Windows Analysis Report
5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html

Overview

General Information

Sample name:	5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html
Analysis ID:	1446154
MD5:	1295809a4577e6a4dd7acf72fa9c7af2
SHA1:	684bbb726e3efdd7d8e7dce1cef014e957919d23
SHA256:	bf15306167b573d158e6c0541970f199266ad8f247ed6529525e7066353e057b
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Uses insecure TLS / SSL version for HTTPS connection

Classification

Signatures

Source: 5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/5_1%20Availity%20-%20Clearinghouse%20Payer%20List%20-%20Premium%20-%20Preferred%20Plus_xlsx.html	HTTP Parser: No favicon

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49750 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:55983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59466 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.6:59467 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59471 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59474 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59476 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.6:59464 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:55968 -> 1.1.1.1:53

IP address seen in connection with other malware

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

JA3 SSL client fingerprint seen in connection with other malware

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49750 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sfc/p/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/111213/sfc/javascript/lib/AC_OETags.js HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZacAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme2/default/gc/contentDistribution.css HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://availity.my.salesforce.com/sfc/p/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZacAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/contentDistribution.css HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A
Source: global traffic	HTTP traffic detected: GET /lightning/lightning.out.js HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A
Source: global traffic	HTTP traffic detected: GET /lightning/lightning.out.delegate.js?v=1716414602749 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/forceContent/contentDistributionApp.app?aura.format=JSON&aura.formatAdapter=LIGHTNING_OUT HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fforce%3Abase%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%5D%2C%22tuid%22%3A%22Co0Kry3W16Y_2a-Eqon3-w%22%2C%22cuid%22%3A-967093545%7D%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%7D/app.css?2= HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/appcore.js?2= HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2= HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/forceContent/contentDistributionApp.app?aura.format=JSON&aura.formatAdapter=LIGHTNING_OUT HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pv=17155677180001928571293&rv=1716008668000 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/inline.js?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..raywhquk_DPjFviibgGv8hsGg1ZYzXTbQxKdp_cBurk HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6nVmmD7lc8hUOgr&MD=6XZWdo3e HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..raywhquk_DPjFviibgGv8hsGg1ZYzXTbQxKdp_cBurk HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/auraCmpDef?_au=yYM3XHVkMyjSW6pzoV07SA&_c=false&_cac=0&_density=VIEW_ONE&_ff=DESKTOP&_l=true&_l10n=en_US&_lrmc=-386269907&_style=-967093545&aura.app=markup://forceContent:contentDistributionApp&aura.mode=PROD&_def=markup://lightning:iconSvgTemplatesUtility&_uid=LATEST HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/_slds/icons/doctype-sprite/svg/symbols.svg?cache=10.8.2 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: imageReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/aura?r=0&ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo=1 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /auraCmpDef?_au=yYM3XHVkMyjSW6pzoV07SA&_c=false&_cac=0&_def=markup://lightning:iconSvgTemplatesUtility&_density=VIEW_ONE&_ff=DESKTOP&_l=true&_l10n=en_US&_lrmc=-386269907&_style=-967093545&_uid=cTOlNQKHjpgxabUxr4qLPg&aura.app=markup://forceContent:contentDistributionApp&aura.mode=PROD HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/aura?r=1&ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo=1 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/_slds/icons/doctype-sprite/svg/symbols.svg?cache=10.8.2 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /aura?r=0&ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo=1 HTTP/1.1Host: availity.lightning.force.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aura?r=1&ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo=1 HTTP/1.1Host: availity.lightning.force.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visualforce/session?url=https%3A%2F%2Favaility.lightning.force.com%2Faura%3Fr%3D0%26ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo%3D1 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /visualforce/session?url=https%3A%2F%2Favaility.lightning.force.com%2Faura%3Fr%3D1%26ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo%3D1 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/download/?oid=00D300000000I3W&ids=068Hp00000iR79IIAS&d=/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac&operationContext=DELIVERY&viewId=05HHp000004Mt4cMAC&dpt= HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/download/?oid=00D300000000I3W&ids=068Hp00000iR79IIAS&d=%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac&operationContext=DELIVERY&viewId=05HHp000004Mt4cMAC&dpt= HTTP/1.1Host: availity.file.force.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://availity.my.salesforce.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BrowserId=RcDg3xiFEe-734Ok-LXonQ; BrowserId_sec=RcDg3xiFEe-734Ok-LXonQ
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6nVmmD7lc8hUOgr&MD=6XZWdo3e HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: availity.my.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: availity.lightning.force.com
Source: global traffic	DNS traffic detected: DNS query: availity.file.force.com

Source: unknown

HTTP traffic detected: POST /sfc/p/ HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveContent-Length: 95Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://availity.my.salesforce.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://availity.my.salesforce.com/sfc/p/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZacAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A

Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_161.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_161.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_161.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_161.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_161.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: 5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html	String found in binary or memory: https://availity.my.salesforce.com/sfc/p/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx
Source: chromecache_166.2.dr	String found in binary or memory: https://www.lightningdesignsystem.com/resources/icons/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55986
Source: unknown	Network traffic detected: HTTP traffic on port 55971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55983
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55984
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55985
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 59474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 55983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59467
Source: unknown	Network traffic detected: HTTP traffic on port 55977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59475
Source: unknown	Network traffic detected: HTTP traffic on port 55978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59471
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55969
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55970
Source: unknown	Network traffic detected: HTTP traffic on port 55976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55977
Source: unknown	Network traffic detected: HTTP traffic on port 55970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55972
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55980
Source: unknown	Network traffic detected: HTTP traffic on port 59467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:55983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59466 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.6:59467 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59471 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59474 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59476 version: TLS 1.2

Source: classification engine

Classification label: clean2.winHTML@34/32@10/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\2d95bef1-0fbb-4c59-814b-1b3149a6ff9c.tmp

Jump to behavior

Source: chromecache_167.2.dr

Binary or memory string: selectListOption:a.getReference("c.handleSelectOption"),updateAriaAttributes:a.getReference("c.updateAriaAttributes"),matchFunc:a.getReference("v.matchFunc"),disableMatch:a.getReference("v.disableMatch"),setDefaultHighlight:a.getReference("v.setDefaultHighlight"),showEmptyList:a.getReference("v.showEmptyList")}});if(c){var c=$A.createComponentFromConfig({descriptor:"markup://ui:autocompletePanel",localId:"panel",valueProvider:a}),e=c.get("v.body");e.push(b);c.set("v.body",e);b=c}d.push(b);a.set("v.body",

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2340,i,3582820520771955570,505747528871674737,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2340,i,3582820520771955570,505747528871674737,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
136.146.34.118	unknown	United States	14340	SALESFORCEUS	false
136.146.40.118	unknown	United States	14340	SALESFORCEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
136.146.39.118	na233-ia7.ia7.r.salesforce.com	United States	14340	SALESFORCEUS	false

Private

IP
192.168.2.6

Contacted Domains

Name	IP	Active
www.google.com	142.250.184.196	true
na233-ia7.ia7.r.salesforce.com	136.146.39.118	true
availity.lightning.force.com	unknown	unknown
availity.my.salesforce.com	unknown	unknown
availity.file.force.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://availity.lightning.force.com/aura?r=1&ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo=1	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/static/111213/sfc/javascript/lib/AC_OETags.js	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/visualforce/session?url=https%3A%2F%2Favaility.lightning.force.com%2Faura%3Fr%3D0%26ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo%3D1	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/dist/version/download/?oid=00D300000000I3W&ids=068Hp00000iR79IIAS&d=/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac&operationContext=DELIVERY&viewId=05HHp000004Mt4cMAC&dpt=	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sCSS/60.0/sprites/1705602480000/Theme2/default/gc/contentDistribution.css	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/lightning/lightning.out.delegate.js?v=1716414602749	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/appcore.js?2=	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/aura?r=1&ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo=1	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/p/	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/forceContent/contentDistributionApp.app?aura.format=JSON&aura.formatAdapter=LIGHTNING_OUT	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/auraCmpDef?_au=yYM3XHVkMyjSW6pzoV07SA&_c=false&_cac=0&_density=VIEW_ONE&_ff=DESKTOP&_l=true&_l10n=en_US&_lrmc=-386269907&_style=-967093545&aura.app=markup://forceContent:contentDistributionApp&aura.mode=PROD&_def=markup://lightning:iconSvgTemplatesUtility&_uid=LATEST	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/lightning/lightning.out.js	false	Avira URL Cloud: safe	unknown
file:///C:/Users/user/Desktop/5_1%20Availity%20-%20Clearinghouse%20Payer%20List%20-%20Premium%20-%20Preferred%20Plus_xlsx.html	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/inline.js?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..raywhquk_DPjFviibgGv8hsGg1ZYzXTbQxKdp_cBurk	false	Avira URL Cloud: safe	unknown
https://availity.lightning.force.com/aura?r=0&ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo=1	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pv=17155677180001928571293&rv=1716008668000	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/_slds/icons/doctype-sprite/svg/symbols.svg?cache=10.8.2	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/auraCmpDef?_au=yYM3XHVkMyjSW6pzoV07SA&_c=false&_cac=0&_def=markup://lightning:iconSvgTemplatesUtility&_density=VIEW_ONE&_ff=DESKTOP&_l=true&_l10n=en_US&_lrmc=-386269907&_style=-967093545&_uid=cTOlNQKHjpgxabUxr4qLPg&aura.app=markup://forceContent:contentDistributionApp&aura.mode=PROD	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/p/#300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac	false		unknown
https://availity.my.salesforce.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/contentDistribution.css	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..raywhquk_DPjFviibgGv8hsGg1ZYzXTbQxKdp_cBurk	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/aura?r=0&ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo=1	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/visualforce/session?url=https%3A%2F%2Favaility.lightning.force.com%2Faura%3Fr%3D1%26ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo%3D1	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2=	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fforce%3Abase%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%5D%2C%22tuid%22%3A%22Co0Kry3W16Y_2a-Eqon3-w%22%2C%22cuid%22%3A-967093545%7D%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%7D/app.css?2=	false	Avira URL Cloud: safe	unknown
https://availity.file.force.com/sfc/dist/version/download/?oid=00D300000000I3W&ids=068Hp00000iR79IIAS&d=%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac&operationContext=DELIVERY&viewId=05HHp000004Mt4cMAC&dpt=	false	Avira URL Cloud: safe	unknown
https://availity.my.salesforce.com/sfc/p/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac	false	Avira URL Cloud: safe	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\Downloads\2d95bef1-0fbb-4c59-814b-1b3149a6ff9c.tmp	Microsoft Excel 2007+	B7442361A0E6F1CE979054D23B53D084	E074BA782DF96C98F504161998AEADB79C75A14A	75EE3C6B4C3E7005ED14193DB810C1653AC47228EFE1A3DA310EC3E27D682930
C:\Users\user\Downloads\5.1 Availity - Clearinghouse Payer List - Premium - Preferred Plus.xlsx.crdownload	Microsoft Excel 2007+	41482507629BC0EB02242B3B0538724E	6179823951F75C2B01FB91CE62EF52FEB5A3DB0A	F0550F97FB11E97CD96D0574262C27EB7E31BDA67C3C997298E68BE8013E39EB
Chrome Cache Entry: 156	SVG Scalable Vector Graphics image	65DF9D077756E0DDB62AD180393E301C	EE6B280C61769D121B30FE7500F6CCF914D46DDC	3F7A16000AD9478E57006DE93EAD2E3D75F83DAC0523A8730FA2B2A30F7199E9
Chrome Cache Entry: 157	ASCII text, with very long lines (65536), with no line terminators	C6AFC77CB70F574791C3583D78014D80	4711CB67B1F481489062D2BCEBFAF2EA093EF950	579C3CEF97D62012296E7AA898A20B8DA40C9950D6467BAC7D6173904482B0E6
Chrome Cache Entry: 158	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel	CCDA8DF05E9A37B3131AFD4D451B44EC	ED9D0F9C4224FBD4C768BE237B4B59F27F1B718C	92842FC6C2F66B46F69458C14621FC2ECA5D6C02D7937F9124FE8A3A9A55BC91
Chrome Cache Entry: 159	ASCII text	9494F3D18A638CEC3B6A3576A61B7E7F	999E9BC8B88880619A3D36211C1C0634DF7545FC	38017D2158918ED723102DB845D16699DFEF7C01A3A40FE10EEE7528988E28E5
Chrome Cache Entry: 160	HTML document, ASCII text	B2208EADD71EEEBC6043EFBE11EE7B96	48673401F9F7F4BE06BF80817F495D19FEE98517	455EB995C7A6D4AF3CD5EC37E1F93DA6751ED13901F05FC0D918CD434E61A89C
Chrome Cache Entry: 161	Unicode text, UTF-8 text, with very long lines (25715)	3B80B50D8E8B8625502BDE9C4BD5487C	B806816E7BF8E8E94062BC02D9A1A85B3D3207BB	884C80EFB566DD98BCDC5246D57301DAFBDA9CD5D4B51011204D1DC8F669BF74
Chrome Cache Entry: 162	HTML document, ASCII text	7821E83D8CACF020D5648FA00A53EC16	3BED868D7D0B44664015AA1726128ED9B81B9D99	0336E5BAA591C718D7715A7901FDC498B9B2DE55C4271F48C074CB1F3715BA2E
Chrome Cache Entry: 163	ASCII text, with very long lines (65536), with no line terminators	F8256F73FCF15C1413DA7391A65ABC42	C42568F1DDDEFD9BD15E049356357FB8416401BB	27E6C1178DBC0F8E5BFF9F4A8B3766875B6616DEF2716B42F04BC910FE57D1FA
Chrome Cache Entry: 164	ASCII text, with very long lines (11046)	9F7ACC1956CE07431C262B4AD9125C63	7639033A3B7260313EB334BA4CE76411CF79D684	DBE9852814C46A8DA6DA12FF49F4887FA70CADDE16C878957C0B6BA4AA1045EC
Chrome Cache Entry: 165	ASCII text, with no line terminators	39A8E3B58CBC4E1D5BC31477B0FA34F6	ED5A2BF9839AB6B94C546B79214F227D109DB1F2	78F3A521935C55914CFF30AAE9A6EF23D57FA2BE8A87BF9685508310E3722594
Chrome Cache Entry: 166	ASCII text, with very long lines (762)	CFE0EB2CEBD1BB37A3111AF1B4FE6989	D4E56EF47C95471A1C93052CA3B394252D17BAFD	84B3AD704658FB4DACA952A0FF14AC2A151EFD264A9A8C74C61D05453A89B920
Chrome Cache Entry: 167	ASCII text, with very long lines (3980)	88558E6E920360ED2D83C6AA0EF7661A	31E8EDAD484A9EBA4E0DD3712C70A840C4183143	F371F86AC0F4D64C29A37A6BC14E8D8D6C152A6479A574C1A27F285EE3001966
Chrome Cache Entry: 168	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel	CCDA8DF05E9A37B3131AFD4D451B44EC	ED9D0F9C4224FBD4C768BE237B4B59F27F1B718C	92842FC6C2F66B46F69458C14621FC2ECA5D6C02D7937F9124FE8A3A9A55BC91
Chrome Cache Entry: 169	SVG Scalable Vector Graphics image	65DF9D077756E0DDB62AD180393E301C	EE6B280C61769D121B30FE7500F6CCF914D46DDC	3F7A16000AD9478E57006DE93EAD2E3D75F83DAC0523A8730FA2B2A30F7199E9
Chrome Cache Entry: 170	ASCII text, with very long lines (11046)	9F7ACC1956CE07431C262B4AD9125C63	7639033A3B7260313EB334BA4CE76411CF79D684	DBE9852814C46A8DA6DA12FF49F4887FA70CADDE16C878957C0B6BA4AA1045EC
Chrome Cache Entry: 171	ASCII text, with very long lines (18001)	5577E3397CE39C104FA51888D352D5EB	8355028448EDA89531CD780B9416ACD82702D6B8	29731A8ADC40DE3B0987A0640C053989FF08E63C318EAD714E3B46198328CC69

Source: 5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/5_1%20Availity%20-%20Clearinghouse%20Payer%20List%20-%20Premium%20-%20Preferred%20Plus_xlsx.html	HTTP Parser: No favicon

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49750 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:55983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59466 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.6:59467 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59471 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59474 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59476 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.6:59464 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:55968 -> 1.1.1.1:53

IP address seen in connection with other malware

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

JA3 SSL client fingerprint seen in connection with other malware

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49750 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sfc/p/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/111213/sfc/javascript/lib/AC_OETags.js HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZacAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme2/default/gc/contentDistribution.css HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://availity.my.salesforce.com/sfc/p/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZacAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/contentDistribution.css HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A
Source: global traffic	HTTP traffic detected: GET /lightning/lightning.out.js HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A
Source: global traffic	HTTP traffic detected: GET /lightning/lightning.out.delegate.js?v=1716414602749 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/forceContent/contentDistributionApp.app?aura.format=JSON&aura.formatAdapter=LIGHTNING_OUT HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fforce%3Abase%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%5D%2C%22tuid%22%3A%22Co0Kry3W16Y_2a-Eqon3-w%22%2C%22cuid%22%3A-967093545%7D%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%7D/app.css?2= HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/appcore.js?2= HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2= HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/forceContent/contentDistributionApp.app?aura.format=JSON&aura.formatAdapter=LIGHTNING_OUT HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pv=17155677180001928571293&rv=1716008668000 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/inline.js?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..raywhquk_DPjFviibgGv8hsGg1ZYzXTbQxKdp_cBurk HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6nVmmD7lc8hUOgr&MD=6XZWdo3e HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2F300000000I3W%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..raywhquk_DPjFviibgGv8hsGg1ZYzXTbQxKdp_cBurk HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/auraCmpDef?_au=yYM3XHVkMyjSW6pzoV07SA&_c=false&_cac=0&_density=VIEW_ONE&_ff=DESKTOP&_l=true&_l10n=en_US&_lrmc=-386269907&_style=-967093545&aura.app=markup://forceContent:contentDistributionApp&aura.mode=PROD&_def=markup://lightning:iconSvgTemplatesUtility&_uid=LATEST HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/_slds/icons/doctype-sprite/svg/symbols.svg?cache=10.8.2 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: imageReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/aura?r=0&ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo=1 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /auraCmpDef?_au=yYM3XHVkMyjSW6pzoV07SA&_c=false&_cac=0&_def=markup://lightning:iconSvgTemplatesUtility&_density=VIEW_ONE&_ff=DESKTOP&_l=true&_l10n=en_US&_lrmc=-386269907&_style=-967093545&_uid=cTOlNQKHjpgxabUxr4qLPg&aura.app=markup://forceContent:contentDistributionApp&aura.mode=PROD HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/aura?r=1&ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo=1 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/ld/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac/_slds/icons/doctype-sprite/svg/symbols.svg?cache=10.8.2 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /aura?r=0&ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo=1 HTTP/1.1Host: availity.lightning.force.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aura?r=1&ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo=1 HTTP/1.1Host: availity.lightning.force.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visualforce/session?url=https%3A%2F%2Favaility.lightning.force.com%2Faura%3Fr%3D0%26ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo%3D1 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /visualforce/session?url=https%3A%2F%2Favaility.lightning.force.com%2Faura%3Fr%3D1%26ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo%3D1 HTTP/1.1Host: availity.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/download/?oid=00D300000000I3W&ids=068Hp00000iR79IIAS&d=/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac&operationContext=DELIVERY&viewId=05HHp000004Mt4cMAC&dpt= HTTP/1.1Host: availity.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://availity.my.salesforce.com/sfc/p/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=PFdcmhiFEe-SpjG9CXmM-A; BrowserId_sec=PFdcmhiFEe-SpjG9CXmM-A; sfdc-stream=!VG2cOtI3rSW1XB8deMaoZIJh78LSmezffVJwiogzQOV2EI0ckI1GpkO8FxMfMi6wvpPAx77aWxRBAHY=
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/download/?oid=00D300000000I3W&ids=068Hp00000iR79IIAS&d=%2Fa%2FHp000000Rk08%2FYmhNn6WGveSBS3MbbrIXyqcpNf.oqrx_1b90T4wSZac&operationContext=DELIVERY&viewId=05HHp000004Mt4cMAC&dpt= HTTP/1.1Host: availity.file.force.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://availity.my.salesforce.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BrowserId=RcDg3xiFEe-734Ok-LXonQ; BrowserId_sec=RcDg3xiFEe-734Ok-LXonQ
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6nVmmD7lc8hUOgr&MD=6XZWdo3e HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: availity.my.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: availity.lightning.force.com
Source: global traffic	DNS traffic detected: DNS query: availity.file.force.com

Source: unknown

Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_161.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_161.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_161.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_161.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_161.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_161.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: 5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html	String found in binary or memory: https://availity.my.salesforce.com/sfc/p/300000000I3W/a/Hp000000Rk08/YmhNn6WGveSBS3MbbrIXyqcpNf.oqrx
Source: chromecache_166.2.dr	String found in binary or memory: https://www.lightningdesignsystem.com/resources/icons/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55986
Source: unknown	Network traffic detected: HTTP traffic on port 55971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55983
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55984
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55985
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 59474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 55983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59467
Source: unknown	Network traffic detected: HTTP traffic on port 55977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59475
Source: unknown	Network traffic detected: HTTP traffic on port 55978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59471
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55969
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55970
Source: unknown	Network traffic detected: HTTP traffic on port 55976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55977
Source: unknown	Network traffic detected: HTTP traffic on port 55970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55972
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55980
Source: unknown	Network traffic detected: HTTP traffic on port 59467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:55983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59466 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.6:59467 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59471 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59474 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59476 version: TLS 1.2

Source: classification engine

Classification label: clean2.winHTML@34/32@10/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\2d95bef1-0fbb-4c59-814b-1b3149a6ff9c.tmp

Jump to behavior

Source: chromecache_167.2.dr

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2340,i,3582820520771955570,505747528871674737,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2340,i,3582820520771955570,505747528871674737,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

ID:	1446154
Product:	CloudBasic
Start time:	23:49:00
Start date:	22.05.2024
Sample:	5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html
Cookbook:	defaultwindowshtmlcookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	1295809a4577e6a4dd7acf72fa9c7af2
SHA1:	684bbb726e3efdd7d8e7dce1cef014e957919d23
SHA256:	bf15306167b573d158e6c0541970f199266ad8f247ed6529525e7066353e057b
Filetype:	HyperText Markup Language (11001/1) 64.69%

Windows Analysis Report
5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report 5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
5_1 Availity - Clearinghouse Payer List - Premium - Preferred Plus_xlsx.html