Home
Result
Report
Detail Analysis

Network Analysis

Download pcap

Hosts 1 DNS 0 TCP 5 UDP 5 HTTP(S) 5 ICMP 0 IRC 0 Suricata Snort

IP Address	Status	Action
164.124.101.2	Active	Moloch

Name	Response	Post-Analysis Lookup
No hosts contacted.

TCP Requests

UDP Requests

GET 304 http://acroipm2.adobe.com/20/rdr/ENU/win/nooem/none/consumer/278_20_6_20042.zip

REQUEST

GET /20/rdr/ENU/win/nooem/none/consumer/278_20_6_20042.zip HTTP/1.1 Accept: */* If-Modified-Since: Thu, 17 Nov 2022 08:19:51 GMT User-Agent: IPM Host: acroipm2.adobe.com Connection: Keep-Alive Cache-Control: no-cache

RESPONSE

HTTP/1.1 304 Not Modified Content-Type: application/zip Last-Modified: Thu, 12 Mar 2020 05:49:49 GMT Cache-Control: max-age=900 Expires: Fri, 18 Nov 2022 08:37:56 GMT Date: Fri, 18 Nov 2022 08:22:56 GMT Connection: keep-alive

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

GET 304 http://acroipm2.adobe.com/20/rdr/ENU/win/nooem/none/consumer/280_20_6_20042.zip

REQUEST

GET /20/rdr/ENU/win/nooem/none/consumer/280_20_6_20042.zip HTTP/1.1 Accept: */* If-Modified-Since: Thu, 17 Nov 2022 08:19:51 GMT User-Agent: IPM Host: acroipm2.adobe.com Connection: Keep-Alive Cache-Control: no-cache

RESPONSE

HTTP/1.1 304 Not Modified Content-Type: application/zip Last-Modified: Thu, 12 Mar 2020 05:54:03 GMT Cache-Control: max-age=900 Expires: Fri, 18 Nov 2022 08:37:56 GMT Date: Fri, 18 Nov 2022 08:22:56 GMT Connection: keep-alive

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

GET 304 http://acroipm2.adobe.com/20/rdr/ENU/win/nooem/none/consumer/281_20_6_20042.zip

REQUEST

GET /20/rdr/ENU/win/nooem/none/consumer/281_20_6_20042.zip HTTP/1.1 Accept: */* If-Modified-Since: Thu, 17 Nov 2022 08:19:51 GMT User-Agent: IPM Host: acroipm2.adobe.com Connection: Keep-Alive Cache-Control: no-cache

RESPONSE

HTTP/1.1 304 Not Modified Content-Type: application/zip Last-Modified: Thu, 12 Mar 2020 05:56:14 GMT Cache-Control: max-age=900 Expires: Fri, 18 Nov 2022 08:37:57 GMT Date: Fri, 18 Nov 2022 08:22:57 GMT Connection: keep-alive

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

GET 304 http://acroipm2.adobe.com/20/rdr/ENU/win/nooem/none/consumer/277_20_6_20042.zip

REQUEST

GET /20/rdr/ENU/win/nooem/none/consumer/277_20_6_20042.zip HTTP/1.1 Accept: */* If-Modified-Since: Thu, 17 Nov 2022 08:19:51 GMT User-Agent: IPM Host: acroipm2.adobe.com Connection: Keep-Alive Cache-Control: no-cache

RESPONSE

HTTP/1.1 304 Not Modified Content-Type: application/zip Last-Modified: Thu, 12 Mar 2020 05:47:50 GMT Cache-Control: max-age=900 Expires: Fri, 18 Nov 2022 08:37:57 GMT Date: Fri, 18 Nov 2022 08:22:57 GMT Connection: keep-alive

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

GET 200 http://acroipm2.adobe.com/20/rdr/ENU/win/nooem/none/consumer/message.zip

REQUEST

GET /20/rdr/ENU/win/nooem/none/consumer/message.zip HTTP/1.1 Accept: */* If-Modified-Since: Fri, 30 Jul 2021 19:28:16 GMT User-Agent: IPM Host: acroipm2.adobe.com Connection: Keep-Alive Cache-Control: no-cache

RESPONSE

HTTP/1.1 200 OK Server: Apache Last-Modified: Wed, 02 Mar 2022 15:47:16 GMT Accept-Ranges: bytes Content-Length: 10741 Content-Type: application/zip Cache-Control: max-age=900 Expires: Fri, 18 Nov 2022 08:37:58 GMT Date: Fri, 18 Nov 2022 08:22:58 GMT Connection: keep-alive

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts