Create Interactive Tour

Analysis Report https://salesforceintegration.na1.echosign.com/public/esign?tsid=CBFCIBAA3AAABLblqZhAv8w5X9-M6K9C_pt3vaFhbkppWpcrBNdnOmITgk-uSlBjm6Gn2lk_nh01EWLf9pwaAON6vcGZEvcybCP58Egt9&

Overview

General Information

Sample URL:	https://salesforceintegration.na1.echosign.com/public/esign?tsid=CBFCIBAA3AAABLblqZhAv8w5X9-M6K9C_pt3vaFhbkppWpcrBNdnOmITgk-uSlBjm6Gn2lk_nh01EWLf9pwaAON6vcGZEvcybCP58Egt9&
Analysis ID:	327173
Most interesting Screenshot:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

Invalid T&C link found

Classification

Startup

System is w10x64

chrome.exe (PID: 5904 cmdline: 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized 'https://salesforceintegration.na1.echosign.com/public/esign?tsid=CBFCIBAA3AAABLblqZhAv8w5X9-M6K9C_pt3vaFhbkppWpcrBNdnOmITgk-uSlBjm6Gn2lk_nh01EWLf9pwaAON6vcGZEvcybCP58Egt9&' MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 6088 cmdline: 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1536,10132923027383255745,7614475510207065447,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1952 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

• Phishing
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: Iframe src: /public/webAppToken
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: Iframe src: /public/webAppToken
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: Iframe src: /public/webAppToken
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: Iframe src: /public/webAppToken
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: Iframe src: /public/webAppToken
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: Iframe src: /public/webAppToken

Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: Invalid link: View Privacy Notice
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: Invalid link: View Privacy Notice
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: Invalid link: View Privacy Notice
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: Invalid link: View Privacy Notice

Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="author".. found
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="author".. found
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="author".. found
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="author".. found
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="author".. found
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="author".. found

Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="copyright".. found
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="copyright".. found
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="copyright".. found
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="copyright".. found
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="copyright".. found
Source: https://salesforceintegration.na1.echosign.com/public/login	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60
Source: unknown	TCP traffic detected without corresponding DNS query: 216.223.26.60

Source: Cookies.1.dr	String found in binary or memory: .www.linkedin.combscookie/ equals www.linkedin.com (Linkedin)
Source: Cookies.1.dr	String found in binary or memory: :.www.linkedin.combscookie/ equals www.linkedin.com (Linkedin)
Source: Cookies.1.dr	String found in binary or memory: :.www.linkedin.combscookie//M equals www.linkedin.com (Linkedin)

Source: unknown

DNS traffic detected: queries for: salesforceintegration.na1.echosign.com

Source: 9FE5AC4619D265EF6BFD31DF947C4A78_1A77B2E5EE36D785C1990CDF7096A9980.1.dr	String found in binary or memory: http://certs.godaddy.com/repository/1301
Source: EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D0.1.dr	String found in binary or memory: http://crl.godaddy.com/repository/0
Source: 223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B17710.1.dr	String found in binary or memory: http://crl.godaddy.com/repository/gdroot-g2.crl0J
Source: EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D0.1.dr	String found in binary or memory: http://crl.godaddy.com/repository/gdroot.crl0J
Source: 9FE5AC4619D265EF6BFD31DF947C4A78_1A77B2E5EE36D785C1990CDF7096A9980.1.dr	String found in binary or memory: http://crl.godaddy.com/repository/mastergodaddy2issuing.crl0J
Source: 77EC63BDA74BD0D0E0426DC8F8008506.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 05ca81086730b0ae_0.0.dr	String found in binary or memory: http://gnu.org/licenses/lgpl.html
Source: 223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771.1.dr	String found in binary or memory: http://ocsp.godaddy.com//MEIwQDA%2BMDwwOjAJBgUrDgMCGgUABBQdI2%2BOBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLb
Source: EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D.1.dr	String found in binary or memory: http://ocsp.godaddy.com//MEQwQjBAMD4wPDAJBgUrDgMCGgUABBTkIInKBAzXkF0Qh0pel3lfHJ9GPAQU0sSw0pHUTBFxs2H
Source: 9FE5AC4619D265EF6BFD31DF947C4A78_1A77B2E5EE36D785C1990CDF7096A998.1.dr	String found in binary or memory: http://ocsp.godaddy.com//MEowSDBGMEQwQjAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojP
Source: Current Session.0.dr	String found in binary or memory: http://trust.echosign.com/
Source: History-journal.0.dr	String found in binary or memory: http://trust.echosign.com/Adobe
Source: Current Session.0.dr	String found in binary or memory: http://trust.echosign.com/g
Source: 05ca81086730b0ae_0.0.dr	String found in binary or memory: http://www.dynarch.com/projects/calendar/
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr, manifest.json0.0.dr	String found in binary or memory: https://accounts.google.com
Source: 383c3d511f6ab092_0.0.dr	String found in binary or memory: https://amcglobal.sc.omtrdc.net/b/ss/amc.global.prod
Source: f88a27af7ddb8926_0.0.dr	String found in binary or memory: https://api.demandbase.com/api/v2/ip.json?key=e4086fa3ea9d74ac2aae2719a0e5285dc7075d7b&callback=s_db
Source: c4f038e068aec756_0.0.dr	String found in binary or memory: https://api.demandbase.com/api/v2/ip.json?key=e4086fa3ea9d74ac2aae2719a0e5285dc7075d7b&rnd=1647&call
Source: 147a77f6239e9793_0.0.dr	String found in binary or memory: https://api.demandbase.com/api/v2/ip.json?key=e4086fa3ea9d74ac2aae2719a0e5285dc7075d7b&rnd=8091&call
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr, manifest.json0.0.dr	String found in binary or memory: https://apis.google.com
Source: 590c166890af9420_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/
Source: 566b774c237d48e7_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f1c1db5355c3/8eab40211f6d/RC2c6ff980f388415599d7dff8c94110c
Source: b797fbfa62f40468_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f1c1db5355c3/launch-d5e1cea3e343.min.js
Source: 6632e6d3b53c8a95_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC2a643f872978403daaac6c6eb27b1c2
Source: ca5f1b3316afd715_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC6171a193c5f749b6901942c8c5ed07c
Source: 3bf68f3655613904_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC6f46e43fa6d44dbeb45cc5801ffded0
Source: 2f4c37c6399e1a0d_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC90b59242c41f4f62a5a6bdb817758c9
Source: 78f045ae79daf673_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCbbd93c1920fd422b84787f67ddbfbe5
Source: 02b2c80311c4db26_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCe603adad0e60478b927c5da4f78b4f0
Source: 7f6e925df5390b67_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EP5e9ec493dfa0465eaa797b523b09d3f7/AppMeasurement.min.js
Source: aee0cc06edbfd9a6_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EP5e9ec493dfa0465eaa797b523b09d3f7/AppMeasurement_Module_Audi
Source: a6942155eb9698ff_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/launch-EN919758db9a654a17bac7d184b99c4820.min.js
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://cdn.cookielaw.org/
Source: a54bd1ca90dbe6b9_0.0.dr, 524cb6ba085dce32_0.0.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/6.5.0/otBannerSdk.js
Source: 0ba91aa6ae29d08a_0.0.dr, dfe652550251f803_0.0.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: 506e312253ddb344_0.0.dr	String found in binary or memory: https://cdn.tt.omtrdc.net/cdn/target.js
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: d6595452d2846755_0.0.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: a2fd9463fb457a49_0.0.dr	String found in binary or memory: https://connect.facebook.net/signals/config/1772359959706965?v=2.9.29&r=stable
Source: manifest.json0.0.dr	String found in binary or memory: https://content.googleapis.com
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr, c30e3c23-8db7-4509-a563-26fd4d0db974.tmp.1.dr, a310b4d7-1826-490b-8d18-5cc65f347652.tmp.1.dr	String found in binary or memory: https://dns.google
Source: 4ec9e1c5a741aaf6_0.0.dr	String found in binary or memory: https://echosign.com/
Source: 571ee01133d52b3d_0.0.dr	String found in binary or memory: https://echosign.com/%
Source: 00bc91c379b1c0ff_0.0.dr	String found in binary or memory: https://echosign.com//
Source: f5103188e5b166e5_0.0.dr	String found in binary or memory: https://echosign.com/6
Source: 4ec9e1c5a741aaf6_0.0.dr	String found in binary or memory: https://echosign.com/8
Source: 601443e803be0797_0.0.dr	String found in binary or memory: https://echosign.com/Lc
Source: f40f4f0b23e51806_0.0.dr	String found in binary or memory: https://echosign.com/P
Source: dfe652550251f803_0.0.dr	String found in binary or memory: https://echosign.com/iL
Source: 0fca6c6884c3310a_0.0.dr	String found in binary or memory: https://echosign.com/q
Source: c399d094bae59d4c_0.0.dr	String found in binary or memory: https://fb.me/react-async-component-lifecycle-hooks
Source: c399d094bae59d4c_0.0.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: manifest.json0.0.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: 92d8b60515111e94_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153041403&cv
Source: 4653468daf61afbd_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153046755&cv
Source: f6d2eeac737759f4_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153061901&cv
Source: 809f1ba0f5632bc8_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153067625&cv
Source: 2f232636a3c41413_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153080652&cv
Source: d0f9ad5e11cd2b35_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153083694&cv
Source: dd8051d6c8c91aef_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153089085&cv
Source: 8e514e6008bd06c8_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153091988&cv
Source: 749c7e331714b4ef_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153041440&cv=
Source: d9382c644a66a571_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153046767&cv=
Source: 549ad35069713461_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153061915&cv=
Source: 65948dfcb396ab14_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153067628&cv=
Source: eac8a15c6c5215b4_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153080645&cv=
Source: 8c5404bc44834b19_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153083696&cv=
Source: 49aa4220a457b136_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153089081&cv=
Source: 913057def580ecbf_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153091982&cv=
Source: 56b0452dc89a7392_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153041447&cv=
Source: c241fa434dc29cb4_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153046761&cv=
Source: c5ad6b27c14ec976_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153061911&cv=
Source: 18cfbf307b42b5ff_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153067622&cv=
Source: d9cda90db0fdbb41_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153083689&cv=
Source: e8c57801a9917b7a_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153089087&cv=
Source: 6121f3c03820659e_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153091986&cv=
Source: 7f9a337344e8d334_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153041435&cv=
Source: 6eb5535c1fac527f_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153046594&cv=
Source: eb87fa931a03c38b_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153061735&cv=
Source: 495e437aacc92e71_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153067539&cv=
Source: c30b9038636a6cad_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153080367&cv=
Source: 0324f7f3b483c3a8_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153083618&cv=
Source: ef213ca8a019bca3_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153088665&cv=
Source: 848c0bac6675d6b9_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153091885&cv=
Source: manifest.json0.0.dr	String found in binary or memory: https://hangouts.google.com/
Source: 4ec9e1c5a741aaf6_0.0.dr	String found in binary or memory: https://js-agent.newrelic.com/nr-1184.min.js
Source: 4ec9e1c5a741aaf6_0.0.dr	String found in binary or memory: https://js-agent.newrelic.com/nr-1184.min.jsa
Source: 4ec9e1c5a741aaf6_0.0.dr	String found in binary or memory: https://js-agent.newrelic.com/nr-1184.min.jsaD
Source: ec67ea716ad6b4ab_0.0.dr	String found in binary or memory: https://mozilla.github.io/pdf.js/build/pdf.js
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr	String found in binary or memory: https://ogs.google.com
Source: tahoma.ttf.0.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: manifest.json.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr	String found in binary or memory: https://play.google.com
Source: Current Session.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/
Source: Current Session.0.dr, History-journal.0.dr, Favicons-journal.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/account/audit?aid=CBJCHBCAABAAgHpFqF-2teRNj-eeGHsafS_
Source: Current Session.0.dr, Favicons-journal.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/account/home
Source: History Provider Cache.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/account/home28Adobe
Source: History-journal.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/account/homeAdobe
Source: Favicons-journal.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/images/favicon.2.ico
Source: Favicons-journal.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/images/favicon.2.ico%
Source: Current Session.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/login
Source: Current Session.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/oauth2/login
Source: History-journal.0.dr, Favicons-journal.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/public/esign?tsid=CBFCIBAA3AAABLblqZhAv8w5X9-M6K9C_pt
Source: Current Session.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/public/forgotPassword
Source: Current Session.0.dr, Favicons-journal.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/public/login
Source: History Provider Cache.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/public/login28Adobe
Source: Current Session.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/public/login6Adobe
Source: History-journal.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/public/loginAdobe
Source: Current Session.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/public/webAppToken
Source: 00bc91c379b1c0ff_0.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/static/site-analytics.js
Source: 00bc91c379b1c0ff_0.0.dr	String found in binary or memory: https://salesforceintegration.na1.echosign.com/static/site-analytics.jsaD
Source: manifest.json.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 6a9fad8381d66bfe_0.0.dr	String found in binary or memory: https://scripts.demandbase.com/qQQxkRp0.min.js
Source: 000003.log0.0.dr	String found in binary or memory: https://sd.iperceptions.com/ius-359cd6b861125d638f6cea04ffb14739/29293_637427100135393745
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/
Source: 571ee01133d52b3d_0.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/resource/155975830.en_US/bundles/dcsignpanel.js
Source: 0fca6c6884c3310a_0.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/resource/1694188720.en_US/bundles/app-main.js
Source: 601443e803be0797_0.0.dr, 8027b623f35c2ec3_0.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/resource/575148118.en_US/bundles/translations.js
Source: 8027b623f35c2ec3_0.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/resource/575148118.en_US/bundles/translations.jsaD
Source: f40f4f0b23e51806_0.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/resource/783075475/bundles/all.js
Source: 4d740328467170b4_0.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/resource/783075475/bundles/all.jsa
Source: 4d740328467170b4_0.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/resource/783075475/bundles/all.jsaD
Source: b97feba0e8a4d40d_0.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/resource/N2013330637.en_US/bundles/app-esign.js
Source: f5103188e5b166e5_0.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/resource/N2072685269/bundles/lib.js
Source: 05ca81086730b0ae_0.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/resource/N2072685269/bundles/lib.jsaD
Source: 8cd282fcc07b5f9b_0.0.dr	String found in binary or memory: https://secure.na1.echocdn.com/resource/N555771109.en_US/bundles/component-viewfields.js
Source: Current Session.0.dr	String found in binary or memory: https://servedby.flashtalking.com/container/10943;85008;8362;iframe/?spotName=Variables_Tag&ftXRef=&
Source: Current Session.0.dr	String found in binary or memory: https://servedby.flashtalking.com/container/13539;99030;10307;iframe/?ftXRef=&ftXValue=&ftXType=&ftX
Source: 10d4e9eb0facc393_0.0.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.beta.min.js
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://static.adobelogin.com/
Source: a8448f8e0f201664_0.0.dr	String found in binary or memory: https://static.adobelogin.com/imslib/imslib.min.js
Source: 528df7fa00e0aa0d_0.0.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: 000003.log5.0.dr	String found in binary or memory: https://universal.iperceptions.com
Source: 000003.log0.0.dr	String found in binary or memory: https://universal.iperceptions.com/
Source: 979d87bbdfbc03ea_0.0.dr	String found in binary or memory: https://universal.iperceptions.com/core/IpEngine_v77.8.js
Source: 979d87bbdfbc03ea_0.0.dr	String found in binary or memory: https://universal.iperceptions.com/core/IpEngine_v77.8.jsaD
Source: Current Session.0.dr	String found in binary or memory: https://universal.iperceptions.com/iFrame.html
Source: ce2c17b9c6edf534_0.0.dr	String found in binary or memory: https://universal.iperceptions.com/wrapper.js
Source: ce2c17b9c6edf534_0.0.dr	String found in binary or memory: https://universal.iperceptions.com/wrapper.jsaD
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://use.typekit.net/
Source: tahoma.ttf.0.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
Source: tahoma.ttf.0.dr	String found in binary or memory: https://use.typekit.net/af/74ffb1/000000000000000000017702/27/
Source: tahoma.ttf.0.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/
Source: tahoma.ttf.0.dr	String found in binary or memory: https://use.typekit.net/af/e301c6/0000000000000000000149e7/27/
Source: tahoma.ttf.0.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/
Source: 168b26f036f47353_0.0.dr	String found in binary or memory: https://use.typekit.net/fqg8osp.js
Source: f2b6200d7e4bca13_0.0.dr	String found in binary or memory: https://use.typekit.net/glm4yoq.js
Source: 3259da07ce607cc4_0.0.dr	String found in binary or memory: https://use.typekit.net/pfu1huz.js
Source: tahoma.ttf.0.dr	String found in binary or memory: https://use.typekit.net/pfu1huz.jsaD
Source: 5b1073d913d24c80_0.0.dr	String found in binary or memory: https://www.adobetag.com/d1/adobecorp/live/wwwadobecomWCMS.js
Source: 1aed6b6619289abf_0.0.dr	String found in binary or memory: https://www.everestjs.net/static/le/last-event-tag-latest.min.js
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr, manifest.json0.0.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.google.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://www.google.com;
Source: ec08776eb4299c6a_0.0.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion_async.js
Source: ec08776eb4299c6a_0.0.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion_async.jsaD
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 78076ae97804cb59_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-1004494713&l=dataLayer&cx=c
Source: 00a73600649a63ce_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-951622910&l=dataLayer&cx=c
Source: db4718e9c146cf75_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-983956512&l=dataLayer&cx=c
Source: 9f5aed4e4f46c7af_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-987390658
Source: 6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr	String found in binary or memory: https://www.gstatic.com
Source: manifest.json0.0.dr	String found in binary or memory: https://www.gstatic.com;

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: classification engine

Classification label: clean1.win@45/304@76/49

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-5FCB3579-1710.pma

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\b85cf72d-4a62-46e7-874d-d85b7f41ce47.tmp

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized 'https://salesforceintegration.na1.echosign.com/public/esign?tsid=CBFCIBAA3AAABLblqZhAv8w5X9-M6K9C_pt3vaFhbkppWpcrBNdnOmITgk-uSlBjm6Gn2lk_nh01EWLf9pwaAON6vcGZEvcybCP58Egt9&'
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1536,10132923027383255745,7614475510207065447,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1952 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1536,10132923027383255745,7614475510207065447,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1952 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Drive-by Compromise1	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading3	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://salesforceintegration.na1.echosign.com/public/esign?tsid=CBFCIBAA3AAABLblqZhAv8w5X9-M6K9C_pt3vaFhbkppWpcrBNdnOmITgk-uSlBjm6Gn2lk_nh01EWLf9pwaAON6vcGZEvcybCP58Egt9&	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
adobeioruntime.net	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://secure.na1.echocdn.com/resource/1694188720.en_US/bundles/app-main.js	0%	Avira URL Cloud	safe
https://secure.na1.echocdn.com/resource/783075475/bundles/all.jsaD	0%	Avira URL Cloud	safe
http://www.dynarch.com/projects/calendar/	0%	Avira URL Cloud	safe
https://amcglobal.sc.omtrdc.net/b/ss/amc.global.prod	0%	Avira URL Cloud	safe
https://dns.google	0%	URL Reputation	safe
https://dns.google	0%	URL Reputation	safe
https://dns.google	0%	URL Reputation	safe
https://secure.na1.echocdn.com/resource/N2072685269/bundles/lib.jsaD	0%	Avira URL Cloud	safe
https://secure.na1.echocdn.com/resource/575148118.en_US/bundles/translations.jsaD	0%	Avira URL Cloud	safe
https://secure.na1.echocdn.com/resource/N2013330637.en_US/bundles/app-esign.js	0%	Avira URL Cloud	safe
https://secure.na1.echocdn.com/resource/783075475/bundles/all.js	0%	Avira URL Cloud	safe
https://static.ads-twitter.com/uwt.js	0%	URL Reputation	safe
https://static.ads-twitter.com/uwt.js	0%	URL Reputation	safe
https://static.ads-twitter.com/uwt.js	0%	URL Reputation	safe
https://secure.na1.echocdn.com/resource/575148118.en_US/bundles/translations.js	0%	Avira URL Cloud	safe
https://secure.na1.echocdn.com/	0%	Avira URL Cloud	safe
https://secure.na1.echocdn.com/resource/N2072685269/bundles/lib.js	0%	Avira URL Cloud	safe
https://mozilla.github.io/pdf.js/build/pdf.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
adobeioruntime.net	54.171.42.90	true	false	0%, Virustotal, Browse	unknown
d1gs6rlbmzcurc.cloudfront.net	65.9.68.22	true	false		high
pug-lhr.pubmatic.com	185.64.190.80	true	false		high
global.px.quantserve.com	91.228.74.133	true	false		high
segments.company-target.com	65.9.68.122	true	false		unknown
platform.twitter.map.fastly.net	199.232.56.157	true	false		unknown
bttrack.com	192.132.33.46	true	false		unknown
duerzc3hf5let.cloudfront.net	65.9.68.10	true	false		high
t.co	104.244.42.69	true	false		high
pagead.l.doubleclick.net	172.217.21.194	true	false		high
api.demandbase.com	65.9.68.76	true	false		high
adobe.com.d1.sc.omtrdc.net	35.181.18.61	true	false		unknown
ams04-login-ds.dotomi.com	89.207.16.204	true	false		high
sni1gl.wpc.deltacdn.net	152.199.21.175	true	false		unknown
star-mini.c10r.facebook.com	185.60.216.35	true	false		high
match.prod.bidr.io	52.49.193.31	true	false		unknown
us-u.openx.net	35.244.159.8	true	false		high
s.twitter.com	104.244.42.3	true	false		high
services.prod.ims.adobejanus.com	52.213.176.171	true	false		unknown
salesforceintegration.na1.echosign.com	52.71.63.232	true	false		high
amcglobal.sc.omtrdc.net	15.237.136.106	true	false		unknown
l3-production-5017897.us-east-1.elb.amazonaws.com	34.193.197.206	true	false		high
pop-tln1-alpha.mix.linkedin.com	185.63.144.5	true	false		high
ams01.sync.search.spotxchange.com	185.94.180.126	true	false		high
a.tribalfusion.com	104.18.12.5	true	false		high
www.google.co.uk	172.217.21.195	true	false		unknown
ml314.com	52.18.215.87	true	false		unknown
cdn.cookielaw.org	104.16.148.64	true	false		high
googlehosted.l.googleusercontent.com	172.217.16.193	true	false		high
trust.echosign.com	34.198.193.48	true	false		high
pixel-origin.mathtag.com	185.29.133.58	true	false		high
s.tribalfusion.com	104.18.13.5	true	false		high
g2.gumgum.com	52.31.234.119	true	false		high
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	52.209.86.30	true	false		high
scontent.xx.fbcdn.net	185.60.216.19	true	false		high
adobelogin.prod.ims.adobejanus.com	52.49.212.5	true	false		unknown
adobe.com.ssl.d1.sc.omtrdc.net	35.181.18.61	true	false		unknown
adobe.tt.omtrdc.net	54.76.90.77	true	false		unknown
mwsyncpixel.eu-west-1.elasticbeanstalk.com	52.51.205.248	true	false		high
dd20fzx9mj46f.cloudfront.net	65.9.60.66	true	false		high
pixel.tapad.com	35.227.248.159	true	false		high
pagead46.l.doubleclick.net	172.217.23.162	true	false		high
s.thebrighttag.com	79.125.117.125	true	false		high
mozilla.github.io	185.199.108.153	true	false		unknown
secure.na1dc1.echosign.com	52.71.63.230	true	false		high
api.company-target.com	65.9.68.28	true	false		unknown
ib.anycast.adnxs.com	185.33.220.243	true	false		high
geolocation.onetrust.com	104.20.184.68	true	false		high
scripts.demandbase.com	65.9.68.129	true	false		high
static.ads-twitter.com	unknown	unknown	false		unknown
ims-na1.adobelogin.com	unknown	unknown	false		high
api.iperceptions.com	unknown	unknown	false		high
pixel.everesttech.net	unknown	unknown	false		high
cm.everesttech.net	unknown	unknown	false		high
use.typekit.com	unknown	unknown	false		high
clients2.googleusercontent.com	unknown	unknown	false		high
cm.g.doubleclick.net	unknown	unknown	false		high
static.adobelogin.com	unknown	unknown	false		high
fast.adobe.demdex.net	unknown	unknown	false		high
adobe.demdex.net	unknown	unknown	false		high
use.typekit.net	unknown	unknown	false		high
pix-us.revjet.com	unknown	unknown	false		high
l3.evidon.com	unknown	unknown	false		high
assets.adobedtm.com	unknown	unknown	false		high
rtd.tubemogul.com	unknown	unknown	false		high
pixel.rubiconproject.com	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
px.ads.linkedin.com	unknown	unknown	false		high
d.turn.com	unknown	unknown	false		high
secure.na1.echocdn.com	unknown	unknown	false		unknown
p.typekit.net	unknown	unknown	false		high
googleads.g.doubleclick.net	unknown	unknown	false		high
sync.mathtag.com	unknown	unknown	false		high
sync-tm.everesttech.net	unknown	unknown	false		high
p.rfihub.com	unknown	unknown	false		high
c.evidon.com	unknown	unknown	false		high
www.adobetag.com	unknown	unknown	false		unknown
cdn.tt.omtrdc.net	unknown	unknown	false		unknown
image2.pubmatic.com	unknown	unknown	false		high
dpm.demdex.net	unknown	unknown	false		high
bam-cell.nr-data.net	unknown	unknown	false		unknown
servedby.flashtalking.com	unknown	unknown	false		high
rtd-tm.everesttech.net	unknown	unknown	false		high
www.facebook.com	unknown	unknown	false		high
js-agent.newrelic.com	unknown	unknown	false		high
www.linkedin.com	unknown	unknown	false		high
pixel.quantserve.com	unknown	unknown	false		high
adobe-sync.dotomi.com	unknown	unknown	false		high
sd.iperceptions.com	unknown	unknown	false		high
lasteventf-tm.everesttech.net	unknown	unknown	false		high
universal.iperceptions.com	unknown	unknown	false		high
www.everestjs.net	unknown	unknown	false		high
analytics.twitter.com	unknown	unknown	false		high
dsum-sec.casalemedia.com	unknown	unknown	false		high
snap.licdn.com	unknown	unknown	false		high
ib.adnxs.com	unknown	unknown	false		high
sync.search.spotxchange.com	unknown	unknown	false		high
partner.mediawallahscript.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Reputation
https://salesforceintegration.na1.echosign.com/public/webAppToken	false	high
https://salesforceintegration.na1.echosign.com/public/esign?tsid=CBFCIBAA3AAABLblqZhAv8w5X9-M6K9C_pt3vaFhbkppWpcrBNdnOmITgk-uSlBjm6Gn2lk_nh01EWLf9pwaAON6vcGZEvcybCP58Egt9&	false	high
https://salesforceintegration.na1.echosign.com/public/login	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://universal.iperceptions.com/iFrame.html	Current Session.0.dr	false		high
https://secure.na1.echocdn.com/resource/1694188720.en_US/bundles/app-main.js	0fca6c6884c3310a_0.0.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153083694&cv	d0f9ad5e11cd2b35_0.0.dr	false		high
https://api.demandbase.com/api/v2/ip.json?key=e4086fa3ea9d74ac2aae2719a0e5285dc7075d7b&callback=s_db	f88a27af7ddb8926_0.0.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCe603adad0e60478b927c5da4f78b4f0	02b2c80311c4db26_0.0.dr	false		high
https://assets.adobedtm.com/launch-EN919758db9a654a17bac7d184b99c4820.min.js	a6942155eb9698ff_0.0.dr	false		high
https://salesforceintegration.na1.echosign.com/oauth2/login	Current Session.0.dr	false		high
http://crl.godaddy.com/repository/mastergodaddy2issuing.crl0J	9FE5AC4619D265EF6BFD31DF947C4A78_1A77B2E5EE36D785C1990CDF7096A9980.1.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153061901&cv	f6d2eeac737759f4_0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153046594&cv=	6eb5535c1fac527f_0.0.dr	false		high
https://js-agent.newrelic.com/nr-1184.min.jsaD	4ec9e1c5a741aaf6_0.0.dr	false		high
https://universal.iperceptions.com/	000003.log0.0.dr	false		high
https://use.typekit.net/pfu1huz.js	3259da07ce607cc4_0.0.dr	false		high
https://salesforceintegration.na1.echosign.com/account/audit?aid=CBJCHBCAABAAgHpFqF-2teRNj-eeGHsafS_	Current Session.0.dr, History-journal.0.dr, Favicons-journal.0.dr	false		high
https://static.adobelogin.com/imslib/imslib.min.js	a8448f8e0f201664_0.0.dr	false		high
https://salesforceintegration.na1.echosign.com/login	Current Session.0.dr	false		high
https://servedby.flashtalking.com/container/10943;85008;8362;iframe/?spotName=Variables_Tag&ftXRef=&	Current Session.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153041403&cv	92d8b60515111e94_0.0.dr	false		high
https://js-agent.newrelic.com/nr-1184.min.jsa	4ec9e1c5a741aaf6_0.0.dr	false		high
https://api.demandbase.com/api/v2/ip.json?key=e4086fa3ea9d74ac2aae2719a0e5285dc7075d7b&rnd=1647&call	c4f038e068aec756_0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153088665&cv=	ef213ca8a019bca3_0.0.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC6171a193c5f749b6901942c8c5ed07c	ca5f1b3316afd715_0.0.dr	false		high
https://secure.na1.echocdn.com/resource/783075475/bundles/all.jsaD	4d740328467170b4_0.0.dr	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/en_US/fbevents.js	d6595452d2846755_0.0.dr	false		high
https://assets.adobedtm.com/extensions/EP5e9ec493dfa0465eaa797b523b09d3f7/AppMeasurement.min.js	7f6e925df5390b67_0.0.dr	false		high
https://salesforceintegration.na1.echosign.com/static/site-analytics.jsaD	00bc91c379b1c0ff_0.0.dr	false		high
http://www.dynarch.com/projects/calendar/	05ca81086730b0ae_0.0.dr	false	Avira URL Cloud: safe	unknown
https://amcglobal.sc.omtrdc.net/b/ss/amc.global.prod	383c3d511f6ab092_0.0.dr	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/6.5.0/otBannerSdk.js	a54bd1ca90dbe6b9_0.0.dr, 524cb6ba085dce32_0.0.dr	false		high
http://gnu.org/licenses/lgpl.html	05ca81086730b0ae_0.0.dr	false		high
https://universal.iperceptions.com/wrapper.js	ce2c17b9c6edf534_0.0.dr	false		high
https://use.typekit.net/af/74ffb1/000000000000000000017702/27/	tahoma.ttf.0.dr	false		high
https://dns.google	6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp.1.dr, c30e3c23-8db7-4509-a563-26fd4d0db974.tmp.1.dr, a310b4d7-1826-490b-8d18-5cc65f347652.tmp.1.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://assets.adobedtm.com/	590c166890af9420_0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153089081&cv=	49aa4220a457b136_0.0.dr	false		high
https://secure.na1.echocdn.com/resource/N2072685269/bundles/lib.jsaD	05ca81086730b0ae_0.0.dr	false	Avira URL Cloud: safe	unknown
https://secure.na1.echocdn.com/resource/575148118.en_US/bundles/translations.jsaD	8027b623f35c2ec3_0.0.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/	Network Action Predictor-journal.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153046761&cv=	c241fa434dc29cb4_0.0.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCbbd93c1920fd422b84787f67ddbfbe5	78f045ae79daf673_0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153083618&cv=	0324f7f3b483c3a8_0.0.dr	false		high
https://echosign.com/	4ec9e1c5a741aaf6_0.0.dr	false		high
http://certs.godaddy.com/repository/1301	9FE5AC4619D265EF6BFD31DF947C4A78_1A77B2E5EE36D785C1990CDF7096A9980.1.dr	false		high
https://secure.na1.echocdn.com/resource/N2013330637.en_US/bundles/app-esign.js	b97feba0e8a4d40d_0.0.dr	false	Avira URL Cloud: safe	unknown
https://salesforceintegration.na1.echosign.com/public/loginAdobe	History-journal.0.dr	false		high
https://fb.me/react-async-component-lifecycle-hooks	c399d094bae59d4c_0.0.dr	false		high
https://salesforceintegration.na1.echosign.com/account/home28Adobe	History Provider Cache.0.dr	false		high
https://secure.na1.echocdn.com/resource/783075475/bundles/all.js	f40f4f0b23e51806_0.0.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153083689&cv=	d9cda90db0fdbb41_0.0.dr	false		high
https://salesforceintegration.na1.echosign.com/account/homeAdobe	History-journal.0.dr	false		high
https://servedby.flashtalking.com/container/13539;99030;10307;iframe/?ftXRef=&ftXValue=&ftXType=&ftX	Current Session.0.dr	false		high
https://static.ads-twitter.com/uwt.js	528df7fa00e0aa0d_0.0.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC6f46e43fa6d44dbeb45cc5801ffded0	3bf68f3655613904_0.0.dr	false		high
https://static.adobelogin.com/	Network Action Predictor-journal.0.dr	false		high
https://secure.na1.echocdn.com/resource/575148118.en_US/bundles/translations.js	601443e803be0797_0.0.dr, 8027b623f35c2ec3_0.0.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153061735&cv=	eb87fa931a03c38b_0.0.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f1c1db5355c3/8eab40211f6d/RC2c6ff980f388415599d7dff8c94110c	566b774c237d48e7_0.0.dr	false		high
https://salesforceintegration.na1.echosign.com	Current Session.0.dr	false		high
https://salesforceintegration.na1.echosign.com/images/favicon.2.ico%	Favicons-journal.0.dr	false		high
http://crl.godaddy.com/repository/gdroot.crl0J	EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D0.1.dr	false		high
https://echosign.com/iL	dfe652550251f803_0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153080645&cv=	eac8a15c6c5215b4_0.0.dr	false		high
https://cdn.cookielaw.org/	Network Action Predictor-journal.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153091982&cv=	913057def580ecbf_0.0.dr	false		high
https://salesforceintegration.na1.echosign.com/public/login28Adobe	History Provider Cache.0.dr	false		high
https://universal.iperceptions.com/wrapper.jsaD	ce2c17b9c6edf534_0.0.dr	false		high
https://universal.iperceptions.com/core/IpEngine_v77.8.jsaD	979d87bbdfbc03ea_0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153041435&cv=	7f9a337344e8d334_0.0.dr	false		high
https://api.demandbase.com/api/v2/ip.json?key=e4086fa3ea9d74ac2aae2719a0e5285dc7075d7b&rnd=8091&call	147a77f6239e9793_0.0.dr	false		high
https://feedback.googleusercontent.com	manifest.json0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153046755&cv	4653468daf61afbd_0.0.dr	false		high
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0ba91aa6ae29d08a_0.0.dr, dfe652550251f803_0.0.dr	false		high
https://salesforceintegration.na1.echosign.com/public/login	Current Session.0.dr, Favicons-journal.0.dr	false		high
https://echosign.com/Lc	601443e803be0797_0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153067628&cv=	65948dfcb396ab14_0.0.dr	false		high
https://echosign.com/P	f40f4f0b23e51806_0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153080652&cv	2f232636a3c41413_0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153089085&cv	dd8051d6c8c91aef_0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153083696&cv=	8c5404bc44834b19_0.0.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC2a643f872978403daaac6c6eb27b1c2	6632e6d3b53c8a95_0.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153061915&cv=	549ad35069713461_0.0.dr	false		high
https://use.typekit.net/pfu1huz.jsaD	tahoma.ttf.0.dr	false		high
https://use.typekit.net/af/cb695f/000000000000000000017701/27/	tahoma.ttf.0.dr	false		high
https://assets.adobedtm.com/extensions/EP5e9ec493dfa0465eaa797b523b09d3f7/AppMeasurement_Module_Audi	aee0cc06edbfd9a6_0.0.dr	false		high
https://use.typekit.net/glm4yoq.js	f2b6200d7e4bca13_0.0.dr	false		high
https://secure.na1.echocdn.com/	Network Action Predictor-journal.0.dr	false	Avira URL Cloud: safe	unknown
https://snap.licdn.com/li.lms-analytics/insight.beta.min.js	10d4e9eb0facc393_0.0.dr	false		high
http://trust.echosign.com/Adobe	History-journal.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153046767&cv=	d9382c644a66a571_0.0.dr	false		high
https://connect.facebook.net/signals/config/1772359959706965?v=2.9.29&r=stable	a2fd9463fb457a49_0.0.dr	false		high
https://js-agent.newrelic.com/nr-1184.min.js	4ec9e1c5a741aaf6_0.0.dr	false		high
https://secure.na1.echocdn.com/resource/N2072685269/bundles/lib.js	f5103188e5b166e5_0.0.dr	false	Avira URL Cloud: safe	unknown
https://echosign.com/q	0fca6c6884c3310a_0.0.dr	false		high
https://salesforceintegration.na1.echosign.com/account/home	Current Session.0.dr, Favicons-journal.0.dr	false		high
https://salesforceintegration.na1.echosign.com/public/forgotPassword	Current Session.0.dr	false		high
https://mozilla.github.io/pdf.js/build/pdf.js	ec67ea716ad6b4ab_0.0.dr	false	Avira URL Cloud: safe	unknown
https://universal.iperceptions.com/core/IpEngine_v77.8.js	979d87bbdfbc03ea_0.0.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
216.223.26.60	unknown	United States	29791	VOXEL-DOT-NETUS	false
52.49.226.218	unknown	United States	16509	AMAZON-02US	false
54.76.90.77	unknown	United States	16509	AMAZON-02US	false
185.64.190.80	unknown	United Kingdom	62713	AS-PUBMATICUS	false
52.51.205.248	unknown	United States	16509	AMAZON-02US	false
104.16.148.64	unknown	United States	13335	CLOUDFLARENETUS	false
104.20.184.68	unknown	United States	13335	CLOUDFLARENETUS	false
65.9.68.76	unknown	United States	16509	AMAZON-02US	false
52.31.234.119	unknown	United States	16509	AMAZON-02US	false
35.227.248.159	unknown	United States	15169	GOOGLEUS	false
192.132.33.46	unknown	United States	18568	BIDTELLECTUS	false
185.33.220.243	unknown	Netherlands	29990	ASN-APPNEXUS	false
65.9.60.66	unknown	United States	16509	AMAZON-02US	false
65.9.68.129	unknown	United States	16509	AMAZON-02US	false
185.63.144.5	unknown	United States	14413	LINKEDINUS	false
89.207.16.204	unknown	Sweden	25751	VALUECLICKUS	false
185.60.216.35	unknown	Ireland	32934	FACEBOOKUS	false
172.217.18.2	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	unknown	United States	15133	EDGECASTUS	false
185.29.133.58	unknown	United Kingdom	30419	MEDIAMATH-INCUS	false
52.71.63.232	unknown	United States	14618	AMAZON-AESUS	false
172.217.21.195	unknown	United States	15169	GOOGLEUS	false
65.9.68.122	unknown	United States	16509	AMAZON-02US	false
172.217.21.194	unknown	United States	15169	GOOGLEUS	false
65.9.68.28	unknown	United States	16509	AMAZON-02US	false
52.71.63.230	unknown	United States	14618	AMAZON-AESUS	false
172.217.16.193	unknown	United States	15169	GOOGLEUS	false
65.9.68.22	unknown	United States	16509	AMAZON-02US	false
104.18.12.5	unknown	United States	13335	CLOUDFLARENETUS	false
35.244.159.8	unknown	United States	15169	GOOGLEUS	false
185.94.180.126	unknown	Netherlands	35220	SPOTX-AMSNL	false
65.9.68.10	unknown	United States	16509	AMAZON-02US	false
52.18.215.87	unknown	United States	16509	AMAZON-02US	false
199.232.56.157	unknown	United States	54113	FASTLYUS	false
79.125.117.125	unknown	Ireland	16509	AMAZON-02US	false
52.209.86.30	unknown	United States	16509	AMAZON-02US	false
91.228.74.133	unknown	United Kingdom	27281	QUANTCASTUS	false
104.244.42.69	unknown	United States	13414	TWITTERUS	false
104.244.42.3	unknown	United States	13414	TWITTERUS	false
185.60.216.19	unknown	Ireland	32934	FACEBOOKUS	false
172.217.23.162	unknown	United States	15169	GOOGLEUS	false
35.181.18.61	unknown	United States	16509	AMAZON-02US	false
54.171.42.90	unknown	United States	16509	AMAZON-02US	false
52.213.176.171	unknown	United States	16509	AMAZON-02US	false
52.49.193.31	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.1
192.168.2.7
127.0.0.1

General Information

Joe Sandbox Version:	31.0.0 Red Diamond
Analysis ID:	327173
Start date:	04.12.2020
Start time:	23:22:44
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 51s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	https://salesforceintegration.na1.echosign.com/public/esign?tsid=CBFCIBAA3AAABLblqZhAv8w5X9-M6K9C_pt3vaFhbkppWpcrBNdnOmITgk-uSlBjm6Gn2lk_nh01EWLf9pwaAON6vcGZEvcybCP58Egt9&
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@45/304@76/49
Cookbook Comments:	Adjust boot time Enable AMSI Browse: https://salesforceintegration.na1.echosign.com/account/home Browse: https://www.adobe.com/go/adobesign-user-guide Browse: https://helpx.adobe.com/sign/tutorials.html Browse: https://www.adobe.com/go/learn_esign_route_en?locale=en-US Browse: https://salesforceintegration.na1.echosign.com/account/audit?aid=CBJCHBCAABAAgHpFqF-2teRNj-eeGHsafS_9MmnMfwL3 Browse: https://www.adobe.com/legal/terms.na1securena1echosigncom.echo.html?rand=cppxur779u5qD34GwaKJb9FyJwY69-qg Browse: https://www.adobe.com/special/misc/consumerdisclosure.html Browse: https://www.adobe.com/legal/terms.na1securena1echosigncom.echo.html?rand=2MgkvrWaoi1TOE9M2IDvZwT6ppYxvW5F Browse: http://trust.echosign.com/ Browse: https://www.adobe.com/go/learn_esign_route_en Browse: https://www.adobe.com/legal/terms.na1securena1echosigncom.echo.html?rand=mjS3KMyTNt1cyZynIN1QQWaqCYTbPzL3 Browse: https://www.adobe.com/privacy.html
Warnings:	Show All Exclude process from analysis (whitelisted): RuntimeBroker.exe, backgroundTaskHost.exe, SgrmBroker.exe, svchost.exe TCP Packets have been reduced to 100 Created / dropped Files have been reduced to 100 Excluded IPs from analysis (whitelisted): 172.217.18.13, 216.58.212.163, 216.58.206.14, 172.217.16.142, 173.194.187.8, 173.194.182.74, 92.123.180.178, 92.123.180.177, 92.122.213.187, 92.122.213.200, 104.83.104.145, 151.101.2.110, 151.101.66.110, 151.101.130.110, 151.101.194.110, 216.58.212.138, 162.247.243.147, 162.247.243.146, 172.217.18.170, 216.58.207.42, 216.58.207.74, 216.58.206.10, 172.217.16.170, 216.58.210.10, 172.217.23.106, 172.217.16.138, 172.217.18.106, 172.217.22.106, 216.58.212.170, 142.250.74.202, 172.217.22.74, 172.217.21.234, 216.58.205.234, 172.217.18.10, 104.79.88.200, 193.104.215.58, 192.147.130.204, 104.79.88.193, 172.227.105.220, 2.20.142.211, 2.20.142.220, 104.79.88.64, 92.122.213.202, 92.122.213.240, 65.9.68.126, 65.9.68.3, 65.9.68.75, 65.9.68.63, 54.194.34.229, 52.49.10.211, 52.31.189.192, 52.17.159.102, 54.77.187.45, 54.154.80.156, 54.155.29.113, 54.76.63.210, 104.83.104.47, 104.79.89.5, 172.217.23.168, 204.79.197.200, 13.107.21.200, 34.246.227.69, 63.33.127.66, 99.80.199.35, 205.185.216.42, 205.185.216.10, 18.232.247.132, 52.72.148.74, 192.124.249.36, 192.124.249.23, 192.124.249.22, 192.124.249.41, 192.124.249.24, 151.101.2.49, 151.101.66.49, 151.101.130.49, 151.101.194.49, 52.138.200.61, 13.107.42.14, 216.58.208.36, 2.20.142.209, 2.20.142.210, 104.79.90.110, 54.194.191.134, 54.171.42.33, 34.255.166.243, 34.250.153.194, 99.81.11.244, 34.253.145.149, 52.255.188.83, 52.147.198.201, 46.228.164.13, 193.0.160.129, 69.173.144.165, 69.173.144.139, 69.173.144.138, 104.79.88.202, 40.126.1.130, 20.190.129.130, 20.190.129.24, 40.126.1.128, 20.190.129.19, 40.126.1.142, 20.190.129.17, 20.190.129.160, 104.83.106.43, 51.104.139.180, 172.217.16.131, 88.221.226.71, 172.217.18.99, 104.83.104.121, 173.194.188.102, 92.123.180.186, 2.20.84.251, 20.54.26.129, 51.11.168.160, 92.122.213.247, 92.122.213.194 Excluded domains from analysis (whitelisted): d.turn.com.akadns.net, r3---sn-4g5e6ns6.gvt1.com, www.everestjs.net.edgekey.net, cn-assets.adobedtm.com.edgekey.net, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, server.messaging.adobe.com, l-0005.l-msedge.net, clients2.google.com, use-stls.adobe.com.edgesuite.net, status.adobe.com, ssl-delivery.adobe.com.edgekey.net, afp.dotomi.weighted.com.akadns.net, www.google.com, data-status.stage.adobe.com, api-traffic01.trafficmanager.net, au-bg-shim.trafficmanager.net, helpx.adobe.com-cn.edgekey.net, dual-a-0001.a-msedge.net, cm.everesttech.net.akadns.net, data.status.adobe.com.edgekey.net, a1711.g.akamai.net, ris-prod.trafficmanager.net, a-emea.rfihub.com.akadns.net, iperceptions01.azureedge.net, ris.api.iris.microsoft.com, wwwimages.adobe.com, c.bing.com, translate.googleapis.com, dsum-sec.casalemedia.com.edgekey.net, clients.l.google.com, geo2.adobe.com, e4578.a.akamaiedge.net, h2.shared.global.fastly.net, e7933.dscd.akamaiedge.net, cds.f7f2q8c3.hwcdn.net, e4578.dscg.akamaiedge.net, c-bing-com.a-0001.a-msedge.net, geo.adobe.com.edgesuite.net, wildcard.evidon.com.edgekey.net, wwwimages2.adobe.com, e9706.dscg.akamaiedge.net, www.adobetag.com.edgekey.net, www.googletagmanager.com, iperceptions01.ec.azureedge.net, prod.fs.microsoft.com.akadns.net, china-wildcard.adobe.com.edgekey.net, client.messaging.adobe.com, accounts.google.com, geo.adobe.com, r1.sn-4g5ednss.gvt1.com, a767.dscg3.akamai.net, e5799.g.akamaiedge.net, cc-api-data.adobe.io, stls.adobe.com-cn.edgesuite.net, login.msa.msidentity.com, adobeid-na1.services.adobe.com, skypedataprdcoleus16.cloudapp.net, e7808.dscg.akamaiedge.net, wildcard.licdn.com.edgekey.net, e3153.g.akamaiedge.net, e6653.dscf.akamaiedge.net, wwwimages2.stage.adobe.com, arc.msn.com.nsatc.net, tls12.newrelic.com.cdn.cloudflare.net, e3153.b.akamaiedge.net, commerce.adobe.com, www.tm.lg.prod.aadmsa.akadns.net, helpx.adobe.com, adobe.com, login.live.com, audownload.windowsupdate.nsatc.net, update.googleapis.com, tp00.everesttech.net.akadns.net, e4937.f.akamaiedge.net, watson.telemetry.microsoft.com, www.gstatic.com, ocsp.godaddy.com.akadns.net, e9518.c.akamaiedge.net, cdn2.demdex.net.edgesuite.net, fs.microsoft.com, stls.adobe.com-cn.edgesuite.net.globalredir.akadns.net, content-autofill.googleapis.com, api-iperceptions03.cloudapp.net, e7933.dscg.akamaiedge.net, commerce.adobe.com.edgekey.net, www.tm.a.prd.aadg.akadns.net, www.googleapis.com, blobcollector.events.data.trafficmanager.net, a1815.dscr.akamai.net, r5---sn-4g5e6ns7.gvt1.com, r3.sn-4g5e6ns6.gvt1.com, a1049.g2.akamai.net, au.download.windowsupdate.com.edgesuite.net, www.googleadservices.com, pixel.rubiconproject.net.akadns.net, stats.adobe.com, r1---sn-4g5ednss.gvt1.com, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, china-wildcard.adobe.com.edgekey.net.globalredir.akadns.net, e8037.g.akamaiedge.net, redirector.gvt1.com, helpx.adobe.com-cn.edgekey.net.globalredir.akadns.net, bat.bing.com, a.rfihub.com.akadns.net, img-prod-cms-rt-microsoft-com.akamaized.net, www-linkedin-com.l-0005.l-msedge.net, sstats.adobe.com, p.typekit.net-v3.edgekey.net, e12841.d.akamaiedge.net, www-googletagmanager.l.google.com, f4.shared.global.fastly.net, ctldl.windowsupdate.com, e1723.g.akamaiedge.net, sync.search-gtm.spotxchange.com.akadns.net, r5.sn-4g5e6ns7.gvt1.com, data.status.adobe.com, skypedataprdcoleus17.cloudapp.net, bat-bing-com.a-0001.a-msedge.net, ocsp.godaddy.com, wwwimages2.stage.adobe.com.edgekey.net, www.adobe.com, a1988.dscg1.akamai.net, ssl-delivery.stage.adobe.com.edgekey.net Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtOpenFile calls found. Report size getting too big, too many NtQueryVolumeInformationFile calls found. Report size getting too big, too many NtWriteFile calls found. Report size getting too big, too many NtWriteVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
23:24:01	API Interceptor	3x Sleep call for process: chrome.exe modified

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	451603
Entropy (8bit):	5.009711072558331
Encrypted:	false
SSDEEP:	12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ
MD5:	A78AD14E77147E7DE3647E61964C0335
SHA1:	CECC3DD41F4CEA0192B24300C71E1911BD4FCE45
SHA-256:	0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
SHA-512:	DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101
Malicious:	false
Reputation:	low
Preview:	BDic.... ....6...."..Z..4g....6.2...{/...3...5....AF 1363.AF nm.AF pt.AF n1.AF p.AF tc.AF SM.AF M.AF S.AF MS.AF MNR.AF GDS.AF MNT.AF MH.AF MR.AF SZMR.AF MJ.AF MT.AF MY.AF MRZ.AF MN.AF MG.AF RM.AF N.AF MV.AF XM.AF DSM.AF SD.AF G.AF R.AF MNX.AF MRS.AF MD.AF MNRB.AF B.AF ZSMR.AF PM.AF SMNGJ.AF SMN.AF ZMR.AF SMGB.AF MZR.AF GM.AF SMR.AF SMDG.AF RMZ.AF ZM.AF MDG.AF MDT.AF SMNXT.AF SDY.AF LSDG.AF LGDS.AF GLDS.AF UY.AF U.AF DSGNX.AF GNDSX.AF DSG.AF Y.AF GS.AF IEMS.AF YP.AF ZGDRS.AF XGNVDS.AF UT.AF GNDS.AF GVDS.AF MYPS.AF XGNDS.AF TPRY.AF MDSG.AF ZGSDR.AF DYSG.AF PMYTNS.AF AGDS.AF DRZGS.AF PY.AF GSPMDY.AF EGVDS.AF SL.AF GNXDS.AF DSBG.AF IM.AF I.AF MDGS.AF SMY.AF DSGN.AF DSLG.AF GMDS.AF MDSBG.AF SGD.AF IY.AF P.AF DSMG.AF BLZGDRS.AF TR.AF AGSD.AF ZGBDRSL.AF PTRY.AF ASDGV.AF ASM.AF ICANGSD.AF ICAM.AF IKY.AF AMS.AF PMYTRS.AF BZGVDRS.AF SDRBZG.AF GVMDS.AF PSM.AF DGLS.AF GNVXDS.AF AGDSL.AF DGS.AF XDSGNV.AF BZGDRS.AF AM.AF AS.AF A.AF LDSG.AF AGVDS.AF SDG.AF LDSMG.AF EDSMG.AF EY.AF DRSMZG.AF PRYT.AF LZ

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1731
Entropy (8bit):	7.291895042341994
Encrypted:	false
SSDEEP:	48:panitq9APUPJqggnita8lnitq1+Zvl3oXS9As5RmEWqu5H99:pW9oUPJhz1+boavLJpu5
MD5:	9CC1D08F80D6BBA23965AAF5EF8F5BE0
SHA1:	E50E3D87E36BD0C66B817BDBE888DCCCD6103A0D
SHA-256:	1E22D4F350AA8461D899CA2F74B2A4A00148157651E48F08E30434E051B1DA0C
SHA-512:	8625039EEC3F55E7F61FEA6E594BE2C5E0147507A9497C6D972D5515BD3B4E883E53D2265D51362E0C9E3453F1E19E44989493E888A05E54715AD7C7E3F60FF6
Malicious:	false
Reputation:	low
Preview:	0..........0.....+.....0......0...0.....0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1.0...U....GoDaddy.com, Inc.100...U...'Go Daddy Root Validation Authority - G2..20201204145913Z0d0b0:0...+.........#o..K.....#....+...:....g(.....An ............20201204145913Z....20201206025913Z0....H............../..+.H...29.T.....#..........u1+..+.s..9....O.%.?..a.D....3=.x....L...c.N...\|.v.jv.~..$.-.W....#..S.9.A...H....}..07f8.3C.A....,..Y..v.6.....oK..>....wPc-.......i...3z.....#.....FP..%j...f..Z.rQ\|.."?..>;.A..3tE..QpG......l74dM,w...c;.=.;t-....0...0...0..g.........f...p.t0....H........0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1.0...U....GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20...200909070000Z..210909070000Z0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1.0...U....GoDaddy.com, Inc.100...U...'Go Daddy Root Validation Authority - G20.."0....H.............0.........'.....^Y.u..U.qU..."......-]XG(qk#.+....J...G.3

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Microsoft Cabinet archive data, 58936 bytes, 1 file
Category:	dropped
Size (bytes):	58936
Entropy (8bit):	7.994797855729196
Encrypted:	true
SSDEEP:	768:A2CCXehkvodpN73AJjDzh85ApA37vK5clxQh+aLE/sSkoWYrgEHqCinmXdBDz2mi:i/LAvEZrGclx0hoW6qCLdNz2pj
MD5:	E4F1E21910443409E81E5B55DC8DE774
SHA1:	EC0885660BD216D0CDD5E6762B2F595376995BD0
SHA-256:	CF99E08369397577BE949FBF1E4BF06943BC8027996AE65CEB39E38DD3BD30F5
SHA-512:	2253849FADBCDF2B10B78A8B41C54E16DB7BB300AAA1A5A151EDA2A7AA64D5250AED908C3B46AFE7262E66D957B255F6D57B6A6BB9E4F9324F2C22E9BF088246
Malicious:	false
Reputation:	low
Preview:	MSCF....8.......,...................I........S........LQ.v .authroot.stl..0(/.5..CK..8T....c_.d...:.(.....].M$[v.4CH)-.%.QIR..$t)Kd...D.....3.n..u..............\|..=H4.U=...X..qn.+S..^J.....y.n.v.XC...3a.!.....]...c(...p..]..M.....4.....i...}C.@.[..#xUU..D..agaV..2.\|.g...Y..j.^..@.Q......n7R...`.../..s...f...+...c..9+[.\|0.'..2!.s....a........w.t:..L!.s....`.O>.`#..'.pfi7.U......s..^...wz.A.g.Y........g......:7{.O.......N........C..?....P0$.Y..?m....Z0.g3.>W0&.y](....].`>... ..R.qB..f.....y.cEB.V=.....hy}....t6b.q./~.p........60...eCS4.o......d..}.<,nh..;.....)....e..\|....Cxj...f.8.Z..&..G.......b.....OGQ.V..q..Y.............q...0..V.Tu?.Z..r...J...>R.ZsQ...dn.0.<...o.K....\|.....Q...'....X..C.....a;...Nq..x.b4..1,}.'.......z.N.N...Uf.q'.>}........o\.cD"0.'.Y.....SV..g...Y.....o.=.....k..u..s.kV?@....M...S.n^.:G.....U.e.v..>...q.'..$.)3..T...r.!.m.....6...r,IH.B <.ht..8.s..u[.N.dL.%...q....g..;T..l..5...\.....g...`...........A$:...........

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9FE5AC4619D265EF6BFD31DF947C4A78_1A77B2E5EE36D785C1990CDF7096A998 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	7.304464396501617
Encrypted:	false
SSDEEP:	48:+ni/wTt0exxcorNnitxUni/1+Zvl3oXS9A0d5RxEOaKIhEe07P:9wT+/1+boaFLeHK4W
MD5:	F2C1248D2BCED31FAA8486E849EB093B
SHA1:	4A2DA8374981EA6EF76B04FFA1A291C6C3FCB2A9
SHA-256:	C163F955420547A4E42E1E2A23930883CF7B898B94EF494C5A2DE34FDFB20EA2
SHA-512:	3CFDC03069AC3813C5EF1FF57EA8156097230E4F1D91ADA8FDB283FDE74183B5EE3A6E180B33DD9CCF66846F926A8AEBA1CD9F2288480BF472311C1C091F5B78
Malicious:	false
Reputation:	low
Preview:	0..........0.....+.....0......0...0...z0x1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1.0...U....GoDaddy Inc.1+0)..U..."Go Daddy Validation Authority - G2..20201203232713Z0l0j0B0...+..........._lkv...8..f..R34N..@.'..4.0.3..l..,......7..w......20201203232713Z....20201205112713Z0....H.............x...N..........;.&.N..gQ....gyM.1...7.A..".$.P..d.QN...9.....].P.+..$..]a....NB.......H}tU.1..p.[1..B.:},..>..BrW.O#?...C.i...m..T>O......Zy........`<.t..Z.....5Zv..2_.-c;!z.+.D.e..k..dKa.".......70......P.O..Q....O7.$...T..5.L.._.......%t.1.Q....0...0...0..............X...I0....H........0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1.0...U....GoDaddy.com, Inc.1-0+..U...$http://certs.godaddy.com/repository/1301..U...Go Daddy Secure Certificate Authority - G20...200909070000Z..210909070000Z0x1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1.0...U....GoDaddy Inc.1+0)..U..."Go Daddy Validation Authority - G20.."0....H.............0.........'.....^Y.u..U.qU.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1697
Entropy (8bit):	7.299436864667709
Encrypted:	false
SSDEEP:	48:snitqJUYjy/H6J+uVnitqsXA49e5REMeZ6+23wQ:UJG/H6vsw49eEMeZ6+Y
MD5:	664C0C6EC3F36940303C24AB0631EB54
SHA1:	A281AA82766675421CB1012314DF8DCB62C4F60C
SHA-256:	A82DD346F9E94D3D15414E97884334A749BAEBCCBE328CCBE8C0FE2D025E38C1
SHA-512:	521D800193469AF937B95578337A10E51AA9C37813008C589A5F0E193D5B802846EE3F1B751A2E8A29CCCB7C7163C5410DA555FF0A3C6CFBC6A712C891157396
Malicious:	false
Reputation:	low
Preview:	0..........0.....+.....0......0...0......0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1.0...U....GoDaddy.com, Inc.100...U...'Go Daddy Root Validation Authority - G1..20201203232133Z0f0d0<0...+......... .....]..J^.y_..F<......L.q.a.=...j...........20201203232133Z....20201205112133Z0....H.............[Qx&q...\|%...........t...r...O2T.;<..T..............}.K..._....j^...3.H>R.......#.`.b......d5..G.>:...J..g.gG'..&_..Q.#..USv...."...#o2...a..Nk'.4!u......:..b^.{G..W.b"...ps.zo.%........G.3^..F.....g.5t.M.S..._.X.q=0....-.jjUsp2..#..H4...Q....b0..^0..Z0..B.......1g...r.0....H........0c1.0...U....US1!0...U....The Go Daddy Group, Inc.110/..U...(Go Daddy Class 2 Certification Authority0...161213070000Z..211213070000Z0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1.0...U....GoDaddy.com, Inc.100...U...'Go Daddy Root Validation Authority - G10.."0....H.............0.............}...@.H........j.b.2.c....'eSA...6""2.hf.m.m9........_N."gV..{.J"{..0f.W$.X

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	900
Entropy (8bit):	3.7851212778376278
Encrypted:	false
SSDEEP:	24:d4wyPV13MhmyFqZgzTwyPV13MhmyFqZgN:d4wkV1XyFEgzTwkV1XyFEgN
MD5:	CCF87252054F814647B7FC821C1E6349
SHA1:	DA3B5A69C5E6954ED6BB89FD1465BFE3A6A36F7D
SHA-256:	B3EF2B96B1698456577B21D00B2BE11CECBFF7E72FCC48EA6EB4D0B28380B418
SHA-512:	B69FE02CE0D65BA14ACCA3E8BA069B574F0405E30B25F407A6E7DBDC7A3E4406CBF9136462A0E964C1B6FA19C1222C6E5EA780BD51B86D49B9BA608640E1B0B4
Malicious:	false
Reputation:	low
Preview:	p...... ........m.}.....(....................................................... .........".N.......V...............h.t.t.p.:././.o.c.s.p...g.o.d.a.d.d.y...c.o.m././.M.E.I.w.Q.D.A.%.2.B.M.D.w.w.O.j.A.J.B.g.U.r.D.g.M.C.G.g.U.A.B.B.Q.d.I.2.%.2.B.O.B.k.u.X.H.9.3.f.o.R.U.j.4.a.7.l.A.r.4.r.G.w.Q.U.O.p.q.F.B.x.B.n.K.L.b.v.9.r.0.F.Q.W.4.g.w.Z.T.a.D.9.4.C.A.Q.c.%.3.D...".e.5.0.e.3.d.8.7.e.3.6.b.d.0.c.6.6.b.8.1.7.b.d.b.e.8.8.8.d.c.c.c.d.6.1.0.3.a.0.d."...p...... ........m.}.....(.................".N.......{.......................{... .........".N.......V...............h.t.t.p.:././.o.c.s.p...g.o.d.a.d.d.y...c.o.m././.M.E.I.w.Q.D.A.%.2.B.M.D.w.w.O.j.A.J.B.g.U.r.D.g.M.C.G.g.U.A.B.B.Q.d.I.2.%.2.B.O.B.k.u.X.H.9.3.f.o.R.U.j.4.a.7.l.A.r.4.r.G.w.Q.U.O.p.q.F.B.x.B.n.K.L.b.v.9.r.0.F.Q.W.4.g.w.Z.T.a.D.9.4.C.A.Q.c.%.3.D...".e.5.0.e.3.d.8.7.e.3.6.b.d.0.c.6.6.b.8.1.7.b.d.b.e.8.8.8.d.c.c.c.d.6.1.0.3.a.0.d."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	326
Entropy (8bit):	3.123186963792904
Encrypted:	false
SSDEEP:	6:kKFswwDN+SkQlPlEGYRMY9z+4KlDA3RUegeT6lf:1kPlE99SNxAhUegeT2
MD5:	01B6A92211D8C5FBECE8B7D9A7B7A062
SHA1:	BD6CB9C2CE91A4CEEE44424EA9811C578D90F785
SHA-256:	A7729120D381804096F78EA0F7CE6C6D0F6D1019E364BF1FFF2E4F54FF5D3B94
SHA-512:	2E8A0752F2DA28785D1E6BE1BA43EADA5FC051BAC82FFF82412407F07C8FB49A50D8C4FFC90A6AFC13FCC2E0A655B9461272E920D21E90FDBE0FA9BD3C76196E
Malicious:	false
Reputation:	low
Preview:	p...... ...............(....................................................... ..........Y.......$...........8...h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.6.9.5.5.9.e.2.a.0.d.6.1.:.0."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9FE5AC4619D265EF6BFD31DF947C4A78_1A77B2E5EE36D785C1990CDF7096A998 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	948
Entropy (8bit):	3.7802791566403946
Encrypted:	false
SSDEEP:	24:I+Ihn8B0tQpusnu5d1MW+Ihn8B0tQpusnu5d1M9:I40SusuhMW40SusuhM9
MD5:	27F9EAD8028E71BB943D442C50287EE2
SHA1:	5C3065876D1A013A993523C4D7954AEA7F1C03E5
SHA-256:	E90D53CBE492B6C254CE8C6A9C1A4743EC46FB507724657CCFFC93DDEAAEEF88
SHA-512:	F5E3254E813AC99ED7450081631D18EAAC0886B71D2BBAC9C96FC60C740B2D354B16287D77A4ECD2F460AF6B3245A31D2AAF89EA27259B0BD51B621B5926C1B3
Malicious:	false
Reputation:	low
Preview:	p...... ...............(....................................................... .........8.........V...............h.t.t.p.:././.o.c.s.p...g.o.d.a.d.d.y...c.o.m././.M.E.o.w.S.D.B.G.M.E.Q.w.Q.j.A.J.B.g.U.r.D.g.M.C.G.g.U.A.B.B.S.2.C.A.1.f.b.G.t.2.6.x.P.k.O.K.X.4.Z.g.u.o.U.j.M.0.T.g.Q.U.Q.M.K.9.J.4.7.M.N.I.M.w.o.j.P.X.%.2.B.2.y.z.8.L.Q.s.g.M.4.C.C.Q.D.J.N.w.I.Q.d.4.O.4.1.w.%.3.D.%.3.D...".4.a.2.d.a.8.3.7.4.9.8.1.e.a.6.e.f.7.6.b.0.4.f.f.a.1.a.2.9.1.c.6.c.3.f.c.b.2.a.9."...p...... ...............(.................8................................... .........8.........V...............h.t.t.p.:././.o.c.s.p...g.o.d.a.d.d.y...c.o.m././.M.E.o.w.S.D.B.G.M.E.Q.w.Q.j.A.J.B.g.U.r.D.g.M.C.G.g.U.A.B.B.S.2.C.A.1.f.b.G.t.2.6.x.P.k.O.K.X.4.Z.g.u.o.U.j.M.0.T.g.Q.U.Q.M.K.9.J.4.7.M.N.I.M.w.o.j.P.X.%.2.B.2.y.z.8.L.Q.s.g.M.4.C.C.Q.D.J.N.w.I.Q.d.4.O.4.1.w.%.3.D.%.3.D...".4.a.2.d.a.8.3.7.4.9.8.1.e.a.6.e.f.7.6.b.0.4.f.f.a.1.a.2.9.1.c.6.c.3.f.c.b.2.a.9."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	916
Entropy (8bit):	3.7904905201147323
Encrypted:	false
SSDEEP:	12:8wrQEFDsFrvgxE0P6GANMC3yldg4/IrQEFDsFrvgxE0P6GANMC3yldg4/:8wV4xaVSGAm3H/IV4xaVSGAm3H/
MD5:	1E26BC3BEA5BDD538CCAD68E3F846A14
SHA1:	D75546C121ED63E5993359B85286F9BCAC83EDA3
SHA-256:	32D2DCED797C2CE4C8478DF22360AC39D77B2981ACC2CCEF50F4AE6652E0129D
SHA-512:	7D77D3A04974080A8AAD53F457F4EAEAC031EA6E361C03C3F7C9F68822C792A7344FE75F4A375D61405E9CE7D81B3A96E108A347FFCADDE2E375E5D12CCD867B
Malicious:	false
Reputation:	low
Preview:	p...... .........G_.....(....................................................... ........<..........V...............h.t.t.p.:././.o.c.s.p...g.o.d.a.d.d.y...c.o.m././.M.E.Q.w.Q.j.B.A.M.D.4.w.P.D.A.J.B.g.U.r.D.g.M.C.G.g.U.A.B.B.T.k.I.I.n.K.B.A.z.X.k.F.0.Q.h.0.p.e.l.3.l.f.H.J.9.G.P.A.Q.U.0.s.S.w.0.p.H.U.T.B.F.x.s.2.H.L.P.a.H.%.2.B.3.a.h.q.1.O.M.C.A.x.v.n.F.Q.%.3.D.%.3.D...".a.2.8.1.a.a.8.2.7.6.6.6.7.5.4.2.1.c.b.1.0.1.2.3.1.4.d.f.8.d.c.b.6.2.c.4.f.6.0.c."...p...... .........G_.....(................<...................................... ........<..........V...............h.t.t.p.:././.o.c.s.p...g.o.d.a.d.d.y...c.o.m././.M.E.Q.w.Q.j.B.A.M.D.4.w.P.D.A.J.B.g.U.r.D.g.M.C.G.g.U.A.B.B.T.k.I.I.n.K.B.A.z.X.k.F.0.Q.h.0.p.e.l.3.l.f.H.J.9.G.P.A.Q.U.0.s.S.w.0.p.H.U.T.B.F.x.s.2.H.L.P.a.H.%.2.B.3.a.h.q.1.O.M.C.A.x.v.n.F.Q.%.3.D.%.3.D...".a.2.8.1.a.a.8.2.7.6.6.6.7.5.4.2.1.c.b.1.0.1.2.3.1.4.d.f.8.d.c.b.6.2.c.4.f.6.0.c."...

C:\Users\user\AppData\Local\Google\Chrome\User Data\1e0113c9-9e82-4e77-8bb4-4c152a95fab8.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	92068
Entropy (8bit):	3.7514239854990903
Encrypted:	false
SSDEEP:	384:rrDAU2VX6eZ0LNIrBvEg3r4ejH+bGvyr9i0mxriq+drZgm9qxy4g07OWCYNh14R2:hil5GGLDIeD6sWAf7aIKy4EHZ
MD5:	294E209242434942AE3951963049F0B1
SHA1:	9720757321C9DE374A30B5BF7E64DAA82A0C8A25
SHA-256:	CCD94B187F6BCD3D3BFD235A5707828B82B8D70CFDCA0E4C8BADB221452F1442
SHA-512:	72770D9D27E9E5625D97E12BA810F828D90D3B8CFFF4E22DBA1D8F2AFCF34CBA8D9AF86B3BB4758252CBBDBF1F382044482A23A14CA30F3D2AEB805CEAA59E77
Malicious:	false
Reputation:	low
Preview:	.g.................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0........C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\45f79ea4-f84c-45ea-8ca2-74bbe01adfe7.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	160775
Entropy (8bit):	6.083135645809343
Encrypted:	false
SSDEEP:	3072:116T3O7XlCfVwBIazgRRJFcbXafIB0u1GOJmA3iuRm:T6KjlCfZakRRHaqfIlUOoSiuRm
MD5:	044F3D847E637C3146F1F072F06E6726
SHA1:	5734E9CA7A6520DB5D12B5A5EB006F735CC4D8A7
SHA-256:	26EB4FCD0B1BF5A7805B59282B493848267832875BA371D4C897E2A066B5F875
SHA-512:	83B030034768E1DB69F872501DEF00D91CD52A0FF74C9D2C854DE179137D8F8C6C32EC22C0B4EC44BFFC853FE1159B53FD1BFFC2195F345E46A995183F78D279
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.607153020870436e+12,"network":1.607120623e+12,"ticks":103871008.0,"uncertainty":5177937.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016299860"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\4e491489-597c-40c2-b2a6-efb065a5d89b.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	160524
Entropy (8bit):	6.082689904424678
Encrypted:	false
SSDEEP:	3072:1Eo6T3O7XlCfVwBIazgRRJFcbXafIB0u1GOJmA3iuRm:So6KjlCfZakRRHaqfIlUOoSiuRm
MD5:	B79D625EB4EE3EEC45FC4BEC48D8482F
SHA1:	27F96CB04954F16B51834296D2AAD2CE6C6F2331
SHA-256:	C81D6AB7DEF5604C347E9C5239B9DF2DEA7FD95FAB22B1C9F6D0793FE03804DA
SHA-512:	1206EC57FE7920C7C933E2788147C9483C4CA755F18BBAD759FD6740299E15B15DDAFCE2F69233F5896EFD5F23D0918FACFCF91FEF74855810AAA7D903A688DC
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.607153020870436e+12,"network":1.607120623e+12,"ticks":103871008.0,"uncertainty":5177937.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016299860"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\5e3edd61-c9fb-4cd4-afcb-4c52dbbb22c0.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	160523
Entropy (8bit):	6.082691244466275
Encrypted:	false
SSDEEP:	3072:q4W6T3O7XlCfVwBIazgRRJFcbXafIB0u1GOJmA3iuRm:tW6KjlCfZakRRHaqfIlUOoSiuRm
MD5:	D48F8EE0B436DEED099A6501D01FDCA1
SHA1:	02C10D4A809B47E7644834AFB5EC7996E821CC54
SHA-256:	CE3D49E8BF0FC0906D5BCBF2CF06F2B8517BDAA4DDE06A2D982DD324764E9CC7
SHA-512:	D59FAEE37E287F19B3E4ED50A2A9F1C3E458BDF6ADA0642A5C601A4EB8A9A0BC171C7750E666BD851B529E1B24997144AF759DCAA8726B4D619467D858A21A47
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.607153020870436e+12,"network":1.607120623e+12,"ticks":103871008.0,"uncertainty":5177937.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016607996"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\5f3c5bae-ca13-44b7-abc2-1fab6134c3f8.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	160523
Entropy (8bit):	6.0826903232705485
Encrypted:	false
SSDEEP:	3072:qDU6T3O7XlCfVwBIazgRRJFcbXafIB0u1GOJmA3iuRm:GU6KjlCfZakRRHaqfIlUOoSiuRm
MD5:	611CB826993DFB16925CAC5BAFF91C8E
SHA1:	47156EABB3DE22504AA07A9546712A71E1E4B26D
SHA-256:	D8452069BA73C09E8B187AA584BCDAC95A12B29D0E6900898FC326F4D72363B6
SHA-512:	17F81BEA7DBDF336655A89DCFA0CD3CD8F8662F20FCC71F444E45973CC13BCEB98386BBA4EE57DBF3E198DE20580B7C9053E2CCCDB0EBEB596080687BEC894CB
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.607153020870436e+12,"network":1.607120623e+12,"ticks":103871008.0,"uncertainty":5177937.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016607996"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\5f74ee8f-f947-4c7a-8dea-88188333b7d1.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	160775
Entropy (8bit):	6.083140223516131
Encrypted:	false
SSDEEP:	3072:1j6T3O7XlCfVwBIazgRRJFcbXafIB0u1GOJmA3iuRm:Z6KjlCfZakRRHaqfIlUOoSiuRm
MD5:	B5E601CDD4E64A5CF678A7059775CCAF
SHA1:	10F11C2EC1843C79605E2436100E5B4E5E49AE0E
SHA-256:	80E1D1D0FAA9E37C0F1008703DBFCE2EC54EAF57E2AB8900E73496C3455FFDCA
SHA-512:	DAB00F09A141A0276667F382A1FE54091D45ED54E810532DD112773DD9ECA8603B431974C3EEE260BD3A8A90F32BF8D7D4415361135421D3A26546B9301C8E04
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.607153020870436e+12,"network":1.607120623e+12,"ticks":103871008.0,"uncertainty":5177937.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016299860"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.254162526001658
Encrypted:	false
SSDEEP:	3:FkXft0xE1G1mstft0xE1G1mstft0xE1n:+ftIE1G1mkftIE1G1mkftIE1n
MD5:	E9224A19341F2979669144B01332DF59
SHA1:	F7F760C7104457DF463306A7F7BAE0142EFCEB5B
SHA-256:	47DD519C226D23F203ACAE0EC44DF9BB6208828E24F726E1602EA52F63C3E2BE
SHA-512:	4184302DEB5009D767FECFC150F580DD57D5CF9CF3BFEB7E52C9F3340E5E6499251B9F0DFF37F0454411FED9046880E0A9204312D021294256372C916B8155AC
Malicious:	false
Reputation:	low
Preview:	sdPC....................s}.....M..2.!..%sdPC....................s}.....M..2.!..%sdPC....................s}.....M..2.!..%

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\04114083-2e43-431d-a15f-0304e593ac2a.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	modified
Size (bytes):	7237
Entropy (8bit):	4.813639610548604
Encrypted:	false
SSDEEP:	192:JTOCXGDHzastoKaziyz/goXqLv/bBFVUSP0Mn6ubzL68/XhK7Q+m6rJ6k0utulzU:JTOCXG7ustoKaziyz/gIqLv/bBFVUSPi
MD5:	0704D42FC4B5DEF3D738BADFE317E1AB
SHA1:	0AA82773D06255DE0FB77A2CAD9AFE59064F3C94
SHA-256:	2C532CA7E24D98FFFBA089A3C8FDAF46B6D7C9A83C39AFD50443C9A8AAB07D16
SHA-512:	AF9AC3FF33DE81997D84AA726A40EF4285FD2C71A475036BB79758934D70F8CDFC964A972671E7F125743211AC9DCA512476B7AEAA8E0ABA5B925DAA2BE7EBA9
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://fonts.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"isolation":[],"server":"https://play.google.com","supports_spdy":true},{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13254218622250144","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://redirector.gvt1.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13254218622257376","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"exp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\27e369e3-608e-4837-bb47-b00d1c167ba4.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	22614
Entropy (8bit):	5.535440568772363
Encrypted:	false
SSDEEP:	384:kzptkLlGIX01kXqKf/pUZNCgVLH2HfD9rUYHGQnTjQ04LS:5Ll101kXqKf/pUZNCgVLH2Hf5rUMGQnr
MD5:	1512F5B637ED49972D9D8627B9390767
SHA1:	BC421E58FDAF38615C5B43EA40E0972688A22DED
SHA-256:	06D43D29B4DFED334BE5B0B7BA25C5EA41D3372CE081FD2BB1BB79BECA1C7083
SHA-512:	144BBBDA4AD6D742EB33C37A9D467442E1FCE02E2BCA64783908BCFFFDCA6885534B7CC17BCCDF9A516F6B426D97DA9BF14915BDEDE85595FAD843111BF178FA
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13251626617298738","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\30747068-b7cf-4c32-b41b-65f5a8f2cd65.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	22613
Entropy (8bit):	5.535256810775196
Encrypted:	false
SSDEEP:	384:kzptkLlGIX01kXqKf/pUZNCgVLH2HfD9rUYHGJnTjW04C:5Ll101kXqKf/pUZNCgVLH2Hf5rUMGJnt
MD5:	0E882BFA07CE2715E05A8EFF635CF833
SHA1:	4BE35178517C1B06956F730F4356A4B08D591F40
SHA-256:	6AC48028D8D2D890C42AF3BBAE097A19016A1125DB9240A7E4F8712EAD92EDC5
SHA-512:	38755006DED322BCFE27FB341BDDF5C5E128C45D4BB6A6AE291D8AE8C54E8447AF607E7F3AEAB57FCE209F18E0DEFAFF70944FD6E4D2D47E0FB8740757C5E78E
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13251626617298738","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\321f7ea9-abb7-4680-85d2-3dac5e21593e.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3f71cbf8-2698-4704-80bd-95d841e9d2bf.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2209
Entropy (8bit):	5.5852549144921015
Encrypted:	false
SSDEEP:	48:YfRUlXEUP6UUhH0PwUZ7UToUnjUGseKUeTU9WqPeUer2UefawUOUenw:4UaUyUURUZ7UcUjUG3KUOUHPeU9UEHUF
MD5:	FB52DF8EA766B1DEC0694386FB0F7D2D
SHA1:	19144B583EB3E0BB957B4A351D9390F8D6C65630
SHA-256:	529410E89623644C3A576440D2EC87943E563D0BFD2D07EF5659A046A77335CE
SHA-512:	CD1594EF6CAFED785F6AF09AF5BE4C5D73CB60239682B20E2C711B246A8B1911D7E5FF93460B38EE793CB9C2ED2D137E090F552EC6B6F46EFF30DB18462E357A
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1638689031.556716,"host":"N1Q2nRZPpXLTPB5x1AApcR2BYLtO7PQ4eeDdOX9VUjs=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1607153031.55672},{"expiry":1638689031.129009,"host":"OJAwwDug+gPr+xWjx2kFIFhHDQULu5ljftVMMZ74I4o=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1607153031.129014},{"expiry":1633014077.350499,"host":"OuKlWsMW1dkkbI1X/oi6o0Y95ZNSWnSoeaIXAEYPlv4=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1601478077.350503},{"expiry":1638689032.231867,"host":"Q2i8+5A3kREMoy37yPuUYKheqKsz3RQ2ENTog6mvPhc=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1607153032.231873},{"expiry":1607239430.689904,"host":"WYknkx9JAhu/Dw+LQoXCPmo3e56REYVja6s1C+iZzYE=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1607153030.689908},{"expiry":1638689032.090394,"host":"eMIhdBIeGO0Ugn/hljmbZogTnAA6ZNUajhwz+oVcsH0=","mode":"force-https","sts_include_subdomains":true,"sts_obs

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4a6cd9e7-dd1f-4bfc-8b6a-ad435453aa46.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5701
Entropy (8bit):	5.19313372425249
Encrypted:	false
SSDEEP:	96:njX7m44YhxW7cVXm/ok0JCKL8dkL1ObOTQVuwn:nj64HTgcpm64KukLu
MD5:	2948584433AD60CA3F0883AA319B6135
SHA1:	C748C99FD533C6F6889A5AD4732EA6EEDED9C9BF
SHA-256:	69B19A5AFC81FBB76E519D9984345CA7FD6C33F62495A2BB5082F0A4091AE311
SHA-512:	9FDC70F46BE68CEF5B150973A9961DAB57EF4F8CFE329E636540454A73A80F34AEFC28A463EB941FD8B66AA82027581FA5598F457B04212743DD02191E6F602C
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13251626617597798","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\55cecce0-bdad-4651-a211-87537e959549.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	modified
Size (bytes):	5796
Entropy (8bit):	5.193667941686837
Encrypted:	false
SSDEEP:	96:njv0Tgm44YhxW7cVXmNok0JCKL8dkL1ObOTc7Vuwn:nj4r4HTgcpms4KukLEV
MD5:	8B0FC77D3FF148BE5F9169D7AD6FBA07
SHA1:	B8A42175D50C7617726FB8F7322566CA19557AD2
SHA-256:	6D6FAAA71C5BC2B8697353E32902604211C5180A6E390EB7617DBA7B5FF7FD2E
SHA-512:	1F13832CFAA7D4462F15139F545455037D5F355F5DF2809DB881DB1BE5516AC4B68A4DD80FDDBF1F1EFAAFF203D8979A45082E199A2C3638584948755A9617C0
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13251626617597798","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6c25364a-0dee-477e-9c02-d4d1dd7da735.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4219
Entropy (8bit):	4.871684703914691
Encrypted:	false
SSDEEP:	48:YXsJjMH+5s7YMHBKsvxMHVzspxMHbsIHt/soBDysKqnsllzMHpDCLsWJMHLsNuMg:RG+ZGJG+GTTD7IGpD+G7Gp2GnG4GVhH
MD5:	EDC4A4E22003A711AEF67FAED28DB603
SHA1:	977E551B9ED5F60D018C030B0B4AA2E33B954556
SHA-256:	DD2C9F43F622F801FCC213CDE8E3E90EF1D0D26665AE675449A94CEC7EB1D453
SHA-512:	84D3930579FD73C7D86144D5CDC636436955BA79759273C740D2D72BC4847F2F7F165BBCA3EB2E4DFB01777D6A5F141623278C1BF74615C5A491092CE3FD1602
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[],"expiration":"13248543677350473","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543677350474","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31344},"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31656},"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501454993","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501454994","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":39369},"server":"https://www.googleapis.com","supports_spdy":true},

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\74871029-ba55-4035-8190-f6f9ba16e619.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5796
Entropy (8bit):	5.193596904149334
Encrypted:	false
SSDEEP:	96:njv0Tgm44YhxW7cVXmWok0JCKL8dkL1ObOTc7Vuwn:nj4r4HTgcpmh4KukLEV
MD5:	6761C7DF916F7985AC3C52C249C8313A
SHA1:	C719DAC4024AE6D26AE31A02C45700EEE25429F2
SHA-256:	1E4EC8EF7BB0994147C3944C0120A267216B922DC17A91214A3AE237492CF146
SHA-512:	A541FB071557E342F45E06BB980BCED0D266D0CF965BA5AD0A5ACC8A172D9E50CB6677BB69859F93EA37FC2E7235B6D574F99C81D63862EE9BFBBAFA1D56FFAA
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13251626617597798","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8bd5db42-1709-47fa-ac9a-dd3d7b7b2cd6.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4376
Entropy (8bit):	5.5994867761937055
Encrypted:	false
SSDEEP:	96:O8sU4ULUKURieUWU2UCUU8xUTjU/UAU6xyXU/URU31Upd3KUZU51RU7FUoPeU9UV:O8sU4ULUKUfUWU2UCUUGUTjU/UAU6xQU
MD5:	F15ECD2493A1650CE1BDA0B118FA479B
SHA1:	19E0C607C334400962DEDCB31DE1D1643F703546
SHA-256:	6D3EA607FA2DBFA174156F0C41553CF060CA26757B21A9D198428DC3CAAD12E9
SHA-512:	4C9EA7A99381EBF9DAD31C297A404E4F0528AAB48766CBF240278FC43E498EB66447AFC888D4D96C7305303C75A3FC22ADE3E9F8EA9623DC0383E7A2EDECF936
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1638689085.974059,"host":"CJ6kx0n19VtUkGfz4J6tLFRfDatw73CAqzbGpnezKw0=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1607153085.974064},{"expiry":1609745083.379334,"host":"Dg14fIaciUHGX6Lc+OnYmaNiAA/ADiwumtIyPrC3d6U=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1607153083.379338},{"expiry":1615037083.773287,"host":"EgIfd/zYSudmnTuNtVItxQEUIbUYR6Gmqc/ZwlhM960=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1607153083.773291},{"expiry":1638689056.90933,"host":"Hi4bEdMq563Qsqn4sVyUls/uVk7U80IxMa3wyWVUqWU=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1607153056.909334},{"expiry":1638689083.410525,"host":"M4bfUnCmQAi4PNb3B8aI/2+SVJhHKsMfMMT7fzi6ij4=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1607153083.410528},{"expiry":1638689031.556716,"host":"N1Q2nRZPpXLTPB5x1AApcR2BYLtO7PQ4eeDdOX9VUjs=","mode":"force-https","sts_include_subdomains":false,"sts_obs

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9cbb6e72-96f3-425d-97c1-2c00918e4024.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4214
Entropy (8bit):	5.598934223947554
Encrypted:	false
SSDEEP:	96:38sUUUMTUsUF1ieUbU5WUGUUdUKAUQUvUwURU31Upd3KUQUos1RU8FUoPeU9UEHp:38sUUUgUsUFrUbU5WUGUUdUKAUQUvUwi
MD5:	8435CC5FCA7242543DC8843ACA3C4E73
SHA1:	DB850E079178FC37D29639FC640C9646D0E36999
SHA-256:	CAE693E0313C41444CA452683969BC8E38BB4BA6C005082ACB499FE4E96DDE97
SHA-512:	E9F992DA2C9E1BEAC387C52A3B9D8EBFBF06692DABEBAD0A3BC7CEEFEF1CC41A7C1617444CDFBDC685636EA97FDE369FC0A022952E09DEA62CFBAFDF0B8D4CA1
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1638689076.261233,"host":"CJ6kx0n19VtUkGfz4J6tLFRfDatw73CAqzbGpnezKw0=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1607153076.261238},{"expiry":1609745067.41127,"host":"Dg14fIaciUHGX6Lc+OnYmaNiAA/ADiwumtIyPrC3d6U=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1607153067.411275},{"expiry":1615037067.582807,"host":"EgIfd/zYSudmnTuNtVItxQEUIbUYR6Gmqc/ZwlhM960=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1607153067.582811},{"expiry":1638689056.90933,"host":"Hi4bEdMq563Qsqn4sVyUls/uVk7U80IxMa3wyWVUqWU=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1607153056.909334},{"expiry":1638689067.282128,"host":"M4bfUnCmQAi4PNb3B8aI/2+SVJhHKsMfMMT7fzi6ij4=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1607153067.282131},{"expiry":1638689031.556716,"host":"N1Q2nRZPpXLTPB5x1AApcR2BYLtO7PQ4eeDdOX9VUjs=","mode":"force-https","sts_include_subdomains":false,"sts_obse

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9fd9dafa-1c46-45ab-8462-6027c1a01cf5.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5701
Entropy (8bit):	5.19331934786597
Encrypted:	false
SSDEEP:	96:njc7m44YhxW7cVXmRok0JCKL8dkL1ObOTQVuwn:njj4HTgcpmQ4KukLu
MD5:	5E92F2F87B25092CD3F62E044D3322EC
SHA1:	9109D3B631B5E85D393C74E4A0207A3EF50C2079
SHA-256:	57EDABF9120674F1D7E4A040302B8DAFE8A52837BD67417278DB165512E00D42
SHA-512:	8EE69FBDC9929303C009F44F5A9E679F13FC17B396134572252FDA9137EE84579729295EFF99710089685778C8B311A688E4E6CD87D9A40DEA92D9A9CC953193
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13251626617597798","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.2415938384017435
Encrypted:	false
SSDEEP:	6:mItf+q2PWXp+N23iKKdK9RXXTZIFUtwpItIXZZmwypItIXNVkwOWXp+N23iKKdKT:lmva5Kk7XT2FUtwyMZ/yyMz5f5Kk7XVJ
MD5:	82F47F084C13FEAC55FAE5771CB4308F
SHA1:	1D4C40554BA9DA6E7C504DF84F3919C6A90BDF0A
SHA-256:	55F55756AC6D9D43405675CBD67A32DB852226254C440C0EEC8308EB1DCC3F4B
SHA-512:	2F1338855BA9ED3E7A81BB11366879138102492A8F40F1C3BAE422293437DB30361F44B83D635B641CE6C3ECDEDCA3E202A5F3C7D95662334B07ADF61FAB9CAC
Malicious:	false
Reputation:	low
Preview:	2020/12/04-23:23:56.034 1708 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/MANIFEST-000001.2020/12/04-23:23:56.048 1708 Recovering log #3.2020/12/04-23:23:56.048 1708 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	318
Entropy (8bit):	5.235936958254792
Encrypted:	false
SSDEEP:	6:mItS433+q2PWXp+N23iKKdKyDZIFUtwpItS6ZmwypItSXNVkwOWXp+N23iKKdKyX:lShva5Kk02FUtwyS6/yySD5f5KkWJ
MD5:	EBE0E3A90C822AEF13BF6683B956A1DB
SHA1:	DBB07D8FF10D18D05FB31F39CDBCD7225A9378B7
SHA-256:	1008BDC0EC2D041E492F7A88F303026EC8011DFA80776F2382054DC4020D7E63
SHA-512:	D00276214484C13CFAA69B962D5A339D84C13323F445E02D9969BC035889C7F08A1C6A7AC8BD54ED4CC3016D49976EA14D179DF892E8CF448F553C4870B41D68
Malicious:	false
Reputation:	low
Preview:	2020/12/04-23:23:55.990 1708 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/MANIFEST-000001.2020/12/04-23:23:55.992 1708 Recovering log #3.2020/12/04-23:23:55.993 1708 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\00a73600649a63ce_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1832
Entropy (8bit):	5.69601404124098
Encrypted:	false
SSDEEP:	48:bDIHFDdzFDwYFDQRfFDNgKFDXlFDjpFDDlj:foftUmOP/D
MD5:	B46DDEC11971B64A8E67C3D74F0CBD45
SHA1:	185ED96E7A9F44AE201BFFE1E833F811EA4C965D
SHA-256:	EA3B18DC78D78E15300080AFF7EDE88B8ECAB2B260460F06FF4926458E643B21
SHA-512:	2652BE843A6F4FCCFA767657F375D3A539CE0FF105B02F4BD21E9533728FF5B0FB97F27EAD6E0DF5EA42DA3D5CCDFE265E9E1D60CC09A78A7EA1ABB874A4A114
Malicious:	false
Reputation:	low
Preview:	0\r..m......a...&[......_keyhttps://www.googletagmanager.com/gtag/js?id=AW-951622910&l=dataLayer&cx=c .https://adobe.com/....H./.............h..........q...\|.K...y......YL...;..>J..A..Eo.......5.C.........A..Eo..................0\r..m......a...&[......_keyhttps://www.googletagmanager.com/gtag/js?id=AW-951622910&l=dataLayer&cx=c .https://adobe.com/+q..H./.............y..........q...\|.K...y......YL...;..>J..A..Eo........-?.........A..Eo..................0\r..m......a...&[......_keyhttps://www.googletagmanager.com/gtag/js?id=AW-951622910&l=dataLayer&cx=c .https://adobe.com/.,..H./.............\5.........q...\|.K...y......YL...;..>J..A..Eo.......]..........A..Eo..................0\r..m......a...&[......_keyhttps://www.googletagmanager.com/gtag/js?id=AW-951622910&l=dataLayer&cx=c .https://adobe.com/..3.H./.............,L.........q...\|.K...y......YL...;..>J..A..Eo.......EJ-.........A..Eo..................0\r..m......a...&[......_keyhttps://www.googletagmanager.com/gtag/js?id=AW-951622910

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\00bc91c379b1c0ff_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	55250
Entropy (8bit):	6.218599299659735
Encrypted:	false
SSDEEP:	768:w6B9pBllj75EMr7gnG8SF+itnMQhj0xjRPF9Wbzd9C6A8mtGT4LH58SyT3Vr:wUrljXgnh4+itZh+RPF9Wb2HtGTb
MD5:	0FCBFCF042D81A5199E4372E83BFE92B
SHA1:	A9756F011517061FFD3BDA79965E1A6D9AC1A708
SHA-256:	1EFC50B0532408568EF3C12FE637AA707AF3016B453F0A1B5FD5801F56053F0B
SHA-512:	307B98385074FBE7CC9E78935E9D886A0098A24988E87152E7B5EABB61E3FB15F289B60385991BE6765E1D946AF3F116FB62FA6B44FC8286F1EFEC23D716188B
Malicious:	false
Reputation:	low
Preview:	0\r..m......b...P......._keyhttps://salesforceintegration.na1.echosign.com/static/site-analytics.js .https://echosign.com//...H./.............{.........."<uP.........G.&.U.....,.A..A..Eo........+a.........A..Eo................................'. .....O........S.6j............P...L...H...............................................`................(S.)...`.......1.L`.....lL`2.....Qc.!......s_Host....Qc.+`4....s_URL.........Qc.B....s_JsHost..Qe.[......s_adobe_account...a.......Qc..!.....s_adobe..(S.....Ia......... Qf.+2A....s_adobe_getObjectID.E.@.-....TP.A.....G...https://salesforceintegration.na1.echosign.com/static/site-analytics.js.a........D`....D``...D`.....(...`....&...&..!.&.(S...Ia....8"... Qf.?.W....s_adobe_doPlugins...E....d....................&.(S...Ia$#...$....Qd........s_crossSell.E.d....................&.(S...Ia)0...2....Qb.[.u....c_r.E.d....................&.(S...Ia.2..K6....Qb.,......c_w.E.d....................&.(S.....`X......M.L`......Q.A...~.....s.version='H.26.2'

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\02b2c80311c4db26_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2152
Entropy (8bit):	5.697831080506176
Encrypted:	false
SSDEEP:	48:O57XBY57cY577Y578mY57UpY57vvY57DgY57QN:OhXah7h8hKhUyhvQhDvh
MD5:	1631D3B51173A39D8B2189C84330C6F5
SHA1:	950004A789D6836B0E5B9552697CADEB36F8A0DC
SHA-256:	72B3619083CBD087ACE1B9126CE0CD7492863CDF79BF38AC8D1E9897DC11CE75
SHA-512:	ACC3051B5B2FBD421992220EB34E2267F3C570959C193AB446A05E9B730CB5B859A5815D926A83BBE1F5C470B6A6D7CE14D98960E26C36DEE1C9AD65EAFC307B
Malicious:	false
Reputation:	low
Preview:	0\r..m...........uK....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCe603adad0e60478b927c5da4f78b4f0e-file.min.js .https://adobe.com/.1..H./.............u.......6..1.f!.8...~..9....A3.%......W.A..Eo.........T.........A..Eo..................0\r..m...........uK....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCe603adad0e60478b927c5da4f78b4f0e-file.min.js .https://adobe.com/....H./....................6..1.f!.8...~..9....A3.%......W.A..Eo......S...........A..Eo..................0\r..m...........uK....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCe603adad0e60478b927c5da4f78b4f0e-file.min.js .https://adobe.com/2g..H./..............0......6..1.f!.8...~..9....A3.%......W.A..Eo.......[...........A..Eo..................0\r..m...........uK....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCe603adad0e60478b927c5da4f78b4f0e-file.min.js .https://adobe.com/X.#.H./.............JH......6..1

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0324f7f3b483c3a8_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	672
Entropy (8bit):	5.762150437359469
Encrypted:	false
SSDEEP:	12:0E31f1KsmLIdmx1oux2pHgyyyJ3CMx03DP9gk9s5JY6EXfEC4ehRKg1:0Elf1KfLIExuuyAyyASJDFHsY6EsC9hD
MD5:	64418E29ED4CFA65B6E64D47D9E256C8
SHA1:	17BC2ECCAC363DBB249C029B25560AA8DDD4BA17
SHA-256:	E5911F72E9D2B60844F2AE48C099BB7DA9B3A7371D1B2D08459BEEA621044C2F
SHA-512:	35EF4110E6C97557582AE972EFDB91BC6D3229AE73C0EFE960F55893ABCA886C1450EEE373E6D35158174ABE2D91EF6C6D73265985035DD4D59A1F6F4FB69065
Malicious:	false
Reputation:	low
Preview:	0\r..m...........i......_keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153083618&cv=9&fst=1607153083618&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fhelpx.adobe.com%2Fsupport%2Fsign.html&ref=https%3A%2F%2Fhelpx.adobe.com%2Fesign-route.html&tiba=Adobe%20Sign%20Learn%20%26%20Support&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/`.,.H./.....................3.r..7~S..s..vnB.mGK..Z.hdt*TG.;.A..Eo......A7...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\05ca81086730b0ae_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	710712
Entropy (8bit):	5.807992156915553
Encrypted:	false
SSDEEP:	6144:/8gkO7jD1/Uhoal5iMEAwUPUP360l3hltMc2gJXn0mQgEtb98xkO2fyQKA4bjSIf:E01gZ5HS1eukNjKljSIaT+
MD5:	A72CDF694BA1E1DA6FD1099B64EE6B78
SHA1:	49503BFB151F71EA1EB9A73DA2D19691F10DBB23
SHA-256:	7722F10F1AF9260F04CA08CC3D5F629B29B9283961580A347BB6948208C9235B
SHA-512:	A80B9B2A898EFA30FD1552A24C544EB5AF3F54B163D07854FE0EA4C4346656192F59BE9D72DA551A434BEEC7011643458879895CCEF12AD1D85017EAFF2CF9DC
Malicious:	false
Reputation:	low
Preview:	0\r..m......@....f5E....D04D70DE9CEE16B678BF1F185A727F08F968F9940AD65E967435E371906535CD..............'..l....O....(...~...............(....U......X....N..................L...............t.......................h...............4................................................'..................................\|................................................................................%......................................................................................................................................................l...8...........................................................................................................................L...<...............................................H...........................8...............................................................h...............................................0...............................................................................4................(S....U..`.........L`.........L`......Q

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\076246f914dcf7da_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	132
Entropy (8bit):	5.531978048344927
Encrypted:	false
SSDEEP:	3:vCYuH7jnBoQdcvdpdS9cnjaMTwupgbl+o/Mmglt:vCrjnBGpPnjalupgblvn
MD5:	63E009E9D3B88334B5A4038FFAE69271
SHA1:	0464100EFC5B3A568DACD00C74218FC0513FA46E
SHA-256:	A5F050C2A61B38C312B668DF8BF5A379F97275057442500898E389273430D00A
SHA-512:	1182648AF16A46314A96771BA296CAF33091FBF7035C109C2452FEACA01D8A0A00B99E1E2A790143305CDAE78FF950912112C73648F2D4D7D8E49DCC95018A01
Malicious:	false
Reputation:	low
Preview:	...H./..}..FE44DD875824FB0D176E5CD8F58FE75680190ED15AC21A9BF19E8AEEB7FF2AB6..?.+...].-6tq...-V...3..r@...A..Eo......?>.ZL.......

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\07ef4d8548945248_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	732
Entropy (8bit):	5.5709070236994185
Encrypted:	false
SSDEEP:	6:mrYGLBg/1fItygP68Xgn24/MDK6tWrYGLBg/1fItyy+YNvtqn24tpnK6tWrYGLBU:mg/vQrgQkg/vDgvtq9ppkg/vJqaN
MD5:	DC56F1C3EC0D611F432FE4B1BDAD68C0
SHA1:	0AD95FA2C53872017B3F2236C9DF3A3E5C09816E
SHA-256:	29B716A5A5A7F68797535DFDB9C098B3DE45FF9DF597F7F4E5185A82E0D9B9E7
SHA-512:	EC6E803F047890A717044A76C9FA21B7E067ACB6123DA057CBB796EB16F28745E1696FE298D0DA486B4B7516C01E522E3B1CD583CF978263BD7172B73D6C38A7
Malicious:	false
Reputation:	low
Preview:	0\r..m......p.....b...._keyhttps://www.adobe.com/etc/beagle/public/globalnav/adobe-privacy/latest/privacy.min.js .https://echosign.com/....H./...........................0.Z..uZ_.....!.N...A..Eo.......3.-.........A..Eo..................0\r..m......p.....b...._keyhttps://www.adobe.com/etc/beagle/public/globalnav/adobe-privacy/latest/privacy.min.js .https://echosign.com/....H./.............(..............0.Z..uZ_.....!.N...A..Eo.......e\R.........A..Eo..................0\r..m......p.....b...._keyhttps://www.adobe.com/etc/beagle/public/globalnav/adobe-privacy/latest/privacy.min.js .https://echosign.com/...H./..............?.............0.Z..uZ_.....!.N...A..Eo...................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0ba91aa6ae29d08a_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1890
Entropy (8bit):	5.485451861856054
Encrypted:	false
SSDEEP:	24:9HKUPHZobkPH/PHp8PHqaTPHXPHshPHewEpPHym:9nPhPfPCPKaTP3PMhP+w8PSm
MD5:	68D389F7065B222ECA6B026FAAAB768F
SHA1:	E5B60B10D46503D49DE51C22E64F45031D82AA54
SHA-256:	AC9F2DF5117B024DBFFCD2B98CB77C89D007531A458C0EE5C1E8E0AE616F453F
SHA-512:	45D35004F9141995454874D4D7A5BBF5CED166865A0CCC16D20CD92D901340D275AEE850772DDDB0600FB8E5352A0EC5FFF1C4B8DE42BE243AB049A429A71921
Malicious:	false
Reputation:	low
Preview:	0\r..m......N...f.n....._keyhttps://cdn.cookielaw.org/scripttemplates/otSDKStub.js .https://adobe.com/-..H./.....................^...T.Q..'nm..;...m'..E...r.4.^..A..Eo......z.E..........A..Eo..................0\r..m......N...f.n....._keyhttps://cdn.cookielaw.org/scripttemplates/otSDKStub.js .https://adobe.com/....H./.....................^...T.Q..'nm..;...m'..E...r.4.^..A..Eo......=.D.........A..Eo..................0\r..m......N...f.n....._keyhttps://cdn.cookielaw.org/scripttemplates/otSDKStub.js .https://adobe.com/.Q..H./..............1......^...T.Q..'nm..;...m'..E...r.4.^..A..Eo......]..#.........A..Eo..................0\r..m......N...f.n....._keyhttps://cdn.cookielaw.org/scripttemplates/otSDKStub.js .https://adobe.com/..&.H./.............H......^...T.Q..'nm..;...m'..E...r.4.^..A..Eo........T!.........A..Eo..................0\r..m......N...f.n....._keyhttps://cdn.cookielaw.org/scripttemplates/otSDKStub.js .https://adobe.com/.}..H./..............o......^...T.Q..'nm..;...m'..E...r.4.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0e03261d992af308_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	397
Entropy (8bit):	5.965163346694421
Encrypted:	false
SSDEEP:	6:mjN/VYGLBg5KAJh4JzKkn5knOW3iYBTBCh7K6t3upIntoyViUigChy:ajg5Ksh4Z1nuOciEdCrQInZ3igCI
MD5:	C08FB7702CE716AE4390AF7C136AEF81
SHA1:	C15E8F58A45917F0927B96AB1022837088FFF79D
SHA-256:	897105888E678173937D8D873F7C14747DFBC2E84C7E7F695C86773C399F5203
SHA-512:	FCAF2D9378E3AE276DB08A9F237290E219B3F9E1D2AF3841E85C59D0840616B169383DEAA138E2A3C4EEDC1EB45732DAD3E461E44F768154308C2F391DDC4E8E
Malicious:	false
Reputation:	low
Preview:	0\r..m..........Q!w~...._keyhttps://www.adobe.com/etc.hawks.dexterlibs/dexter/clientlibs/base/head.fp-b98bcd624e7ac017183234351321567e.js .https://adobe.com/=...H./..............C......_.f.......).5..X..<..W..,.mA...A..Eo........g..........A..Eo..................=...H./.....FAFACE331F1177C06A7D40762A72D30D72AA0F3A0FC8FD7EFAA5A830EB1FC553_.f.......).5..X..<..W..,.mA...A..Eo......+..TL.......

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0fca6c6884c3310a_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	235
Entropy (8bit):	5.5474675984643
Encrypted:	false
SSDEEP:	6:mBYxutpQWQFLANAEM/kBv68kgF7Ifprq7DK6t:5utwFLQAEaevJkK7H
MD5:	E2493CC6A47CB8B6F6C47278A16AD75A
SHA1:	0ACCC88241B92BBFA40F8B8C63A49A3BAEAC2D6E
SHA-256:	EDF7D69CE439253712CC51DDFE98FDE569F11C865075C1905D7A45C6660AB178
SHA-512:	F8FFCB9E4915447A76528DED511B4D9B002E744C5904C6ABDBC38DEDAB14ED371B61637E2661929E3BB9FCBC7921FF22B528BC0A81FC70CD686E88C746CEE399
Malicious:	false
Reputation:	low
Preview:	0\r..m......g...BZ8....._keyhttps://secure.na1.echocdn.com/resource/1694188720.en_US/bundles/app-main.js .https://echosign.com/q..H./.............`.......].0....J....n8p..u..dT^:...jD.A..Eo.......0~..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\10d4e9eb0facc393_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1720
Entropy (8bit):	5.5242775554518735
Encrypted:	false
SSDEEP:	48:B3UOL3U+L3U9L3U2L3UPL3UYDL3UG+L3U/Qd:B3Us3Uc3UZ3UU3Uz3UYn3Uv3U/
MD5:	6892E515E4855914C4917258F3F1A3D6
SHA1:	EDAB68E8333D7E94F05C625C39342399068DE519
SHA-256:	482AA59495D69062E545779768B1EE976DCE34217718C638A806990E0DC34381
SHA-512:	F3746EEFEDF4FA1084DEF5EB3C61522104FB2737FA980397DFFFDBC1C090B4F9524A5942157A9BE730BF7AB92B6435A98DE8FE2E7062F4057089B4EFE6EDE7B9
Malicious:	false
Reputation:	low
Preview:	0\r..m......S.........._keyhttps://snap.licdn.com/li.lms-analytics/insight.beta.min.js .https://adobe.com/....H./........................^?...px..].D....g...y!.J.A..Eo........`..........A..Eo..................0\r..m......S.........._keyhttps://snap.licdn.com/li.lms-analytics/insight.beta.min.js .https://adobe.com/.e..H./.............K...........^?...px..].D....g...y!.J.A..Eo......jm.0.........A..Eo..................0\r..m......S.........._keyhttps://snap.licdn.com/li.lms-analytics/insight.beta.min.js .https://adobe.com/.\..H./.............a5..........^?...px..].D....g...y!.J.A..Eo.........b.........A..Eo..................0\r..m......S.........._keyhttps://snap.licdn.com/li.lms-analytics/insight.beta.min.js .https://adobe.com/..1.H./..............K..........^?...px..].D....g...y!.J.A..Eo.........c.........A..Eo..................0\r..m......S.........._keyhttps://snap.licdn.com/li.lms-analytics/insight.beta.min.js .https://adobe.com/....H./.............Q\|..........^

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\147a77f6239e9793_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	276
Entropy (8bit):	5.739095622661266
Encrypted:	false
SSDEEP:	6:maR9YfcDtboCzqYFkjlYJ46YmU9qr7I6FhtK6t:vQYtDzqSkjCq65UEsw
MD5:	B2DA4F26EE6B6D530426CBE4CA06E484
SHA1:	213FD11D7A696E44E04017A375FECFDE322F5F64
SHA-256:	7698D9A57D6D893BE69D15409C424CA4592F9BE92B17957E30A405841D366113
SHA-512:	808619938FBAD85D0536AC7D8FC505740E35977C256ACA2360CA3F043999AB80BFD1F97E3837B0E55C199AA876F38BE3CDACCCDF48D4A29716202AFDAA21E98D
Malicious:	false
Reputation:	low
Preview:	0\r..m..........`o......_keyhttps://api.demandbase.com/api/v2/ip.json?key=e4086fa3ea9d74ac2aae2719a0e5285dc7075d7b&rnd=8091&callback=Request_2124979 .https://adobe.com//O..H./....................../.J..~..\|.'.rz..k.}n..^2.g.....A..Eo.......k...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\168b26f036f47353_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	193
Entropy (8bit):	5.359358252526105
Encrypted:	false
SSDEEP:	3:m+lYQt6v8RzYctLAOyF72Y7k81lHCIt3OzMsI0VYm5mNZr/lpK5kt:m/Q9YOFDYz6Y+zMaJ4NpK6t
MD5:	445477718AEAFFCE070E015520F60182
SHA1:	B00C28F8392479552F2C44BD891B5EF2C330C62A
SHA-256:	C5B16CB007EFC7AB5E8E31C285E29CAE7CAEF9B29D7F89DF53C87ED5423E1F29
SHA-512:	0636C6B72625A1C1E15614C5E652C391DA38C52E75D102279F7ABDD16A5FFF0BE49A9B5DF6A11652FAA44566AE8222BB3AAC5FB32F770CA5F37A0CE4AA515AA1
Malicious:	false
Reputation:	low
Preview:	0\r..m......=...5......._keyhttps://use.typekit.net/fqg8osp.js .https://echosign.com/....H./.....................J.T+..tD!\{.Po.i..+#.I...p)YTG.A..Eo......22<J.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\18cfbf307b42b5ff_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.854739121989503
Encrypted:	false
SSDEEP:	12:7yE3xjsed6Ooux2pHgyyyJ3CMx03DPVccXbvH/C1EmZ/45:mEtn8XuyAyyASJDNccXb/CC
MD5:	6D59178B64E3FB6A4D2E779DBD4F275E
SHA1:	6BBD11513277264799FF9E9E29B3D7BDE3D1F7F7
SHA-256:	227AC10F004B12F56B6F3459FBD914C8FFE25C3C8AE6D584E86081EC0912DEDB
SHA-512:	B4F83E41393FC68DD1A1653CC1B639DC268A2A6213BCDE1D820203924B17DD19D1CFFD85DE46C2B8E5F81F1FC2F2E78F1B6556A84EF2737E618993703130049C
Malicious:	false
Reputation:	low
Preview:	0\r..m..........).R....._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153067622&cv=9&fst=1607153067622&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.adobe.com%2Flegal%2Fterms.na1securena1echosigncom.echo.html%3Frand%3Dcppxur779u5qD34GwaKJb9FyJwY69-qg&tiba=Legal&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/Lc8.H./.............L.......v.~..4.,..:.G6.K:..>sU.....M..A..Eo.......`g..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1a9af96148f7c94a_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	5.901198970792449
Encrypted:	false
SSDEEP:	6:mXKYUCyg1cyHJh4JzKkff3tkDDKWVivY91VBcUb97lZK6tLVFa0CmrG28ODxBcU5:gSCyg1c4h4Z1ff94VivS1f31VFasz8s
MD5:	81CBB81789ED30EA116A536392F6836A
SHA1:	876198EBD98FE6CDFF3CA1C8E31B6EFC4ABF3E32
SHA-256:	58A8FAABC67EC7CFEAE0953F7D7A5DE3BAD7B1222659BC3F99955B03BED4FB34
SHA-512:	26C227B48DC4E281A2C7138385047366B5EF176A62BDC8E3BB1E902EC11E12C2082D6C618E143BE5978A7033A6031B7DBBE63392722C892CCC022A8D0C2E0F7F
Malicious:	false
Reputation:	low
Preview:	0\r..m...........dl....._keyhttps://helpx.adobe.com/etc.dexter.dexterlibs/dexter/clientlibs/base/publish.fp-caf436a7f5881a3df5be5127a1c1f6bb.js .https://adobe.com/..p.H./.......................Kf.Z.=A......3..:.........A..Eo......'I@X.........A..Eo....................p.H./.0{..06E8654C6700E3138195F860F6EA97C31EFC6B386FD06627A246A9E7911D55E1..Kf.Z.=A......3..:.........A..Eo......IN..L.......

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1ad62cb8f31a9a41_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.545413100858653
Encrypted:	false
SSDEEP:	6:my2l9YUCyg1cyHJQLopkZzSc3eb5YZQF3oDrIthK6t:X2HCyg1c4evpSc3k0kYo7
MD5:	640B3E9B62082EAAF805C8FCEEC053D4
SHA1:	CC562B2BC14106651E991F519998F5F667D42F1D
SHA-256:	36B5AA3AF5ACEFE916D89971A9663B7B8AD178A4BA9A46F3D2BD155D0C3BD1B8
SHA-512:	0C8DE7D67C5341A913DD99DF89671A2099AF50ECAA1E6B45038C2EF5FE33A0CB89F43BF068E1AEA104B2E5E29FBFCAD01812BA8A9ACD6EA9090150AF90168745
Malicious:	false
Reputation:	low
Preview:	0\r..m..........j..U...._keyhttps://helpx.adobe.com/etc.dexter.dexterlibs/help/components/pages/ccl-explore/clientlibs.fp-9bd0b5933bc9e817706c8e1f96ba91b6.js .https://adobe.com/n...H./.............<.......b...^.ES...CS-c...r...D[I.E.2of.A..Eo......V/...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1aed6b6619289abf_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1760
Entropy (8bit):	5.459854771610442
Encrypted:	false
SSDEEP:	48:FSF+zSMuzSe6zSCGzSC0zSU+zSaWzSaR:Fianq5mdSNk7aJCZ
MD5:	0057C075CC775FB78663D8FCF9EA0AA4
SHA1:	0014DF385B698BF0B0108AAF8CC1CC09742BDDC3
SHA-256:	AF43CF415DD59BF8DA10948B1C776593F454271D5857BA9B4B0DBB0A8427B704
SHA-512:	686AD3D9AF34C64762E662A674565B5462D137CAA1A09E57014CE5B179F3E5F3CE5020EB27DA237A7FC4824E27003B56E50C5EB8AEB5FEC52CF919B4C1FC81C7
Malicious:	false
Reputation:	low
Preview:	0\r..m......X..../......_keyhttps://www.everestjs.net/static/le/last-event-tag-latest.min.js .https://adobe.com/...H./.............c.......d....hbo)&.-.d..B..U..l....c.9}.A..Eo......%............A..Eo..................0\r..m......X..../......_keyhttps://www.everestjs.net/static/le/last-event-tag-latest.min.js .https://adobe.com/....H./....................d....hbo)&.-.d..B..U..l....c.9}.A..Eo..................A..Eo..................0\r..m......X..../......_keyhttps://www.everestjs.net/static/le/last-event-tag-latest.min.js .https://adobe.com/.C..H./.............4......d....hbo)&.-.d..B..U..l....c.9}.A..Eo......../..........A..Eo..................0\r..m......X..../......_keyhttps://www.everestjs.net/static/le/last-event-tag-latest.min.js .https://adobe.com/..1.H./..............K......d....hbo)&.-.d..B..U..l....c.9}.A..Eo......~..W.........A..Eo..................0\r..m......X..../......_keyhttps://www.everestjs.net/static/le/last-event-tag-latest.min.js .https://adobe.com/;0..H./.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1b006910f330b5da_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.443355351346502
Encrypted:	false
SSDEEP:	3:m+le9K8RzYrSKDbHtQj4mUfBjuuVD4gtz27Ml1lXlHCXnlX8un4/+Yzvg/yP5met:m/YGuHijC9hYVMSynLg/m4eL/ZK6t
MD5:	0FEBF9730F2D3F7BEC6F11B8BDD0B3F2
SHA1:	6BCA1BD9F9AF18D6C6E93961E4F7949BDA7217B3
SHA-256:	002A0990981BFA50516FCE9F4106EB690C77094B16F69F5E190643404C2EA5DE
SHA-512:	6648D93E940792D3D7C72E792C0635FE4386ECB8FD3F60278182142ADEB0BC936E5C33852E52223C4A0E7B41C8EB2675AC2B2753BFCBCEE69E549397F8AFDE5E
Malicious:	false
Reputation:	low
Preview:	0\r..m......X......#...._keyhttps://wwwimages2.adobe.com/ubi/template/identity/adobe/Tree.js .https://adobe.com/.cS.H./..............S.........?....B.y<v...6.....F.S}..."...A..Eo.......y.H.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2adcc75915ebe551_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2044
Entropy (8bit):	5.770688104304195
Encrypted:	false
SSDEEP:	48:pl3MbXrIUl3MY0/l3M+W/l3MJN1/l3M/q//l3MHr7/l3MDQN/l3Mfb:QUWG7ghHyk4
MD5:	CD3DA3F174D99B58FEAA5651181BC315
SHA1:	90F4B133CE0203057F14D8076B1B02B7EFC4EE38
SHA-256:	CE427A0517D4D83C96773D3A0066046A0EC988295556A6CFB7F5B7932EC02A42
SHA-512:	7A3EF53E9F18F9AFB3140C85028DEFEB977F4B44ED9F82BC39678D66111707760775E0455E061BBA7A662CE01A01E49B325056CFFDA8599E5D003DBB7B95C36E
Malicious:	false
Reputation:	low
Preview:	0\r..m......q....3.u...._keyhttps://sd.iperceptions.com/ius-359cd6b861125d638f6cea04ffb14739/29293_637427100135393745 .https://adobe.com/5...H./.............&.................'].Q.\.?.m.I....V7I..A..Eo........9h.........A..Eo......................H./.............;#................'].Q.\.?.m.I....V7I..A..Eo.......l.........0\r..m......q....3.u...._keyhttps://sd.iperceptions.com/ius-359cd6b861125d638f6cea04ffb14739/29293_637427100135393745 .https://adobe.com/...H./..............7................'].Q.\.?.m.I....V7I..A..Eo........'}.........A..Eo..................0\r..m......q....3.u...._keyhttps://sd.iperceptions.com/ius-359cd6b861125d638f6cea04ffb14739/29293_637427100135393745 .https://adobe.com/*.E.H./..............O................'].Q.\.?.m.I....V7I..A..Eo.........S.........A..Eo..................0\r..m......q....3.u...._keyhttps://sd.iperceptions.com/ius-359cd6b861125d638f6cea04ffb14739/29293_637427100135393745 .https://adobe.com/.g..H./.............a................'].Q

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2f232636a3c41413_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	657
Entropy (8bit):	5.864092692265449
Encrypted:	false
SSDEEP:	12:GUgE3esNKdroux2pHgyyyJ3CMx03DPVccXupFbW/CrIe:GPEukKKuyAyyASJDNccXR/CL
MD5:	68B27414737536C6BEFEC0BC5DFC24E3
SHA1:	00482D8881EBA2E05A7F2FDC19E3ECC20B101813
SHA-256:	A1022C23BA1CB1B058450AC129B9F3B95C7BD5AB25B0756FE309DC221B4BB176
SHA-512:	27A3BDB5A3B2FEE4AB307E122FCE2E5CC4512380B1D5554AE7EF3525284F18BCE90BAA76B4484FD28CF24C9845389D4986F653BE752EEA9866770645E9DD6101
Malicious:	false
Reputation:	low
Preview:	0\r..m..........v......._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153080652&cv=9&fst=1607153080652&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.adobe.com%2Flegal%2Fterms.na1securena1echosigncom.echo.html%3Frand%3D2MgkvrWaoi1TOE9M2IDvZwT6ppYxvW5F&tiba=Legal&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/....H./.......................4)Z...;.Is...).]....USI..&...A..Eo......iY.:.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2f49560d02f8d583_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	65057
Entropy (8bit):	5.673163831411883
Encrypted:	false
SSDEEP:	768:e+LNCisCdTRzIO5cD41jPpeIT5dLzx/AjPnBIt/5FZQZQKxSrjSohqmYYuMnNb7/:h73cDr8voBItsz6qlGVNqc
MD5:	01AD96B20507A7C105EBC846B6F6CF69
SHA1:	4F42026299C4B0B8D54CA9BDC90495B8167969A6
SHA-256:	806493314B29F3332D044230C7A2C2C40CDC7A7536DF0DB8DB24F528CE054DC5
SHA-512:	D70A9DD30609AFFF2C8CB4AAC15429620A5F4507FA2A72494E7D324F236D5E7117724E8491C96010B68A2BA182FDBD3E68214D144BC0943AF13E7E42C6E4FB54
Malicious:	false
Reputation:	low
Preview:	0\r..m......Y.....tZ...._keyhttps://client.messaging.adobe.com/latest/AdobeMessagingClient.js .https://adobe.com/.L..H./.............&.........^i........AH..W..Qq........s..A..Eo..................A..Eo................................'..Z....O....`....0+......................................................................................................(S.H..`L.....L`.....(S...`......L`......Q.@b.w.....exports...Q.@........module....Q.@:.w#....define....Qb..u.....amd.. Q.pn.a.....AdobeMessagingClient..K`....D}.................s......s......&.\..&.-...%..H...s......&.(........&.\|.&.^.....&...s......&.\..&.-...%...\..&.-...%......(Rc................I`....Da......... ..f..........`...p...0..........@.-....PP.1.....A...https://client.messaging.adobe.com/latest/AdobeMessagingClient.js...a........D`....D`D...D`.....E....`....&...&..!.&.(S....``.....L`t....(S...`.....<L`.....@Rc..................Qb..u.....e.....Qb./w.....t.....Qb.i.....n...b$...........I`....Da4........(S...`........L`...

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2f4c37c6399e1a0d_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1883
Entropy (8bit):	5.689757437314763
Encrypted:	false
SSDEEP:	48:7a5+bD9a5+ES9a5+X9a5+O9a5+w9a5+g9a5+p:eK0R1NMSW
MD5:	A8BE85CC4690AE829F2A18754746B74E
SHA1:	6521916B9A7B79B634A90896BBB1B570F4D59719
SHA-256:	A9480F69BC3A90F83E193CB7B2CB49AF750E2262B29A49E12EBE8C694BC52C53
SHA-512:	A2DF10CEF1B0B57964BAB6018B569F81A6A8E336161D1CAB044DC26F8467859205B00BB6BBDA1F511088744C557008437D49BDC25A32A69359EBFF02EF20184C
Malicious:	false
Reputation:	low
Preview:	0\r..m..........evT....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC90b59242c41f4f62a5a6bdb817758c97-file.min.js .https://adobe.com/q...H./.............E.............fn....U.a.@GQs....:.7...:..A..Eo........"..........A..Eo..................0\r..m..........evT....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC90b59242c41f4f62a5a6bdb817758c97-file.min.js .https://adobe.com//(..H./.............13............fn....U.a.@GQs....:.7...:..A..Eo...................A..Eo..................0\r..m..........evT....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC90b59242c41f4f62a5a6bdb817758c97-file.min.js .https://adobe.com/X./.H./.............hJ............fn....U.a.@GQs....:.7...:..A..Eo...................A..Eo..................0\r..m..........evT....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC90b59242c41f4f62a5a6bdb817758c97-file.min.js .https://adobe.com/.k..H./.............Eq..........

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3259da07ce607cc4_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	193
Entropy (8bit):	5.298351090645853
Encrypted:	false
SSDEEP:	3:m+lXFJgOA8RzYctLA67K2vD29KlXlHCpOMmUgDPoecHRmD3lXlpK5kt:mwuEYOI9+YUMNVHAVK6t
MD5:	65E072B3FA5147C0342176E082EBAEBA
SHA1:	6110B867A4754A1BA9034F02095ED49334DB2240
SHA-256:	35AF32DAF64CE253F2011565141EF3F894201C6051FD5CA6A4E8EE581C7118ED
SHA-512:	00C907A27879CF94FB37A965D943739A1A76DDB98CE26B8EB16E247E3B7B798B80C18BCD772FEDAE5BCD14C9572C744A841331431F3EB5208C6437B70C21055A
Malicious:	false
Reputation:	low
Preview:	0\r..m......=.....Vr...._keyhttps://use.typekit.net/pfu1huz.js .https://echosign.com/....H./......................V...u....l.N.....D.....p....8.A..Eo......d..l.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\383c3d511f6ab092_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1138
Entropy (8bit):	5.6877701353439525
Encrypted:	false
SSDEEP:	24:zofuSZTBOvKORvpuF1ev2NJzTSck1mhx7d0Qp1p:764y+BuF13NJXQmD7fp
MD5:	C4417D69DEA5E7A9D6D73ADA8391346F
SHA1:	5F12785BFCFF111BF426C826EA797B93258B017E
SHA-256:	64562A26AA95096C55CDCFF3EC384418EC5CADC269F7AC8D7349C89AB5E0565E
SHA-512:	E3515653B0B53267130F13F531751F311363D4883555A57444F361B9A37845226CB3AA6758D9A2A67225BE7C6D0C3E1FFC7EEE13584E2CBC156FAECB3CEA11AC
Malicious:	false
Reputation:	low
Preview:	0\r..m.................._keyhttps://amcglobal.sc.omtrdc.net/b/ss/amc.global.prod,amc.status.prod/10/JS-2.17.0-LAR3/s05322833478373?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=4%2F11%2F2020%2023%3A24%3A39%205%20480&d.&nsid=0&jsonv=1&.d&mid=78780398001109214383901147747368206770&aamlh=6&ce=UTF-8&g=https%3A%2F%2Fstatus.adobe.com%2Fproducts%2F1554&c.&user.&id=anonymous&corpid=anonymous&corpname=anonymous&authsystem=anonymous&accounttype=anonymous&language=en&casing.&id=anonymous&corpname=anonymous&corpid=anonymous&.casing&.user&page.&solution.&name=status&version=2020%203&.solution&env=prod&hierarchy=home%20product&name=product%20adobe%20system%20status&url=https%253a%252f%252fstatus%20adobe%20com%252fproducts%252f1554&type=product&assetid=true&casing.&url=https%253A%252F%252Fstatus.adobe.com%252Fproducts%252F1554&.casing&.page&.c&cc=USD&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=913&mcorgid=9E1005A551ED61CA0A490D45%40Adob

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3bf68f3655613904_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2152
Entropy (8bit):	5.620567243268486
Encrypted:	false
SSDEEP:	48:b157n55157nKD5157nzk5157nc5157nDQ15157nHu5157np5157nXs:BVnVVnKvVnzkVncVnIVnHmVnFVnX
MD5:	AD9EC72D5D291F29AF506027AF0EC3F1
SHA1:	9C3A74609A04AF3A87638712348DF1EA7F221E4E
SHA-256:	E5359A6E43738EF309743BCDBD64AD2F55B1E0703B42C9852DB30E53C5045050
SHA-512:	2FCE292296772C29E6B52E5B3D6DC188E62FB857F4067CB6241079A065AC1AE290DD992D23495B9C44FA959F7994484BBCE077F43BBBCE77F17A2C6E696EA12A
Malicious:	false
Reputation:	low
Preview:	0\r..m..........o......_keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC6f46e43fa6d44dbeb45cc5801ffded0e-file.min.js .https://adobe.com/.n..H./.............B.........0'....F..5QR..R.9.......7.4...A..Eo.........$.........A..Eo..................0\r..m..........o......_keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC6f46e43fa6d44dbeb45cc5801ffded0e-file.min.js .https://adobe.com/.b..H./......................0'....F..5QR..R.9.......7.4...A..Eo.........3.........A..Eo..................0\r..m..........o......_keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC6f46e43fa6d44dbeb45cc5801ffded0e-file.min.js .https://adobe.com/m ..H./.............11........0'....F..5QR*..R.9.......7.4...A..Eo........1P.........A..Eo..................0\r..m..........o......_keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC6f46e43fa6d44dbeb45cc5801ffded0e-file.min.js .https://adobe.com/w?,.H./.............+I........0'

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4653468daf61afbd_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.804832088653025
Encrypted:	false
SSDEEP:	12:/jE3es4dq5moux2pHgyyyJ3CMx03DP99YylWxFXCVi/F07D7:/jEuJ2/uyAyyASJDF9Yyl8CViW7D7
MD5:	4F52E80D14DC9C6281094726FCB21D1B
SHA1:	CEC8FCE9C31F02009BF9144C7BCD66E7B58DF694
SHA-256:	935CBB3F10C9F322861E2003DDDC883BEBEAABB2176B35908835052693E96925
SHA-512:	581E0F91F828BE9E6787590C4D8F9EE5C63F913F5F0A57F6F130CB273F2AEF0235792E15BFCA7D1417464E8CB5610D03E60A09EF2BA61CAAF1B63583D0DF358E
Malicious:	false
Reputation:	low
Preview:	0\r..m.................._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153046755&cv=9&fst=1607153046755&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fhelpx.adobe.com%2Fsign%2Ftutorials.html&tiba=Adobe%20Sign%20tutorials%20%7C%20Learn%20how%20to%20use%20Adobe%20Sign&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/;...H./....................:...:.@TU..P..)kN.....hTO.3..k.A..Eo.......@.!.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\495e437aacc92e71_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.864923252709849
Encrypted:	false
SSDEEP:	12:vjE31f1Kszd4oux2pHgyyyJ3CMx03DPVccXbvH/Cz/EyykIWw:vjElf1KSDuyAyyASJDNccXb/CbIWw
MD5:	B42626F603CB945523CDB685729023AE
SHA1:	955F58ABEE5C2C6FA3A1A59337B74B774D5ECCA2
SHA-256:	6F6976E123D975FE37D2A67EEF9CCA503500CAE6D8DF5D8D4F1DD23C2AEAFFCB
SHA-512:	8D2715079445381E37E7F8FFA17E8B27E3D795FF6720E6EB86A83E98AA048A10B0B6FB77C2678DCE98DFBF3870AC439585E53FB5F702E248754279423771761F
Malicious:	false
Reputation:	low
Preview:	0\r..m...........w....._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153067539&cv=9&fst=1607153067539&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.adobe.com%2Flegal%2Fterms.na1securena1echosigncom.echo.html%3Frand%3Dcppxur779u5qD34GwaKJb9FyJwY69-qg&tiba=Legal&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/`$7.H./.............LL.........Q~.>5...X/>L.@Bkm...?.. .S.A..Eo.........N.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\49aa4220a457b136_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.9178356688783875
Encrypted:	false
SSDEEP:	12:D5E3Gsnd8Doux2pHgyyyJ3CMx03DPVccXQUg/CeZptqnA:VEW+GEuyAyyASJDNccXQ//CypYnA
MD5:	A17ED4349A9919B25FB3248A3C98E6D7
SHA1:	ED307D24C3EB3A68E3602B053256F5BA695018B8
SHA-256:	EA15E61AE8A0E81928A2D8E58217987D665B849F9DB81ADCAE556EB4DC1DA427
SHA-512:	19597971ED12CB741AF9980A2A1144D8FFE402A160C393442DEE3B6FD06F3D6D1E4FA6AA8FB2769D3EA170E8E5A7B503CE392700E85CBD9FDEB42DEBE9862F6B
Malicious:	false
Reputation:	low
Preview:	0\r..m.................._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153089081&cv=9&fst=1607153089081&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.adobe.com%2Flegal%2Fterms.na1securena1echosigncom.echo.html%3Frand%3DmjS3KMyTNt1cyZynIN1QQWaqCYTbPzL3&tiba=Legal&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/....H./....................s...Q.I..?.<.}J...q.o..nbv..A..Eo......D.{..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4a0b530c81aa5d1d_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	204
Entropy (8bit):	5.419399577568111
Encrypted:	false
SSDEEP:	3:m+lojuls8RzYrSLX8QC2M2QfLK74gt2hiXlHCdUllanTuWwbj6RmyltpK5kt:mG9YGLRE1fLKkiYd0aTS2bK6t
MD5:	7726D4D12A15275327D0EC55DD90CB6F
SHA1:	D5C9B56CD3438DDC9329E0FFB3D7B9FF0BE2DFED
SHA-256:	17C1754633F0870E8A4A03DD7D0DD090D68D5A95100F3C9AE58053A3390C3D0C
SHA-512:	E7EF0836A8BC2F8EE0A7CE070747AFC2609C61B1D9845305FBD7D4B5E66F8FEA971028CEF9607A5CAD0658668604D1BE0254E6761E2F2BAF194407C5FDFB6F22
Malicious:	false
Reputation:	low
Preview:	0\r..m......H...u._....._keyhttps://www.adobe.com/uber/js/omniture_s_code.js .https://adobe.com/_.e.H./..............W......R.."......3...<..c..i.4"...&.7J7.A..Eo...................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4d740328467170b4_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	475048
Entropy (8bit):	5.981403979936004
Encrypted:	false
SSDEEP:	6144:HYho4RZiAiPs02+BDofdo1BaTb5EfOOfb32/uT+4:Go69O1BkAOL/Q
MD5:	47B9EE29A565FE038C2DBAD4498B6465
SHA1:	F3572AA343CF8AC39BEB49DE2A4926EEA6C88F59
SHA-256:	10691A3F80445B7C8F0D19FB3AF1887210109DDEAF086D5B355B4F4887332147
SHA-512:	E0E180FA3A0BAB0207F2DBA36A765D4B02CC2C01F4D12CFBA699DD451B876F4744DC267D99511BA80860965686888A99D92C3572610853E6B6DCCDA1D394845C
Malicious:	false
Reputation:	low
Preview:	0\r..m......@....N......55BAACCFF4ADB58C97F3EFA89F2DF66400735A3736C21709DC02527A7DC09B24..............'.h.....O\|....<....N.............(........J.......+..................................................................................................................................................................................................................................................................................................................\|.......................................T...........l...$...........................................................................................h................(S........`.(......JL`L%......L`j....(Qh.."\....MAX_RECIPIENT_AUTOCOMPLETE...(S.....Ial...........d.....................$QgvR.Q....computeEsignAccessCode..E.@.-....LP.!.....@...https://secure.na1.echocdn.com/resource/783075475/bundles/all.jsa........D`....D`....D`........+...`....&...&...(S....`.....%.L`......RcD.................Qbj......f.....Qb.U_....l.....Qb........n.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4ec9e1c5a741aaf6_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	47055
Entropy (8bit):	5.7479399204110475
Encrypted:	false
SSDEEP:	768:TXlq+8ha2cjpLqatmlMcm4hkWxzG7kXV4I:TXlXF2goat2Hz6kF4I
MD5:	91E7B3AB330B79A02F7F19E2ECD3EC00
SHA1:	431EFDEAB6E994EF29FE7EF3EC522BC71EBBF622
SHA-256:	03FD52607CBB7B7C2B7C3B0AF0DD0FC1606FE584309361A3EE7A96521A7F49CC
SHA-512:	B856CC0367597CD823C0FA9EF961B8A7CD3B88A023B17D83524ED339E13C89238A1BB64CC857547A628580BEDEDF9B6C1AC16142F39AB6D13C8D4FF31C2E2E90
Malicious:	false
Reputation:	low
Preview:	0\r..m......G...hX#....._keyhttps://js-agent.newrelic.com/nr-1184.min.js .https://echosign.com/.)..H./......................?#.=..7.....\|.$.%..~...;....A..Eo......m\|...........A..Eo..................0\r..m......G...hX#....._keyhttps://js-agent.newrelic.com/nr-1184.min.js .https://echosign.com/....H./.......................?#.=..7.....\|.$.%..~...;....A..Eo......c5...........A..Eo..................0\r..m......G...hX#....._keyhttps://js-agent.newrelic.com/nr-1184.min.js .https://echosign.com/..............'.[m....O....p...h.......................................................................................(S.....`R....U.L`.....(S.h.`......L`.....HRc .................Qb:.......e.....Qb........n.....Qb.f.^....r.....QbN......o...c....$...........I`....Da....8....(S...`.....,L`.....4Rc.................Qb.@......t...`$.....a.`....Da6.............Q.P..d.....__nr_require.... Qf...L....Cannot find module '..Qbv..:....'.......a..........Qc.I3y....exports....a..........Qb........call.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\506e312253ddb344_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.3046482542695195
Encrypted:	false
SSDEEP:	6:mfnYEvBrFsO8hW9Ywn1dJgJTim0n70K6t:KJGNw5nPu0Ji
MD5:	12438A60944320CE5A142E08EA26DB51
SHA1:	758222DF2DFF371A8EB68486E77E6C129E815A58
SHA-256:	D2B86B6EABBB1BE3901DE602138EB2AAE5BF5DF1E4E20134A78AD0FA638EFFA7
SHA-512:	D360C4B9D96B4FDBD3B624BCCE327BDAB47FDA799A12462DD96FBBC79BB5C327B3E9D3E4E4955BD950326F131D6FFC0071B8E33855B5C6FE5E12995B29F0A480
Malicious:	false
Reputation:	low
Preview:	0\r..m......?...0..4...._keyhttps://cdn.tt.omtrdc.net/cdn/target.js .https://adobe.com/.Hk.H./.............eY......z..nvE.<8.,.@...t..j`..UJN..Nu...A..Eo..................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\524cb6ba085dce32_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	663
Entropy (8bit):	5.531630912998077
Encrypted:	false
SSDEEP:	12:HA0LL/62W1+771dA0LL/6k/Mm1+07dA0LL/6SsA9zo1+6Sx:HA0HjW1epdA0HpMm177dA0HR+1M
MD5:	D18DFD3F6261A30CA89155327B1A9BB8
SHA1:	C22C6CFA1EAD643461058376BBFD3E134D8D9E36
SHA-256:	57F6CB487F647E7A50DC5BFD5CFA094126EF0B3BFE9E413876B8A0C8C9151FFE
SHA-512:	188FE7F97F4638FDBAC413D80D2208D3AAAE4DB475A8A6543A197D3DD8E68A3502A25AD3DB24350BFBED9D54F6FC7C2D247F728A76D12EC4804AF386DC015DDF
Malicious:	false
Reputation:	low
Preview:	0\r..m......Y...^b.d...._keyhttps://cdn.cookielaw.org/scripttemplates/6.5.0/otBannerSdk.js .https://echosign.com/...H./..............................i...ll..1>.m.<.+.....A..Eo.......t..........A..Eo..................0\r..m......Y...^b.d...._keyhttps://cdn.cookielaw.org/scripttemplates/6.5.0/otBannerSdk.js .https://echosign.com/.T..H./...............................i...ll..1>.m.<.+.....A..Eo......3kO..........A..Eo..................0\r..m......Y...^b.d...._keyhttps://cdn.cookielaw.org/scripttemplates/6.5.0/otBannerSdk.js .https://echosign.com/.B..H./.............i@.................i...ll..1>.m.<.+.....A..Eo.......7..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\528df7fa00e0aa0d_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1544
Entropy (8bit):	5.449698854564244
Encrypted:	false
SSDEEP:	24:Ap58mp9J7mp7mpMmpLmp4l1mpPrqmp3WM:AAmFm9m6mZmKmdrqmYM
MD5:	296603C02A1C88269DCC03B005707415
SHA1:	CB107C2FF29B580E1ED2045D71E57FD82D68E921
SHA-256:	4709DDE71AF62C2E94414F84C56454FE6ACA2D9B5F3B377C4EC2E219341DDC55
SHA-512:	016A7C53A5C50BC205E3B95F9AFC650AE3C9ADDA1D69CD857253B8F11EB1F6181E553AEF5032467CA8B0477BC5202583C39CC98B04E6E3D414C4392B4774434C
Malicious:	false
Reputation:	low
Preview:	0\r..m......=...E......._keyhttps://static.ads-twitter.com/uwt.js .https://adobe.com/z...H./....................m......[...%t]U......r.8..P..q.A..Eo..................A..Eo..................0\r..m......=...E......._keyhttps://static.ads-twitter.com/uwt.js .https://adobe.com/O...H./.....................m......[...%t]U......r.8..P..q.A..Eo.......E...........A..Eo..................0\r..m......=...E......._keyhttps://static.ads-twitter.com/uwt.js .https://adobe.com/8...H./..............4......m......[...%t]U......r.8..P..q.A..Eo......J............A..Eo..................0\r..m......=...E......._keyhttps://static.ads-twitter.com/uwt.js .https://adobe.com/?.1.H./..............K......m......[...%t]U......r.8..P..q.A..Eo.........7.........A..Eo..................0\r..m......=...E......._keyhttps://static.ads-twitter.com/uwt.js .https://adobe.com/...H./.............Ty......m......[...%t]U......r.8..P..q.A..Eo......j............A..Eo..................0\r..m......=...E......._keyhttps:/

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\549ad35069713461_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	689
Entropy (8bit):	5.824693603144745
Encrypted:	false
SSDEEP:	12:uE3GsKrOdKI5moux2pHgyyyJ3CMx03DP9gk9s5gaMMEXfECEKQkiA51:uEWvqIO/uyAyyASJDFHRkEsC9Qkiy
MD5:	6C4C769682107D98009F6CDDD079E71B
SHA1:	137383E383EB214F31FCFCF092FEF1207E72DA61
SHA-256:	47399013F8A97982883B18DF7EBF21139245AC95344EDB00CB11D4251CA57851
SHA-512:	3D6811C6757C57D8D97F1E3D1E3ED64EB9DBF14A2858DC50163D5A43448D531D37EECFFC370F309CA185D9CBC6D64331C81B7EC90DA23668045B358C5B65D25F
Malicious:	false
Reputation:	low
Preview:	0\r..m......-..........._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153061915&cv=9&fst=1607153061915&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fhelpx.adobe.com%2Fsupport%2Fsign.html&ref=https%3A%2F%2Fhelpx.adobe.com%2Fesign-route.html%3Flocale%3Den-US&tiba=Adobe%20Sign%20Learn%20%26%20Support&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/....H./.............)6.........^....d.{.(P,....99.;......A..Eo.......y}..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\566b774c237d48e7_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	271
Entropy (8bit):	5.635979934785793
Encrypted:	false
SSDEEP:	6:mXqlVYcv0KgiSHQWQQMfTB2TTUC/ZaFYinurwZn2rhK6t:gqWASHQXr72TUM4CH
MD5:	2226DE21E4565C2B5637AE9FB5CFC8DD
SHA1:	A912365A1CCB22A5A12FC514ED814632D4D45F38
SHA-256:	7F57F93B1D2E4DA4756661D84C18B13EF73FC422224486848B13A656334684A7
SHA-512:	F26B1B03980A2AFBC0B33A639D285F62F8C0FBAFDB302290EB09ED723EA2E039B3716A1C6513BAA72429EAB71D42C3DE8A9D1C16C5E816F2CC4407456B9B0E12
Malicious:	false
Reputation:	low
Preview:	0\r..m...........l#...._keyhttps://assets.adobedtm.com/d4d114c60e50/f1c1db5355c3/8eab40211f6d/RC2c6ff980f388415599d7dff8c94110cb-source.min.js .https://adobe.com/....H./.............x......./....hh.@../..-.e..V.?..).b.e.!.A..Eo........+..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\56b0452dc89a7392_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	613
Entropy (8bit):	5.818136282311407
Encrypted:	false
SSDEEP:	12:mZE3xjsVd3moux2pHgyyyJ3CMx03DP9kYOhCq0yllM3Z1:mZEtoZuyAyyASJDFkYOhCLyU3/
MD5:	AEF560FBCB828AF4AD11CD145AB1F912
SHA1:	7376E507DDC7CA7E9586B2F11DA8ADE1CAA3D09F
SHA-256:	FFD034A0869652747EC5399A598999C011ACB3F4D8AD572417AFA9AB3F60A4DC
SHA-512:	3313CDBF25DFCDC97DF97527FA83F4D6E7F4FC1DCBBFD331CCBB1479FE4522C478B1A5EE30873E51C4ECBDC0040E305EE8481BB8FCBCD0EEFDF7157C21F4D59E
Malicious:	false
Reputation:	low
Preview:	0\r..m.............j...._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153041447&cv=9&fst=1607153041447&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fhelpx.adobe.com%2Fsign%2Fuser-guide.html&tiba=Adobe%20Sign%20User%20Guide&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/,8..H./.............j.........v..f......Z5..D.._..z"........A..Eo......&J...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\571ee01133d52b3d_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	237
Entropy (8bit):	5.53226551847219
Encrypted:	false
SSDEEP:	3:m+lxQ/yv8RzY13u3dB/GTMW2B6lN7VE01sD2U1lHCSslllRfAdHi0RDFMmidF//B:mvnYxutpQa6lgYU6Ss/lRfoFB+FZK6t
MD5:	1D87C539E60745268BD526430E0B6E02
SHA1:	82F013FC228AB6C1C6718293DAB26E97CB31E291
SHA-256:	8FABD26127A85079A60450304441C9B75EA594EA6EF4FC1C64F621350DD2B4EA
SHA-512:	082FDAB76F62ADF08CED49448C36EAB8B519C1B64D7953675070B41A62B5770B0BC17B0905C3FD0C35EA0BD50D2CCE6260E5A00FA97B099C295F30635A17BFD0
Malicious:	false
Reputation:	low
Preview:	0\r..m......i..........._keyhttps://secure.na1.echocdn.com/resource/155975830.en_US/bundles/dcsignpanel.js .https://echosign.com/%..H./.............h..........r7..t...x..&..p.'........F\|.A..Eo.......W.^.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\590c166890af9420_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	34950
Entropy (8bit):	6.069403455757226
Encrypted:	false
SSDEEP:	768:sfvrMMn0yJCsbNiGZksdtLibjGlUALjJAp3ZaUQDWpux:sLLn0yJCsxNdt4KUvhZtEx
MD5:	F01983EE87DA27F22732585C39787E38
SHA1:	BB46D4FD94A03DECE86F54743B5FB856F41196C9
SHA-256:	5A2DC5896AFF4634DC37CD87D0244DE1244ECECA091A2CEB2D263A80C0ADB5CD
SHA-512:	B0E29EA22F1997BBD5F425B9C15044238DFBA3738B13DBCA078A858996522FFF5AC52EE363FCB123B0EAF4C049A8EF30DFE61C7CA73856A941A1354A1283CEF1
Malicious:	false
Reputation:	low
Preview:	0\r..m...........Fgw...._keyhttps://helpx.adobe.com/etc.dexter.dexterlibs/helpx/clientBundles/helpxTools/clientlibs.fp-fdcb1f093f91668ad7db38d9c9d61cc6.js .https://adobe.com/..m.H./.............s..............S...'....E..u.O..o..A..Eo...................A..Eo................................'.qr....O.........e:[....................................................h................(S....`n....8L`.....(S...`.....LL`"....@Rc..................Qb.i.....n......M...Qb..g.....o...b$...........I`....Da.... ....(S...`......L`......Qcb.w.....exports..$..a...........S.C..Qb.......l...H..!....a...........Qbv.:.....call......K`....D}8...............&.%.......&.%...&.(......&.}...&.%./...%.0...'....&.%.*..&.(...&.(...&.(...&...&.'..W.....-...(........,Rc...................`....Da@...8.....a.....e......... P.........@....@.-.....P.!.....~...https://helpx.adobe.com/etc.dexter.dexterlibs/helpx/clientBundles/helpxTools/clientlibs.fp-fdcb1f093f91668ad7db38d9c9d61cc6.js..a........D`....D`2...D`...

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5b1073d913d24c80_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	217
Entropy (8bit):	5.437213694217154
Encrypted:	false
SSDEEP:	6:mXNXYGLRfBcgwoRADvY+tXx4kon+nK6t:rgHRALjXqkzp
MD5:	15BDF1CEA551825877DA1C7FCAF0ACC2
SHA1:	58855434D11573EB7602E949EEDAB18CF8E82ED6
SHA-256:	93A27082C5CDF8AA4FFC54AAC68974807B5ADEB87BAFECFFBB833DFD5E6B2F24
SHA-512:	D346A81D95C81A9AC22F6FD05160930573FAE0E432FD0E22C404EA047EBB1AF919EC1C3E4F71C584F88B1D59D81E72A62535D57C0AE4EEA0C47C30A2E5D14FF4
Malicious:	false
Reputation:	low
Preview:	0\r..m......U......Z...._keyhttps://www.adobetag.com/d1/adobecorp/live/wwwadobecomWCMS.js .https://adobe.com/..v.H./..............^.......".AH..i".&.6ih..}....}..hU.ye.A..Eo........4p.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5b81428ee63b5b32_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	972
Entropy (8bit):	5.557835374119861
Encrypted:	false
SSDEEP:	12:zpGzvTQdriqpzVGJkHBpGzvTQdrOgBzVGJk91BpGzvTQdrsk6zVGJk8BpGzvTQdR:z+dugqHB+tgBgq91B+jgq8B+46gq8
MD5:	9F241BFA8859A569F88C6DE81A9C05ED
SHA1:	E5A87BC7C5C93BAB19E07DB572B6AAFB566CAA5C
SHA-256:	59E13B6B0012BEC4306543C0296652808659CECC7069CBE69D3DA1FD965AE1C0
SHA-512:	D6A7BAE05105CAE33A963A59CC058BE05464625E91F4461382B792F8BFF2E518B1E692047747902BF88624CBD039A1BA4502642D6500E2428A7D0B43A085BB05
Malicious:	false
Reputation:	low
Preview:	0\r..m......o..........._keyhttps://www.adobe.com/services/feds.res_1.js/head/en/acom/dc-mega-menu/sign-localnav.js .https://adobe.com/Y.v.H./....................w..nW....S.......%Ym..9'..dH..z.A..Eo......wN...........A..Eo..................0\r..m......o..........._keyhttps://www.adobe.com/services/feds.res_1.js/head/en/acom/dc-mega-menu/sign-localnav.js .https://adobe.com/....H./.............P.......w..nW....S.......%Ym..9'..dH..z.A..Eo......I..#.........A..Eo..................0\r..m......o..........._keyhttps://www.adobe.com/services/feds.res_1.js/head/en/acom/dc-mega-menu/sign-localnav.js .https://adobe.com/!...H./.....................w..nW....S.......%Ym..9'..dH..z.A..Eo......b............A..Eo..................0\r..m......o..........._keyhttps://www.adobe.com/services/feds.res_1.js/head/en/acom/dc-mega-menu/sign-localnav.js .https://adobe.com/....H./.....................w..nW....S.......%Ym..9'..dH..z.A..Eo.........Y.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\601443e803be0797_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	370
Entropy (8bit):	5.950933262220688
Encrypted:	false
SSDEEP:	6:mEZYxutpQrKwZ/WIid86AXnjAuV6RHhw/bK6t32f7lAD1oCdAuV6RHhXpl:iutTaWIi6HV+2l1okV+lp
MD5:	97F36BDE032DDCCBF815C1B74544F3B9
SHA1:	9B75B67D48CAAEC05E523C6C0BD41A6EEFFBBD44
SHA-256:	40DCCA54239E472C64DC2A239A2C620FD319A7B6CE31BE5D0414BCAC1103A4B4
SHA-512:	B283C6BC0736ECB156F323A3BD5BFFF8D80E5440223125DED928DF80C419675356B2F0D2135626E3E1BBB50587BD5EBABD2A4B68D706F6847B79271CBB3F0D23
Malicious:	false
Reputation:	low
Preview:	0\r..m......j....%K....._keyhttps://secure.na1.echocdn.com/resource/575148118.en_US/bundles/translations.js .https://echosign.com/Lc..H./...................].d+..Z@....M\?.pM.._..........A..Eo.......E...........A..Eo..................Lc..H./.pz..CB3D258860FEFC07FF532B9539D3464123C10FFC6785782B4108D573E4130F18].d+..Z@....M\?.pM.._..........A..Eo......D.%.L.......

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6121f3c03820659e_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	598
Entropy (8bit):	5.846878977721036
Encrypted:	false
SSDEEP:	12:qE3xjswbdwgoux2pHgyyyJ3CMx03DPV2myYJyCcuDUp:qEtfMuyAyyASJDN2myY4CK
MD5:	79B414F8BBC74754ECE0D8C88CC62309
SHA1:	89ED467B90EB572ED6AB8064E66A562916F1A10F
SHA-256:	9E6FD1665CA6BC1FD42C302BC60C2A3CD9D338E2171188660DFE3B0A4A708F83
SHA-512:	942FC035E91919A5433DFF0A3D3A5392746B14CD5AA3D71A15999F4811C9CFDD445CA5F9D2ECD4F096C8179FEFAE346093ED4C25746788208DB98C09B19F5B09
Malicious:	false
Reputation:	low
Preview:	0\r..m.................._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1607153091986&cv=9&fst=1607153091986&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.adobe.com%2Fprivacy.html&tiba=Adobe%20Privacy%20Center&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/.4..H./......................Z..v..".O...RDq.kPv..z..Y.`{.A..Eo......:i#..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\63ee18c64e1e8dcd_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	97240
Entropy (8bit):	5.693755960402942
Encrypted:	false
SSDEEP:	1536:ySuEM/l5eiPMtwK6U6NSQAvxu+OyVOvYM1s:yrEMjeiPMtQdNVYPOcM+
MD5:	79DB3889118BC1414A297D3E1515EDEF
SHA1:	32B4AA8F52F2239BA293994052F0AC63834B57FB
SHA-256:	E680686E6A5CC9E172E301179212FE470A838C0F1B10BED49F1D5BC3E1A3F36F
SHA-512:	CF519DB54E4E3EB49D7384C33D33F3B3D6CE6CD3B2593CD29320F8E69369EB2CCB7FC6672AE25FD92606A07A2278D4B7B84231B0DF3F6F698E654E37726C5C04
Malicious:	false
Reputation:	low
Preview:	0\r..m......@......:....06E8654C6700E3138195F860F6EA97C31EFC6B386FD06627A246A9E7911D55E1..............'.L:....O"....z..Y.......................x.......................................................................................t................................(S.....`......L`z.....Q.P:..j....webpackJsonp.....`......Ma.............b............C`L...C`N...C`P...C`r...C`t...C`@...C`B...C`D...C`F...C`H...C`J...C`L...C`N...C`P...C`R...C`T...C`V...C`X...C`Z...C`\...C`^...C``...C`....C`....C`....C`....C`2...C`4...C`6...C`8...C`:...C`<...C`>...C`@...C`B...C`D...C`F...C`H...C`J...C`L...C`N...C`P...C`R...C`T...C`V...C`X...C`Z...C`\...C`^...C``...C`b...C`d...C`f...C`h...C`j...C`....C`.....(S..`B....<L`........e...Qd..?.....__esModule.....a...........G.D.a..........Qd.a.)....analytics...C..Qd".>....environment.C..Qd.g.Q....observers...C..Qd*Po.....testingSuiteC..Qc.&.V....Debug...C..Qb........langC.u.C..A#...#...$..a$.a....$...%...K`....D...`... ............&.(...&...&.}..)&.'..W......&.].

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\65948dfcb396ab14_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.867233698049982
Encrypted:	false
SSDEEP:	12:fvE3GsPIdAQ1oux2pHgyyyJ3CMx03DPVccXbvH/CEkgeFT:fvEWUIuuyAyyASJDNccXb/CeA
MD5:	4DBAF1A087FB0A8E21DE426D3F2411B8
SHA1:	ACE8E582AF501A1D4115975BDDF52FDF0AA2DBD9
SHA-256:	963D4997CE8F32BDF5460AF9B2BDBEEDA47A079A5E9810BC95F285326BCD944A
SHA-512:	467ED03833205E71B9E47D3DC10612D35A4C42D8D5491C7C966D0DEA59916DD0A1873BACD9DCC3CAC108CA5A9846C07DABF59A79B7941D11F8B8670BC7842575
Malicious:	false
Reputation:	low
Preview:	0\r..m..........M.t....._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153067628&cv=9&fst=1607153067628&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.adobe.com%2Flegal%2Fterms.na1securena1echosigncom.echo.html%3Frand%3Dcppxur779u5qD34GwaKJb9FyJwY69-qg&tiba=Legal&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/B.8.H./.............L.........J......}.kO.g.:, ..kt..A..Eo......Q.R..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6632e6d3b53c8a95_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2152
Entropy (8bit):	5.700904312545227
Encrypted:	false
SSDEEP:	48:1587v58Fv58Wyv58VTv58yBv58ZlTv58Krv58W:1CjCVCWiC1CsCZl7CKzC
MD5:	8E994BE4C5D4901DE282B1541835A9B1
SHA1:	A3C58D6A59EC3ABEEF0104EF69D1D1BF4976FCFA
SHA-256:	22618C08588168180728EEBCA63212B0DB083A7CA08C00F1D1156BF5F5674889
SHA-512:	49B3B186C2B97B118D7EA5D922CF50B8C50A06C151EA0BD25609E6EBCE5D7652A75655C69F861B9B3FF5B51A7AAAD8FCC2A9492C73837E2F1AEE74896B1D5225
Malicious:	false
Reputation:	low
Preview:	0\r..m..........:S......_keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC2a643f872978403daaac6c6eb27b1c26-file.min.js .https://adobe.com/..H./......................f?....My...e..{./.nb..0..i...A..Eo......X............A..Eo..................0\r..m..........:S......_keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC2a643f872978403daaac6c6eb27b1c26-file.min.js .https://adobe.com/....H./.............C........f?....My...e..{./.nb..0..i...A..Eo...................A..Eo..................0\r..m..........:S......_keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC2a643f872978403daaac6c6eb27b1c26-file.min.js .https://adobe.com/.#..H./..............2.......f?....My...e..{./.nb..0..i...A..Eo........C..........A..Eo..................0\r..m..........:S......_keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RC2a643f872978403daaac6c6eb27b1c26-file.min.js .https://adobe.com/V./.H./.............%J.......f?.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\67d378d6da8d643e_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	853
Entropy (8bit):	5.565379802476499
Encrypted:	false
SSDEEP:	12:2tnhoEOXyXU5fHoGu2is/XyXsaVXUAaVXAEh/TDfSH9HJQN2DoupC:2thIgU5fH/u8Pgs4Xn4XA87kJQNoC
MD5:	ED6EC538F7A2856D9A756649A64B6BE0
SHA1:	8F051C772B5C3B8E141E40AA4AD34F9C1DCC51C4
SHA-256:	451DFB08AC78B351CE93336E933B2C532FB1FBF8885C45F82B8CD3E4D910CAB0
SHA-512:	2E06B6D2B5CF8DE9908A0A0B813FC141F77684DB0FD5A4220E90D9A36EB69D2F5E6BDA0BA19883A4A0497BF6B9A08569AA037EEF42F5BC20A0FE53233A6400D3
Malicious:	false
Reputation:	low
Preview:	0\r..m.............[...._keyhttps://adobe.demdex.net/event?d_nsid=0&d_ld=_ts%3D1607153072152&c_pageName=adobe.com%3Aspecial%3Amisc%3Aconsumerdisclosure&c_server=www.adobe.com%20Static%20Content%20pages&c_events=event19&c_prop3=www.adobe.com&c_prop4=en_us&c_prop5=en_us%3Aadobe.com%3Aspecial%3Amisc%3Aconsumerdisclosure&c_prop12=adobe.com%3Alegal%3Aterms.na1securena1echosigncom.echo&c_eVar16=adobe.com%3Alegal%3Aterms.na1securena1echosigncom.echo&c_prop17=NotSignedIn&c_eVar18=New&c_prop20=D%3Doid&c_prop21=D%3Dpid&c_eVar22=Friday%20-%2011%3A00PM&c_eVar28=www.adobe.com%2Fspecial%2Fmisc%2Fconsumerdisclosure.html&c_eVar37=D%3Doid&c_eVar38=D%3Dpid&d_rtbd=json&d_jsonv=1&d_dst=1&d_cb=demdexRequestCallback_adobe_0_1607153072152 .https://adobe.com/.F~.H./..............^......-.N.D....#..o.S*..D..../..T.4..A..Eo......aw.E.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6a9fad8381d66bfe_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1616
Entropy (8bit):	5.594474189557507
Encrypted:	false
SSDEEP:	24:BWgU2DWuz8TDWXXDWnIDWdDDW1FIDWmE1DWf6/Gr:NH0Mb2K+C1Ta
MD5:	42D6526A15BF1A85C9CE952F0D4DF090
SHA1:	3A32E0EDF001306A09537F36FF381DB1D274FB5E
SHA-256:	AC04284F41B368EB59924128D3B17D5E83A5976146C8BD3A879F71E351EC02A1
SHA-512:	CCFF95BE9C1068F31E35B26E8138A50E71E138D445D9AF55FC20FD7E4CEC7E23A80A3DEF0F68CAE283475239F9813DDE334038A90102CA73030877BA7A31784B
Malicious:	false
Reputation:	low
Preview:	0\r..m......F...W8H....._keyhttps://scripts.demandbase.com/qQQxkRp0.min.js .https://adobe.com/{2..H./....................8@v3.Q....D.....p....L.d.[....l.A..Eo........4..........A..Eo..................0\r..m......F...W8H....._keyhttps://scripts.demandbase.com/qQQxkRp0.min.js .https://adobe.com/~)..H./....................8@v3.Q....D.....p....L.d.[....l.A..Eo.................A..Eo..................0\r..m......F...W8H....._keyhttps://scripts.demandbase.com/qQQxkRp0.min.js .https://adobe.com/....H./.............4......8@v3.Q....D.....p....L.d.[....l.A..Eo...................A..Eo..................0\r..m......F...W8H....._keyhttps://scripts.demandbase.com/qQQxkRp0.min.js .https://adobe.com/[.0.H./..............K......8@v3.Q....D.....p....L.d.[....l.A..Eo......o............A..Eo..................0\r..m......F...W8H....._keyhttps://scripts.demandbase.com/qQQxkRp0.min.js .https://adobe.com/....H./.............Sy......8@v3.Q....D.....p....L.d.[....l.A..Eo...................A..Eo........

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6e8bdbf6ad5bb2b8_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.426520372522735
Encrypted:	false
SSDEEP:	6:mVYGLXyAG0X5MA+vTSn4x+YpjAS0GEeF8K4wzDK6t:wGzvb0k50GbPx
MD5:	E06E31F4C95FDD14D2B672C7945A3142
SHA1:	EA75189BF91EB478E26F46DECB8E5BBFA2AB2AB9
SHA-256:	F51FB800A2C01E81F9C26F7A5F70B0F6850EDA8458D8F6BE8332ED3BEF1CAB7B
SHA-512:	2163014085E6BADE21B10E4770B0ECEE006898A5B5B4FA2E528624787704517857080367226DFDB9EBC316C6316A2DF9DDDEC92838174A1F4940647B914787B6
Malicious:	false
Reputation:	low
Preview:	0\r..m......T...F......._keyhttps://www.adobe.com/services/feds.res_1.js/head/en/acom.js .https://adobe.com//...H./..............{.......?Jm].1Hn.N_j...2..............A..Eo......"~...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6eb5535c1fac527f_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	655
Entropy (8bit):	5.766346024741251
Encrypted:	false
SSDEEP:	12:42E31f1Ks5bd5ROoux2pHgyyyJ3CMx03DP99YylWxFXCsTf5EeWak:jElf1KUbHZuyAyyASJDF9Yyl8CiqeWak
MD5:	6C5DAFF0F5DAC9A757748B9D3B4A0DE3
SHA1:	801C8BEE52B593307972A64A424A541F8C94284C
SHA-256:	0BE2CC31D157AB6C108B70007AD2AF2E932B8428DB7815E811FF19271EB1A374
SHA-512:	8945ED17B90CD40F7D1EA8F3974638ED9072B5605BACD4A14C22DBBC583991E3033D0F6FDBBCBD2DB2CC41B1EEBC7864CE7EFF29941FBB0D832A241769A7E5AE
Malicious:	false
Reputation:	low
Preview:	0\r..m.................._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153046594&cv=9&fst=1607153046594&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fhelpx.adobe.com%2Fsign%2Ftutorials.html&tiba=Adobe%20Sign%20tutorials%20%7C%20Learn%20how%20to%20use%20Adobe%20Sign&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/....H./.............3.......s....?.r8a\|.z.....i.2w.....v.*So.A..Eo......i...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\710aae0a4f4502a8_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	753
Entropy (8bit):	5.46169986393562
Encrypted:	false
SSDEEP:	12:NfBGzv2GQLl5U6XfBGzv2GQLlY0wtXfBGzv2GQLlt9:52e7P2ea1tP2ep
MD5:	2F0B7BBD87C41F4BDDF898861ACCCCBE
SHA1:	C56FB1EE75A2F14A0ABDA3E1D8EAB20C9678654F
SHA-256:	1D0D6C1339C9DDBFC013CE53D5675B3D03018F5FE8EFD309EEDDBB4A5D8A61CB
SHA-512:	9FDFD6F7FD9E6BD0484B928C8E4493718D38D3DFB0EFCD3E36B9224BFCF4A79C4E7AA8458F36023C5F28BE180CA45D9FD6B09BFE4F142E00FCA708F052C5A6B9
Malicious:	false
Reputation:	low
Preview:	0\r..m......w....64/...._keyhttps://www.adobe.com/services/feds.res_1.js/head/en/acom/corporate-mega-menu/legal-localnav.js .https://adobe.com/....H./.............G......a.......s....U...i.;n.^.....>M^.A..Eo......AnrM.........A..Eo..................0\r..m......w....64/...._keyhttps://www.adobe.com/services/feds.res_1.js/head/en/acom/corporate-mega-menu/legal-localnav.js .https://adobe.com/-...H./..............m......a.......s....U...i.;n.^.....>M^.A..Eo......G............A..Eo..................0\r..m......w....64/...._keyhttps://www.adobe.com/services/feds.res_1.js/head/en/acom/corporate-mega-menu/legal-localnav.js .https://adobe.com/g6T.H./...................a.......s....U...i.;n.^.....>M^.A..Eo......l..H.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\749c7e331714b4ef_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	613
Entropy (8bit):	5.782414872703236
Encrypted:	false
SSDEEP:	12:m0jE3GsXEd7oux2pHgyyyJ3CMx03DP9kYOhCtCB9/T:m0jEWKEauyAyyASJDFkYOhCtCBFT
MD5:	1D79D4B90A824DC88997762D4B4124ED
SHA1:	06851F8C44491D7A21A3F7E806F9ADC828970280
SHA-256:	0A48AF61FEC89423065FD354E39CB8020CC8DF305AF43A5E2BA413553C233C65
SHA-512:	A8C61FF6B6C436320A25D5563F4C56ADC6747F8528DE385CA3C3AF54C2C0E02EE409DDA23C86240CF15064CCC5FE0B68D450EE41C21E56CFC34ECF6A8A0340AD
Malicious:	false
Reputation:	low
Preview:	0\r..m............^d...._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153041440&cv=9&fst=1607153041440&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fhelpx.adobe.com%2Fsign%2Fuser-guide.html&tiba=Adobe%20Sign%20User%20Guide&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/ 2..H./.............e.........g.....0....UX/....n.......>0.A..Eo.........7.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\78076ae97804cb59_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1840
Entropy (8bit):	5.708661070961027
Encrypted:	false
SSDEEP:	48:zyD88FyDuFyD3FyDvFyDEFyDgFyDfFyDq:zu8Sucu1uduKuOutu
MD5:	AAC470388F7CD980959797DD3AA5D57D
SHA1:	04CCD56784629C4BF16020E47EF2A413B4B2C67B
SHA-256:	B3D06F6AB8E37EB443AE987D9F8C9007596DE0D107B414713BBDFB4AFA5E0D82
SHA-512:	0BBD7174C1DD8A6EAAFDAB03CAFFFA08941198A7604291B2ECE97070BF7933822B5B215E24E5D847564A220873851703C636CC83365D3ACDA41FE7CF955144AC
Malicious:	false
Reputation:	low
Preview:	0\r..m......b...R.8....._keyhttps://www.googletagmanager.com/gtag/js?id=AW-1004494713&l=dataLayer&cx=c .https://adobe.com/u..H./.............\.........=e..~o6!...=..p....Ci..t..A..Eo........C.........A..Eo..................0\r..m......b...R.8....._keyhttps://www.googletagmanager.com/gtag/js?id=AW-1004494713&l=dataLayer&cx=c .https://adobe.com/.R..H./.............<.........=e..~o6!...=..p....Ci..t..A..Eo........'f.........A..Eo..................0\r..m......b...R.8....._keyhttps://www.googletagmanager.com/gtag/js?id=AW-1004494713&l=dataLayer&cx=c .https://adobe.com/a*..H./.............P5........=e..~o6!...=..p....Ci..t..A..Eo......4............A..Eo..................0\r..m......b...R.8....._keyhttps://www.googletagmanager.com/gtag/js?id=AW-1004494713&l=dataLayer&cx=c .https://adobe.com/..2.H./..............L........=e..~o6!...=..p....Ci..t..A..Eo........h.........A..Eo..................0\r..m......b...R.8....._keyhttps://www.googletagmanager.com/gtag/js?id=AW-10044

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\78f045ae79daf673_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1076
Entropy (8bit):	5.687403176944888
Encrypted:	false
SSDEEP:	24:yo5XZQxprEo5XZLxpUEo5XZhEKxpR1Eo5XZ0xpkN:z5pQxVJ5pLxGJ5phlxVJ5p0x2N
MD5:	96D6A20A393524437BC67AC15655683C
SHA1:	D010BC4282F651960ACCDF2C770041250D1E8B4C
SHA-256:	9AC927E31541F0BD8F2460DDBFEE871418621B875AC6465CF2CDFFD8D476890E
SHA-512:	66800B5573C4FA817FA3A2C5F1A0A7CA338FFAC335FC9E9F0B3D152B2861120174FF07EFBF15AB7943EACA76790243534A795BB5B53D7252D55FAC220390A200
Malicious:	false
Reputation:	low
Preview:	0\r..m............Z....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCbbd93c1920fd422b84787f67ddbfbe55-file.min.js .https://adobe.com/3F".H./.............FH.................EI......-...a.&..E...A..Eo........S..........A..Eo..................0\r..m............Z....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCbbd93c1920fd422b84787f67ddbfbe55-file.min.js .https://adobe.com/....H./..............m.................EI......-...a.&..E...A..Eo.......@5..........A..Eo..................0\r..m............Z....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCbbd93c1920fd422b84787f67ddbfbe55-file.min.js .https://adobe.com/.3Q.H./................................EI......-...a.&..E...A..Eo.......k...........A..Eo..................0\r..m............Z....._keyhttps://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/43cb2d4354c5/RCbbd93c1920fd422b84787f67ddbfbe55-file.min.js .https://adobe.com/.;..H./.........................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7c65a20c6f015d96_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.470076488968482
Encrypted:	false
SSDEEP:	3:m+lKKllC8RzYrSKDbHtQj4mUScMPKKvD4gtxM9XlHCCziM7tM3/mL4milXpK5kt:mQ9YGuHijPcMPKrYcHM3/wiDK6t
MD5:	B49D8EC3A30CD9D71BEAC780325062A1
SHA1:	C8883B5B466891DD8B8789EC6CA2D93D0E055751
SHA-256:	B04DCFBB38EFDE863635A096AAA4DA658716C29159310AB16324A1ACE71A32D4
SHA-512:	511165E91E57FC13FBB1434E187D18960CD54CCE852B977918635366EBD81372B97149504A1A5EDA59BEB503AC18CB97B5E256B90BD016C1E193A90DD007085E
Malicious:	false
Reputation:	low
Preview:	0\r..m......Z....a......_keyhttps://wwwimages2.adobe.com/ubi/template/identity/lib/animator.js .https://adobe.com/.[V.H./.............'T........L;.'.......8....7R....:....A..Eo......a............A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7f6e925df5390b67_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	251
Entropy (8bit):	5.629562815213787
Encrypted:	false
SSDEEP:	6:mgPK/VYcv0KgNotcQXAm7dCAE4n/k9YhtEGEKeNcUD8K6t:NPaojothXA44AE0k9e9eRO
MD5:	E7DACF9F1FD51238A1952B519669494F
SHA1:	F43836C7D0237F721134125FD0820308BE83A123
SHA-256:	E5D93CED64CBEA86F74C52C5854E731A5726D39540B8C25AF771E67DBD29C0BD
SHA-512:	6BFF46178588F8A91C4F0BB7D7B09E0007BB279F24DFEC020FF7354BF66D93E45FFA329277953A216AEEA986DCEBFA3F4076ECCFA3C11A04AF32EEB541706365
Malicious:	false
Reputation:	low
Preview:	0\r..m......w....R......_keyhttps://assets.adobedtm.com/extensions/EP5e9ec493dfa0465eaa797b523b09d3f7/AppMeasurement.min.js .https://adobe.com/`...H./..............u........V,.n...}._.!..&3R......?...A..Eo........(+.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7f9a337344e8d334_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	613
Entropy (8bit):	5.8270277199814355
Encrypted:	false
SSDEEP:	12:m8E31f1Ks0d8moux2pHgyyyJ3CMx03DP9kYOhCClufDw:m8Elf1Klu/uyAyyASJDFkYOhCC8fM
MD5:	62BCCB8AA9F7D82FE35724574499E1D1
SHA1:	D0F6821CA356228009C144092EFF55EF00BCFD5F
SHA-256:	05BE540265E1C9A83F8842E9E06549042C28179D04ADA50131F84EB682D74352
SHA-512:	2E2322E3065B77021D46BEFB9863C464D758CFA92E6F5163D368A13E7F4A81F95EE9258C8993A42B74F9B5AFD020C173277CFC51D3F97E00981C3648891B4057
Malicious:	false
Reputation:	low
Preview:	0\r..m..........p..L...._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153041435&cv=9&fst=1607153041435&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fhelpx.adobe.com%2Fsign%2Fuser-guide.html&tiba=Adobe%20Sign%20User%20Guide&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/.3..H./.............g........b.$....?wU..>...s..G>.Y@.......A..Eo..................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8027b623f35c2ec3_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	555800
Entropy (8bit):	6.155367251796881
Encrypted:	false
SSDEEP:	6144:tq0N2MDX9pxeyGwmTbAB4BYStFGIN+rhx0o5kCISRNNdFgrRScxZRnyAA:Q01Bt5THgrRScLXA
MD5:	EC88D40241466465F7FE2C7A0F6FD9B9
SHA1:	A2FF4DBCE9451D7EE8100AFDFE73EB25D3A205C6
SHA-256:	3E38F3A43B531BFFB40793A72772F399428485D82E336B8516DA22367877D025
SHA-512:	755B57C611CFBFB37CC30EB415659300CAFF2E0195B7706011F136386ED7AB47206DD2ABCD5C49BD12688B1FE06B2FB875FD91EE5C124C753B3B2E1AE2515C4B
Malicious:	false
Reputation:	low
Preview:	0\r..m......@.....g.....CB3D258860FEFC07FF532B9539D3464123C10FFC6785782B4108D573E4130F18..............'.......Oz...`x..4#...................a...u..................................................X...........................l...........................h... ...H....^..................................................................................................................................................................................................................0...........................................\...........@...............................................................L+..<................(S.8..`*.....L`.....(S....a..`........uL`.:.....0Rc...................M.`....I`....Da....:i...(S.....Ia....]........@.-....\P.a.....O...https://secure.na1.echocdn.com/resource/575148118.en_US/bundles/translations.js.a........D`....D`....D`.....,...`....&...&....&...&.(S....`..... L`.....4Rc.................Qb..x.....f...`.......O.`....Da....t......Qc.8pb....indexOf...Qb:. ....{0

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\809f1ba0f5632bc8_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	657
Entropy (8bit):	5.8423698020924775
Encrypted:	false
SSDEEP:	12:ytwE3esjdJmoux2pHgyyyJ3CMx03DPVccXbvH/CsOXj:ytwEu6P/uyAyyASJDNccXb/Cs+j
MD5:	E408B17C80B4870B35F73D10E16511AE
SHA1:	48427A25525A75F27C097C0CF745AFCD6661FAEC
SHA-256:	8A19670F32D7B1F383480809C3B9458328D6ABFB374C83B4C321C84A54244412
SHA-512:	2DBE2A8CFC7B8CFD6367C6B7FDF0711965602D041964238FB2F3B7B8B06CF5CFFE5B64DF9F69899E550A0AC40465C29970DE97B2110D4F04BBC4DED912944A10
Malicious:	false
Reputation:	low
Preview:	0\r..m..........9.q....._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153067625&cv=9&fst=1607153067625&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.adobe.com%2Flegal%2Fterms.na1securena1echosigncom.echo.html%3Frand%3Dcppxur779u5qD34GwaKJb9FyJwY69-qg&tiba=Legal&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/.{8.H./.............L........7.k..`Vv<......v...{k.D{.V.,.o.A..Eo.......Hv/.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\822ca2c890472620_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	5.972844466111492
Encrypted:	false
SSDEEP:	6:mxVYGLBg5KAJjNezKhnF+o0YrvVgssH4hzbK6tA8PY8imnVLnVgssH4:ug5KsjNuEiQ9gZH4m8A8imVBgZH
MD5:	075C5F9C3EC4AC0254A7F1269823F213
SHA1:	3A42A9F3E19BEC17068641B3502C075FAAEBB22D
SHA-256:	50B87FCFB39B3F4AF798F344CA71090CB36E81E83FBB552DF1485CDE22BFB00C
SHA-512:	A4C86474D5C20C985C5582B11B6AC6ADA5D7F4BBE4C8311300E1857F5FF9688812C3D1F341D5790D5A8E59FF3D4C9CF80AD439944CA0952E8CE2AFD1B5A59732
Malicious:	false
Reputation:	low
Preview:	0\r..m..........PR6o...._keyhttps://www.adobe.com/etc.hawks.dexterlibs/hawks/clientlibs/publish.combined.fp-4fa7d99c4d43211931da3ee239068c82.js .https://adobe.com/....H./..............E......_...kKi.r.$A....w!...xl....o..A..Eo......CG...........A..Eo......................H./.....660B4BF2E6A217A89A142FB606D82C5D8738AE97974CC501FD1CDE088D77B20F_...kKi.r.$A....w!...xl....o..A..Eo......Ay.+L.......

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\848c0bac6675d6b9_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	598
Entropy (8bit):	5.833563813548777
Encrypted:	false
SSDEEP:	12:DE31f1KswdQmoux2pHgyyyJ3CMx03DPV2myYJyCQd+eJrN7:DElf1K12/uyAyyASJDN2myY4Cre/
MD5:	9FC09B6794258856E310115F55AE7BBF
SHA1:	5AAB2D0581B7797BDA7442C9A9C636AFA6621AB3
SHA-256:	EB782C48867866735AAEB0FB4FC7BB17CAEDCDF0871104C042BC3BE0B3E23BB5
SHA-512:	6260A67A596BD3E7BA91BBC6193260E12760D3F76AB3AE359CBB5B0C939592600D1B361F734A71A14C64C6C8B174AF4231A1EF173B075176ABE9FBA006932D29
Malicious:	false
Reputation:	low
Preview:	0\r..m...........o`....._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1607153091885&cv=9&fst=1607153091885&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.adobe.com%2Fprivacy.html&tiba=Adobe%20Privacy%20Center&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/....H./.............u.........b...?...mG...l.Qr.....d...B.A..Eo........]..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\866fbb1b46da4c51_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	856
Entropy (8bit):	5.507425800851903
Encrypted:	false
SSDEEP:	24:YreDbCmYnuureDEmYnkureDlmYnDureDmmYnh:9muQklDOh
MD5:	F6B98539E9FA844C05C6285C65E2108A
SHA1:	EF5885FCA132D3A496EB09861194BF6FB12284BB
SHA-256:	6F677681DA3AF1D59A7B9FC54C1D625B2F42292FE4C41FE9763007A563A7E896
SHA-512:	DB76F1D1A9D62E5D6D9DAD9557B54A65793C0255775761E10B50C0B65DF8D3A5B43E081DFF7DC81B0BBB4346C4DF660CA0207D3AE1937DF00D9B5CD5E829F06C
Malicious:	false
Reputation:	low
Preview:	0\r..m......R....U......_keyhttps://www.adobe.com/marketingtech/main.no-promise.min.js .https://adobe.com/....H./..............C.........o..I.L......??..>...-.s...p.A..Eo..................A..Eo..................0\r..m......R....U......_keyhttps://www.adobe.com/marketingtech/main.no-promise.min.js .https://adobe.com/1..H./.............nj.........o..I.L......??..>...-.s...p.A..Eo......2............A..Eo..................0\r..m......R....U......_keyhttps://www.adobe.com/marketingtech/main.no-promise.min.js .https://adobe.com/..G.H./.......................o..I.L......??..>...-.s...p.A..Eo......x..n.........A..Eo..................0\r..m......R....U......_keyhttps://www.adobe.com/marketingtech/main.no-promise.min.js .https://adobe.com/...H./.......................o..I.L......??..>...-.s...p.A..Eo........P.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8c5404bc44834b19_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	672
Entropy (8bit):	5.7711737196499495
Encrypted:	false
SSDEEP:	12:3E3GsmtEdmhoux2pHgyyyJ3CMx03DP9gk9s5JY6EXfEC+znPS:3EWfmEKuyAyyASJDFHsY6EsCUnPS
MD5:	5F83F843F7A5D983051BF604E8F88372
SHA1:	06A16D80C6E97A8BF6A429F34A0754537C8D251B
SHA-256:	8766A13B31184AF211371E0EB234DAE7010FBEB08F92E0B41B0753784E7B369B
SHA-512:	FED15F767B04668B2C158EA624552E159DA56208E52E60514B6AD5217A6360DB2781961EE6C55689266DACBD201FFA8F2CDCF6E09AB2E42F3DABAABFA1F54A1D
Malicious:	false
Reputation:	low
Preview:	0\r..m............e...._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153083696&cv=9&fst=1607153083696&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fhelpx.adobe.com%2Fsupport%2Fsign.html&ref=https%3A%2F%2Fhelpx.adobe.com%2Fesign-route.html&tiba=Adobe%20Sign%20Learn%20%26%20Support&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/Q...H./.............S.......2./..#.....W=A1X.,.n.."...c].'.x.A..Eo........W..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8cd282fcc07b5f9b_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	247
Entropy (8bit):	5.565917874245526
Encrypted:	false
SSDEEP:	6:m1BnYxutpQzqhyevDkiEB6ADpKYBqK6t:ycut1yevDkiijDpN8
MD5:	75D31714DC9EBA5E6C86CE4EB866E22C
SHA1:	7C92EE1142EF3301473DF2D412BCD4E819614BE3
SHA-256:	4A9BC16C9BDC10341623365B7553AC4177432FD24931B815A1DFD1F525E69BD6
SHA-512:	8FEFDAF0257A2CA6AD1C1BE106A004C58B4C235C5E84E697AAE103F8F3529A20A200F9DC8CD41BDC4B614DC9FAA2328161AE12AE87BA6663AEE30FF97FF20B57
Malicious:	false
Reputation:	low
Preview:	0\r..m......s....\q....._keyhttps://secure.na1.echocdn.com/resource/N555771109.en_US/bundles/component-viewfields.js .https://echosign.com/....H./............./.........z!..O0.h[.C.t..8.u.-....DB.s.A..Eo.......a;>.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8cd8952779308ffb_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	125624
Entropy (8bit):	5.668522063697818
Encrypted:	false
SSDEEP:	1536:t4/3UR9H6Pz/a0Bec87WatLLJLkBcqozVSK5P30OR3OzNw/go:2+H67/a0ITtHZkVozVSK5PaNU
MD5:	05EBD16B3B2CC24598D805405749D247
SHA1:	473DE1D4EBC04011B47CC493E739AE8871EE788D
SHA-256:	058E3B160B56BA2F6AF6E91D0E608D9757370BDAEBB01F45E9AAEEE15C139B77
SHA-512:	3213BD39FBD0A21FC3960A237887313C6E83B17572788C7F780472323484AA1BE3FC4D6E93984940C8FDF7FDE2A6A2F30DF151766DA19E34A59DD3D4FAFE2AEC
Malicious:	false
Reputation:	low
Preview:	0\r..m......@.....).....FAFACE331F1177C06A7D40762A72D30D72AA0F3A0FC8FD7EFAA5A830EB1FC553..............'.......O+...8...5...................................................................................................................................l...........................d........................(S.....`.....q.L`4....(S...`,....TL`&....PRc$.................Qb.S......e.....QbFA......t.....Qb........n.....QbbR".....r......S.d$...................I`....Da....H....(S...`......L`......QcB..%....exports..$..a.........C..Qbnt'.....l...H...4...a...........Qb........call..q5..K`....D}8...............&.%.......&.%...&.(......&.}...&.%./...%.0...'....&.%...&.(...&.(...&.(...&...&.'..W.....-...(........,Rc................`....Da.........../....e......... P.........@....@.-....\|P.......m...https://www.adobe.com/etc.hawks.dexterlibs/dexter/clientlibs/base/head.fp-b98bcd624e7ac017183234351321567e.js...a........D`....D`....D`............`....&...&..A&.(S........5.a............Qc...c....win

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8e514e6008bd06c8_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	599
Entropy (8bit):	5.8625758465821045
Encrypted:	false
SSDEEP:	12:IE3esweDIdwWoux2pHgyyyJ3CMx03DPV2myYJyC0WioB:IEuaDI6uyAyyASJDN2myY4CBfB
MD5:	9204FD46E10521B04E0C7994FA2F79DB
SHA1:	1FBD23F78F2415507EBD07A6FD4AA4ADC8468D82
SHA-256:	33C68C51E0F00F65682A05665F789A5BF4E3A8C722EEC39602ED302DC111F687
SHA-512:	46EF0657AED0420783F2DD5FB5C6683E1D621E5DAD1C5CD91E0D0E7DF3BB05FE0CF640CB2A8AB47314CEE347682417AE494D625BEAC1536FE0A9EB52B3EC773C
Malicious:	false
Reputation:	low
Preview:	0\r..m............I...._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153091988&cv=9&fst=1607153091988&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.adobe.com%2Fprivacy.html&tiba=Adobe%20Privacy%20Center&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/.>..H./.....................C...*.{g.XN.........E.T.#U..A..Eo......[./..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\913057def580ecbf_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	598
Entropy (8bit):	5.8215683013765345
Encrypted:	false
SSDEEP:	12:2DE3GswfdwUoux2pHgyyyJ3CMx03DPV2myYJyCspt0Y:SEWbguyAyyASJDN2myY4CYJ
MD5:	735ABFD298224E4740AACF206145522D
SHA1:	46D2F6FD556B15CD8EE91FDA19FF66995643A133
SHA-256:	2B878051DEB6CEEDA1DCFDE2D6E4997C3F96A1A4BDDA6A1AA96B067FF4543C4D
SHA-512:	A5CD42482667DB9A22252CB2362D27030E5EB3E0B1D50B9874B636DF13269903CE362F17BD460A43C100107895F654BB8252DBF2687D2E7E6775B2FF80C5264A
Malicious:	false
Reputation:	low
Preview:	0\r..m..........#\......_keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1607153091982&cv=9&fst=1607153091982&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.adobe.com%2Fprivacy.html&tiba=Adobe%20Privacy%20Center&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/18..H./...................5.X.z.2.b.\|....,[..C.x.......A.A..Eo......[.<{.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\92d8b60515111e94_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	614
Entropy (8bit):	5.770887120756248
Encrypted:	false
SSDEEP:	12:DE3esjBdjioux2pHgyyyJ3CMx03DP9kYOhC+9lELNBp:DEu6B1ruyAyyASJDFkYOhC+9KN
MD5:	C2D9448ED68752F1EAAD9253E31D26CE
SHA1:	90D440C9644F871E5C4A37AFCA23917F8F197FAB
SHA-256:	D3E677A718933C50D8C26D9A97517819625EE13DF53626B02ADC459CE93BE9C1
SHA-512:	E0960A04675583D58C01791B935EBFF0BC2F44053011FDF311B247642D20A5AAB536493FFA2AFFBB71359601290EFB6507AFF3416EE16AA389BAFB0B184C636E
Malicious:	false
Reputation:	low
Preview:	0\r..m...........\|}D...._keyhttps://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1607153041403&cv=9&fst=1607153041403&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-480&u_java=false&u_nplug=1&u_nmime=2&gtm=2oab41&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fhelpx.adobe.com%2Fsign%2Fuser-guide.html&tiba=Adobe%20Sign%20User%20Guide&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 .https://adobe.com/.0..H./.............b.........sx..;l..1=..5....B.ybR..0.q.{..A..Eo........R3.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\96e400fd3e56d01d_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.644119181246043
Encrypted:	false
SSDEEP:	6:mkEYUCyg1cyHJQLoGSG0kD7H5/kvYZSSo0FLGYuK6t:nECyg1c4e1SpkDV02fo0Az
MD5:	12D2D9AD526BC021B4328869E36C0964
SHA1:	FCF7565A5BEFA3D930ABA34CFC7BD854A15C610C
SHA-256:	F960C51C4B455A3E188D3CE6DCF0FCB5613C871291DC5769CC8E3416BD33E80B
SHA-512:	E7C72DB8A530738DB5EA6E23FB36C9494035C3897318CD22F2BD490BB72E11724A0D4466FB25EB29E07D414ADD920EDBBC8A9CC0C465239EE808D434E1E24C42
Malicious:	false
Reputation:	low
Preview:	0\r..m.................._keyhttps://helpx.adobe.com/etc.dexter.dexterlibs/help/components/pages/user-guide/clientlibs.fp-cb1009ba629f0ca42d1db044cba85240.js .https://adobe.com/..p.H./.............Q.......\|.Q.e..j!k)......X.v..X.{..b..A..Eo......nB\|..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\979d87bbdfbc03ea_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	5217
Entropy (8bit):	5.368040790894517
Encrypted:	false
SSDEEP:	96:/S2JYC/98XrPWzjb6mz/P8YOxx4C1CCphp6AvW3kZi/o0t:/S2yrU6mz/Upxx4C7yABZW
MD5:	43EC50BE445307DF091207E078089DBA
SHA1:	2BBE6949F9DFFA395FC1F94714E07551F2A9431C
SHA-256:	A3EEDBD78D05D54A96DAB50D5BECD68E975C14E4E28075A6D295A44213C08F73
SHA-512:	E00AA800332DAA7ED33C03CA44D27D77931010741C9E28CC214A7728F3D040220046FD8E8E9B398DB6E74AB5E06694AC4FCFE5228561EEF8413E4499412BC304
Malicious:	false
Reputation:	low
Preview:	0\r..m......Q.........._keyhttps://universal.iperceptions.com/core/IpEngine_v77.8.js .https://adobe.com/....H./.....................b.gR%.F......;.....P..Q...^..UR.A..Eo......":'..........A..Eo................................'......O.................................................(S.I...`F.....L`t.....L`......Qd........iPerceptions.q......Qb..b.....trim.(S........5.a............a..............a..............Pd.........String.trimaI...q...IE.@.-....HP.......9...https://universal.iperceptions.com/core/IpEngine_v77.8.js...a........D`....D`....D`.........`<...&...&..Q.&.(S........a...............5.a..............a..........Qc.Rt.....ipEngine..Pc.........launch.a....0.......e..............@.....@.....Qcv.......launch..E....d........@...........D&.(S........a...........a............a...............a.......... Qfjjd.....hideExistingProjectsaN...v.......E.d....................&.(S......a....#.......a............a............a...........QeB.......displayInvite...a....u.......E.d..........

Static File Info

No static file info

Network Behavior

Network Port Distribution

Total Packets: 410
• 443 (HTTPS)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 4, 2020 23:23:43.086621046 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.087340117 CET	49721	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.190499067 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.190649986 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.191159964 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.191467047 CET	443	49721	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.191598892 CET	49721	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.191910028 CET	49721	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.294332981 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.294543028 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.294584036 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.294630051 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.294661045 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.294663906 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.294723988 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.295284033 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.295315981 CET	443	49721	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.295586109 CET	443	49721	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.295635939 CET	443	49721	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.295674086 CET	443	49721	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.295701027 CET	443	49721	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.295702934 CET	49721	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.295749903 CET	49721	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.296430111 CET	443	49721	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.335649014 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.337650061 CET	49721	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.423510075 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.424911022 CET	49721	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.527229071 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.528083086 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.528949976 CET	443	49721	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:43.569674969 CET	49721	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:43.670830011 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.061583996 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.061611891 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.061623096 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.061635971 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.061671019 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.061686993 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.061713934 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.061736107 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.061753035 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.061769962 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:44.061783075 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.061852932 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:44.164995909 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.165018082 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.165040970 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.165056944 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.165077925 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.165097952 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.165110111 CET	443	49720	52.71.63.232	192.168.2.3
Dec 4, 2020 23:23:44.165158033 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:44.165216923 CET	49720	443	192.168.2.3	52.71.63.232
Dec 4, 2020 23:23:44.223524094 CET	49728	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.223767996 CET	49729	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.223949909 CET	49730	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.224148035 CET	49731	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.326850891 CET	443	49728	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.327008963 CET	443	49729	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.327019930 CET	49728	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.327207088 CET	443	49730	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.327276945 CET	49729	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.327368021 CET	49728	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.327440977 CET	443	49731	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.327490091 CET	49730	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.327538013 CET	49731	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.328032970 CET	49730	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.328576088 CET	49729	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.328897953 CET	49731	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.430130005 CET	443	49728	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.430191040 CET	443	49728	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.430221081 CET	443	49728	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.430249929 CET	443	49728	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.430269003 CET	443	49728	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.430337906 CET	49728	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.430393934 CET	49728	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.430643082 CET	443	49730	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.430818081 CET	443	49730	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.430846930 CET	443	49730	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.430875063 CET	443	49730	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.430890083 CET	443	49730	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.430957079 CET	49730	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.430969954 CET	443	49728	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.431008101 CET	49730	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.431195974 CET	443	49729	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.431440115 CET	443	49729	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.431468010 CET	443	49729	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.431497097 CET	443	49729	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.431516886 CET	443	49729	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.431538105 CET	49729	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.431579113 CET	49729	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.431588888 CET	443	49731	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.431766033 CET	443	49730	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.431921959 CET	443	49731	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.431952000 CET	443	49731	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.431977987 CET	443	49731	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.431992054 CET	443	49731	52.71.63.230	192.168.2.3
Dec 4, 2020 23:23:44.432014942 CET	49731	443	192.168.2.3	52.71.63.230
Dec 4, 2020 23:23:44.432049036 CET	49731	443	192.168.2.3	52.71.63.230

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 4, 2020 23:23:43.023385048 CET	53023	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:43.033176899 CET	49563	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:43.036273003 CET	51352	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:43.037322044 CET	59349	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:43.041002989 CET	57084	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:43.076879025 CET	53	49563	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:43.079735994 CET	53	53023	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:43.080801964 CET	53	59349	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:43.082175016 CET	53	51352	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:43.083847046 CET	53	57084	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:43.439948082 CET	58823	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:43.483532906 CET	53	58823	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:43.564686060 CET	57568	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:43.607995987 CET	53	57568	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:44.177664995 CET	50540	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:44.186077118 CET	54366	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:44.222217083 CET	53	50540	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:44.225405931 CET	53	54366	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:44.918910027 CET	53034	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:44.955689907 CET	53	53034	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:45.319730043 CET	57762	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:45.357054949 CET	53	57762	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:45.671777010 CET	58987	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:45.699064016 CET	53	58987	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:45.881867886 CET	56579	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:45.908936024 CET	53	56579	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:46.141608953 CET	60633	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:46.178639889 CET	53	60633	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:46.416469097 CET	61292	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:46.453418970 CET	63619	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:46.472590923 CET	53	61292	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:46.480427027 CET	53	63619	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:46.613913059 CET	64938	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:46.657557011 CET	53	64938	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:47.295264959 CET	61946	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:47.331099033 CET	53	61946	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:56.283441067 CET	56338	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:56.340790987 CET	53	56338	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.101824045 CET	59420	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.139575958 CET	53	59420	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.207134008 CET	58784	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.245680094 CET	53	58784	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.592974901 CET	63978	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.593146086 CET	62938	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.593314886 CET	55708	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.633246899 CET	53	55708	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.637731075 CET	53	63978	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.637989044 CET	53	62938	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.669410944 CET	56803	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.677850962 CET	57145	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.681437016 CET	55359	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.710721016 CET	53	56803	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.717402935 CET	53	57145	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.719022036 CET	53	55359	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.754750967 CET	58306	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.766901970 CET	64124	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.774535894 CET	49361	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.798577070 CET	53	58306	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.808115959 CET	53	64124	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.810502052 CET	53	49361	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.859642982 CET	63150	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.871263027 CET	53279	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.871563911 CET	56881	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.906220913 CET	53	63150	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.912091970 CET	53	56881	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.920978069 CET	53	53279	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.923657894 CET	53642	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.927886009 CET	55667	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:23:58.970791101 CET	53	55667	8.8.8.8	192.168.2.3
Dec 4, 2020 23:23:58.977247953 CET	53	53642	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:00.058129072 CET	54833	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:00.095001936 CET	53	54833	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:00.205647945 CET	62476	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:00.246748924 CET	53	62476	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:00.721704960 CET	49705	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:00.759516954 CET	53	49705	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.169519901 CET	61477	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.213746071 CET	53	61477	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.522157907 CET	61633	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.569036961 CET	53	61633	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.593211889 CET	55949	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.605865002 CET	57601	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.610547066 CET	49342	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.617856979 CET	56253	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.629673958 CET	53	55949	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.642613888 CET	53	57601	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.643821955 CET	49667	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.644073963 CET	55439	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.648957014 CET	53	49342	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.661166906 CET	53	56253	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.679290056 CET	53	49667	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.680919886 CET	53	55439	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.729656935 CET	57069	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.729805946 CET	57659	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.756623983 CET	53	57069	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.756640911 CET	53	57659	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.758563995 CET	54717	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.783252001 CET	63975	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:01.795084953 CET	53	54717	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:01.818629026 CET	53	63975	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:02.067490101 CET	56639	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.116065025 CET	53	56639	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:02.221678019 CET	51856	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.222122908 CET	56546	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.253194094 CET	62152	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.255445004 CET	53470	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.260214090 CET	56446	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.260679960 CET	53	51856	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:02.265763998 CET	53	56546	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:02.280206919 CET	53	62152	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:02.282361984 CET	53	53470	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:02.297197104 CET	53	56446	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:02.529990911 CET	59631	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.537553072 CET	55515	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.556982994 CET	53	59631	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:02.581505060 CET	53	55515	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:02.607136011 CET	64547	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.634208918 CET	53	64547	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:02.666449070 CET	51759	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.693344116 CET	53	51759	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:02.963356018 CET	59207	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.971889973 CET	54269	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.972557068 CET	54856	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.985656977 CET	64140	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:02.999643087 CET	53	54856	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:03.009777069 CET	53	59207	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:03.015614986 CET	53	54269	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:03.022572041 CET	62271	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:03.022671938 CET	53	64140	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:03.039146900 CET	57404	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:03.042213917 CET	62997	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:03.074809074 CET	53	62271	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:03.085336924 CET	53	62997	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:03.087794065 CET	53	57404	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:03.149981022 CET	57712	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:03.185511112 CET	53	57712	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:03.242639065 CET	60065	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:03.289055109 CET	53	60065	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:03.782340050 CET	55068	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:03.822266102 CET	53	55068	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:03.823169947 CET	64700	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:03.823967934 CET	61998	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:03.860888004 CET	53	61998	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:03.862200975 CET	53	64700	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:05.223089933 CET	53724	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:05.258629084 CET	53	53724	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:07.529995918 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.553603888 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.553628922 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.555455923 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.555809021 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.586184978 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.586946964 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.587858915 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.604515076 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.612945080 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.612977028 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.613298893 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.620249987 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.620364904 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.620693922 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.624614000 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.666115999 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.700969934 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.742528915 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.743671894 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.748171091 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.748280048 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.748613119 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.749377966 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.765774965 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.769702911 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.791896105 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.792098045 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.792296886 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.794821024 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.794970989 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.795581102 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.843909979 CET	52328	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:07.881566048 CET	53	52328	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:07.915033102 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:07.923985004 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.925857067 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.927531958 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.938697100 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:07.938714981 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:07.940359116 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:07.942483902 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.968888998 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.969985008 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.970274925 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.970650911 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.972309113 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.972955942 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.973162889 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.975065947 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.975518942 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:07.977341890 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:07.984198093 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:07.984608889 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.014434099 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.015053034 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.027825117 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.027853012 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.028618097 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.053200006 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.054286957 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.070648909 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.084544897 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.084682941 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.084942102 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.085158110 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.085289955 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.085735083 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.134928942 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.135926962 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.137052059 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.152302027 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.166440010 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.166536093 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.166656017 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.166857958 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.166934967 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:08.169439077 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.169504881 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:08.195509911 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:09.764370918 CET	58051	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:09.801758051 CET	53	58051	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:16.447712898 CET	64130	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:16.483374119 CET	53	64130	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:17.548948050 CET	50491	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:17.576102018 CET	53	50491	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:17.668122053 CET	53004	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:17.705085039 CET	53	53004	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:17.808270931 CET	52529	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:17.835369110 CET	53	52529	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:17.878031969 CET	53656	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:17.915523052 CET	53	53656	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:18.000322104 CET	62724	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:18.043972015 CET	53	62724	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:18.153717995 CET	56059	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:18.191279888 CET	53	56059	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:18.302207947 CET	63060	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:18.308584929 CET	51498	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:18.339173079 CET	53	63060	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:18.356677055 CET	53	51498	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:18.464119911 CET	59943	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:18.501324892 CET	53	59943	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:18.575798988 CET	50118	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:18.602873087 CET	53	50118	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:18.638690948 CET	58357	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:18.673893929 CET	53	58357	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:18.839884043 CET	55804	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:18.879975080 CET	53	55804	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:18.968888998 CET	58079	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:18.996320963 CET	53	58079	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:19.079677105 CET	52080	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:19.126466990 CET	53	52080	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:19.181606054 CET	55238	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:19.208657026 CET	53	55238	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:19.260032892 CET	49289	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:19.295448065 CET	53	49289	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:19.300431013 CET	61034	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:19.337961912 CET	53	61034	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:19.411742926 CET	51964	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:19.450429916 CET	53	51964	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:19.485580921 CET	58241	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:19.512557030 CET	53	58241	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:19.645452976 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:19.672442913 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:19.672466040 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:19.672866106 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:19.759828091 CET	59571	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:19.797508001 CET	53	59571	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:19.883878946 CET	51708	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:19.920871019 CET	53	51708	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:20.293292999 CET	60709	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:20.318814993 CET	63643	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:20.328991890 CET	53	60709	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:20.345762968 CET	53	63643	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:21.062114954 CET	62823	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:21.089188099 CET	53	62823	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:21.362447023 CET	63750	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:21.390604973 CET	53	63750	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:21.710165977 CET	61959	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:21.745621920 CET	53	61959	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:21.922774076 CET	63554	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:21.949594975 CET	53	63554	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:22.214819908 CET	57723	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:22.241791010 CET	53	57723	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:22.707530022 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.732755899 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.733237982 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.733473063 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.766500950 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.770266056 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.786961079 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.819391966 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.819410086 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.819749117 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.820637941 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.863054037 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.911614895 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.923521996 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.924127102 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.940399885 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.948786020 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.948869944 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.949088097 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.963861942 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.964134932 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.964288950 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.972229958 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.972357988 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:22.972516060 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:22.973006010 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:23.011756897 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.015047073 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:23.041836977 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.049082994 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:23.059078932 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:23.064588070 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:23.068718910 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.075953960 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:23.092699051 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.093198061 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.096524000 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:23.096856117 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:23.097176075 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:23.105516911 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:23.105797052 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:23.106137991 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:23.106664896 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.110383987 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.112299919 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:23.113027096 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.113090992 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:23.113722086 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:23.120769978 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.124288082 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.124403000 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.124701977 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.125097990 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.125201941 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.125546932 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.137209892 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.138206959 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.138371944 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.139229059 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.143558025 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.143687010 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.144023895 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.151576042 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.151700020 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:23.152573109 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:23.399511099 CET	50980	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:23.434851885 CET	53	50980	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:23.475121021 CET	50067	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:23.502105951 CET	53	50067	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:24.226396084 CET	52992	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:24.253546953 CET	53	52992	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:25.356883049 CET	55129	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:25.394592047 CET	53	55129	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:26.211936951 CET	60959	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:26.239053011 CET	53	60959	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:28.007220984 CET	58319	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:28.042678118 CET	53	58319	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:28.338391066 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.367918015 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.379966974 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.386245012 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.386384964 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.386583090 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.393896103 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.393995047 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.394471884 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.404752016 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.446511984 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.482861996 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.524466038 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.532051086 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.532195091 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.532601118 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.533792019 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.575484991 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.691037893 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.691351891 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:28.713063955 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.721568108 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:28.721693039 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:28.721892118 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:28.729674101 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.738101959 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.738225937 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.738548040 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.739272118 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.739305019 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.739871979 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.769866943 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.773332119 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.777806997 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.787112951 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:28.790113926 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.816396952 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.816651106 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.816984892 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.818639994 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:28.822753906 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.822793961 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.827198982 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.827445030 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:28.827486992 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.845312119 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:28.852773905 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:28.857100964 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:28.864903927 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:28.876640081 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:28.881337881 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:28.887332916 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:28.887372017 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:28.887665987 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:28.896862030 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:28.906990051 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:28.907305956 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:28.907381058 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:28.933986902 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:29.309148073 CET	64785	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:29.344719887 CET	53	64785	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:29.360605955 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:29.390299082 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:29.390332937 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:29.390667915 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:29.561176062 CET	50208	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:29.596900940 CET	53	50208	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:29.912861109 CET	62477	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:29.950124979 CET	53	62477	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:31.886746883 CET	54467	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:31.928491116 CET	53	54467	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:32.442984104 CET	60548	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:32.455606937 CET	59623	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:32.486917973 CET	53	60548	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:32.492470026 CET	53	59623	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:33.796103001 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:33.799226046 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:33.816343069 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:33.843477011 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:33.843620062 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:33.843815088 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:33.848490953 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:33.848630905 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:33.848855972 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:33.849632025 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:33.850817919 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:33.867554903 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:33.925246000 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:33.930891037 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:33.947274923 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:33.960138083 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:33.960237980 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:33.960367918 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:33.960479021 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:33.960566044 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:33.960639954 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:34.293077946 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:34.308890104 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:34.326484919 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:34.341830969 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:34.341866016 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:34.342324018 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:34.343132973 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:34.357938051 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:34.358066082 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:34.358462095 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:34.359011889 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:34.375602961 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:34.414417028 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:34.433000088 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:34.444663048 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:34.444753885 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:34.446202993 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:34.463628054 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:34.463656902 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:34.464468002 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:34.641299963 CET	64806	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:34.668448925 CET	53	64806	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:38.171305895 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:38.213140965 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:38.320369005 CET	49686	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:38.366689920 CET	53	49686	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:38.376255989 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:38.376605034 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:38.377989054 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:38.379244089 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:38.420963049 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:38.602590084 CET	56195	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:38.654119015 CET	53	56195	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:38.842910051 CET	62241	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:38.872090101 CET	50543	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:38.885286093 CET	56445	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:38.886195898 CET	56709	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:38.886996031 CET	51248	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:38.899112940 CET	53	62241	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:38.908759117 CET	53	50543	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:38.928678989 CET	53	56445	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:38.934762001 CET	53	56709	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:38.935316086 CET	53	51248	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:39.410738945 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:39.436184883 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:39.436265945 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:39.436506033 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:39.871351957 CET	49679	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:39.915118933 CET	53	49679	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:40.022924900 CET	50263	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:40.060921907 CET	53	50263	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:40.085339069 CET	49215	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:40.123475075 CET	53	49215	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:40.265022993 CET	64372	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:40.310722113 CET	53	64372	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:40.339710951 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:40.351808071 CET	50016	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:40.369494915 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:40.369582891 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:40.370040894 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:40.387343884 CET	53	50016	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:41.051656961 CET	61325	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:41.086988926 CET	53	61325	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:41.508533001 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:41.551387072 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.555972099 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.556926966 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:41.600681067 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.667202950 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:41.700124979 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:41.700311899 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:41.700980902 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:41.704253912 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:41.746474981 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.753565073 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.754674911 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.754911900 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:41.758677959 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:41.785192013 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.811564922 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:41.847290993 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:41.878500938 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:41.878532887 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:41.878995895 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:41.882513046 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:41.899280071 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:41.916439056 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.947206974 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.947252035 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.947774887 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:41.951653004 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:41.993417025 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.999258041 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:41.999301910 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:42.004220009 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:42.031172037 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:42.031419992 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:42.035929918 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:42.036390066 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:42.070792913 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:42.079843998 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:42.112770081 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:42.112791061 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:42.114340067 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:42.152395964 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:42.182712078 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:42.182806969 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:42.183167934 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:44.551840067 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:44.576700926 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.576749086 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.581491947 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:44.770862103 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:44.785084009 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:44.801764965 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.810159922 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.810281992 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.814745903 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:44.820394993 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.825052023 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:44.841975927 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:44.844671965 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:44.846215963 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:44.853934050 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:44.861484051 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.884237051 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:44.884268045 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:44.884548903 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:44.887978077 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.890404940 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.890654087 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.891828060 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.892147064 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.894675016 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.894967079 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:44.896074057 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:44.901886940 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:44.913932085 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:44.914340973 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:44.927365065 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:44.930785894 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:44.944966078 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:44.945007086 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:44.945100069 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:44.945426941 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:44.959415913 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:44.959559917 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:44.960021973 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:44.992082119 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:45.074433088 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:45.095347881 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:45.122580051 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:45.122622013 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:45.123414040 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:45.144826889 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:45.175532103 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:45.195394039 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:45.197278023 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:45.224765062 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:45.225802898 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:45.236315012 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:45.236346960 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:45.236676931 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:45.246975899 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:45.300951958 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:45.331053019 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:45.357119083 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:46.058686972 CET	49160	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:46.094387054 CET	53	49160	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:46.339973927 CET	51265	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:46.376632929 CET	53	51265	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:48.710143089 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:48.731199980 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:48.757961035 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:48.765233994 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:48.883296013 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:48.904042959 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:49.157083035 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:49.178375959 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:49.205735922 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:49.205760956 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:49.211266041 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:49.261243105 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:49.282233953 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:49.475645065 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:49.497638941 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:49.500875950 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:49.607506037 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:49.664156914 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:49.693974018 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:49.694473028 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:49.730372906 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:49.765964031 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:49.794698954 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:49.794754982 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:49.963800907 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:49.963962078 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:49.984575987 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:49.994241953 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:49.994613886 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:49.994858027 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:50.012393951 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:50.012514114 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:50.017327070 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:50.105717897 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:50.126737118 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:50.130573034 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:50.130593061 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:50.136341095 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:50.243416071 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:50.243860960 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:50.244349957 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:50.244813919 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:50.264566898 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:50.274947882 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:50.275036097 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:50.275402069 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:50.292383909 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:50.292571068 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:50.292982101 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:50.293127060 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:50.296799898 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:50.302666903 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:50.406018972 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:50.406565905 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:50.407033920 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:50.423032999 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:50.436877966 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:50.436897993 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:50.437067986 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:50.437172890 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:50.440251112 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:50.440357924 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:50.448635101 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:50.448746920 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:50.452400923 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:52.580291986 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:52.600944996 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:52.634900093 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:52.634947062 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:52.640572071 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:52.663500071 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:52.823297977 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:52.824156046 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:52.845299006 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:52.853405952 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:52.853441000 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:52.853833914 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:52.872338057 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:52.872392893 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:52.877613068 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:52.882745981 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:52.900927067 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:52.904174089 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:52.921547890 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:52.926476955 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:52.931498051 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:53.063731909 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:53.064836979 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:53.084907055 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:53.089623928 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:53.094575882 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:53.111841917 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:53.112127066 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:53.116570950 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:53.141541004 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:53.141956091 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:53.142966032 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:53.143400908 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:53.150051117 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:53.163204908 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:53.166594982 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:53.171555042 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:53.171657085 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:53.172436953 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:53.180335999 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:53.180386066 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:53.180773020 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:53.189959049 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:53.190470934 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:53.190613031 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:53.190829992 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:53.191541910 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:53.191705942 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:24:53.194940090 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:24:53.205033064 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:53.206651926 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:53.210788965 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:53.223421097 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:53.236439943 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:53.236501932 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:53.236852884 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:53.237186909 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:53.243874073 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:53.243941069 CET	443	52329	172.217.21.195	192.168.2.3
Dec 4, 2020 23:24:53.244288921 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:53.269598961 CET	52329	443	192.168.2.3	172.217.21.195
Dec 4, 2020 23:24:57.211623907 CET	52006	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:57.248967886 CET	53	52006	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:57.365189075 CET	58697	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:57.402041912 CET	53	58697	8.8.8.8	192.168.2.3
Dec 4, 2020 23:24:59.240598917 CET	51530	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:24:59.276366949 CET	53	51530	8.8.8.8	192.168.2.3
Dec 4, 2020 23:25:00.267982960 CET	50989	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:25:00.319329023 CET	53	50989	8.8.8.8	192.168.2.3
Dec 4, 2020 23:25:08.070034981 CET	53728	443	192.168.2.3	172.217.23.162
Dec 4, 2020 23:25:08.092802048 CET	443	53728	172.217.23.162	192.168.2.3
Dec 4, 2020 23:25:08.789185047 CET	53323	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:25:08.816473007 CET	53	53323	8.8.8.8	192.168.2.3
Dec 4, 2020 23:25:09.825540066 CET	59034	53	192.168.2.3	8.8.8.8
Dec 4, 2020 23:25:09.862165928 CET	53	59034	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Dec 4, 2020 23:23:43.041002989 CET	192.168.2.3	8.8.8.8	0x9361	Standard query (0)	salesforceintegration.na1.echosign.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:44.177664995 CET	192.168.2.3	8.8.8.8	0x5364	Standard query (0)	secure.na1.echocdn.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:44.918910027 CET	192.168.2.3	8.8.8.8	0x674d	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:45.319730043 CET	192.168.2.3	8.8.8.8	0x7ef0	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:45.671777010 CET	192.168.2.3	8.8.8.8	0xfd5d	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:45.881867886 CET	192.168.2.3	8.8.8.8	0x9654	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:46.141608953 CET	192.168.2.3	8.8.8.8	0xac0f	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:46.453418970 CET	192.168.2.3	8.8.8.8	0x6b7c	Standard query (0)	bam-cell.nr-data.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:47.295264959 CET	192.168.2.3	8.8.8.8	0x95d	Standard query (0)	salesforceintegration.na1.echosign.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:56.283441067 CET	192.168.2.3	8.8.8.8	0x7450	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.593146086 CET	192.168.2.3	8.8.8.8	0x858a	Standard query (0)	api.demandbase.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.669410944 CET	192.168.2.3	8.8.8.8	0x3d49	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.677850962 CET	192.168.2.3	8.8.8.8	0x2d7f	Standard query (0)	c.evidon.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.681437016 CET	192.168.2.3	8.8.8.8	0x1311	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.754750967 CET	192.168.2.3	8.8.8.8	0x87c	Standard query (0)	fast.adobe.demdex.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.774535894 CET	192.168.2.3	8.8.8.8	0x3b49	Standard query (0)	l3.evidon.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.859642982 CET	192.168.2.3	8.8.8.8	0x4456	Standard query (0)	static.adobelogin.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.871263027 CET	192.168.2.3	8.8.8.8	0x8f9b	Standard query (0)	use.typekit.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.871563911 CET	192.168.2.3	8.8.8.8	0xbe85	Standard query (0)	universal.iperceptions.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:00.721704960 CET	192.168.2.3	8.8.8.8	0x6432	Standard query (0)	ims-na1.adobelogin.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.169519901 CET	192.168.2.3	8.8.8.8	0x3f32	Standard query (0)	adobe.tt.omtrdc.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.593211889 CET	192.168.2.3	8.8.8.8	0x4600	Standard query (0)	www.everestjs.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.605865002 CET	192.168.2.3	8.8.8.8	0x77dd	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.610547066 CET	192.168.2.3	8.8.8.8	0x4a27	Standard query (0)	scripts.demandbase.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.644073963 CET	192.168.2.3	8.8.8.8	0x8729	Standard query (0)	pixel.everesttech.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.729656935 CET	192.168.2.3	8.8.8.8	0x36c0	Standard query (0)	servedby.flashtalking.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.758563995 CET	192.168.2.3	8.8.8.8	0x78e1	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.783252001 CET	192.168.2.3	8.8.8.8	0x39ac	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.221678019 CET	192.168.2.3	8.8.8.8	0x14c3	Standard query (0)	lasteventf-tm.everesttech.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.253194094 CET	192.168.2.3	8.8.8.8	0xfdb	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.255445004 CET	192.168.2.3	8.8.8.8	0xbc38	Standard query (0)	t.co	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.260214090 CET	192.168.2.3	8.8.8.8	0xd8f7	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.529990911 CET	192.168.2.3	8.8.8.8	0xde62	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.537553072 CET	192.168.2.3	8.8.8.8	0xaa3b	Standard query (0)	api.iperceptions.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.607136011 CET	192.168.2.3	8.8.8.8	0x830d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.666449070 CET	192.168.2.3	8.8.8.8	0xa8b3	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.963356018 CET	192.168.2.3	8.8.8.8	0x8efd	Standard query (0)	adobeioruntime.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.971889973 CET	192.168.2.3	8.8.8.8	0xe6f0	Standard query (0)	www.google.co.uk	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.039146900 CET	192.168.2.3	8.8.8.8	0xeb18	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.042213917 CET	192.168.2.3	8.8.8.8	0xe960	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.782340050 CET	192.168.2.3	8.8.8.8	0x994b	Standard query (0)	sd.iperceptions.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.823169947 CET	192.168.2.3	8.8.8.8	0x7f9c	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.823967934 CET	192.168.2.3	8.8.8.8	0xf69d	Standard query (0)	adobe.demdex.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:07.843909979 CET	192.168.2.3	8.8.8.8	0x9c56	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:17.548948050 CET	192.168.2.3	8.8.8.8	0x1beb	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:17.668122053 CET	192.168.2.3	8.8.8.8	0xf50d	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:17.878031969 CET	192.168.2.3	8.8.8.8	0xe197	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.000322104 CET	192.168.2.3	8.8.8.8	0x2aad	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.153717995 CET	192.168.2.3	8.8.8.8	0x45e8	Standard query (0)	rtd.tubemogul.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.302207947 CET	192.168.2.3	8.8.8.8	0x5a23	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.308584929 CET	192.168.2.3	8.8.8.8	0xacb6	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.464119911 CET	192.168.2.3	8.8.8.8	0x8417	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.839884043 CET	192.168.2.3	8.8.8.8	0x8956	Standard query (0)	adobe-sync.dotomi.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.968888998 CET	192.168.2.3	8.8.8.8	0xd817	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.079677105 CET	192.168.2.3	8.8.8.8	0x3c0d	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.181606054 CET	192.168.2.3	8.8.8.8	0xfa90	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.260032892 CET	192.168.2.3	8.8.8.8	0xae04	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.300431013 CET	192.168.2.3	8.8.8.8	0x3ef8	Standard query (0)	pix-us.revjet.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.411742926 CET	192.168.2.3	8.8.8.8	0x5cc9	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.759828091 CET	192.168.2.3	8.8.8.8	0xdc2c	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.883878946 CET	192.168.2.3	8.8.8.8	0x1f83	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:20.318814993 CET	192.168.2.3	8.8.8.8	0x1cf0	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:21.362447023 CET	192.168.2.3	8.8.8.8	0xc3b1	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:22.214819908 CET	192.168.2.3	8.8.8.8	0xea1c	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:23.399511099 CET	192.168.2.3	8.8.8.8	0x3ab2	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:25.356883049 CET	192.168.2.3	8.8.8.8	0x5162	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:26.211936951 CET	192.168.2.3	8.8.8.8	0xb2f1	Standard query (0)	s.thebrighttag.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:28.007220984 CET	192.168.2.3	8.8.8.8	0x7cc1	Standard query (0)	partner.mediawallahscript.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.309148073 CET	192.168.2.3	8.8.8.8	0xb447	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.561176062 CET	192.168.2.3	8.8.8.8	0x97	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:31.886746883 CET	192.168.2.3	8.8.8.8	0xc6de	Standard query (0)	cdn.tt.omtrdc.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:32.455606937 CET	192.168.2.3	8.8.8.8	0xba4f	Standard query (0)	www.adobetag.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:38.320369005 CET	192.168.2.3	8.8.8.8	0x269e	Standard query (0)	trust.echosign.com	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:38.872090101 CET	192.168.2.3	8.8.8.8	0x52f	Standard query (0)	mozilla.github.io	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:40.265022993 CET	192.168.2.3	8.8.8.8	0xa160	Standard query (0)	amcglobal.sc.omtrdc.net	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:57.365189075 CET	192.168.2.3	8.8.8.8	0xa331	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Dec 4, 2020 23:23:43.083847046 CET	8.8.8.8	192.168.2.3	0x9361	No error (0)	salesforceintegration.na1.echosign.com		52.71.63.232	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:43.083847046 CET	8.8.8.8	192.168.2.3	0x9361	No error (0)	salesforceintegration.na1.echosign.com		52.71.63.231	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:43.083847046 CET	8.8.8.8	192.168.2.3	0x9361	No error (0)	salesforceintegration.na1.echosign.com		52.71.63.230	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:44.222217083 CET	8.8.8.8	192.168.2.3	0x5364	No error (0)	secure.na1.echocdn.com	secure.na1dc1.echosign.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:44.222217083 CET	8.8.8.8	192.168.2.3	0x5364	No error (0)	secure.na1dc1.echosign.com		52.71.63.230	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:44.222217083 CET	8.8.8.8	192.168.2.3	0x5364	No error (0)	secure.na1dc1.echosign.com		52.71.63.231	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:44.222217083 CET	8.8.8.8	192.168.2.3	0x5364	No error (0)	secure.na1dc1.echosign.com		52.71.63.232	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:44.955689907 CET	8.8.8.8	192.168.2.3	0x674d	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:45.357054949 CET	8.8.8.8	192.168.2.3	0x7ef0	No error (0)	p.typekit.net	p.typekit.net-v3.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:45.699064016 CET	8.8.8.8	192.168.2.3	0xfd5d	No error (0)	cdn.cookielaw.org		104.16.148.64	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:45.699064016 CET	8.8.8.8	192.168.2.3	0xfd5d	No error (0)	cdn.cookielaw.org		104.16.149.64	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:45.908936024 CET	8.8.8.8	192.168.2.3	0x9654	No error (0)	geolocation.onetrust.com		104.20.184.68	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:45.908936024 CET	8.8.8.8	192.168.2.3	0x9654	No error (0)	geolocation.onetrust.com		104.20.185.68	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:46.178639889 CET	8.8.8.8	192.168.2.3	0xac0f	No error (0)	js-agent.newrelic.com	f4.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:46.480427027 CET	8.8.8.8	192.168.2.3	0x6b7c	No error (0)	bam-cell.nr-data.net	tls12.newrelic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:46.657557011 CET	8.8.8.8	192.168.2.3	0x7a9a	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		35.181.18.61	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:46.657557011 CET	8.8.8.8	192.168.2.3	0x7a9a	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		15.237.136.106	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:46.657557011 CET	8.8.8.8	192.168.2.3	0x7a9a	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		15.237.76.117	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:47.331099033 CET	8.8.8.8	192.168.2.3	0x95d	No error (0)	salesforceintegration.na1.echosign.com		52.71.63.232	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:47.331099033 CET	8.8.8.8	192.168.2.3	0x95d	No error (0)	salesforceintegration.na1.echosign.com		52.71.63.231	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:47.331099033 CET	8.8.8.8	192.168.2.3	0x95d	No error (0)	salesforceintegration.na1.echosign.com		52.71.63.230	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:56.340790987 CET	8.8.8.8	192.168.2.3	0x7450	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:56.340790987 CET	8.8.8.8	192.168.2.3	0x7450	No error (0)	googlehosted.l.googleusercontent.com		172.217.16.193	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637731075 CET	8.8.8.8	192.168.2.3	0x302d	No error (0)	services.prod.ims.adobejanus.com		52.213.176.171	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637731075 CET	8.8.8.8	192.168.2.3	0x302d	No error (0)	services.prod.ims.adobejanus.com		99.80.68.180	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637731075 CET	8.8.8.8	192.168.2.3	0x302d	No error (0)	services.prod.ims.adobejanus.com		34.255.224.110	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637731075 CET	8.8.8.8	192.168.2.3	0x302d	No error (0)	services.prod.ims.adobejanus.com		52.49.212.5	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637731075 CET	8.8.8.8	192.168.2.3	0x302d	No error (0)	services.prod.ims.adobejanus.com		52.51.220.169	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637731075 CET	8.8.8.8	192.168.2.3	0x302d	No error (0)	services.prod.ims.adobejanus.com		52.16.185.223	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637731075 CET	8.8.8.8	192.168.2.3	0x302d	No error (0)	services.prod.ims.adobejanus.com		52.214.149.147	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637731075 CET	8.8.8.8	192.168.2.3	0x302d	No error (0)	services.prod.ims.adobejanus.com		52.51.151.121	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637989044 CET	8.8.8.8	192.168.2.3	0x858a	No error (0)	api.demandbase.com		65.9.68.76	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637989044 CET	8.8.8.8	192.168.2.3	0x858a	No error (0)	api.demandbase.com		65.9.68.65	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637989044 CET	8.8.8.8	192.168.2.3	0x858a	No error (0)	api.demandbase.com		65.9.68.8	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.637989044 CET	8.8.8.8	192.168.2.3	0x858a	No error (0)	api.demandbase.com		65.9.68.83	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.710721016 CET	8.8.8.8	192.168.2.3	0x3d49	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:58.717402935 CET	8.8.8.8	192.168.2.3	0x2d7f	No error (0)	c.evidon.com	wildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:58.719022036 CET	8.8.8.8	192.168.2.3	0x1311	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:58.719022036 CET	8.8.8.8	192.168.2.3	0x1311	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:58.719022036 CET	8.8.8.8	192.168.2.3	0x1311	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:58.719022036 CET	8.8.8.8	192.168.2.3	0x1311	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.209.86.30	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.719022036 CET	8.8.8.8	192.168.2.3	0x1311	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.18.91.199	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.719022036 CET	8.8.8.8	192.168.2.3	0x1311	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.212.154.51	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.719022036 CET	8.8.8.8	192.168.2.3	0x1311	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.170.224.115	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.719022036 CET	8.8.8.8	192.168.2.3	0x1311	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.50.104.129	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.719022036 CET	8.8.8.8	192.168.2.3	0x1311	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.211.216.201	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.719022036 CET	8.8.8.8	192.168.2.3	0x1311	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.30.78.155	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.719022036 CET	8.8.8.8	192.168.2.3	0x1311	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.252.102.139	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.798577070 CET	8.8.8.8	192.168.2.3	0x87c	No error (0)	fast.adobe.demdex.net	cdn2.demdex.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:58.810502052 CET	8.8.8.8	192.168.2.3	0x3b49	No error (0)	l3.evidon.com	l3-production-5017897.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:58.810502052 CET	8.8.8.8	192.168.2.3	0x3b49	No error (0)	l3-production-5017897.us-east-1.elb.amazonaws.com		34.193.197.206	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.906220913 CET	8.8.8.8	192.168.2.3	0x4456	No error (0)	static.adobelogin.com	adobelogin-static.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:58.906220913 CET	8.8.8.8	192.168.2.3	0x4456	No error (0)	adobelogin-static.prod.ims.adobejanus.com	dd20fzx9mj46f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:58.906220913 CET	8.8.8.8	192.168.2.3	0x4456	No error (0)	dd20fzx9mj46f.cloudfront.net		65.9.60.66	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.912091970 CET	8.8.8.8	192.168.2.3	0xbe85	No error (0)	universal.iperceptions.com	iperceptions01.azureedge.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:58.912091970 CET	8.8.8.8	192.168.2.3	0xbe85	No error (0)	scdn1.wpc.2ba63.deltacdn.net	sni1gl.wpc.deltacdn.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:23:58.912091970 CET	8.8.8.8	192.168.2.3	0xbe85	No error (0)	sni1gl.wpc.deltacdn.net		152.199.21.175	A (IP address)	IN (0x0001)
Dec 4, 2020 23:23:58.920978069 CET	8.8.8.8	192.168.2.3	0x8f9b	No error (0)	use.typekit.com	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:00.759516954 CET	8.8.8.8	192.168.2.3	0x6432	No error (0)	ims-na1.adobelogin.com	adobelogin.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:00.759516954 CET	8.8.8.8	192.168.2.3	0x6432	No error (0)	adobelogin.prod.ims.adobejanus.com		52.49.212.5	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:00.759516954 CET	8.8.8.8	192.168.2.3	0x6432	No error (0)	adobelogin.prod.ims.adobejanus.com		52.51.151.121	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:00.759516954 CET	8.8.8.8	192.168.2.3	0x6432	No error (0)	adobelogin.prod.ims.adobejanus.com		99.80.68.180	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:00.759516954 CET	8.8.8.8	192.168.2.3	0x6432	No error (0)	adobelogin.prod.ims.adobejanus.com		52.16.185.223	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:00.759516954 CET	8.8.8.8	192.168.2.3	0x6432	No error (0)	adobelogin.prod.ims.adobejanus.com		52.213.176.171	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:00.759516954 CET	8.8.8.8	192.168.2.3	0x6432	No error (0)	adobelogin.prod.ims.adobejanus.com		34.255.224.110	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:00.759516954 CET	8.8.8.8	192.168.2.3	0x6432	No error (0)	adobelogin.prod.ims.adobejanus.com		52.214.149.147	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:00.759516954 CET	8.8.8.8	192.168.2.3	0x6432	No error (0)	adobelogin.prod.ims.adobejanus.com		52.51.220.169	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.213746071 CET	8.8.8.8	192.168.2.3	0x3f32	No error (0)	adobe.tt.omtrdc.net		54.76.90.77	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.213746071 CET	8.8.8.8	192.168.2.3	0x3f32	No error (0)	adobe.tt.omtrdc.net		54.194.111.119	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.213746071 CET	8.8.8.8	192.168.2.3	0x3f32	No error (0)	adobe.tt.omtrdc.net		52.213.168.74	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.213746071 CET	8.8.8.8	192.168.2.3	0x3f32	No error (0)	adobe.tt.omtrdc.net		52.212.193.208	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.213746071 CET	8.8.8.8	192.168.2.3	0x3f32	No error (0)	adobe.tt.omtrdc.net		52.19.133.54	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.213746071 CET	8.8.8.8	192.168.2.3	0x3f32	No error (0)	adobe.tt.omtrdc.net		18.203.205.32	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.213746071 CET	8.8.8.8	192.168.2.3	0x3f32	No error (0)	adobe.tt.omtrdc.net		54.75.9.158	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.213746071 CET	8.8.8.8	192.168.2.3	0x3f32	No error (0)	adobe.tt.omtrdc.net		34.252.166.160	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.629673958 CET	8.8.8.8	192.168.2.3	0x4600	No error (0)	www.everestjs.net	www.everestjs.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:01.642613888 CET	8.8.8.8	192.168.2.3	0x77dd	No error (0)	snap.licdn.com	wildcard.licdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:01.648957014 CET	8.8.8.8	192.168.2.3	0x4a27	No error (0)	scripts.demandbase.com		65.9.68.129	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.648957014 CET	8.8.8.8	192.168.2.3	0x4a27	No error (0)	scripts.demandbase.com		65.9.68.101	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.648957014 CET	8.8.8.8	192.168.2.3	0x4a27	No error (0)	scripts.demandbase.com		65.9.68.7	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.648957014 CET	8.8.8.8	192.168.2.3	0x4a27	No error (0)	scripts.demandbase.com		65.9.68.92	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.680919886 CET	8.8.8.8	192.168.2.3	0x8729	No error (0)	pixel.everesttech.net	tp00.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:01.756623983 CET	8.8.8.8	192.168.2.3	0x36c0	No error (0)	servedby.flashtalking.com	cds.f7f2q8c3.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:01.795084953 CET	8.8.8.8	192.168.2.3	0x78e1	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:01.795084953 CET	8.8.8.8	192.168.2.3	0x78e1	No error (0)	platform.twitter.map.fastly.net		199.232.56.157	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:01.818629026 CET	8.8.8.8	192.168.2.3	0x39ac	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:01.818629026 CET	8.8.8.8	192.168.2.3	0x39ac	No error (0)	scontent.xx.fbcdn.net		185.60.216.19	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.260679960 CET	8.8.8.8	192.168.2.3	0x14c3	No error (0)	lasteventf-tm.everesttech.net	lasteventf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:02.260679960 CET	8.8.8.8	192.168.2.3	0x14c3	No error (0)	lasteventf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:02.265763998 CET	8.8.8.8	192.168.2.3	0x2453	No error (0)	pagead.l.doubleclick.net		172.217.21.194	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.280206919 CET	8.8.8.8	192.168.2.3	0xfdb	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:02.280206919 CET	8.8.8.8	192.168.2.3	0xfdb	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:02.280206919 CET	8.8.8.8	192.168.2.3	0xfdb	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.280206919 CET	8.8.8.8	192.168.2.3	0xfdb	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.280206919 CET	8.8.8.8	192.168.2.3	0xfdb	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.280206919 CET	8.8.8.8	192.168.2.3	0xfdb	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.282361984 CET	8.8.8.8	192.168.2.3	0xbc38	No error (0)	t.co		104.244.42.69	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.282361984 CET	8.8.8.8	192.168.2.3	0xbc38	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.282361984 CET	8.8.8.8	192.168.2.3	0xbc38	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.282361984 CET	8.8.8.8	192.168.2.3	0xbc38	No error (0)	t.co		104.244.42.5	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.297197104 CET	8.8.8.8	192.168.2.3	0xd8f7	No error (0)	px.ads.linkedin.com	mix.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:02.297197104 CET	8.8.8.8	192.168.2.3	0xd8f7	No error (0)	mix.linkedin.com	pop-tln1-alpha.mix.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:02.297197104 CET	8.8.8.8	192.168.2.3	0xd8f7	No error (0)	pop-tln1-alpha.mix.linkedin.com		185.63.144.5	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.556982994 CET	8.8.8.8	192.168.2.3	0xde62	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:02.556982994 CET	8.8.8.8	192.168.2.3	0xde62	No error (0)	star-mini.c10r.facebook.com		185.60.216.35	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.581505060 CET	8.8.8.8	192.168.2.3	0xaa3b	No error (0)	api.iperceptions.com	api-traffic01.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:02.634208918 CET	8.8.8.8	192.168.2.3	0x830d	No error (0)	googleads.g.doubleclick.net	pagead46.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:02.634208918 CET	8.8.8.8	192.168.2.3	0x830d	No error (0)	pagead46.l.doubleclick.net		172.217.23.162	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:02.693344116 CET	8.8.8.8	192.168.2.3	0xa8b3	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:03.009777069 CET	8.8.8.8	192.168.2.3	0x8efd	No error (0)	adobeioruntime.net		54.171.42.90	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.009777069 CET	8.8.8.8	192.168.2.3	0x8efd	No error (0)	adobeioruntime.net		54.154.123.248	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.009777069 CET	8.8.8.8	192.168.2.3	0x8efd	No error (0)	adobeioruntime.net		52.208.57.75	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.015614986 CET	8.8.8.8	192.168.2.3	0xe6f0	No error (0)	www.google.co.uk		172.217.21.195	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.085336924 CET	8.8.8.8	192.168.2.3	0xe960	No error (0)	match.prod.bidr.io		52.49.193.31	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.085336924 CET	8.8.8.8	192.168.2.3	0xe960	No error (0)	match.prod.bidr.io		52.31.242.159	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.085336924 CET	8.8.8.8	192.168.2.3	0xe960	No error (0)	match.prod.bidr.io		54.72.203.0	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.085336924 CET	8.8.8.8	192.168.2.3	0xe960	No error (0)	match.prod.bidr.io		52.214.70.9	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.085336924 CET	8.8.8.8	192.168.2.3	0xe960	No error (0)	match.prod.bidr.io		54.171.14.147	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.085336924 CET	8.8.8.8	192.168.2.3	0xe960	No error (0)	match.prod.bidr.io		54.228.192.197	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.087794065 CET	8.8.8.8	192.168.2.3	0xeb18	No error (0)	api.company-target.com		65.9.68.28	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.087794065 CET	8.8.8.8	192.168.2.3	0xeb18	No error (0)	api.company-target.com		65.9.68.99	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.087794065 CET	8.8.8.8	192.168.2.3	0xeb18	No error (0)	api.company-target.com		65.9.68.37	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.087794065 CET	8.8.8.8	192.168.2.3	0xeb18	No error (0)	api.company-target.com		65.9.68.35	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.822266102 CET	8.8.8.8	192.168.2.3	0x994b	No error (0)	sd.iperceptions.com	d1gs6rlbmzcurc.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:03.822266102 CET	8.8.8.8	192.168.2.3	0x994b	No error (0)	d1gs6rlbmzcurc.cloudfront.net		65.9.68.22	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.822266102 CET	8.8.8.8	192.168.2.3	0x994b	No error (0)	d1gs6rlbmzcurc.cloudfront.net		65.9.68.62	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.822266102 CET	8.8.8.8	192.168.2.3	0x994b	No error (0)	d1gs6rlbmzcurc.cloudfront.net		65.9.68.63	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.822266102 CET	8.8.8.8	192.168.2.3	0x994b	No error (0)	d1gs6rlbmzcurc.cloudfront.net		65.9.68.23	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.860888004 CET	8.8.8.8	192.168.2.3	0xf69d	No error (0)	adobe.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:03.860888004 CET	8.8.8.8	192.168.2.3	0xf69d	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:03.860888004 CET	8.8.8.8	192.168.2.3	0xf69d	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:03.860888004 CET	8.8.8.8	192.168.2.3	0xf69d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.49.226.218	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.860888004 CET	8.8.8.8	192.168.2.3	0xf69d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.49.68.17	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.860888004 CET	8.8.8.8	192.168.2.3	0xf69d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.252.102.139	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.860888004 CET	8.8.8.8	192.168.2.3	0xf69d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.30.78.155	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.860888004 CET	8.8.8.8	192.168.2.3	0xf69d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.49.59.93	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.860888004 CET	8.8.8.8	192.168.2.3	0xf69d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		18.202.70.164	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.860888004 CET	8.8.8.8	192.168.2.3	0xf69d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.212.154.51	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.860888004 CET	8.8.8.8	192.168.2.3	0xf69d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.248.119.134	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:03.862200975 CET	8.8.8.8	192.168.2.3	0x7f9c	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:07.881566048 CET	8.8.8.8	192.168.2.3	0x9c56	No error (0)	segments.company-target.com		65.9.68.122	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:07.881566048 CET	8.8.8.8	192.168.2.3	0x9c56	No error (0)	segments.company-target.com		65.9.68.57	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:07.881566048 CET	8.8.8.8	192.168.2.3	0x9c56	No error (0)	segments.company-target.com		65.9.68.52	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:07.881566048 CET	8.8.8.8	192.168.2.3	0x9c56	No error (0)	segments.company-target.com		65.9.68.78	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:17.576102018 CET	8.8.8.8	192.168.2.3	0x1beb	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:17.576102018 CET	8.8.8.8	192.168.2.3	0x1beb	No error (0)	pixel-origin.mathtag.com		185.29.133.58	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:17.576102018 CET	8.8.8.8	192.168.2.3	0x1beb	No error (0)	pixel-origin.mathtag.com		185.29.135.42	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:17.576102018 CET	8.8.8.8	192.168.2.3	0x1beb	No error (0)	pixel-origin.mathtag.com		185.29.133.52	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:17.576102018 CET	8.8.8.8	192.168.2.3	0x1beb	No error (0)	pixel-origin.mathtag.com		185.29.133.199	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:17.705085039 CET	8.8.8.8	192.168.2.3	0xf50d	No error (0)	d.turn.com	d.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:17.915523052 CET	8.8.8.8	192.168.2.3	0xe197	No error (0)	pixel.tapad.com		35.227.248.159	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.043972015 CET	8.8.8.8	192.168.2.3	0x2aad	No error (0)	cm.g.doubleclick.net	pagead.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:18.043972015 CET	8.8.8.8	192.168.2.3	0x2aad	No error (0)	pagead.l.doubleclick.net		172.217.18.2	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.191279888 CET	8.8.8.8	192.168.2.3	0x45e8	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:18.339173079 CET	8.8.8.8	192.168.2.3	0x5a23	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:18.339173079 CET	8.8.8.8	192.168.2.3	0x5a23	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:18.356677055 CET	8.8.8.8	192.168.2.3	0xacb6	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:18.356677055 CET	8.8.8.8	192.168.2.3	0xacb6	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:18.501324892 CET	8.8.8.8	192.168.2.3	0x8417	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:18.501324892 CET	8.8.8.8	192.168.2.3	0x8417	No error (0)	global.px.quantserve.com		91.228.74.133	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.501324892 CET	8.8.8.8	192.168.2.3	0x8417	No error (0)	global.px.quantserve.com		91.228.74.198	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.501324892 CET	8.8.8.8	192.168.2.3	0x8417	No error (0)	global.px.quantserve.com		91.228.74.189	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.501324892 CET	8.8.8.8	192.168.2.3	0x8417	No error (0)	global.px.quantserve.com		91.228.74.134	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.501324892 CET	8.8.8.8	192.168.2.3	0x8417	No error (0)	global.px.quantserve.com		91.228.74.226	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.879975080 CET	8.8.8.8	192.168.2.3	0x8956	No error (0)	adobe-sync.dotomi.com	afp.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:18.879975080 CET	8.8.8.8	192.168.2.3	0x8956	No error (0)	ams04-login-ds.dotomi.com		89.207.16.204	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.996320963 CET	8.8.8.8	192.168.2.3	0xd817	No error (0)	a.tribalfusion.com		104.18.12.5	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:18.996320963 CET	8.8.8.8	192.168.2.3	0xd817	No error (0)	a.tribalfusion.com		104.18.13.5	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.126466990 CET	8.8.8.8	192.168.2.3	0x3c0d	No error (0)	ml314.com		52.18.215.87	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.126466990 CET	8.8.8.8	192.168.2.3	0x3c0d	No error (0)	ml314.com		34.251.167.52	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.126466990 CET	8.8.8.8	192.168.2.3	0x3c0d	No error (0)	ml314.com		52.48.170.220	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.126466990 CET	8.8.8.8	192.168.2.3	0x3c0d	No error (0)	ml314.com		52.49.20.76	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.208657026 CET	8.8.8.8	192.168.2.3	0xfa90	No error (0)	bttrack.com		192.132.33.46	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.295448065 CET	8.8.8.8	192.168.2.3	0xae04	No error (0)	s.tribalfusion.com		104.18.13.5	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.295448065 CET	8.8.8.8	192.168.2.3	0xae04	No error (0)	s.tribalfusion.com		104.18.12.5	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:19.450429916 CET	8.8.8.8	192.168.2.3	0x5cc9	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:19.450429916 CET	8.8.8.8	192.168.2.3	0x5cc9	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:19.450429916 CET	8.8.8.8	192.168.2.3	0x5cc9	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:19.797508001 CET	8.8.8.8	192.168.2.3	0xdc2c	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:19.920871019 CET	8.8.8.8	192.168.2.3	0x1f83	No error (0)	dsum-sec.casalemedia.com	dsum-sec.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:20.345762968 CET	8.8.8.8	192.168.2.3	0x1cf0	No error (0)	ib.adnxs.com	g.geogslb.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:20.345762968 CET	8.8.8.8	192.168.2.3	0x1cf0	No error (0)	g.geogslb.com	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:20.345762968 CET	8.8.8.8	192.168.2.3	0x1cf0	No error (0)	ib.anycast.adnxs.com		185.33.220.243	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:20.345762968 CET	8.8.8.8	192.168.2.3	0x1cf0	No error (0)	ib.anycast.adnxs.com		185.33.221.87	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:20.345762968 CET	8.8.8.8	192.168.2.3	0x1cf0	No error (0)	ib.anycast.adnxs.com		185.33.220.242	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:20.345762968 CET	8.8.8.8	192.168.2.3	0x1cf0	No error (0)	ib.anycast.adnxs.com		185.33.221.50	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:20.345762968 CET	8.8.8.8	192.168.2.3	0x1cf0	No error (0)	ib.anycast.adnxs.com		185.33.221.90	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:20.345762968 CET	8.8.8.8	192.168.2.3	0x1cf0	No error (0)	ib.anycast.adnxs.com		185.33.220.241	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:20.345762968 CET	8.8.8.8	192.168.2.3	0x1cf0	No error (0)	ib.anycast.adnxs.com		185.33.221.88	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:20.345762968 CET	8.8.8.8	192.168.2.3	0x1cf0	No error (0)	ib.anycast.adnxs.com		185.33.221.91	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:21.390604973 CET	8.8.8.8	192.168.2.3	0xc3b1	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:21.390604973 CET	8.8.8.8	192.168.2.3	0xc3b1	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:22.241791010 CET	8.8.8.8	192.168.2.3	0xea1c	No error (0)	image2.pubmatic.com	pug-lhrc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:22.241791010 CET	8.8.8.8	192.168.2.3	0xea1c	No error (0)	pug-lhrc.pubmatic.com	pug-lhr.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:22.241791010 CET	8.8.8.8	192.168.2.3	0xea1c	No error (0)	pug-lhr.pubmatic.com		185.64.190.80	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:23.434851885 CET	8.8.8.8	192.168.2.3	0x3ab2	No error (0)	sync.search.spotxchange.com	sync.search-gtm.spotxchange.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:23.434851885 CET	8.8.8.8	192.168.2.3	0x3ab2	No error (0)	ams01.sync.search.spotxchange.com		185.94.180.126	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:23.434851885 CET	8.8.8.8	192.168.2.3	0x3ab2	No error (0)	ams01.sync.search.spotxchange.com		185.94.180.125	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:25.394592047 CET	8.8.8.8	192.168.2.3	0x5162	No error (0)	g2.gumgum.com		52.31.234.119	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:25.394592047 CET	8.8.8.8	192.168.2.3	0x5162	No error (0)	g2.gumgum.com		34.250.244.32	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:25.394592047 CET	8.8.8.8	192.168.2.3	0x5162	No error (0)	g2.gumgum.com		52.19.189.90	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:25.394592047 CET	8.8.8.8	192.168.2.3	0x5162	No error (0)	g2.gumgum.com		34.250.108.63	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:25.394592047 CET	8.8.8.8	192.168.2.3	0x5162	No error (0)	g2.gumgum.com		52.51.206.28	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:25.394592047 CET	8.8.8.8	192.168.2.3	0x5162	No error (0)	g2.gumgum.com		52.215.241.211	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:25.394592047 CET	8.8.8.8	192.168.2.3	0x5162	No error (0)	g2.gumgum.com		54.171.43.242	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:25.394592047 CET	8.8.8.8	192.168.2.3	0x5162	No error (0)	g2.gumgum.com		108.129.8.178	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:26.239053011 CET	8.8.8.8	192.168.2.3	0xb2f1	No error (0)	s.thebrighttag.com		79.125.117.125	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:26.239053011 CET	8.8.8.8	192.168.2.3	0xb2f1	No error (0)	s.thebrighttag.com		54.195.251.142	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:26.239053011 CET	8.8.8.8	192.168.2.3	0xb2f1	No error (0)	s.thebrighttag.com		46.137.81.30	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:26.239053011 CET	8.8.8.8	192.168.2.3	0xb2f1	No error (0)	s.thebrighttag.com		46.137.100.162	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:28.042678118 CET	8.8.8.8	192.168.2.3	0x7cc1	No error (0)	partner.mediawallahscript.com	mwsyncpixel.eu-west-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:28.042678118 CET	8.8.8.8	192.168.2.3	0x7cc1	No error (0)	mwsyncpixel.eu-west-1.elasticbeanstalk.com		52.51.205.248	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:28.042678118 CET	8.8.8.8	192.168.2.3	0x7cc1	No error (0)	mwsyncpixel.eu-west-1.elasticbeanstalk.com		34.247.125.34	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.344719887 CET	8.8.8.8	192.168.2.3	0xb447	No error (0)	match.prod.bidr.io		52.49.193.31	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.344719887 CET	8.8.8.8	192.168.2.3	0xb447	No error (0)	match.prod.bidr.io		52.31.242.159	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.344719887 CET	8.8.8.8	192.168.2.3	0xb447	No error (0)	match.prod.bidr.io		54.72.203.0	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.344719887 CET	8.8.8.8	192.168.2.3	0xb447	No error (0)	match.prod.bidr.io		52.214.70.9	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.344719887 CET	8.8.8.8	192.168.2.3	0xb447	No error (0)	match.prod.bidr.io		54.171.14.147	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.344719887 CET	8.8.8.8	192.168.2.3	0xb447	No error (0)	match.prod.bidr.io		54.228.192.197	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.596900940 CET	8.8.8.8	192.168.2.3	0x97	No error (0)	segments.company-target.com		65.9.68.122	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.596900940 CET	8.8.8.8	192.168.2.3	0x97	No error (0)	segments.company-target.com		65.9.68.57	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.596900940 CET	8.8.8.8	192.168.2.3	0x97	No error (0)	segments.company-target.com		65.9.68.52	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.596900940 CET	8.8.8.8	192.168.2.3	0x97	No error (0)	segments.company-target.com		65.9.68.78	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:29.950124979 CET	8.8.8.8	192.168.2.3	0x9e9e	No error (0)	prda.aadg.msidentity.com	www.tm.a.prd.aadg.akadns.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:31.928491116 CET	8.8.8.8	192.168.2.3	0xc6de	No error (0)	cdn.tt.omtrdc.net	cdn-origin-aws.tt.omtrdc.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:31.928491116 CET	8.8.8.8	192.168.2.3	0xc6de	No error (0)	cdn-origin-aws.tt.omtrdc.net	duerzc3hf5let.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:31.928491116 CET	8.8.8.8	192.168.2.3	0xc6de	No error (0)	duerzc3hf5let.cloudfront.net		65.9.68.10	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:31.928491116 CET	8.8.8.8	192.168.2.3	0xc6de	No error (0)	duerzc3hf5let.cloudfront.net		65.9.68.37	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:31.928491116 CET	8.8.8.8	192.168.2.3	0xc6de	No error (0)	duerzc3hf5let.cloudfront.net		65.9.68.30	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:31.928491116 CET	8.8.8.8	192.168.2.3	0xc6de	No error (0)	duerzc3hf5let.cloudfront.net		65.9.68.3	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:32.492470026 CET	8.8.8.8	192.168.2.3	0xba4f	No error (0)	www.adobetag.com	www.adobetag.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Dec 4, 2020 23:24:38.366689920 CET	8.8.8.8	192.168.2.3	0x269e	No error (0)	trust.echosign.com		34.198.193.48	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:38.366689920 CET	8.8.8.8	192.168.2.3	0x269e	No error (0)	trust.echosign.com		54.86.108.91	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:38.366689920 CET	8.8.8.8	192.168.2.3	0x269e	No error (0)	trust.echosign.com		23.21.46.137	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:38.908759117 CET	8.8.8.8	192.168.2.3	0x52f	No error (0)	mozilla.github.io		185.199.108.153	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:38.908759117 CET	8.8.8.8	192.168.2.3	0x52f	No error (0)	mozilla.github.io		185.199.110.153	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:38.908759117 CET	8.8.8.8	192.168.2.3	0x52f	No error (0)	mozilla.github.io		185.199.109.153	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:38.908759117 CET	8.8.8.8	192.168.2.3	0x52f	No error (0)	mozilla.github.io		185.199.111.153	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:38.928678989 CET	8.8.8.8	192.168.2.3	0x3c00	No error (0)	adobe.com.d1.sc.omtrdc.net		35.181.18.61	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:38.928678989 CET	8.8.8.8	192.168.2.3	0x3c00	No error (0)	adobe.com.d1.sc.omtrdc.net		15.237.136.106	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:38.928678989 CET	8.8.8.8	192.168.2.3	0x3c00	No error (0)	adobe.com.d1.sc.omtrdc.net		15.237.76.117	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:40.310722113 CET	8.8.8.8	192.168.2.3	0xa160	No error (0)	amcglobal.sc.omtrdc.net		15.237.136.106	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:40.310722113 CET	8.8.8.8	192.168.2.3	0xa160	No error (0)	amcglobal.sc.omtrdc.net		35.181.18.61	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:40.310722113 CET	8.8.8.8	192.168.2.3	0xa160	No error (0)	amcglobal.sc.omtrdc.net		15.237.76.117	A (IP address)	IN (0x0001)
Dec 4, 2020 23:24:57.402041912 CET	8.8.8.8	192.168.2.3	0xa331	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Dec 4, 2020 23:23:43.295284033 CET	52.71.63.232	443	192.168.2.3	49720	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:43.295284033 CET	52.71.63.232	443	192.168.2.3	49720	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:43.296430111 CET	52.71.63.232	443	192.168.2.3	49721	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:43.296430111 CET	52.71.63.232	443	192.168.2.3	49721	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:44.430969954 CET	52.71.63.230	443	192.168.2.3	49728	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:44.430969954 CET	52.71.63.230	443	192.168.2.3	49728	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:44.431766033 CET	52.71.63.230	443	192.168.2.3	49730	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:44.431766033 CET	52.71.63.230	443	192.168.2.3	49730	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:44.432579994 CET	52.71.63.230	443	192.168.2.3	49731	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:44.432579994 CET	52.71.63.230	443	192.168.2.3	49731	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:44.432598114 CET	52.71.63.230	443	192.168.2.3	49729	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:44.432598114 CET	52.71.63.230	443	192.168.2.3	49729	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:46.574223042 CET	52.71.63.232	443	192.168.2.3	49743	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27,29-23-24,0	7f805430de1e7d98b1de033adb58cf46
Dec 4, 2020 23:23:46.574223042 CET	52.71.63.232	443	192.168.2.3	49743	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		7f805430de1e7d98b1de033adb58cf46
Dec 4, 2020 23:23:46.604732990 CET	52.71.63.230	443	192.168.2.3	49745	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:46.604732990 CET	52.71.63.230	443	192.168.2.3	49745	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:23:47.548836946 CET	52.71.63.232	443	192.168.2.3	49755	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
Dec 4, 2020 23:23:47.548836946 CET	52.71.63.232	443	192.168.2.3	49755	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		37f463bf4616ecd445d4a1937da06e19
Dec 4, 2020 23:23:47.612272978 CET	52.71.63.232	443	192.168.2.3	49756	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
Dec 4, 2020 23:23:47.612272978 CET	52.71.63.232	443	192.168.2.3	49756	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		37f463bf4616ecd445d4a1937da06e19
Dec 4, 2020 23:23:47.987138033 CET	52.71.63.232	443	192.168.2.3	49757	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
Dec 4, 2020 23:23:47.987138033 CET	52.71.63.232	443	192.168.2.3	49757	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		37f463bf4616ecd445d4a1937da06e19
Dec 4, 2020 23:24:00.216814995 CET	52.213.176.171	443	192.168.2.3	49793	CN=ims-na1.adobelogin.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Apr 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Wed May 11 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Dec 4, 2020 23:24:00.595010042 CET	52.209.86.30	443	192.168.2.3	49796	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jan 09 01:00:00 CET 2018 Tue Oct 22 14:00:00 CEST 2013	Fri Feb 12 13:00:00 CET 2021 Sun Oct 22 14:00:00 CEST 2028	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:00.595010042 CET	52.209.86.30	443	192.168.2.3	49796	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:01.305052996 CET	54.76.90.77	443	192.168.2.3	49798	CN=*.tt.omtrdc.net, O=Adobe Inc., L=SAN JOSE, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 02 01:00:00 CET 2020 Fri Mar 08 13:00:00 CET 2013	Wed Nov 10 00:59:59 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:01.305052996 CET	54.76.90.77	443	192.168.2.3	49798	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:01.887238979 CET	199.232.56.157	443	192.168.2.3	49817	CN=ads-twitter.com, OU=Twitter Security, O="Twitter, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Aug 14 02:00:00 CEST 2020 Tue Oct 22 14:00:00 CEST 2013	Thu Aug 19 14:00:00 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:01.887238979 CET	199.232.56.157	443	192.168.2.3	49817	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:02.318574905 CET	104.244.42.3	443	192.168.2.3	49829	CN=*.twitter.com, OU=fra2, O="Twitter, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 05 01:00:00 CET 2020 Tue Oct 22 14:00:00 CEST 2013	Tue Mar 02 13:00:00 CET 2021 Sun Oct 22 14:00:00 CEST 2028	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:02.318574905 CET	104.244.42.3	443	192.168.2.3	49829	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:02.326150894 CET	104.244.42.69	443	192.168.2.3	49830	CN=t.co, OU=fra2, O="Twitter, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 05 01:00:00 CET 2020 Tue Oct 22 14:00:00 CEST 2013	Tue Mar 02 13:00:00 CET 2021 Sun Oct 22 14:00:00 CEST 2028	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:02.326150894 CET	104.244.42.69	443	192.168.2.3	49830	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:02.395503998 CET	185.63.144.5	443	192.168.2.3	49831	CN=px.ads.linkedin.com, O=LinkedIn Corporation, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Feb 05 13:00:00 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:02.395503998 CET	185.63.144.5	443	192.168.2.3	49831	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:03.091928959 CET	54.171.42.90	443	192.168.2.3	49840	CN=adobe-runtime.com, OU=AdobeIO, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Jul 15 02:00:00 CEST 2019 Fri Mar 08 13:00:00 CET 2013	Fri Sep 03 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:03.091928959 CET	54.171.42.90	443	192.168.2.3	49840	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:03.117269993 CET	54.171.42.90	443	192.168.2.3	49846	CN=adobe-runtime.com, OU=AdobeIO, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Jul 15 02:00:00 CEST 2019 Fri Mar 08 13:00:00 CET 2013	Fri Sep 03 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:03.117269993 CET	54.171.42.90	443	192.168.2.3	49846	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:03.210649014 CET	52.49.193.31	443	192.168.2.3	49848	CN=*.match.prod.bidr.io CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Thu Mar 26 01:00:00 CET 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Mon Apr 26 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Dec 4, 2020 23:24:04.009316921 CET	52.49.226.218	443	192.168.2.3	49866	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jan 09 01:00:00 CET 2018 Tue Oct 22 14:00:00 CEST 2013	Fri Feb 12 13:00:00 CET 2021 Sun Oct 22 14:00:00 CEST 2028	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:04.009316921 CET	52.49.226.218	443	192.168.2.3	49866	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:07.844746113 CET	185.63.144.5	443	192.168.2.3	49906	CN=px.ads.linkedin.com, O=LinkedIn Corporation, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Feb 05 13:00:00 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:07.844746113 CET	185.63.144.5	443	192.168.2.3	49906	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:08.402195930 CET	52.71.63.232	443	192.168.2.3	49911	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
Dec 4, 2020 23:24:08.402195930 CET	52.71.63.232	443	192.168.2.3	49911	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		37f463bf4616ecd445d4a1937da06e19
Dec 4, 2020 23:24:17.609038115 CET	185.29.133.58	443	192.168.2.3	49929	CN=*.mathtag.com, O="MediaMath, Inc.", L=New York, ST=New York, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Apr 15 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Apr 22 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:17.609038115 CET	185.29.133.58	443	192.168.2.3	49929	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:18.545756102 CET	91.228.74.133	443	192.168.2.3	49947	CN=*.quantserve.com, O=Quantcast Corporation, L=San Francisco, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Oct 02 02:00:00 CEST 2020 Tue Oct 22 14:00:00 CEST 2013	Thu Oct 07 14:00:00 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:18.545756102 CET	91.228.74.133	443	192.168.2.3	49947	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:18.926429033 CET	89.207.16.204	443	192.168.2.3	49953	CN=*.dotomi.com, O=Conversant LLC, OU=Corp, L=Westlake Village, ST=CA, C=US CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE	CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Jun 19 18:36:07 CEST 2019 Wed Nov 21 01:00:00 CET 2018	Tue Aug 31 09:59:59 CEST 2021 Tue Nov 21 01:00:00 CET 2028	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:18.926429033 CET	89.207.16.204	443	192.168.2.3	49953	CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Nov 21 01:00:00 CET 2018	Tue Nov 21 01:00:00 CET 2028		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:19.203353882 CET	52.18.215.87	443	192.168.2.3	49955	CN=*.ml314.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Mon Feb 17 01:00:00 CET 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Wed Mar 17 13:00:00 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Dec 4, 2020 23:24:19.427639008 CET	192.132.33.46	443	192.168.2.3	49956	CN=*.bttrack.com, OU=PositiveSSL Wildcard, OU=Domain Control Validated CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Tue Mar 19 01:00:00 CET 2019 Fri Nov 02 01:00:00 CET 2018 Tue May 30 12:48:38 CEST 2000	Wed Apr 14 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Sat May 30 12:48:38 CEST 2020	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Tue May 30 12:48:38 CEST 2000	Sat May 30 12:48:38 CEST 2020
Dec 4, 2020 23:24:20.404526949 CET	185.33.220.243	443	192.168.2.3	49964	CN=*.adnxs.com, O="AppNexus, Inc.", L=New York, ST=New York, C=US CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Jan 23 01:00:00 CET 2019 Fri Mar 08 13:00:00 CET 2013	Mon Mar 08 13:00:00 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:20.404526949 CET	185.33.220.243	443	192.168.2.3	49964	CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:22.299844027 CET	185.64.190.80	443	192.168.2.3	49988	CN=*.pubmatic.com, OU=Enterprise SSL Pro Wildcard, OU=PubMatic, O="PubMatic, Inc.", STREET=305 Main St, L=Redwood City, ST=CA, OID.2.5.4.17=94063, C=US CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Feb 22 01:00:00 CET 2019 Fri Nov 02 01:00:00 CET 2018	Mon Feb 22 00:59:59 CET 2021 Wed Jan 01 00:59:59 CET 2031	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:22.299844027 CET	185.64.190.80	443	192.168.2.3	49988	CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:22.981074095 CET	185.63.144.5	443	192.168.2.3	50010	CN=px.ads.linkedin.com, O=LinkedIn Corporation, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Feb 05 13:00:00 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:22.981074095 CET	185.63.144.5	443	192.168.2.3	50010	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:23.488526106 CET	185.94.180.126	443	192.168.2.3	50017	CN=*.search.spotxchange.com, OU=Network Operations, O=SpotX, L=Broomfield, ST=Colorado, C=US CN=GeoTrust RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=GeoTrust RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Mar 20 01:00:00 CET 2019 Mon Nov 06 13:23:45 CET 2017	Wed Apr 21 14:00:00 CEST 2021 Sat Nov 06 13:23:45 CET 2027	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:23.488526106 CET	185.94.180.126	443	192.168.2.3	50017	CN=GeoTrust RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:45 CET 2017	Sat Nov 06 13:23:45 CET 2027		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:24.341501951 CET	52.71.63.232	443	192.168.2.3	50032	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27,29-23-24,0	7f805430de1e7d98b1de033adb58cf46
Dec 4, 2020 23:24:24.341501951 CET	52.71.63.232	443	192.168.2.3	50032	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		7f805430de1e7d98b1de033adb58cf46
Dec 4, 2020 23:24:24.341728926 CET	52.71.63.232	443	192.168.2.3	50033	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27,29-23-24,0	7f805430de1e7d98b1de033adb58cf46
Dec 4, 2020 23:24:24.341728926 CET	52.71.63.232	443	192.168.2.3	50033	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		7f805430de1e7d98b1de033adb58cf46
Dec 4, 2020 23:24:25.472791910 CET	52.31.234.119	443	192.168.2.3	50040	CN=*.gumgum.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Fri Jul 03 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Tue Aug 03 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Dec 4, 2020 23:24:26.318972111 CET	79.125.117.125	443	192.168.2.3	50054	CN=*.thebrighttag.com, O="Signal Digital, Inc", L=Chicago, ST=Illinois, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Mar 16 01:00:00 CET 2020 Fri Mar 08 13:00:00 CET 2013	Wed Mar 24 13:00:00 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:26.318972111 CET	79.125.117.125	443	192.168.2.3	50054	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:27.010109901 CET	52.71.63.232	443	192.168.2.3	50061	CN=secure.echosign.com, OU=Adobe Sign, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 27 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Aug 31 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
Dec 4, 2020 23:24:27.010109901 CET	52.71.63.232	443	192.168.2.3	50061	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		37f463bf4616ecd445d4a1937da06e19
Dec 4, 2020 23:24:28.127413988 CET	52.51.205.248	443	192.168.2.3	50069	CN=*.mediawallahscript.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Jun 03 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Sat Jul 03 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Dec 4, 2020 23:24:28.747898102 CET	185.63.144.5	443	192.168.2.3	50092	CN=px.ads.linkedin.com, O=LinkedIn Corporation, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Feb 05 13:00:00 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:28.747898102 CET	185.63.144.5	443	192.168.2.3	50092	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:29.422820091 CET	52.49.193.31	443	192.168.2.3	50099	CN=*.match.prod.bidr.io CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Thu Mar 26 01:00:00 CET 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Mon Apr 26 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Dec 4, 2020 23:24:29.633589029 CET	65.9.68.122	443	192.168.2.3	50101	CN=*.company-target.com, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jun 19 18:48:33 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Wed Aug 18 20:47:01 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Dec 4, 2020 23:24:41.697006941 CET	185.63.144.5	443	192.168.2.3	50206	CN=px.ads.linkedin.com, O=LinkedIn Corporation, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Feb 05 13:00:00 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0	b32309a26951912be7dba376398abc3b
Dec 4, 2020 23:24:41.697006941 CET	185.63.144.5	443	192.168.2.3	50206	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		b32309a26951912be7dba376398abc3b

Code Manipulations

Statistics

Behavior

• chrome.exe
• chrome.exe

Click to jump to process

System Behavior

Analysis Process: chrome.exe PID: 5904 Parent PID: 5056

General

Start time:	23:23:36
Start date:	04/12/2020
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized 'https://salesforceintegration.na1.echosign.com/public/esign?tsid=CBFCIBAA3AAABLblqZhAv8w5X9-M6K9C_pt3vaFhbkppWpcrBNdnOmITgk-uSlBjm6Gn2lk_nh01EWLf9pwaAON6vcGZEvcybCP58Egt9&'
Imagebase:	0x7ff77b960000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

File Activities

Show Windows behavior

Registry Activities

Analysis Process: chrome.exe PID: 6088 Parent PID: 5904

General

Start time:	23:23:38
Start date:	04/12/2020
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1536,10132923027383255745,7614475510207065447,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1952 /prefetch:8
Imagebase:	0x7ff77b960000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

File Activities

Show Windows behavior

Registry Activities

Disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report https://salesforceintegration.na1.echosign.com/public/esign?tsid=CBFCIBAA3AAABLblqZhAv8w5X9-M6K9C_pt3vaFhbkppWpcrBNdnOmITgk-uSlBjm6Gn2lk_nh01EWLf9pwaAON6vcGZEvcybCP58Egt9&

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Phishing:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: chrome.exe PID: 5904 Parent PID: 5056

General

File Activities

File Created

File Written

Registry Activities

Key Created

Key Value Created

Key Value Modified

Analysis Process: chrome.exe PID: 6088 Parent PID: 5904

General

File Activities

File Created

File Written

Registry Activities

Key Value Modified

Disassembly