Home
Result
Report
Detail Analysis

Network Analysis

Download pcap

Hosts 1 DNS 0 TCP 4 UDP 8 HTTP(S) 5 ICMP 0 IRC 0 Suricata Snort

IP Address	Status	Action
164.124.101.2	Active	Moloch

Name	Response	Post-Analysis Lookup
No hosts contacted.

TCP Requests

UDP Requests

GET 304 http://acroipm2.adobe.com/20/rdr/ENU/win/nooem/none/consumer/280_20_6_20042.zip

REQUEST

GET /20/rdr/ENU/win/nooem/none/consumer/280_20_6_20042.zip HTTP/1.1 Accept: */* If-Modified-Since: Sun, 15 Aug 2021 09:10:21 GMT User-Agent: IPM Host: acroipm2.adobe.com Connection: Keep-Alive Cache-Control: no-cache

RESPONSE

HTTP/1.1 304 Not Modified Content-Type: application/zip Last-Modified: Thu, 12 Mar 2020 05:54:03 GMT Cache-Control: max-age=900 Expires: Mon, 16 Aug 2021 09:25:30 GMT Date: Mon, 16 Aug 2021 09:10:30 GMT Connection: keep-alive

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

GET 304 http://acroipm2.adobe.com/20/rdr/ENU/win/nooem/none/consumer/278_20_6_20042.zip

REQUEST

GET /20/rdr/ENU/win/nooem/none/consumer/278_20_6_20042.zip HTTP/1.1 Accept: */* If-Modified-Since: Sun, 15 Aug 2021 09:10:21 GMT User-Agent: IPM Host: acroipm2.adobe.com Connection: Keep-Alive Cache-Control: no-cache

RESPONSE

HTTP/1.1 304 Not Modified Content-Type: application/zip Last-Modified: Thu, 12 Mar 2020 05:49:49 GMT Cache-Control: max-age=900 Expires: Mon, 16 Aug 2021 09:25:30 GMT Date: Mon, 16 Aug 2021 09:10:30 GMT Connection: keep-alive

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

GET 304 http://acroipm2.adobe.com/20/rdr/ENU/win/nooem/none/consumer/281_20_6_20042.zip

REQUEST

GET /20/rdr/ENU/win/nooem/none/consumer/281_20_6_20042.zip HTTP/1.1 Accept: */* If-Modified-Since: Sun, 15 Aug 2021 09:10:21 GMT User-Agent: IPM Host: acroipm2.adobe.com Connection: Keep-Alive Cache-Control: no-cache

RESPONSE

HTTP/1.1 304 Not Modified Content-Type: application/zip Last-Modified: Thu, 12 Mar 2020 05:56:14 GMT Cache-Control: max-age=900 Expires: Mon, 16 Aug 2021 09:25:30 GMT Date: Mon, 16 Aug 2021 09:10:30 GMT Connection: keep-alive

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

GET 304 http://acroipm2.adobe.com/20/rdr/ENU/win/nooem/none/consumer/277_20_6_20042.zip

REQUEST

GET /20/rdr/ENU/win/nooem/none/consumer/277_20_6_20042.zip HTTP/1.1 Accept: */* If-Modified-Since: Sun, 15 Aug 2021 09:10:21 GMT User-Agent: IPM Host: acroipm2.adobe.com Connection: Keep-Alive Cache-Control: no-cache

RESPONSE

HTTP/1.1 304 Not Modified Content-Type: application/zip Last-Modified: Thu, 12 Mar 2020 05:47:50 GMT Cache-Control: max-age=900 Expires: Mon, 16 Aug 2021 09:25:30 GMT Date: Mon, 16 Aug 2021 09:10:30 GMT Connection: keep-alive

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

GET 304 http://acroipm2.adobe.com/20/rdr/ENU/win/nooem/none/consumer/message.zip

REQUEST

GET /20/rdr/ENU/win/nooem/none/consumer/message.zip HTTP/1.1 Accept: */* If-Modified-Since: Fri, 30 Jul 2021 19:28:16 GMT User-Agent: IPM Host: acroipm2.adobe.com Connection: Keep-Alive Cache-Control: no-cache

RESPONSE

HTTP/1.1 304 Not Modified Content-Type: application/zip Last-Modified: Fri, 30 Jul 2021 19:28:16 GMT Cache-Control: max-age=900 Expires: Mon, 16 Aug 2021 09:25:32 GMT Date: Mon, 16 Aug 2021 09:10:32 GMT Connection: keep-alive

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts