42E58D6 |
| SHA-256: | 38358C460A8502619EDA1DE7A5E337F913C8536ABE6713AC7CC3D42C02F42061 |
| SHA-512: | 04CFB4293C9FECD751772FED81DD997CB12B59A93A2D87BA2DD451889A77E488B912CE6279ED30E8D6EB933768B052E507BED21017D3505DC43672B1BBED0018 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2323 |
| Entropy (8bit): | 4.856330737775205 |
| Encrypted: | false |
| SSDEEP: | 48:Y2n6qtwTCXDHyvzM3zsXRLscTsGrrs4sOkqMs86XZ7UYhbxD:JnxOTCXDH+zMGfXrsOjo6XZ7lhVD |
| MD5: | 0D481074465523B8C428E7C8F64D5EDD |
| SHA1: | 656F6CE10973976BC4BC23C0BB32832626C6EE41 |
| SHA-256: | 630284F6E592CB618DFB5C797E90BF452B47AFFE0077DC27FE1795C42236FB9D |
| SHA-512: | C6F866B69DA2ADF8EBE7521E799414CF1BD7AE8ED2B439A1208F17F400DC0E315EFF3A32DE0E0F32950AAEF2EFD9F50A0A172AA2CFEE083633396E1E963D40CD |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5718 |
| Entropy (8bit): | 5.187164507016659 |
| Encrypted: | false |
| SSDEEP: | 96:nZrfs5Ms/SKICRDIk0JCKL84kP11XAbOTQVuwn:nZrMMmS8dC4KtkPy |
| MD5: | E75B795F73D7C14454B260C20886F20F |
| SHA1: | 27EC8921CDE296F9F1483EFDC4D97EE952502244 |
| SHA-256: | 4CC02F160FDECB3E38F6CA32569E82397F76A1077C86829BAAE3176417C72661 |
| SHA-512: | C866D5327890FF695293E561C011E6F9AF83DEEB85CE739130566BED8CB9E1421C4AB4A018009CC356F8EEDD94D0B5818211B55DDE7E80B2B61B9E79E8EFAB93 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3882 |
| Entropy (8bit): | 5.586928408943983 |
| Encrypted: | false |
| SSDEEP: | 96:QU49eUUieUogUSUU7UnUAU4UsUjjUBDKUh2UihUvUWU6RU7hUEloULBiUQPUHgqk:QUYeUEUlUSUU7UnUAU4UsUjjUBDKUoU1 |
| MD5: | 81BA60005E056AAA8EAC510F335B54F3 |
| SHA1: | BB12F5B80D5E6E414DDCE6A5DA7A4B069FF05BE0 |
| SHA-256: | D0E506EF1652957BAF89D6E816CA9C0D04AEC1DA787D8EDCA0E18AD9826AE4FA |
| SHA-512: | 48FD0428D2AFA3C019C25EFF98BEBD844E4257905AF200AA2279C09FA7C71BA22618DC4C6D22183630817D0363E9099DFBBBBA2EC758C848C9BB5B5329422A2E |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5122 |
| Entropy (8bit): | 4.97165218024737 |
| Encrypted: | false |
| SSDEEP: | 96:nZrcl5MpSKICRhIk0JCKL84kP11XAbOTQVuwn:nZrKMpS8/C4KtkPy |
| MD5: | B3881D33110D5D120CFEB194A753690A |
| SHA1: | F8B630AAB33FF42780CFDFEB85A6AEC69E61487C |
| SHA-256: | CDC86ADCC5FCADC489E2277CAEE33209A7740BA187BF202130687496E2D58D3A |
| SHA-512: | B3DB8D5C56218130C933BECAB4945E5FD2B9493D5D9BF011702516B60105A290E92F5C421E4C52995458EDD43C0A1F77C7C1301529249CB9531365CC1D8BE565 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 18940 |
| Entropy (8bit): | 5.568857279599955 |
| Encrypted: | false |
| SSDEEP: | 384:xJotaLlNLXM1kXqKf/pUZNCgVLH2HfDNrU1XUHG8VzYaJ4+:dLlpM1kXqKf/pUZNCgVLH2HfZrUCGqln |
| MD5: | 5AFD70F9C88F2813F4EC11002325EF58 |
| SHA1: | 75F42EAAC2F9D8C196B9A34B0F449D6830486F4E |
| SHA-256: | EAC62BE401CF95329C51AA265BD73C76AE7BB3FB8EB48B80737F13FDCC4C938E |
| SHA-512: | C9A58D876587D543C5F7D03CABD88E8306FEECFE64AC0C58E88D78159AC7D0A0FAA64C2B8BFFE7FA94EE2F3191226C4DB164477C82886210658B79B3C8209930 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2379 |
| Entropy (8bit): | 5.571380939619547 |
| Encrypted: | false |
| SSDEEP: | 48:YQaU4Q6UUhrwUkjjUnbAUdgUkNDKUe8wU2dUrvwU6SUoU7UeCgpwUbUeh:QU4ZUUyUkfU8USUUDKUwUWUcU6NoU7UU |
| MD5: | A32E277CD1D061ABD8C09E93083BD718 |
| SHA1: | BF05E4D6C3C4C68A97CE66EBF93FE48AA02B1BAB |
| SHA-256: | 2A1A9B931067F1DED7B8E3D116B1B2658FEB6342327BC69121FEEA61C90F1694 |
| SHA-512: | D053FB6C93208DBE3341A2C1A36AB432F1613FFD6E12ED189DB06A790BDEA6228A638509A99967AC9BDA0B8DEC7CDBA1E9B94A19A5B2CE35E3067374D3652C13 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1710 |
| Entropy (8bit): | 5.563635920380592 |
| Encrypted: | false |
| SSDEEP: | 48:YQaU4Q6UUhrwUk/gUkNDKUeu4DUn+UoUrUeCgpwUbUeh:QU4ZUUyUkYUUDKUGUZoUrUHgqUbUc |
| MD5: | BE0EE760F6DABD2369C7946A9B29609E |
| SHA1: | 306AB6926E84B43252EF27435C62DD9369EC663A |
| SHA-256: | 6E3569327878CFE0D665CEE62503FE53D74E5176DC9AD5DE6DFB5962EC544FBA |
| SHA-512: | 0A6A9AD93CB17020E998E937B66FB5F8FEA3895FE9BD991C71CA29BE683C0AF4AD148D41F432EBF3489D07E3463D06F7ED81635B1509A7E92420E63466C6BC39 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 22595 |
| Entropy (8bit): | 5.536081263927109 |
| Encrypted: | false |
| SSDEEP: | 384:xJotHLlNLXM1kXqKf/pUZNCgVLH2HfDNrUvXUHGANTnTpzY+J45:OLlpM1kXqKf/pUZNCgVLH2HfZrUQGANE |
| MD5: | 59F2051BF7ECB010ADE9B5519F6A791B |
| SHA1: | B0FB1155257FDCFFC4CC0BE50DC3665F6BE3A86F |
| SHA-256: | CAAA3A358FDDE9E039AA5965B01B8CA7F0D5BEDD6A8A7AE46E2CAD42C68B4333 |
| SHA-512: | 466DB33E00D5D437FB3A5849DA6B762D70E4901411486F662F2E8E59EE1EF6FDFF6DE8B08C9325B6A6E29AE4A55CFA1265B83256771D902BFC4ED2EC79519AD5 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 22596 |
| Entropy (8bit): | 5.535985506484641 |
| Encrypted: | false |
| SSDEEP: | 384:xJotHLlNLXM1kXqKf/pUZNCgVLH2HfDNrUvXUHGJNTnTpzYHJ4jd:OLlpM1kXqKf/pUZNCgVLH2HfZrUQGJNX |
| MD5: | 92250A9F79F6B33CAD8879EA979177E6 |
| SHA1: | 777A0AF8565A2DE03A788AD1ADC9D961ECA655ED |
| SHA-256: | E05671278141439D0D99C701E9DF806BCD32EFB294C9B36C5590129E0D740410 |
| SHA-512: | 50A1EFCAAD17A0587CD6784100B1EEAD3D370D2826634335BE019CFE69B9AD5CDAE337EC032BA0B12822540491F160FFBA73D28E76842F271FDFAC78F3EF840F |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 336 |
| Entropy (8bit): | 5.26098963200569 |
| Encrypted: | false |
| SSDEEP: | 6:mnU7jyq2P923iKKdK9RXXTZIFUtpV1ZmwPQmlRkwO923iKKdK9RXX5LJ:P7jyv45Kk7XT2FUtp3/PJR5L5Kk7XVJ |
| MD5: | 00D4EECF2D5B6EEC192EFD1E51CE2871 |
| SHA1: | DE3D13961510E44FBCD063D1287706817DC8AF74 |
| SHA-256: | D6D4807270ECF7FB4D5B2C09FA53C8F0EEC488B2422C1C0BBF68606808BD4A48 |
| SHA-512: | 9B83FA43CA063B78D3E15A0DD16A1357D4DADCDE46D3678709D7EFB81B642AEA450A29F9F1408F92C6CD0E7AEF43A6FF8DF8203607824A65D798EEAF81B8062E |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 320 |
| Entropy (8bit): | 5.2471151443130095 |
| Encrypted: | false |
| SSDEEP: | 6:mR3yq2P923iKKdKyDZIFUtpt1ZmwP7lRkwO923iKKdKyJLJ:Qyv45Kk02FUtp//PxR5L5KkWJ |
| MD5: | C5FAE99B61BD3445058AA79E1F9ACF01 |
| SHA1: | B8947CB8A716F8213DC946F63637DB4215C0FF6A |
| SHA-256: | 0551E11BE953A54A1B1BBD87E6C520491324D354F23EC787795A25312D97156F |
| SHA-512: | 22D95D66BA69543A23FF2578DB6FC8960A50055A63FD74BF90D524421B0670B63776A17F975965DA9F8F308922F804F3660A50F514BD32A2F4F0814296B41B3C |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 9197 |
| Entropy (8bit): | 5.568120614574528 |
| Encrypted: | false |
| SSDEEP: | 192:pr7DluBlMxi4tplEiqixrl58ipQYJeMxu/p0GYt:p/hpD5cYoVyGk |
| MD5: | 48F528B1892798C017D2386DB088AFF6 |
| SHA1: | 1042B804A53A3C6C8C295E37BC8CED1AC3819D24 |
| SHA-256: | 62999417B75203C2D63DA7393238F56430DB1D9D8B7BB3E62C09216754402456 |
| SHA-512: | C9D3D10C1DC1B46B83F763011F34CECC75C4B0B99D4CCD3CBD7A10E35C7673BB5B814D62894C726CA4FC84D488C94C1893A06828875630BDE04D68C3C605881B |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 92528 |
| Entropy (8bit): | 5.660709883914733 |
| Encrypted: | false |
| SSDEEP: | 1536:qfjKK5W7ftB42PKJhE/MXcsq8EMPI3+WeCrsa6:mfYDt+2yc9svZQ6 |
| MD5: | 7F0ACCADA97E56D1067C105BA0CC2C2A |
| SHA1: | 5368EB1CBD50814DE5EFE3206F0B72B91F6EADD0 |
| SHA-256: | 0044B8DECE5671B9E19952C3030AC147B7F44C5576A1F64B43170B95804354D2 |
| SHA-512: | 5FFCE993B37133B8EF8D8380BCCA8290E81C350D2EC95C880AA64BF51A0155CA6535E06A634276FF7CC80B15E9D1E701295DDE148F10940D5EC11A8800CCB6E7 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 424 |
| Entropy (8bit): | 5.954546955426353 |
| Encrypted: | false |
| SSDEEP: | 6:mkkYGLqdIbgHKoRHTUjsRTLl5qKH2dgdIvlS7jKRyZK6taJO+nxxUJRyl:TYbgHnZ4yvl5qKWdgK9op8txxUq |
| MD5: | 27AF21467C6B86ACCD5CA24B8D0E2729 |
| SHA1: | 81D5C2015BE56D4203F81CC43F3A627DC6644262 |
| SHA-256: | B468824724F766E1DD2F1C5A093AF26AF4AC207A17F1F68C17A3DD12140D2ED2 |
| SHA-512: | 7D123FE5306A64B6E6CBFB1D236EDAEBB45D91BD97E5F4AE2E13411FE84768AF74801E2EB0F63C7A0497A266EE46451B597CFAA076DBD264B6648200220057E8 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 11644 |
| Entropy (8bit): | 5.686144666620173 |
| Encrypted: | false |
| SSDEEP: | 192:gkc/8rMaFCxXvUnoSKJ5x9BFld4wfaIUqgrl1JeKaE5imIqUWbpvWyty88I+2Pm/:g9baFCxX0oSKJr9oMdUqg51sKaCuybpW |
| MD5: | 667E372D67B7FDC636BB2027D0820F4B |
| SHA1: | 713C1533A91DD8BD1FA0536401EB4631B320038F |
| SHA-256: | D803E80D671D7E5B7756F8BA2900087E8DEAD360D1273C5B4A9E20C4CAA2E7F4 |
| SHA-512: | 9A518C1BEEA4FF68A586EDBB8AE047914BC658F4FFACACE6C2B6E8FDB310F741813A959A7AE19F73CCB5D0B5FAED9A64BD61E90266650ABE8669E89101162948 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1894 |
| Entropy (8bit): | 5.5759385315652725 |
| Encrypted: | false |
| SSDEEP: | 48:msM+87m8cpyAUuiPlXEXXBtUpfmH7HMGn:Yk8cpwXExAC |
| MD5: | B4B1B951D72CE96208258441F20D1445 |
| SHA1: | FBCAE7371BCCC3E37A24A7D35E056375165EA68D |
| SHA-256: | 7FA1276045B38AF12D2ED9D8FA927726F15C0682AF30871A432B5AA772C3B6D1 |
| SHA-512: | 6857645C3D9164C1CCE4170383695A7DCA9ED49A16FBC6224990E6EB6D070AF3691E096C9761B7ED692A3D44031D3819901B0149DFE0EB57F15A794DCADEAD20 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 464 |
| Entropy (8bit): | 5.424579608083673 |
| Encrypted: | false |
| SSDEEP: | 6:m29YEu21DhSagdI4JN/SxfltoCRc9rTO2VjqDK6tW29YEu21DhSagdIPlSjwCRc1:77IK4fCfltoCRcNyh7IKPljCRcbj |
| MD5: | 2478D511411493358DCD11EBB28C8FE6 |
| SHA1: | 7B23339AB687E3D2D5602AC315D47DD144869330 |
| SHA-256: | 3465F81378F6166169D7923E839A2D7A2A61FE4008BC11317E151C1AFFDEEE31 |
| SHA-512: | C2100FA0D89D576A2A5446B60594645EC539430BFE0C109BBD5CB2F482633E585C2BCE56AE85477AADEC3C5BEA3ED5C615BF9A230EE1C78ACEB43DAA2374879E |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 246 |
| Entropy (8bit): | 5.499659817440876 |
| Encrypted: | false |
| SSDEEP: | 6:mGeYN4IIxSzgAq3JodIh9SIlwul4jhPB/ZK6t:Nb41x0qZoKb+y2JR |
| MD5: | 24A26E76469B94E6693273EB1A3BD2FF |
| SHA1: | 1AFD4BC8470C5144AD6E1BD288A1695FC186E061 |
| SHA-256: | 39C1F40FD0F93B4E9287206307D98881B890894BDB3AC474B467BB1C91E05455 |
| SHA-512: | 3505177468AB4E08E52AFE4472A16515A14615E8785C4347958634871B6A59CDAA16D1604A5C9CAAF9E06CA24C0A3DE662205704B411F6291F9E629F875B460B |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 365 |
| Entropy (8bit): | 5.921843704971907 |
| Encrypted: | false |
| SSDEEP: | 6:mm/LVYcvnAN6UxnX5/OcvSrDbO41/hK6tr1nxxqlKv9gDbO4h:/4Jpmc2PN/751n3qlKlgPZ |
| MD5: | 6C84CA6FF018DFBAECB40F079F51324D |
| SHA1: | A6D92D698049B9281748379A4E555753DA802B98 |
| SHA-256: | 7E884E39C4A3EF6EADE8CAFBC90D6FF272047D1C138CB0F96B1D1B78A7B590E8 |
| SHA-512: | 54ED7DE8A7C5B78FB7168DA310E398BBF64F8F3902C0217523822AEC1B35F5AE9472C8417383DBAE8F880518A2B3AE67DB3D910C4205278A85E12195BF1F63FC |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 400 |
| Entropy (8bit): | 5.917996803737954 |
| Encrypted: | false |
| SSDEEP: | 6:m++Y34d2WOgZAURmIsnRnudIfWlSWMxYCQK6tJQjnqyNzcnLCWjwXkVSR0xYCp:ougaUR/qgKaRTXQjqysL3EXX |
| MD5: | 48838B60A15A1FAD0CF2FDA9783F79B0 |
| SHA1: | 16D83D554D4882EEB968063CC4283E03E27B563C |
| SHA-256: | 222D8D89CB6B1C6BDA903ADA43740D0E5701FE1FD2C948EAA21C9E1F5F2DE239 |
| SHA-512: | 1A7EB1C4AF6E0AB54B404CA12788F8FCEC5E7CABE79E3956016CCF75C10EFECA41F4A9030CAB2E732E1AC86D7DD285D86434E769602274E4E38B0DEF023E4719 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 31879 |
| Entropy (8bit): | 5.823486831493443 |
| Encrypted: | false |
| SSDEEP: | 384:WFh3VAdrlsnwSFyzHG34Df2yrQioJIcoXy0wVXhAbvXBwdC8QBI:WFrq+y6s/UrXExI |
| MD5: | D6957E109B563BB3FC11F12A7DDF3FC7 |
| SHA1: | 4A0FF42FB88AC449F3428564EAD438E8446C2D62 |
| SHA-256: | BC78741242D2BA72189EAF736D06B70C05A55972C110A5E9C989AF41C8E84495 |
| SHA-512: | B56F048871BB8365B73579274BF92495564CA769E91B090629A602B3F6A44F93884E29267AA3130D6A1AF786E31986A263E4C2C9E3ACAC0766091BCDD52D10A6 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 230 |
| Entropy (8bit): | 5.49269445048484 |
| Encrypted: | false |
| SSDEEP: | 6:mNYN4IIxSzt3FV5dICaS0d68oH4h/ZK6t:V41xmFV5KCavdnoHa/T |
| MD5: | FC389605177C8D7C23C743B0AD0F6958 |
| SHA1: | 24D7E613C854B2762399B3A7FA17210B0DEDE031 |
| SHA-256: | 5EA3B6CF77F4318F16C5704B67CEE1E6A404FAD76188AE86E3BA30080474A005 |
| SHA-512: | 2A57CD7A6212B121224E82181CE36B31ADE5339701184AD693ECC01E30777C636C5B77CDC5726308CD405DB41D2238DD55311F3F01EA7AFF2BF179BFC7EA1F5B |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3182 |
| Entropy (8bit): | 5.261888777703263 |
| Encrypted: | false |
| SSDEEP: | 48:wVpiThVtVBopBkDZl7VjRSWyfKjocGCzOPZBPa/RIwpsoXlpG:4SA/kNlxjfocGbW/RfdTG |
| MD5: | E71AA5C4362FABA72F8139B13A633859 |
| SHA1: | B2777989380221BAF7ADC057428878340702870B |
| SHA-256: | 0EA8C48E69183F81652644BD53FD2E3383D79660674CBCB23B5E6E9E2703A817 |
| SHA-512: | AA7DD36D90C0E1089E3A64AF0F668843193C3618C74AA9FEAFA584D07CA60B5CCBD709FE58A53905A07DD4EB466460623A07712E7EEA9A8E4AB7CE6905DDAC4F |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 418 |
| Entropy (8bit): | 5.918863830424976 |
| Encrypted: | false |
| SSDEEP: | 12:4bgHnZ4aSK3NVHmGrGh22SDS4Ah99s1rGh:4bgHnZ4YDfq22V3TYq |
| MD5: | FE680B21FDFB5D596CFEB4A0BC72B435 |
| SHA1: | 5388FF29E032FB7BF31A581E5696E2C1B59B2D79 |
| SHA-256: | E929F9E4C5DE82297FF66AC30621A63BD5FCBB0795711D63106B259941103D8A |
| SHA-512: | E596780570C6059B9AC55B7945DBE9BCAF6452F799C538C89EE239D261023FFE87AD9A02CC5634C7A7269BE7EA3C074697B70818618D852D19A9D7B58B65891D |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 65310 |
| Entropy (8bit): | 5.780021496366131 |
| Encrypted: | false |
| SSDEEP: | 1536:K2J/n3BI1MquJwOx8k0PW6hXkmXRHwopT4yt:J1nx7quJwfk0PW6hXvwo7t |
| MD5: | 0E994AA2380974EE3FCB2E335E831C74 |
| SHA1: | 2BF592B245988CFD6DD137053234344BFFC3C860 |
| SHA-256: | B27F4FD527EED12366366AE256B8BE7D6E11197809D4555F5D4EA010D37FA732 |
| SHA-512: | 3C08BBE2F9E0F89331126220234D50862C59743EADFFDEBAB3EAC4F55F503144C4FDCC60FC6F8E13FE36E94BEE7BE863075D07845621BCF9C77BF87DC59CCC87 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 856 |
| Entropy (8bit): | 5.514313088429757 |
| Encrypted: | false |
| SSDEEP: | 12:nNHMaK91/wxXNy7JNHMaKUKH/xXNYNJNHMaKzltCxXNI/NJNHMaK73lRnxXN1:NCzey7C3YN7Cz4I/N7CTPL1 |
| MD5: | F8445B9E4A935E6E9443EE7FE3D47A80 |
| SHA1: | 59878FB65D155EE13412DABA7613939A901C1962 |
| SHA-256: | E3E60880B25A10A3036C88C80A61128AF2989CB8D727B28194C63355EF26647E |
| SHA-512: | 69A180117BAD368AEFA7680ECFA52791A8B99A1E31AB369E2D5C45315FA8E6C0CA7EAEB1C77EC99F0EE4053F0BE5606E679A36842F01382E772D11B805254C75 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 212 |
| Entropy (8bit): | 5.403875306451186 |
| Encrypted: | false |
| SSDEEP: | 6:mmEYwU5IIx6JyLRsdIXSKHSElfmP4MK6t:FAYxtL2KXZFlfG |
| MD5: | 080AD24C1ADB48FFCC059EA5EA5E574B |
| SHA1: | 9DAC9095DB308C061F6DD0D5F135F56F3AA9B9E6 |
| SHA-256: | EF84A3F3E327650B34C9F13FEE5404CF3A221878EBDD3D320D6B530F51DE1C8B |
| SHA-512: | 552EC09F1B404699A9A5FEBF286EBD131662C6F2D65CD6785EB582D03F0D89C665981E7F8ECCCFDABC08E1FC82C95FAB458AE7AE02CC271EDB99C4D8E4A4ECBA |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 681 |
| Entropy (8bit): | 5.700297465103879 |
| Encrypted: | false |
| SSDEEP: | 12:FvypEHKNodAQ7arPvypEHKylZidAQ7E//7PvypEHKP1l4dAQ7F1:8nVIarKnyjpIEX7KndhIF1 |
| MD5: | 1AC3C0B8123AEF72812C616BACA33C7D |
| SHA1: | 57A94A8584A83C6379B09F4B400BE276F205901B |
| SHA-256: | CE666E9B640E3B2AF784E5A39C75DC5A8F8DBC38844BCEABE136D7BCCBE9C4CB |
| SHA-512: | 432799E9A88B670FB03C1913D7D42FC83F1CB339684668EC4E05560DA8215A3E42C6589C452A55348154A8E5F3E987E256785AE3DE8F05D5DED07DB64D93A641 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1555 |
| Entropy (8bit): | 5.80189008302492 |
| Encrypted: | false |
| SSDEEP: | 24:YbFIK3gqr7H36YL2Abe+vmp4Y+sslhYidduUbFnW0h5exuukg+X:AXgqr7H36+2D4mp+3XAzkg+X |
| MD5: | DB3D2F68383352CEBAFA3D0AABA46AD3 |
| SHA1: | EAD0F2E27FF59BD58893C18EE35DDF71C3F6EA91 |
| SHA-256: | 77B4583683B854E5CD6E12D5229E96A90ED5902F471AE353DBF3540E909A7F04 |
| SHA-512: | 277B1C22F755F76FC5192C0FEBB484C8FA080F5BD798E1DE5D5B8FD604A1A73672A69DD76FDD40739AF843268167B66B4E7ED0D322DFE067AAEC12F60410ACE2 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 235 |
| Entropy (8bit): | 5.570333316201845 |
| Encrypted: | false |
| SSDEEP: | 6:mP/XYcvnAN6VoGOC6S/eJpaSVnANZJx4XDl/hK6t:KyaoIN+pamnqZCD1 |
| MD5: | 682ABFA9ECE632A020AD4A708A3C8178 |
| SHA1: | F5E16AB9DDEFE5CED493E680C4DEAEE21BD0C948 |
| SHA-256: | 5959C62526C5E3A84F31735B5BADF676E71701E8FA6AD55ECE394BFAB8B904EE |
| SHA-512: | 89B2C18148314D260322DFB6BDE0246F99DE4366645ED3BF9D003240E5B5913D1EC0FCAB0F0163690EAF060955DFC0D10C5E4D9A8C0F229A23877D97BFD7DC36 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 173912 |
| Entropy (8bit): | 6.141976416109377 |
| Encrypted: | false |
| SSDEEP: | 3072:QsKa6cGnLvZCjbSQeAi0ARHn3ji/Ux5XqKC:rhCl+e3Hne4C |
| MD5: | D0AA420E32700B7EC1921BE116E209BB |
| SHA1: | DF174E50DB7226E52E631039E5D0F93C7A2DB54B |
| SHA-256: | E33638707C096D33E9B378BE6867C8AF454456B3D9576201533EE0F759099181 |
| SHA-512: | 7D01F98DA2F84BBB4C37039CFF5AB2881BB0F9A93B93CA12D4B9598EA3378ECFC8AA423B36178CD01F9B03A2A8FDE613C8CB29A8891F80CB278F78B0D7698862 |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 7134 |
| Entropy (8bit): | 4.980857086775019 |
| Encrypted: | false |
| SSDEEP: | 96:LDr/VDob3x5B4CrWOFs6d9yNC+c2/QnmPN9P/dIMkwUpthj:LDr9Dep4CSM/QCJmP3eb3X |
| MD5: | B3EFB5A1BA5CAE2779DBCBBD047A1AAF |
| SHA1: | FD38EFECF40903D73F23976A0208AABA606B5FB9 |
| SHA-256: | 129E250377F4B59B3871844679EC100591C01C439F2CF8951D349111BA103F4F |
| SHA-512: | 73BCE5CB44FC457243AA420E87278454D6B35E930C20D9E5ED9B38E87534F136E9E8387E652A62771E6AB9614C24FD153835EEC6E985BD6A56E12711F9E03D7C |
| Malicious: | false |
| Preview: |
|
Static File Info |
|---|
General | |
|---|---|
| File type: | |
| Entropy (8bit): | 7.200680444429164 |
| TrID: |
|
| File name: | Denver Water COVID-19 Response _ City of Denver.pdf |
| File size: | 184034 |
| MD5: | a7bcca2fdf7e02497eea284f085340d9 |
| SHA1: | ecd2f0ba7b1e5f99a3fd7310e2c12c07f68fbe69 |
| SHA256: | 3495047623e0f3271699945ab0018b8b83c55128afb028ee3a07f8f6dfaa6f88 |
| SHA512: | b56234d8fc314fc06dcbb1a528d877f28c093049d0b75ad008ccf6dec13f24c0623e990516b38974d215299269f0a14d318b554119aa1704512aa90cba867a4f |
| SSDEEP: | 3072:uThlxnrmRF3OgYKqxLZHzOI1r45G9l1BR78kB6zbkVgH:w7rma/iIKkl1TByQgH |
| File Content Preview: | %PDF-1.4.%.....1 0 obj.<</Creator (Mozilla/5.0 \(Windows NT 10.0; Win64; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/91.0.4472.124 Safari/537.36)./Producer (Skia/PDF m91)./CreationDate (D:20210715194102+00'00')./ModDate (D:20210715194102+00'00') |
File Icon |
|---|
 | |
| Icon Hash: | 74ecccdcd4ccccf0 |
Static PDF Info |
|---|
General | |
|---|---|
| Header: | %PDF-1.4 |
| Total Entropy: | 7.200680 |
| Total Bytes: | 184034 |
| Stream Entropy: | 7.997100 |
| Stream Bytes: | 96849 |
| Entropy outside Streams: | 0.000000 |
| Bytes outside Streams: | 87185 |
| Number of EOF found: | 1 |
| Bytes after EOF: | |
Keywords Statistics |
|---|
| Name | Count |
|---|---|
| obj | 515 |
| endobj | 515 |
| stream | 19 |
| endstream | 19 |
| xref | 1 |
| trailer | 1 |
| startxref | 1 |
| /Page | 3 |
| /Encrypt | 0 |
| /ObjStm | 0 |
| /URI | 62 |
| /JS | 0 |
| /JavaScript | 0 |
| /AA | 0 |
| /OpenAction | 0 |
| /AcroForm | 0 |
| /JBIG2Decode | 0 |
| /RichMedia | 0 |
| /Launch | 0 |
| /EmbeddedFile | 0 |
Image Streams |
|---|
| ID | DHASH | MD5 | Preview |
|---|---|---|---|
| 8 | 0071e8c4c4e87100 | a055fa61a0d695c66d8caa7e6d9ad900 |  |
| 9 | 0000404040400000 | 986a9da71e7a861fc6ab81304c327543 |  |
| 19 | 00c8e96961696900 | b160bb3b3828c8866b85d80f3a11d344 |  |
| 20 | 0000402020480000 | 02511ced1155463264a7ac1bd75abb07 |  |
| 21 | 40b0f269f4b05024 | c38be4fb8c419f23c6879bc75fb03d0f |  |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library NodeNetwork Behavior |
|---|
Snort IDS Alerts |
|---|
| Timestamp | Protocol | SID | Message | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|---|---|---|
| 07/16/21-16:39:34.446596 | UDP | 254 | DNS SPOOF query response with TTL of 1 min. and no authority | 53 | 61585 | 8.8.8.8 | 192.168.2.5 |
Network Port Distribution |
|---|
TCP Packets |
|---|
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Jul 16, 2021 16:37:54.563673019 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.563782930 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.574337006 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.632883072 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.632922888 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.683486938 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.760986090 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.761034966 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.761084080 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.761126995 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.761164904 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.761204004 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.761244059 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.761245012 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.761281967 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.761321068 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.761348963 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.761362076 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.761444092 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.794651985 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.794708014 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.808716059 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.859635115 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.859675884 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.905827045 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.946624994 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.946672916 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.946710110 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.946748972 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.946780920 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.946788073 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.946825981 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.946865082 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.946898937 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.946902990 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.946907997 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.946950912 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:54.946957111 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.966577053 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.966634989 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:54.996223927 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.035443068 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.035478115 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.089905977 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.115581036 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.115642071 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.115701914 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.115777969 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.115828991 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.115859032 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.115886927 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.115904093 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.115959883 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.115986109 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.116018057 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.116071939 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.116100073 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.149511099 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.149564981 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.149588108 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.149614096 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.149848938 CEST | 49698 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.215538025 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.215578079 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.217256069 CEST | 443 | 49698 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.217410088 CEST | 49698 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.217679024 CEST | 49698 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.219233036 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.266560078 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.284976006 CEST | 443 | 49698 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.285005093 CEST | 443 | 49698 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.285028934 CEST | 443 | 49698 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.285051107 CEST | 443 | 49698 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.285067081 CEST | 49698 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.285072088 CEST | 443 | 49698 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.285101891 CEST | 49698 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.288471937 CEST | 49698 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.300756931 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.300878048 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.300904036 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.300926924 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.300951004 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.300972939 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.300971985 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.300998926 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.301003933 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.301018000 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.301039934 CEST | 443 | 49693 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.301063061 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.301079988 CEST | 49693 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.301534891 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.301562071 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.301585913 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.301608086 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.301630974 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.301645041 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.301654100 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.301661968 CEST | 49691 | 443 | 192.168.2.5 | 20.190.159.133 |
| Jul 16, 2021 16:37:55.301680088 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.301703930 CEST | 443 | 49691 | 20.190.159.133 | 192.168.2.5 |
UDP Packets |
|---|
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Jul 16, 2021 16:37:55.039163113 CEST | 62060 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:37:55.096473932 CEST | 53 | 62060 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.351190090 CEST | 61805 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:37:55.376394987 CEST | 54795 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:37:55.408370972 CEST | 53 | 61805 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:37:55.450992107 CEST | 53 | 54795 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:37:56.118479013 CEST | 49557 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:37:56.169323921 CEST | 53 | 49557 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:37:57.212472916 CEST | 61733 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:37:57.270217896 CEST | 53 | 61733 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:37:57.377159119 CEST | 65447 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:37:57.437058926 CEST | 53 | 65447 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:37:58.733304024 CEST | 52441 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:37:58.783385038 CEST | 53 | 52441 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:02.299870014 CEST | 62176 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:02.357059956 CEST | 53 | 62176 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:03.430176020 CEST | 59596 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:03.483392000 CEST | 53 | 59596 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:04.849473953 CEST | 65296 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:04.911283970 CEST | 53 | 65296 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:05.763493061 CEST | 63183 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:05.816344023 CEST | 53 | 63183 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:06.964401960 CEST | 60151 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:07.013595104 CEST | 53 | 60151 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:09.794413090 CEST | 56969 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:09.853399038 CEST | 53 | 56969 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:18.617497921 CEST | 55161 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:18.623197079 CEST | 54757 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:18.678122997 CEST | 53 | 55161 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:18.685128927 CEST | 53 | 54757 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:19.014889002 CEST | 49992 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:19.075594902 CEST | 53 | 49992 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:19.629040956 CEST | 54757 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:19.629137993 CEST | 55161 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:19.688615084 CEST | 53 | 55161 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:19.689198971 CEST | 53 | 54757 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:20.629060984 CEST | 55161 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:20.629239082 CEST | 54757 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:20.686562061 CEST | 53 | 55161 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:20.689446926 CEST | 53 | 54757 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:22.657263994 CEST | 54757 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:22.657480955 CEST | 55161 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:22.719620943 CEST | 53 | 54757 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:22.720057964 CEST | 53 | 55161 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:22.914541960 CEST | 60075 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:22.978446007 CEST | 53 | 60075 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:26.663877964 CEST | 55161 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:26.664091110 CEST | 54757 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:26.721256971 CEST | 53 | 55161 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:26.724165916 CEST | 53 | 54757 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:29.411173105 CEST | 55016 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:29.468643904 CEST | 53 | 55016 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:49.584013939 CEST | 64345 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:49.646605015 CEST | 53 | 64345 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:50.176019907 CEST | 57128 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:50.203455925 CEST | 54791 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:50.238343000 CEST | 53 | 57128 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:50.261755943 CEST | 53 | 54791 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:50.447545052 CEST | 50463 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:50.577629089 CEST | 53 | 50463 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:51.235857964 CEST | 50394 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:51.295650005 CEST | 53 | 50394 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:51.987586021 CEST | 58530 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:52.050453901 CEST | 53 | 58530 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:52.253871918 CEST | 53813 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:52.311578035 CEST | 53 | 53813 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:52.513147116 CEST | 63732 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:52.571238041 CEST | 53 | 63732 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:54.084181070 CEST | 57344 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:54.144682884 CEST | 53 | 57344 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:54.774385929 CEST | 54450 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:54.876348019 CEST | 53 | 54450 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:55.461843014 CEST | 59261 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:55.519419909 CEST | 53 | 59261 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:56.425928116 CEST | 57151 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:56.484380007 CEST | 53 | 57151 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:57.737401009 CEST | 59413 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:57.761878014 CEST | 60516 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:57.798954010 CEST | 53 | 59413 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:57.820727110 CEST | 53 | 60516 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:38:58.351763010 CEST | 51649 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:38:58.409540892 CEST | 53 | 51649 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:14.210187912 CEST | 65086 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:14.273256063 CEST | 53 | 65086 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:28.176273108 CEST | 61004 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:28.182219982 CEST | 56895 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:28.206144094 CEST | 62372 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:28.206688881 CEST | 61515 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:28.211425066 CEST | 56675 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:28.242168903 CEST | 53 | 61004 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:28.243238926 CEST | 53 | 56895 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:28.263897896 CEST | 53 | 61515 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:28.266405106 CEST | 53 | 62372 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:28.425654888 CEST | 53 | 56675 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:28.689229965 CEST | 57172 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:28.743415117 CEST | 55267 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:28.751277924 CEST | 53 | 57172 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:28.795110941 CEST | 53 | 55267 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:29.172324896 CEST | 50969 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:29.383783102 CEST | 53 | 50969 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:31.081058979 CEST | 64362 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:31.131093979 CEST | 53 | 64362 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:31.780503035 CEST | 54766 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:31.848975897 CEST | 53 | 54766 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:32.100406885 CEST | 61446 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:32.159926891 CEST | 53 | 61446 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:32.370102882 CEST | 57515 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:32.370744944 CEST | 58199 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:32.375431061 CEST | 65221 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:32.375648975 CEST | 61573 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:32.422811985 CEST | 53 | 58199 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:32.433067083 CEST | 53 | 57515 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:32.434685946 CEST | 53 | 61573 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:32.437314987 CEST | 53 | 65221 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:32.808172941 CEST | 56562 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:32.846796989 CEST | 53591 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:32.872862101 CEST | 53 | 56562 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:32.905783892 CEST | 53 | 53591 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:33.090624094 CEST | 63458 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:33.090857029 CEST | 50422 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:33.149096012 CEST | 53 | 50422 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:33.157545090 CEST | 53 | 63458 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:34.047305107 CEST | 61891 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:34.109493971 CEST | 53 | 61891 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:34.389240026 CEST | 61585 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:34.446595907 CEST | 53 | 61585 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:34.635565996 CEST | 65163 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:34.706017971 CEST | 53 | 65163 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:34.924534082 CEST | 58969 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:34.985310078 CEST | 53 | 58969 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:34.995759964 CEST | 53977 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:34.997960091 CEST | 57147 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:35.003062963 CEST | 52381 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:35.052839041 CEST | 53 | 53977 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:35.064451933 CEST | 53 | 52381 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:35.065136909 CEST | 53 | 57147 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:36.936861038 CEST | 49231 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:36.999236107 CEST | 53 | 49231 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:40.898339987 CEST | 53217 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:40.970885992 CEST | 53 | 53217 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:44.030108929 CEST | 52554 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:44.091275930 CEST | 53 | 52554 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:44.145564079 CEST | 49603 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:44.219053984 CEST | 53 | 49603 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:54.059966087 CEST | 64476 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:54.121916056 CEST | 53 | 64476 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:54.375201941 CEST | 49975 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:54.376835108 CEST | 57701 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:54.378264904 CEST | 60334 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:54.394750118 CEST | 64958 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:54.436579943 CEST | 53 | 60334 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:54.436907053 CEST | 53 | 49975 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:54.439102888 CEST | 53 | 57701 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:54.453921080 CEST | 53 | 64958 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:54.560816050 CEST | 58504 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:54.562454939 CEST | 64971 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:54.567157030 CEST | 58041 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:54.619858027 CEST | 53 | 64971 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:54.624531031 CEST | 53 | 58041 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:54.634404898 CEST | 53 | 58504 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:54.751992941 CEST | 57764 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:54.752229929 CEST | 57973 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:54.752520084 CEST | 63286 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:54.810050011 CEST | 53 | 63286 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:54.812299013 CEST | 53 | 57973 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:54.899667025 CEST | 53 | 57764 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:55.337188005 CEST | 52589 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:55.337450981 CEST | 54875 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:55.337601900 CEST | 49862 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:55.397944927 CEST | 53 | 52589 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:55.400913000 CEST | 53 | 54875 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:55.401282072 CEST | 53 | 49862 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:55.573102951 CEST | 50119 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:55.649837017 CEST | 53 | 50119 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:56.043036938 CEST | 60159 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:56.044368982 CEST | 49464 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:56.045636892 CEST | 64650 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:56.100162029 CEST | 53 | 60159 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:56.103178978 CEST | 53 | 64650 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:56.104259968 CEST | 53 | 49464 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:56.255655050 CEST | 52633 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:56.327815056 CEST | 53 | 52633 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:56.468259096 CEST | 56124 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:56.503506899 CEST | 55552 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:56.528738022 CEST | 53 | 56124 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:56.573539972 CEST | 53 | 55552 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:56.764148951 CEST | 60813 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:56.821301937 CEST | 53 | 60813 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:56.952749014 CEST | 50930 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:56.963886023 CEST | 51582 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:57.004833937 CEST | 53 | 50930 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:57.034529924 CEST | 53 | 51582 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:57.425084114 CEST | 56831 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:57.489547968 CEST | 53 | 56831 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:57.547463894 CEST | 56981 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:57.596494913 CEST | 53 | 56981 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:57.883198023 CEST | 63599 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:57.884098053 CEST | 61009 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:57.940542936 CEST | 53 | 63599 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:57.941457033 CEST | 53 | 61009 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:57.951903105 CEST | 57676 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:58.004822016 CEST | 50687 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:58.006069899 CEST | 53246 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:58.063721895 CEST | 53 | 50687 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:58.068471909 CEST | 53 | 53246 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:58.097107887 CEST | 53 | 57676 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:58.247283936 CEST | 60242 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:58.248061895 CEST | 49674 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:58.330265045 CEST | 53 | 49674 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:58.350034952 CEST | 53 | 60242 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:58.593508959 CEST | 50811 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:58.642673969 CEST | 64331 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:58.642741919 CEST | 53 | 50811 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:58.699923992 CEST | 53 | 64331 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:58.835752964 CEST | 56789 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:58.894931078 CEST | 53 | 56789 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:39:59.118799925 CEST | 63680 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:39:59.181302071 CEST | 53 | 63680 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:08.062321901 CEST | 59706 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:08.119538069 CEST | 53 | 59706 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:09.036859989 CEST | 55029 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:09.094033003 CEST | 53 | 55029 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:09.567296028 CEST | 51986 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:09.624427080 CEST | 53 | 51986 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:09.925345898 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:09.982497931 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:09.982567072 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:09.982605934 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:09.983700991 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:09.985027075 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:10.042529106 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:10.043040037 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:10.043282986 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:10.101074934 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:10.101099014 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:10.101850033 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:11.943944931 CEST | 64913 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:12.004009008 CEST | 53 | 64913 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:14.551315069 CEST | 58438 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:14.555058956 CEST | 49414 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:14.611517906 CEST | 53 | 58438 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:14.625035048 CEST | 53 | 49414 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:14.948591948 CEST | 61135 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:15.005613089 CEST | 53 | 61135 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:15.514595985 CEST | 49373 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:15.578571081 CEST | 53 | 49373 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:16.126163960 CEST | 59258 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:16.187036037 CEST | 53 | 59258 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:16.612281084 CEST | 52434 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:16.670679092 CEST | 53 | 52434 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:21.282321930 CEST | 56456 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:21.345416069 CEST | 53 | 56456 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:25.045171976 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:25.127806902 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:26.354278088 CEST | 53715 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:26.411962032 CEST | 53 | 53715 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:26.735121965 CEST | 59658 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:26.800812960 CEST | 53 | 59658 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:26.943259954 CEST | 56873 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:26.995281935 CEST | 53 | 56873 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:27.191912889 CEST | 51402 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:27.244569063 CEST | 53 | 51402 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:32.235372066 CEST | 61487 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:32.238065958 CEST | 59026 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:32.295815945 CEST | 53 | 61487 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:32.302165031 CEST | 53 | 59026 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:32.565220118 CEST | 58616 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:32.565435886 CEST | 49232 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:32.623236895 CEST | 55390 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:32.626686096 CEST | 53 | 49232 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:32.628416061 CEST | 53 | 58616 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:32.641225100 CEST | 61057 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:32.644010067 CEST | 62975 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:32.682895899 CEST | 53 | 55390 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:32.707768917 CEST | 53 | 62975 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:32.725491047 CEST | 62623 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:32.786720037 CEST | 53 | 62623 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:32.791412115 CEST | 53 | 61057 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.080985069 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:34.082879066 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:34.138539076 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.138555050 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.139379025 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:34.140338898 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.140352964 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.140692949 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:34.173258066 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:34.179234982 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:34.230724096 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.230742931 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.231076956 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:34.235568047 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.235593081 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.235605001 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.235935926 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:34.237266064 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:34.237822056 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:34.237978935 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:34.270021915 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:34.300683022 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.301181078 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.302457094 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:34.311898947 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.311958075 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.312829971 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.318963051 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:34.331645966 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:40:34.331913948 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:34.505635023 CEST | 64199 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:34.568871975 CEST | 53 | 64199 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:38.207717896 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:38.265021086 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:38.265052080 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:38.266915083 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:38.320671082 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:38.383215904 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:40:38.383450985 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:40:38.388120890 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:38.534806013 CEST | 64289 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:38.631874084 CEST | 53 | 64289 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:51.348125935 CEST | 63509 | 53 | 192.168.2.5 | 8.8.8.8 |
| Jul 16, 2021 16:40:51.405369043 CEST | 53 | 63509 | 8.8.8.8 | 192.168.2.5 |
| Jul 16, 2021 16:40:53.210423946 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:40:53.293338060 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:40:53.323440075 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:40:53.397885084 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:41:09.811362982 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:41:09.868936062 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:41:09.868968010 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:41:09.869493008 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:41:09.881169081 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:41:09.883965015 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:41:09.938549042 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:41:09.938570976 CEST | 443 | 51988 | 108.177.15.154 | 192.168.2.5 |
| Jul 16, 2021 16:41:09.939054966 CEST | 51988 | 443 | 192.168.2.5 | 108.177.15.154 |
| Jul 16, 2021 16:41:09.945082903 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:41:09.945117950 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:41:09.945597887 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:41:09.949244976 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
| Jul 16, 2021 16:41:10.011253119 CEST | 443 | 62627 | 142.250.185.131 | 192.168.2.5 |
| Jul 16, 2021 16:41:10.037678957 CEST | 62627 | 443 | 192.168.2.5 | 142.250.185.131 |
DNS Queries |
|---|
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class |
|---|---|---|---|---|---|---|---|
| Jul 16, 2021 16:39:14.210187912 CEST | 192.168.2.5 | 8.8.8.8 | 0x5e90 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:28.211425066 CEST | 192.168.2.5 | 8.8.8.8 | 0xa0ea | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:29.172324896 CEST | 192.168.2.5 | 8.8.8.8 | 0x7a5e | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:31.081058979 CEST | 192.168.2.5 | 8.8.8.8 | 0xc185 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:32.100406885 CEST | 192.168.2.5 | 8.8.8.8 | 0xdd60 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:32.370102882 CEST | 192.168.2.5 | 8.8.8.8 | 0x75dc | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:32.370744944 CEST | 192.168.2.5 | 8.8.8.8 | 0xa71a | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:32.375431061 CEST | 192.168.2.5 | 8.8.8.8 | 0x2071 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:32.375648975 CEST | 192.168.2.5 | 8.8.8.8 | 0xfcd | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:32.808172941 CEST | 192.168.2.5 | 8.8.8.8 | 0xd5ef | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:33.090857029 CEST | 192.168.2.5 | 8.8.8.8 | 0x9f18 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:34.047305107 CEST | 192.168.2.5 | 8.8.8.8 | 0xed64 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:34.635565996 CEST | 192.168.2.5 | 8.8.8.8 | 0xdbef | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:34.924534082 CEST | 192.168.2.5 | 8.8.8.8 | 0x1237 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:34.995759964 CEST | 192.168.2.5 | 8.8.8.8 | 0xc1c0 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:34.997960091 CEST | 192.168.2.5 | 8.8.8.8 | 0xeb89 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:35.003062963 CEST | 192.168.2.5 | 8.8.8.8 | 0x8074 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:44.030108929 CEST | 192.168.2.5 | 8.8.8.8 | 0xb467 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:54.059966087 CEST | 192.168.2.5 | 8.8.8.8 | 0xaa25 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:54.375201941 CEST | 192.168.2.5 | 8.8.8.8 | 0x7ba9 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:54.376835108 CEST | 192.168.2.5 | 8.8.8.8 | 0x92d8 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:54.394750118 CEST | 192.168.2.5 | 8.8.8.8 | 0x8ce2 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:54.560816050 CEST | 192.168.2.5 | 8.8.8.8 | 0x1e | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:54.562454939 CEST | 192.168.2.5 | 8.8.8.8 | 0x9605 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:54.751992941 CEST | 192.168.2.5 | 8.8.8.8 | 0xb58d | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:54.752229929 CEST | 192.168.2.5 | 8.8.8.8 | 0xcc30 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:55.337188005 CEST | 192.168.2.5 | 8.8.8.8 | 0x8a6f | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:55.337450981 CEST | 192.168.2.5 | 8.8.8.8 | 0xcaba | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:55.337601900 CEST | 192.168.2.5 | 8.8.8.8 | 0x80a1 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:56.043036938 CEST | 192.168.2.5 | 8.8.8.8 | 0xcda5 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:56.044368982 CEST | 192.168.2.5 | 8.8.8.8 | 0xa75e | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:56.255655050 CEST | 192.168.2.5 | 8.8.8.8 | 0x2df8 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:56.503506899 CEST | 192.168.2.5 | 8.8.8.8 | 0x7fa4 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:56.764148951 CEST | 192.168.2.5 | 8.8.8.8 | 0xd14d | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:56.963886023 CEST | 192.168.2.5 | 8.8.8.8 | 0x1d5c | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:57.425084114 CEST | 192.168.2.5 | 8.8.8.8 | 0xa637 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:57.547463894 CEST | 192.168.2.5 | 8.8.8.8 | 0xee9a | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:57.883198023 CEST | 192.168.2.5 | 8.8.8.8 | 0x3c80 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:57.951903105 CEST | 192.168.2.5 | 8.8.8.8 | 0x64e7 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:58.004822016 CEST | 192.168.2.5 | 8.8.8.8 | 0x36af | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:58.006069899 CEST | 192.168.2.5 | 8.8.8.8 | 0xcb86 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:58.247283936 CEST | 192.168.2.5 | 8.8.8.8 | 0x6d9d | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:58.248061895 CEST | 192.168.2.5 | 8.8.8.8 | 0x8f18 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:58.593508959 CEST | 192.168.2.5 | 8.8.8.8 | 0x201a | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:58.642673969 CEST | 192.168.2.5 | 8.8.8.8 | 0xe3b4 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:58.835752964 CEST | 192.168.2.5 | 8.8.8.8 | 0x4098 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:39:59.118799925 CEST | 192.168.2.5 | 8.8.8.8 | 0x5bce | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:08.062321901 CEST | 192.168.2.5 | 8.8.8.8 | 0x1e10 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:09.036859989 CEST | 192.168.2.5 | 8.8.8.8 | 0x8f78 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:09.567296028 CEST | 192.168.2.5 | 8.8.8.8 | 0xd815 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:11.943944931 CEST | 192.168.2.5 | 8.8.8.8 | 0xea0b | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:14.551315069 CEST | 192.168.2.5 | 8.8.8.8 | 0x2b94 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:14.555058956 CEST | 192.168.2.5 | 8.8.8.8 | 0x318 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:14.948591948 CEST | 192.168.2.5 | 8.8.8.8 | 0xaaaa | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:15.514595985 CEST | 192.168.2.5 | 8.8.8.8 | 0x7554 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:16.126163960 CEST | 192.168.2.5 | 8.8.8.8 | 0x387 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:16.612281084 CEST | 192.168.2.5 | 8.8.8.8 | 0x2b6a | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:21.282321930 CEST | 192.168.2.5 | 8.8.8.8 | 0xb134 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:32.235372066 CEST | 192.168.2.5 | 8.8.8.8 | 0x4c28 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:32.238065958 CEST | 192.168.2.5 | 8.8.8.8 | 0xd460 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:32.565220118 CEST | 192.168.2.5 | 8.8.8.8 | 0xce3 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:32.623236895 CEST | 192.168.2.5 | 8.8.8.8 | 0xdb61 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:32.641225100 CEST | 192.168.2.5 | 8.8.8.8 | 0x12ef | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:32.644010067 CEST | 192.168.2.5 | 8.8.8.8 | 0x53a7 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:32.725491047 CEST | 192.168.2.5 | 8.8.8.8 | 0x9d1 | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:34.505635023 CEST | 192.168.2.5 | 8.8.8.8 | 0x9d6e | Standard query (0) | A (IP address) | IN (0x0001) | |
| Jul 16, 2021 16:40:38.534806013 CEST | 192.168.2.5 | 8.8.8.8 | 0xa48e | Standard query (0) | A (IP address) | IN (0x0001) |
DNS Answers |
|---|
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class |
|---|---|---|---|---|---|---|---|---|---|
| Jul 16, 2021 16:39:14.273256063 CEST | 8.8.8.8 | 192.168.2.5 | 0x5e90 | No error (0) | 23.1.35.132 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:14.273256063 CEST | 8.8.8.8 | 192.168.2.5 | 0x5e90 | No error (0) | 184.31.10.133 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:14.273256063 CEST | 8.8.8.8 | 192.168.2.5 | 0x5e90 | No error (0) | 104.109.11.129 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:14.273256063 CEST | 8.8.8.8 | 192.168.2.5 | 0x5e90 | No error (0) | 104.109.10.129 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:14.273256063 CEST | 8.8.8.8 | 192.168.2.5 | 0x5e90 | No error (0) | 23.1.106.133 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:14.273256063 CEST | 8.8.8.8 | 192.168.2.5 | 0x5e90 | No error (0) | 184.31.3.130 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:14.273256063 CEST | 8.8.8.8 | 192.168.2.5 | 0x5e90 | No error (0) | 23.1.99.130 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:14.273256063 CEST | 8.8.8.8 | 192.168.2.5 | 0x5e90 | No error (0) | 184.25.179.132 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:28.425654888 CEST | 8.8.8.8 | 192.168.2.5 | 0xa0ea | No error (0) | na136.lightning.force.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:28.425654888 CEST | 8.8.8.8 | 192.168.2.5 | 0xa0ea | No error (0) | na136.force.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:28.425654888 CEST | 8.8.8.8 | 192.168.2.5 | 0xa0ea | No error (0) | na136-ph2.force.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:28.425654888 CEST | 8.8.8.8 | 192.168.2.5 | 0xa0ea | No error (0) | na136-ph2.ph2.r.force.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:28.425654888 CEST | 8.8.8.8 | 192.168.2.5 | 0xa0ea | No error (0) | 13.110.37.182 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:28.425654888 CEST | 8.8.8.8 | 192.168.2.5 | 0xa0ea | No error (0) | 13.110.36.54 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:28.425654888 CEST | 8.8.8.8 | 192.168.2.5 | 0xa0ea | No error (0) | 13.110.39.54 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:29.383783102 CEST | 8.8.8.8 | 192.168.2.5 | 0x7a5e | No error (0) | na136.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:29.383783102 CEST | 8.8.8.8 | 192.168.2.5 | 0x7a5e | No error (0) | na136-ph2.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:29.383783102 CEST | 8.8.8.8 | 192.168.2.5 | 0x7a5e | No error (0) | na136-ph2.ph2.r.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:29.383783102 CEST | 8.8.8.8 | 192.168.2.5 | 0x7a5e | No error (0) | 13.110.39.181 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:29.383783102 CEST | 8.8.8.8 | 192.168.2.5 | 0x7a5e | No error (0) | 13.110.36.53 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:29.383783102 CEST | 8.8.8.8 | 192.168.2.5 | 0x7a5e | No error (0) | 13.110.37.181 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:31.131093979 CEST | 8.8.8.8 | 192.168.2.5 | 0xc185 | No error (0) | login.l2.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:31.131093979 CEST | 8.8.8.8 | 192.168.2.5 | 0xc185 | No error (0) | 85.222.155.195 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:31.131093979 CEST | 8.8.8.8 | 192.168.2.5 | 0xc185 | No error (0) | 85.222.153.67 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:31.131093979 CEST | 8.8.8.8 | 192.168.2.5 | 0xc185 | No error (0) | 85.222.155.67 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.159926891 CEST | 8.8.8.8 | 192.168.2.5 | 0xdd60 | No error (0) | c.salesforce.com.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.422811985 CEST | 8.8.8.8 | 192.168.2.5 | 0xa71a | No error (0) | 34.192.141.216 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.422811985 CEST | 8.8.8.8 | 192.168.2.5 | 0xa71a | No error (0) | 52.1.220.4 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.433067083 CEST | 8.8.8.8 | 192.168.2.5 | 0x75dc | No error (0) | 151.101.0.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.433067083 CEST | 8.8.8.8 | 192.168.2.5 | 0x75dc | No error (0) | 151.101.64.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.433067083 CEST | 8.8.8.8 | 192.168.2.5 | 0x75dc | No error (0) | 151.101.192.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.433067083 CEST | 8.8.8.8 | 192.168.2.5 | 0x75dc | No error (0) | 151.101.128.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.434685946 CEST | 8.8.8.8 | 192.168.2.5 | 0xfcd | No error (0) | www.salesforce.com.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.437314987 CEST | 8.8.8.8 | 192.168.2.5 | 0x2071 | No error (0) | a.sfdcstatic.com.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.872862101 CEST | 8.8.8.8 | 192.168.2.5 | 0xd5ef | No error (0) | na136.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.872862101 CEST | 8.8.8.8 | 192.168.2.5 | 0xd5ef | No error (0) | na136-ph2.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.872862101 CEST | 8.8.8.8 | 192.168.2.5 | 0xd5ef | No error (0) | na136-ph2.ph2.r.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.872862101 CEST | 8.8.8.8 | 192.168.2.5 | 0xd5ef | No error (0) | 13.110.39.181 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.872862101 CEST | 8.8.8.8 | 192.168.2.5 | 0xd5ef | No error (0) | 13.110.36.53 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:32.872862101 CEST | 8.8.8.8 | 192.168.2.5 | 0xd5ef | No error (0) | 13.110.37.181 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:33.149096012 CEST | 8.8.8.8 | 192.168.2.5 | 0x9f18 | No error (0) | 104.20.184.68 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:33.149096012 CEST | 8.8.8.8 | 192.168.2.5 | 0x9f18 | No error (0) | 104.20.185.68 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.109493971 CEST | 8.8.8.8 | 192.168.2.5 | 0xed64 | No error (0) | gslb-2.demdex.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.109493971 CEST | 8.8.8.8 | 192.168.2.5 | 0xed64 | No error (0) | edge-irl1.demdex.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.109493971 CEST | 8.8.8.8 | 192.168.2.5 | 0xed64 | No error (0) | dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.109493971 CEST | 8.8.8.8 | 192.168.2.5 | 0xed64 | No error (0) | 52.211.113.33 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.109493971 CEST | 8.8.8.8 | 192.168.2.5 | 0xed64 | No error (0) | 63.32.159.255 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.109493971 CEST | 8.8.8.8 | 192.168.2.5 | 0xed64 | No error (0) | 52.211.62.226 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.109493971 CEST | 8.8.8.8 | 192.168.2.5 | 0xed64 | No error (0) | 63.32.153.45 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.109493971 CEST | 8.8.8.8 | 192.168.2.5 | 0xed64 | No error (0) | 54.171.168.191 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.109493971 CEST | 8.8.8.8 | 192.168.2.5 | 0xed64 | No error (0) | 52.214.168.199 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.109493971 CEST | 8.8.8.8 | 192.168.2.5 | 0xed64 | No error (0) | 52.16.73.168 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.109493971 CEST | 8.8.8.8 | 192.168.2.5 | 0xed64 | No error (0) | 52.17.54.18 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.706017971 CEST | 8.8.8.8 | 192.168.2.5 | 0xdbef | No error (0) | googlehosted.l.googleusercontent.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.706017971 CEST | 8.8.8.8 | 192.168.2.5 | 0xdbef | No error (0) | 142.250.186.33 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:34.985310078 CEST | 8.8.8.8 | 192.168.2.5 | 0x1237 | No error (0) | www.salesforce.com.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.052839041 CEST | 8.8.8.8 | 192.168.2.5 | 0xc1c0 | No error (0) | gslb-2.demdex.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.052839041 CEST | 8.8.8.8 | 192.168.2.5 | 0xc1c0 | No error (0) | edge-irl1.demdex.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.052839041 CEST | 8.8.8.8 | 192.168.2.5 | 0xc1c0 | No error (0) | dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.052839041 CEST | 8.8.8.8 | 192.168.2.5 | 0xc1c0 | No error (0) | 54.76.54.153 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.052839041 CEST | 8.8.8.8 | 192.168.2.5 | 0xc1c0 | No error (0) | 34.243.30.18 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.052839041 CEST | 8.8.8.8 | 192.168.2.5 | 0xc1c0 | No error (0) | 52.16.73.168 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.052839041 CEST | 8.8.8.8 | 192.168.2.5 | 0xc1c0 | No error (0) | 3.250.252.43 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.052839041 CEST | 8.8.8.8 | 192.168.2.5 | 0xc1c0 | No error (0) | 52.212.101.97 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.052839041 CEST | 8.8.8.8 | 192.168.2.5 | 0xc1c0 | No error (0) | 34.251.106.150 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.052839041 CEST | 8.8.8.8 | 192.168.2.5 | 0xc1c0 | No error (0) | 34.240.90.211 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.052839041 CEST | 8.8.8.8 | 192.168.2.5 | 0xc1c0 | No error (0) | 54.154.124.189 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.064451933 CEST | 8.8.8.8 | 192.168.2.5 | 0x8074 | No error (0) | cm.everesttech.net.akadns.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.065136909 CEST | 8.8.8.8 | 192.168.2.5 | 0xeb89 | No error (0) | partners.salesforce.com.ssl.d2.sc.omtrdc.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.065136909 CEST | 8.8.8.8 | 192.168.2.5 | 0xeb89 | No error (0) | 15.236.176.210 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.065136909 CEST | 8.8.8.8 | 192.168.2.5 | 0xeb89 | No error (0) | 13.36.218.177 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:35.065136909 CEST | 8.8.8.8 | 192.168.2.5 | 0xeb89 | No error (0) | 15.188.95.229 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:44.091275930 CEST | 8.8.8.8 | 192.168.2.5 | 0xb467 | No error (0) | na136.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:44.091275930 CEST | 8.8.8.8 | 192.168.2.5 | 0xb467 | No error (0) | na136-ph2.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:44.091275930 CEST | 8.8.8.8 | 192.168.2.5 | 0xb467 | No error (0) | na136-ph2.ph2.r.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:44.091275930 CEST | 8.8.8.8 | 192.168.2.5 | 0xb467 | No error (0) | 13.110.39.181 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:44.091275930 CEST | 8.8.8.8 | 192.168.2.5 | 0xb467 | No error (0) | 13.110.36.53 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:44.091275930 CEST | 8.8.8.8 | 192.168.2.5 | 0xb467 | No error (0) | 13.110.37.181 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.121916056 CEST | 8.8.8.8 | 192.168.2.5 | 0xaa25 | No error (0) | www.salesforce.com.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.436907053 CEST | 8.8.8.8 | 192.168.2.5 | 0x7ba9 | No error (0) | a.sfdcstatic.com.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.439102888 CEST | 8.8.8.8 | 192.168.2.5 | 0x92d8 | No error (0) | 99.86.162.22 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.439102888 CEST | 8.8.8.8 | 192.168.2.5 | 0x92d8 | No error (0) | 99.86.162.29 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.439102888 CEST | 8.8.8.8 | 192.168.2.5 | 0x92d8 | No error (0) | 99.86.162.95 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.439102888 CEST | 8.8.8.8 | 192.168.2.5 | 0x92d8 | No error (0) | 99.86.162.70 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.453921080 CEST | 8.8.8.8 | 192.168.2.5 | 0x8ce2 | No error (0) | cdn.o6.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.619858027 CEST | 8.8.8.8 | 192.168.2.5 | 0x9605 | No error (0) | 151.101.192.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.619858027 CEST | 8.8.8.8 | 192.168.2.5 | 0x9605 | No error (0) | 151.101.64.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.619858027 CEST | 8.8.8.8 | 192.168.2.5 | 0x9605 | No error (0) | 151.101.128.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.619858027 CEST | 8.8.8.8 | 192.168.2.5 | 0x9605 | No error (0) | 151.101.0.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.634404898 CEST | 8.8.8.8 | 192.168.2.5 | 0x1e | No error (0) | 52.1.220.4 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.634404898 CEST | 8.8.8.8 | 192.168.2.5 | 0x1e | No error (0) | 34.192.141.216 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.812299013 CEST | 8.8.8.8 | 192.168.2.5 | 0xcc30 | No error (0) | wildcard.cdn.optimizely.com.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.899667025 CEST | 8.8.8.8 | 192.168.2.5 | 0xb58d | No error (0) | na128.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.899667025 CEST | 8.8.8.8 | 192.168.2.5 | 0xb58d | No error (0) | na128-ia5.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.899667025 CEST | 8.8.8.8 | 192.168.2.5 | 0xb58d | No error (0) | na128-ia5.ia5.r.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.899667025 CEST | 8.8.8.8 | 192.168.2.5 | 0xb58d | No error (0) | 13.110.46.75 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.899667025 CEST | 8.8.8.8 | 192.168.2.5 | 0xb58d | No error (0) | 13.110.43.75 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:54.899667025 CEST | 8.8.8.8 | 192.168.2.5 | 0xb58d | No error (0) | 13.110.44.75 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:55.397944927 CEST | 8.8.8.8 | 192.168.2.5 | 0x8a6f | No error (0) | d.sni.global.fastly.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:55.400913000 CEST | 8.8.8.8 | 192.168.2.5 | 0xcaba | No error (0) | 104.20.185.68 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:55.400913000 CEST | 8.8.8.8 | 192.168.2.5 | 0xcaba | No error (0) | 104.20.184.68 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:55.401282072 CEST | 8.8.8.8 | 192.168.2.5 | 0x80a1 | No error (0) | location.force.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:55.401282072 CEST | 8.8.8.8 | 192.168.2.5 | 0x80a1 | No error (0) | location.l.force.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:55.401282072 CEST | 8.8.8.8 | 192.168.2.5 | 0x80a1 | No error (0) | 161.71.8.169 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:55.401282072 CEST | 8.8.8.8 | 192.168.2.5 | 0x80a1 | No error (0) | 161.71.11.44 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:55.401282072 CEST | 8.8.8.8 | 192.168.2.5 | 0x80a1 | No error (0) | 161.71.8.44 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:55.401282072 CEST | 8.8.8.8 | 192.168.2.5 | 0x80a1 | No error (0) | 161.71.10.172 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:55.401282072 CEST | 8.8.8.8 | 192.168.2.5 | 0x80a1 | No error (0) | 161.71.10.169 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:55.401282072 CEST | 8.8.8.8 | 192.168.2.5 | 0x80a1 | No error (0) | 161.71.8.41 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.100162029 CEST | 8.8.8.8 | 192.168.2.5 | 0xcda5 | No error (0) | 151.101.0.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.100162029 CEST | 8.8.8.8 | 192.168.2.5 | 0xcda5 | No error (0) | 151.101.64.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.100162029 CEST | 8.8.8.8 | 192.168.2.5 | 0xcda5 | No error (0) | 151.101.192.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.100162029 CEST | 8.8.8.8 | 192.168.2.5 | 0xcda5 | No error (0) | 151.101.128.114 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.104259968 CEST | 8.8.8.8 | 192.168.2.5 | 0xa75e | No error (0) | d2pj9rkatqbt38.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.104259968 CEST | 8.8.8.8 | 192.168.2.5 | 0xa75e | No error (0) | 65.9.66.106 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.104259968 CEST | 8.8.8.8 | 192.168.2.5 | 0xa75e | No error (0) | 65.9.66.105 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.104259968 CEST | 8.8.8.8 | 192.168.2.5 | 0xa75e | No error (0) | 65.9.66.8 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.104259968 CEST | 8.8.8.8 | 192.168.2.5 | 0xa75e | No error (0) | 65.9.66.54 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.327815056 CEST | 8.8.8.8 | 192.168.2.5 | 0x2df8 | No error (0) | wildcard.cdn.optimizely.com.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.573539972 CEST | 8.8.8.8 | 192.168.2.5 | 0x7fa4 | No error (0) | ip46.go-mpulse.net.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.821301937 CEST | 8.8.8.8 | 192.168.2.5 | 0xd14d | No error (0) | 52.1.220.4 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:56.821301937 CEST | 8.8.8.8 | 192.168.2.5 | 0xd14d | No error (0) | 34.192.141.216 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.034529924 CEST | 8.8.8.8 | 192.168.2.5 | 0x1d5c | No error (0) | location.force.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.034529924 CEST | 8.8.8.8 | 192.168.2.5 | 0x1d5c | No error (0) | location.l.force.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.034529924 CEST | 8.8.8.8 | 192.168.2.5 | 0x1d5c | No error (0) | 161.71.8.169 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.034529924 CEST | 8.8.8.8 | 192.168.2.5 | 0x1d5c | No error (0) | 161.71.11.44 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.034529924 CEST | 8.8.8.8 | 192.168.2.5 | 0x1d5c | No error (0) | 161.71.8.44 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.034529924 CEST | 8.8.8.8 | 192.168.2.5 | 0x1d5c | No error (0) | 161.71.10.172 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.034529924 CEST | 8.8.8.8 | 192.168.2.5 | 0x1d5c | No error (0) | 161.71.10.169 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.034529924 CEST | 8.8.8.8 | 192.168.2.5 | 0x1d5c | No error (0) | 161.71.8.41 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.489547968 CEST | 8.8.8.8 | 192.168.2.5 | 0xa637 | No error (0) | wildcard46.go-mpulse.net.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.596494913 CEST | 8.8.8.8 | 192.168.2.5 | 0xee9a | No error (0) | stats.l.doubleclick.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.596494913 CEST | 8.8.8.8 | 192.168.2.5 | 0xee9a | No error (0) | 108.177.15.154 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.596494913 CEST | 8.8.8.8 | 192.168.2.5 | 0xee9a | No error (0) | 108.177.15.155 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.596494913 CEST | 8.8.8.8 | 192.168.2.5 | 0xee9a | No error (0) | 108.177.15.156 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.596494913 CEST | 8.8.8.8 | 192.168.2.5 | 0xee9a | No error (0) | 108.177.15.157 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:57.940542936 CEST | 8.8.8.8 | 192.168.2.5 | 0x3c80 | No error (0) | 142.250.185.131 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.063721895 CEST | 8.8.8.8 | 192.168.2.5 | 0x36af | No error (0) | trial-eum.cname.clienttons.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.063721895 CEST | 8.8.8.8 | 192.168.2.5 | 0x36af | No error (0) | a1024.dscg.akamai.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.068471909 CEST | 8.8.8.8 | 192.168.2.5 | 0xcb86 | No error (0) | a248.b.akamai.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.097107887 CEST | 8.8.8.8 | 192.168.2.5 | 0x64e7 | No error (0) | la2-c1-ia4.salesforceliveagent.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.097107887 CEST | 8.8.8.8 | 192.168.2.5 | 0x64e7 | No error (0) | la2-c1-ia4.ia4.r.salesforceliveagent.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.097107887 CEST | 8.8.8.8 | 192.168.2.5 | 0x64e7 | No error (0) | 13.109.191.111 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.097107887 CEST | 8.8.8.8 | 192.168.2.5 | 0x64e7 | No error (0) | 13.110.57.111 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.097107887 CEST | 8.8.8.8 | 192.168.2.5 | 0x64e7 | No error (0) | 13.110.56.111 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.330265045 CEST | 8.8.8.8 | 192.168.2.5 | 0x8f18 | No error (0) | 84.17.52.51_s-80.67.82.83_ts-1626446398.cname.clienttons.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.330265045 CEST | 8.8.8.8 | 192.168.2.5 | 0x8f18 | No error (0) | a1024.dscg.akamai.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.350034952 CEST | 8.8.8.8 | 192.168.2.5 | 0x6d9d | No error (0) | kqitim5n3zwnuyhrti7a-pinofr-89940bd62.ipv4-only.cname.clienttons.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.350034952 CEST | 8.8.8.8 | 192.168.2.5 | 0x6d9d | No error (0) | a248.b.akamai.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.642741919 CEST | 8.8.8.8 | 192.168.2.5 | 0x201a | No error (0) | p13nlog-1106815646.us-east-1.elb.amazonaws.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.642741919 CEST | 8.8.8.8 | 192.168.2.5 | 0x201a | No error (0) | 54.225.136.92 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.642741919 CEST | 8.8.8.8 | 192.168.2.5 | 0x201a | No error (0) | 54.235.253.93 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.642741919 CEST | 8.8.8.8 | 192.168.2.5 | 0x201a | No error (0) | 34.201.191.168 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.642741919 CEST | 8.8.8.8 | 192.168.2.5 | 0x201a | No error (0) | 52.55.122.255 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.642741919 CEST | 8.8.8.8 | 192.168.2.5 | 0x201a | No error (0) | 52.55.235.182 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.642741919 CEST | 8.8.8.8 | 192.168.2.5 | 0x201a | No error (0) | 34.232.172.2 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.642741919 CEST | 8.8.8.8 | 192.168.2.5 | 0x201a | No error (0) | 3.224.117.145 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.642741919 CEST | 8.8.8.8 | 192.168.2.5 | 0x201a | No error (0) | 52.44.89.131 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.699923992 CEST | 8.8.8.8 | 192.168.2.5 | 0xe3b4 | No error (0) | la2-c1-ia5.salesforceliveagent.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.699923992 CEST | 8.8.8.8 | 192.168.2.5 | 0xe3b4 | No error (0) | la2-c1-ia5.ia5.r.salesforceliveagent.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.699923992 CEST | 8.8.8.8 | 192.168.2.5 | 0xe3b4 | No error (0) | 13.110.41.111 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.699923992 CEST | 8.8.8.8 | 192.168.2.5 | 0xe3b4 | No error (0) | 13.110.66.111 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.699923992 CEST | 8.8.8.8 | 192.168.2.5 | 0xe3b4 | No error (0) | 13.110.43.111 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:58.894931078 CEST | 8.8.8.8 | 192.168.2.5 | 0x4098 | No error (0) | wildcard46.akstat.io.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:59.181302071 CEST | 8.8.8.8 | 192.168.2.5 | 0x5bce | No error (0) | d2pj9rkatqbt38.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:39:59.181302071 CEST | 8.8.8.8 | 192.168.2.5 | 0x5bce | No error (0) | 65.9.66.106 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:59.181302071 CEST | 8.8.8.8 | 192.168.2.5 | 0x5bce | No error (0) | 65.9.66.8 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:59.181302071 CEST | 8.8.8.8 | 192.168.2.5 | 0x5bce | No error (0) | 65.9.66.54 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:39:59.181302071 CEST | 8.8.8.8 | 192.168.2.5 | 0x5bce | No error (0) | 65.9.66.105 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:08.119538069 CEST | 8.8.8.8 | 192.168.2.5 | 0x1e10 | No error (0) | test.l2.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:08.119538069 CEST | 8.8.8.8 | 192.168.2.5 | 0x1e10 | No error (0) | 85.222.152.194 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:08.119538069 CEST | 8.8.8.8 | 192.168.2.5 | 0x1e10 | No error (0) | 85.222.154.194 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:08.119538069 CEST | 8.8.8.8 | 192.168.2.5 | 0x1e10 | No error (0) | 85.222.155.194 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:09.094033003 CEST | 8.8.8.8 | 192.168.2.5 | 0x8f78 | No error (0) | www.salesforce.com.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:09.624427080 CEST | 8.8.8.8 | 192.168.2.5 | 0xd815 | No error (0) | test.l2.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:09.624427080 CEST | 8.8.8.8 | 192.168.2.5 | 0xd815 | No error (0) | 85.222.153.66 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:09.624427080 CEST | 8.8.8.8 | 192.168.2.5 | 0xd815 | No error (0) | 85.222.155.194 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:09.624427080 CEST | 8.8.8.8 | 192.168.2.5 | 0xd815 | No error (0) | 85.222.155.66 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:12.004009008 CEST | 8.8.8.8 | 192.168.2.5 | 0xea0b | No error (0) | 54.205.5.87 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:12.004009008 CEST | 8.8.8.8 | 192.168.2.5 | 0xea0b | No error (0) | 52.205.54.201 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:14.611517906 CEST | 8.8.8.8 | 192.168.2.5 | 0x2b94 | No error (0) | p.shared.global.fastly.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:14.625035048 CEST | 8.8.8.8 | 192.168.2.5 | 0x318 | No error (0) | c.sfdcstatic.com.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:15.005613089 CEST | 8.8.8.8 | 192.168.2.5 | 0xaaaa | No error (0) | p.shared.global.fastly.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:15.578571081 CEST | 8.8.8.8 | 192.168.2.5 | 0x7554 | No error (0) | cs6.cn.wpc.omegacdn.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:15.578571081 CEST | 8.8.8.8 | 192.168.2.5 | 0x7554 | No error (0) | cs6.wpc.apr-17a6a-2.edgecastdns.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:15.578571081 CEST | 8.8.8.8 | 192.168.2.5 | 0x7554 | No error (0) | 93.184.221.26 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:16.187036037 CEST | 8.8.8.8 | 192.168.2.5 | 0x387 | No error (0) | 34.234.32.98 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:16.187036037 CEST | 8.8.8.8 | 192.168.2.5 | 0x387 | No error (0) | 44.194.2.86 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:16.670679092 CEST | 8.8.8.8 | 192.168.2.5 | 0x2b6a | No error (0) | 54.205.5.87 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:16.670679092 CEST | 8.8.8.8 | 192.168.2.5 | 0x2b6a | No error (0) | 52.205.54.201 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:21.345416069 CEST | 8.8.8.8 | 192.168.2.5 | 0xb134 | No error (0) | a9010d017688211ea9afe0620acb249f-596514373.us-east-1.elb.amazonaws.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:21.345416069 CEST | 8.8.8.8 | 192.168.2.5 | 0xb134 | No error (0) | 3.227.80.201 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:21.345416069 CEST | 8.8.8.8 | 192.168.2.5 | 0xb134 | No error (0) | 3.212.116.77 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:21.345416069 CEST | 8.8.8.8 | 192.168.2.5 | 0xb134 | No error (0) | 3.211.86.125 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:21.345416069 CEST | 8.8.8.8 | 192.168.2.5 | 0xb134 | No error (0) | 3.224.91.124 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:21.345416069 CEST | 8.8.8.8 | 192.168.2.5 | 0xb134 | No error (0) | 50.19.68.215 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:21.345416069 CEST | 8.8.8.8 | 192.168.2.5 | 0xb134 | No error (0) | 52.87.9.202 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:21.345416069 CEST | 8.8.8.8 | 192.168.2.5 | 0xb134 | No error (0) | 3.214.163.16 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:21.345416069 CEST | 8.8.8.8 | 192.168.2.5 | 0xb134 | No error (0) | 52.71.207.95 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.295815945 CEST | 8.8.8.8 | 192.168.2.5 | 0x4c28 | No error (0) | cdn.o6.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.302165031 CEST | 8.8.8.8 | 192.168.2.5 | 0xd460 | No error (0) | a.sfdcstatic.com.edgekey.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.628416061 CEST | 8.8.8.8 | 192.168.2.5 | 0xce3 | No error (0) | 143.204.205.100 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.628416061 CEST | 8.8.8.8 | 192.168.2.5 | 0xce3 | No error (0) | 143.204.205.98 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.628416061 CEST | 8.8.8.8 | 192.168.2.5 | 0xce3 | No error (0) | 143.204.205.84 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.628416061 CEST | 8.8.8.8 | 192.168.2.5 | 0xce3 | No error (0) | 143.204.205.53 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.682895899 CEST | 8.8.8.8 | 192.168.2.5 | 0xdb61 | No error (0) | gslb-2.demdex.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.682895899 CEST | 8.8.8.8 | 192.168.2.5 | 0xdb61 | No error (0) | edge-irl1.demdex.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.682895899 CEST | 8.8.8.8 | 192.168.2.5 | 0xdb61 | No error (0) | dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.682895899 CEST | 8.8.8.8 | 192.168.2.5 | 0xdb61 | No error (0) | 34.248.156.174 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.682895899 CEST | 8.8.8.8 | 192.168.2.5 | 0xdb61 | No error (0) | 34.243.30.18 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.682895899 CEST | 8.8.8.8 | 192.168.2.5 | 0xdb61 | No error (0) | 18.200.233.208 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.682895899 CEST | 8.8.8.8 | 192.168.2.5 | 0xdb61 | No error (0) | 63.32.159.255 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.682895899 CEST | 8.8.8.8 | 192.168.2.5 | 0xdb61 | No error (0) | 34.240.90.211 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.682895899 CEST | 8.8.8.8 | 192.168.2.5 | 0xdb61 | No error (0) | 63.32.153.45 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.682895899 CEST | 8.8.8.8 | 192.168.2.5 | 0xdb61 | No error (0) | 54.171.219.200 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.682895899 CEST | 8.8.8.8 | 192.168.2.5 | 0xdb61 | No error (0) | 52.214.44.171 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.707768917 CEST | 8.8.8.8 | 192.168.2.5 | 0x53a7 | No error (0) | d.sni.global.fastly.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.786720037 CEST | 8.8.8.8 | 192.168.2.5 | 0x9d1 | No error (0) | 104.20.184.68 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.786720037 CEST | 8.8.8.8 | 192.168.2.5 | 0x9d1 | No error (0) | 104.20.185.68 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.791412115 CEST | 8.8.8.8 | 192.168.2.5 | 0x12ef | No error (0) | na128.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.791412115 CEST | 8.8.8.8 | 192.168.2.5 | 0x12ef | No error (0) | na128-ia5.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.791412115 CEST | 8.8.8.8 | 192.168.2.5 | 0x12ef | No error (0) | na128-ia5.ia5.r.my.salesforce.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.791412115 CEST | 8.8.8.8 | 192.168.2.5 | 0x12ef | No error (0) | 13.110.69.75 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.791412115 CEST | 8.8.8.8 | 192.168.2.5 | 0x12ef | No error (0) | 13.110.70.75 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:32.791412115 CEST | 8.8.8.8 | 192.168.2.5 | 0x12ef | No error (0) | 13.110.65.75 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:34.568871975 CEST | 8.8.8.8 | 192.168.2.5 | 0x9d6e | No error (0) | partners.salesforce.com.ssl.d2.sc.omtrdc.net | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:34.568871975 CEST | 8.8.8.8 | 192.168.2.5 | 0x9d6e | No error (0) | 15.236.176.210 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:34.568871975 CEST | 8.8.8.8 | 192.168.2.5 | 0x9d6e | No error (0) | 13.36.218.177 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:34.568871975 CEST | 8.8.8.8 | 192.168.2.5 | 0x9d6e | No error (0) | 15.188.95.229 | A (IP address) | IN (0x0001) | ||
| Jul 16, 2021 16:40:38.631874084 CEST | 8.8.8.8 | 192.168.2.5 | 0xa48e | No error (0) | kqitim2qinjecyhrtjsa-f-61be14707.ipv4-only.cname.clienttons.com | CNAME (Canonical name) | IN (0x0001) | ||
| Jul 16, 2021 16:40:38.631874084 CEST | 8.8.8.8 | 192.168.2.5 | 0xa48e | No error (0) | a248.b.akamai.net | CNAME (Canonical name) | IN (0x0001) |
HTTP Request Dependency Graph |
|---|
|
HTTP Packets |
|---|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | Process |
|---|---|---|---|---|---|
| 0 | 192.168.2.5 | 49913 | 54.205.5.87 | 80 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | kBytes transferred | Direction | Data |
|---|---|---|---|
| Jul 16, 2021 16:40:12.167887926 CEST | 14076 | OUT | |
| Jul 16, 2021 16:40:12.392962933 CEST | 14077 | IN |
HTTPS Packets |
|---|
| Timestamp | Source IP | Source Port | Dest IP | Dest Port | Subject | Issuer | Not Before | Not After | JA3 SSL Client Fingerprint | JA3 SSL Client Digest |
|---|---|---|---|---|---|---|---|---|---|---|
| Jul 16, 2021 16:39:28.775032043 CEST | 13.110.37.182 | 443 | 192.168.2.5 | 49746 | CN=*.na136.force.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Aug 28 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Fri Aug 27 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:28.775079012 CEST | 13.110.37.182 | 443 | 192.168.2.5 | 49747 | CN=*.na136.force.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Aug 28 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Fri Aug 27 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:28.779479027 CEST | 13.110.37.182 | 443 | 192.168.2.5 | 49748 | CN=*.na136.force.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Aug 28 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Fri Aug 27 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:29.733500004 CEST | 13.110.39.181 | 443 | 192.168.2.5 | 49751 | CN=*.my.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 17 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Sat Sep 11 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:29.770757914 CEST | 13.110.39.181 | 443 | 192.168.2.5 | 49753 | CN=*.my.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 17 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Sat Sep 11 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:30.621341944 CEST | 13.110.39.181 | 443 | 192.168.2.5 | 49757 | CN=*.my.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 17 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Sat Sep 11 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:30.868350983 CEST | 13.110.39.181 | 443 | 192.168.2.5 | 49758 | CN=*.my.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 17 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Sat Sep 11 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:31.218091011 CEST | 85.222.155.195 | 443 | 192.168.2.5 | 49762 | CN=login.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Sep 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Wed Sep 29 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:31.347224951 CEST | 13.110.39.181 | 443 | 192.168.2.5 | 49760 | CN=*.my.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 17 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Sat Sep 11 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:31.347333908 CEST | 13.110.39.181 | 443 | 192.168.2.5 | 49759 | CN=*.my.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 17 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Sat Sep 11 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:31.348797083 CEST | 13.110.39.181 | 443 | 192.168.2.5 | 49761 | CN=*.my.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 17 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Sat Sep 11 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:32.535665035 CEST | 151.101.0.114 | 443 | 192.168.2.5 | 49770 | CN=cdn.evergage.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US | CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB | Tue Jan 28 01:00:00 CET 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 | Thu Apr 28 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB | CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US | Fri Nov 02 01:00:00 CET 2018 | Wed Jan 01 00:59:59 CET 2031 | |||||||
| CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US | CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB | Tue Mar 12 01:00:00 CET 2019 | Mon Jan 01 00:59:59 CET 2029 | |||||||
| Jul 16, 2021 16:39:32.755556107 CEST | 34.192.141.216 | 443 | 192.168.2.5 | 49769 | CN=*.us-1.evergage.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Fri Oct 02 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Mon Nov 01 13:00:00 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:39:33.268650055 CEST | 13.110.39.181 | 443 | 192.168.2.5 | 49774 | CN=*.my.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 17 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Sat Sep 11 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0 | 37f463bf4616ecd445d4a1937da06e19 |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:33.268748045 CEST | 13.110.39.181 | 443 | 192.168.2.5 | 49775 | CN=*.my.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 17 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Sat Sep 11 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0 | 37f463bf4616ecd445d4a1937da06e19 |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:34.248372078 CEST | 52.211.113.33 | 443 | 192.168.2.5 | 49786 | CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006 | Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Nov 10 01:00:00 CET 2006 | Mon Nov 10 01:00:00 CET 2031 | |||||||
| Jul 16, 2021 16:39:35.192650080 CEST | 54.76.54.153 | 443 | 192.168.2.5 | 49791 | CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006 | Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Nov 10 01:00:00 CET 2006 | Mon Nov 10 01:00:00 CET 2031 | |||||||
| Jul 16, 2021 16:39:54.807164907 CEST | 151.101.192.114 | 443 | 192.168.2.5 | 49828 | CN=cdn.evergage.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US | CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB | Tue Jan 28 01:00:00 CET 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 | Thu Apr 28 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB | CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US | Fri Nov 02 01:00:00 CET 2018 | Wed Jan 01 00:59:59 CET 2031 | |||||||
| CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US | CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB | Tue Mar 12 01:00:00 CET 2019 | Mon Jan 01 00:59:59 CET 2029 | |||||||
| Jul 16, 2021 16:39:55.042015076 CEST | 52.1.220.4 | 443 | 192.168.2.5 | 49830 | CN=*.us-1.evergage.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Fri Oct 02 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Mon Nov 01 13:00:00 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:39:55.468502045 CEST | 13.110.46.75 | 443 | 192.168.2.5 | 49835 | CN=*.my.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 17 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Sat Sep 11 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:39:55.607800007 CEST | 161.71.8.169 | 443 | 192.168.2.5 | 49837 | CN=*.um1.force.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Mar 31 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020 | Thu Mar 31 01:59:59 CEST 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:39:56.195765972 CEST | 151.101.0.114 | 443 | 192.168.2.5 | 49839 | CN=cdn.evergage.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US | CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB | Tue Jan 28 01:00:00 CET 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 | Thu Apr 28 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB | CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US | Fri Nov 02 01:00:00 CET 2018 | Wed Jan 01 00:59:59 CET 2031 | |||||||
| CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US | CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB | Tue Mar 12 01:00:00 CET 2019 | Mon Jan 01 00:59:59 CET 2029 | |||||||
| Jul 16, 2021 16:39:57.146698952 CEST | 161.71.8.169 | 443 | 192.168.2.5 | 49848 | CN=*.um1.force.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Mar 31 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020 | Thu Mar 31 01:59:59 CEST 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:39:57.196178913 CEST | 52.1.220.4 | 443 | 192.168.2.5 | 49844 | CN=*.us-1.evergage.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Fri Oct 02 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Mon Nov 01 13:00:00 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:39:57.341373920 CEST | 52.1.220.4 | 443 | 192.168.2.5 | 49846 | CN=*.us-1.evergage.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Fri Oct 02 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Mon Nov 01 13:00:00 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:39:57.491981983 CEST | 161.71.8.169 | 443 | 192.168.2.5 | 49851 | CN=*.um1.force.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Mar 31 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020 | Thu Mar 31 01:59:59 CEST 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:39:58.353833914 CEST | 13.109.191.111 | 443 | 192.168.2.5 | 49867 | CN=la2-c1-ia4.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:39:58.354335070 CEST | 13.109.191.111 | 443 | 192.168.2.5 | 49868 | CN=la2-c1-ia4.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:39:58.459656000 CEST | 13.109.191.111 | 443 | 192.168.2.5 | 49869 | CN=la2-c1-ia4.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:39:58.966083050 CEST | 13.110.41.111 | 443 | 192.168.2.5 | 49877 | CN=la2-c1-ia5.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:39:58.966301918 CEST | 13.110.41.111 | 443 | 192.168.2.5 | 49878 | CN=la2-c1-ia5.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:39:58.970612049 CEST | 54.225.136.92 | 443 | 192.168.2.5 | 49876 | CN=logx.optimizely.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Mon Sep 21 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Thu Oct 21 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:39:59.271012068 CEST | 65.9.66.106 | 443 | 192.168.2.5 | 49883 | CN=*.truste.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Tue Feb 16 01:00:00 CET 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Fri Mar 18 00:59:59 CET 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0 | 37f463bf4616ecd445d4a1937da06e19 |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:40:08.205993891 CEST | 85.222.152.194 | 443 | 192.168.2.5 | 49896 | CN=test.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Sep 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Wed Sep 29 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:40:08.206517935 CEST | 85.222.152.194 | 443 | 192.168.2.5 | 49895 | CN=test.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Sep 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Wed Sep 29 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:40:08.528745890 CEST | 85.222.152.194 | 443 | 192.168.2.5 | 49898 | CN=test.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Sep 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Wed Sep 29 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:40:08.650626898 CEST | 85.222.152.194 | 443 | 192.168.2.5 | 49899 | CN=test.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Sep 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Wed Sep 29 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:40:08.656364918 CEST | 85.222.152.194 | 443 | 192.168.2.5 | 49900 | CN=test.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Sep 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Wed Sep 29 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:40:08.740516901 CEST | 85.222.152.194 | 443 | 192.168.2.5 | 49901 | CN=test.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Sep 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Wed Sep 29 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:40:09.764702082 CEST | 85.222.153.66 | 443 | 192.168.2.5 | 49905 | CN=test.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Sep 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Wed Sep 29 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0 | 37f463bf4616ecd445d4a1937da06e19 |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:40:09.764986992 CEST | 85.222.153.66 | 443 | 192.168.2.5 | 49904 | CN=test.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Sep 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Wed Sep 29 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0 | 37f463bf4616ecd445d4a1937da06e19 |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:40:12.857906103 CEST | 54.205.5.87 | 443 | 192.168.2.5 | 49914 | CN=*.vidyard.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Mon Apr 26 02:00:00 CEST 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Thu May 26 01:59:59 CEST 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:40:13.953530073 CEST | 54.205.5.87 | 443 | 192.168.2.5 | 49915 | CN=*.vidyard.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Mon Apr 26 02:00:00 CEST 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Thu May 26 01:59:59 CEST 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:40:16.532341003 CEST | 34.234.32.98 | 443 | 192.168.2.5 | 49937 | CN=*.vidyard.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Mon Apr 26 02:00:00 CEST 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Thu May 26 01:59:59 CEST 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:40:16.997284889 CEST | 54.205.5.87 | 443 | 192.168.2.5 | 49942 | CN=*.vidyard.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Mon Apr 26 02:00:00 CEST 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Thu May 26 01:59:59 CEST 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0 | 37f463bf4616ecd445d4a1937da06e19 |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:40:21.678436995 CEST | 3.227.80.201 | 443 | 192.168.2.5 | 49947 | CN=*.litix.io CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Fri Nov 27 01:00:00 CET 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Mon Dec 27 00:59:59 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:40:22.249758005 CEST | 3.227.80.201 | 443 | 192.168.2.5 | 49948 | CN=*.litix.io CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Fri Nov 27 01:00:00 CET 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Mon Dec 27 00:59:59 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:40:22.390233994 CEST | 3.227.80.201 | 443 | 192.168.2.5 | 49949 | CN=*.litix.io CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Fri Nov 27 01:00:00 CET 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Mon Dec 27 00:59:59 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:40:22.559830904 CEST | 3.227.80.201 | 443 | 192.168.2.5 | 49950 | CN=*.litix.io CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Fri Nov 27 01:00:00 CET 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Mon Dec 27 00:59:59 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:40:33.049267054 CEST | 13.110.69.75 | 443 | 192.168.2.5 | 49974 | CN=*.my.salesforce.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 17 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 | Sat Sep 11 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Mar 08 13:00:00 CET 2013 | Wed Mar 08 13:00:00 CET 2023 | |||||||
| Jul 16, 2021 16:40:35.184498072 CEST | 13.109.191.111 | 443 | 192.168.2.5 | 49978 | CN=la2-c1-ia4.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:40:35.200506926 CEST | 13.109.191.111 | 443 | 192.168.2.5 | 49979 | CN=la2-c1-ia4.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:40:35.227864027 CEST | 54.225.136.92 | 443 | 192.168.2.5 | 49976 | CN=logx.optimizely.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Mon Sep 21 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009 | Thu Oct 21 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=Amazon, OU=Server CA 1B, O=Amazon, C=US | CN=Amazon Root CA 1, O=Amazon, C=US | Thu Oct 22 02:00:00 CEST 2015 | Sun Oct 19 02:00:00 CEST 2025 | |||||||
| CN=Amazon Root CA 1, O=Amazon, C=US | CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | Mon May 25 14:00:00 CEST 2015 | Thu Dec 31 02:00:00 CET 2037 | |||||||
| CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US | OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US | Wed Sep 02 02:00:00 CEST 2009 | Wed Jun 28 19:39:16 CEST 2034 | |||||||
| Jul 16, 2021 16:40:35.714951992 CEST | 13.110.41.111 | 443 | 192.168.2.5 | 49985 | CN=la2-c1-ia5.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:40:35.730007887 CEST | 13.110.41.111 | 443 | 192.168.2.5 | 49987 | CN=la2-c1-ia5.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:40:36.426409006 CEST | 34.248.156.174 | 443 | 192.168.2.5 | 49994 | CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006 | Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Nov 10 01:00:00 CET 2006 | Mon Nov 10 01:00:00 CET 2031 | |||||||
| Jul 16, 2021 16:40:38.889941931 CEST | 13.109.191.111 | 443 | 192.168.2.5 | 50001 | CN=la2-c1-ia4.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:40:38.914752007 CEST | 13.109.191.111 | 443 | 192.168.2.5 | 50002 | CN=la2-c1-ia4.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:40:39.440033913 CEST | 13.110.41.111 | 443 | 192.168.2.5 | 50003 | CN=la2-c1-ia5.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:40:39.455190897 CEST | 13.110.41.111 | 443 | 192.168.2.5 | 50004 | CN=la2-c1-ia5.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 | |||||||
| Jul 16, 2021 16:40:50.347223043 CEST | 13.110.41.111 | 443 | 192.168.2.5 | 50038 | CN=la2-c1-ia5.salesforceliveagent.com, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 | Fri Feb 25 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 | 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0 | b32309a26951912be7dba376398abc3b |
| CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US | Thu Sep 24 02:00:00 CEST 2020 | Tue Sep 24 01:59:59 CEST 2030 |
Code Manipulations |
|---|
Statistics |
|---|
Behavior |
|---|
Click to jump to process
System Behavior |
|---|
General |
|---|
| Start time: | 16:38:02 |
| Start date: | 16/07/2021 |
| Path: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0xce0000 |
| File size: | 2571312 bytes |
| MD5 hash: | B969CF0C7B2C443A99034881E8C8740A |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | moderate |
General |
|---|
| Start time: | 16:38:03 |
| Start date: | 16/07/2021 |
| Path: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0xce0000 |
| File size: | 2571312 bytes |
| MD5 hash: | B969CF0C7B2C443A99034881E8C8740A |
| Has elevated privileges: | false |
| Has administrator privileges: | false |
| Programmed in: | C, C++ or other language |
| Reputation: | moderate |
General |
|---|
| Start time: | 16:38:09 |
| Start date: | 16/07/2021 |
| Path: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x50000 |
| File size: | 9475120 bytes |
| MD5 hash: | 9AEBA3BACD721484391D15478A4080C7 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | moderate |
General |
|---|
| Start time: | 16:38:12 |
| Start date: | 16/07/2021 |
| Path: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x50000 |
| File size: | 9475120 bytes |
| MD5 hash: | 9AEBA3BACD721484391D15478A4080C7 |
| Has elevated privileges: | false |
| Has administrator privileges: | false |
| Programmed in: | C, C++ or other language |
| Reputation: | moderate |
General |
|---|
| Start time: | 16:38:14 |
| Start date: | 16/07/2021 |
| Path: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x7ff797770000 |
| File size: | 9475120 bytes |
| MD5 hash: | 9AEBA3BACD721484391D15478A4080C7 |
| Has elevated privileges: | false |
| Has administrator privileges: | false |
| Programmed in: | C, C++ or other language |
| Reputation: | moderate |
General |
|---|
| Start time: | 16:38:18 |
| Start date: | 16/07/2021 |
| Path: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x50000 |
| File size: | 9475120 bytes |
| MD5 hash: | 9AEBA3BACD721484391D15478A4080C7 |
| Has elevated privileges: | false |
| Has administrator privileges: | false |
| Programmed in: | C, C++ or other language |
| Reputation: | moderate |
General |
|---|
| Start time: | 16:38:20 |
| Start date: | 16/07/2021 |
| Path: | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x50000 |
| File size: | 9475120 bytes |
| MD5 hash: | 9AEBA3BACD721484391D15478A4080C7 |
| Has elevated privileges: | false |
| Has administrator privileges: | false |
| Programmed in: | C, C++ or other language |
| Reputation: | moderate |
General |
|---|
| Start time: | 16:39:24 |
| Start date: | 16/07/2021 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff677c70000 |
| File size: | 2150896 bytes |
| MD5 hash: | C139654B5C1438A95B321BB01AD63EF6 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
General |
|---|
| Start time: | 16:39:26 |
| Start date: | 16/07/2021 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff677c70000 |
| File size: | 2150896 bytes |
| MD5 hash: | C139654B5C1438A95B321BB01AD63EF6 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
Disassembly |
|---|
Code Analysis |
|---|