{"report_id":"13eaab4c-195e-4525-afde-cece6fcbcea2","version":6,"status":"done","tags":[],"date":"2025-08-04T10:58:29Z","url":{"schema":"http","addr":"pmr.screenconnect.com","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":0,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"pmr.screenconnect.com/","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"title":"ScreenConnect Remote Support Software"},"submit":{"url":{"schema":"http","addr":"pmr.screenconnect.com","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":0,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-08T10:58:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ec.walkme.com","ip":{"addr":"35.201.109.167","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2002-01-12","domain_rank":2158,"first_seen":"2017-01-29T20:22:35Z","last_seen":"2025-08-03T03:20:56.072321Z","alert_count":0,"request_count":2,"received_data":1231,"sent_data":1131,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"playerserver.walkme.com","ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2002-01-12","domain_rank":5468,"first_seen":"2013-04-25T20:50:13Z","last_seen":"2025-08-04T09:18:30.838693Z","alert_count":0,"request_count":1,"received_data":731,"sent_data":632,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"papi.walkme.com","ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2002-01-12","domain_rank":3295,"first_seen":"2017-08-08T09:00:11Z","last_seen":"2025-07-30T15:56:15.2057Z","alert_count":0,"request_count":1,"received_data":751,"sent_data":626,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pmr.screenconnect.com","ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"2004-10-27","domain_rank":0,"first_seen":"2025-08-04T10:58:31.06315Z","last_seen":"2025-08-04T10:58:31.06315Z","alert_count":0,"request_count":21,"received_data":2776629,"sent_data":12342,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.walkme.com","ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2002-01-12","domain_rank":1626,"first_seen":"2012-10-31T01:17:56Z","last_seen":"2025-07-30T06:31:47.414856Z","alert_count":0,"request_count":22,"received_data":4926244,"sent_data":11535,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cloud.screenconnect.com","ip":{"addr":"104.45.153.136","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2004-10-27","domain_rank":50917,"first_seen":"2014-11-23T19:28:37Z","last_seen":"2025-07-11T13:00:25.235052Z","alert_count":0,"request_count":5,"received_data":25336,"sent_data":3133,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ec-playback.walkme.com","ip":{"addr":"34.117.60.46","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2002-01-12","domain_rank":9806,"first_seen":"2021-06-09T11:12:07Z","last_seen":"2025-07-30T15:56:14.893642Z","alert_count":0,"request_count":1,"received_data":367,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"pmr.screenconnect.com/Images/ActionCenter.svg","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /Images/ActionCenter.svg HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 346\r\ncontent-type: image/svg+xml\r\nexpires: Tue, 05 Aug 2025 10:58:06 GMT\r\nlast-modified: Wed, 23 Jul 2025 11:35:58 GMT\r\naccept-ranges: bytes\r\netag: \"1DBFBC5F54AA300\"\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":346,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76fa773933e8313a93f5dee59e919d83","sha1":"db438d4795023149a335dfe1c7dcfa1c5f09fee6","sha256":"81fce97d96268840367d7f9119333c8bfccf3a633a68006a87240288a085b0b1","sha512":"797b037627c3f3ebedcb4629ff8019b68d525c707fe969c9b8a7e2d816816009dd8cc470ce6447031f1b8835b05ebc30116a4f41e9c20b34e026e920a89428d7","ssdeep":"","tlshash":"cbe02d11a2ac4d1c7f220310cf7cb2f1023232ae234d124ce85c323c840850eb837ee8","first_seen":"2024-04-30T03:57:53Z","last_seen":"2026-04-16T03:31:28.234109Z","times_seen":421,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/users/91e77b3899a042a08cfdc0c96e91f03a/scripts/prelib-plugin-a127985f-6d62-37f7-b8d4-3a9011a68492.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:07.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /users/91e77b3899a042a08cfdc0c96e91f03a/scripts/prelib-plugin-a127985f-6d62-37f7-b8d4-3a9011a68492.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: jEODaAMatvHUzRyQUoOKYMqWnoz4y7RcKvJ9I6jUiPjaQHX3sW5mmoahL2WMOxLuHCAisKYSQPY=\r\nx-amz-request-id: PPXWZHKPYXZWSNAP\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 30 Jan 2025 12:22:50 GMT\r\netag: \"e228586859cf59ab10fe2c87d5d213ab\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: oeihIlG8waK1nHkX1qNqAdRWGTchsyFe\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 85025\r\ncache-control: max-age=539\r\ndate: Mon, 04 Aug 2025 10:58:07 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297753,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32009)","md5":"0059d833bdee5f9d63b5d2bfb5cf00cd","sha1":"71a3989509fdd5c7454b9c7f7a8da39580b18bde","sha256":"1c3eb2987c9e661d52edae3e60273b356d425458bad397646594f826cf756561","sha512":"d265548fba5448dbcaebedaa50dffe3565b67edbb35f2f9e8d821c8716f37b8d5bcb57f107330e12a402f275012ac5c9103bdadda2bef2fd93948b27225c0587","ssdeep":"3072:cPNGqW6lhrsbAXEVBu5vz+1/4TD/EZHBfplu+GSiSfikRRVfyG:cVGqW6libAXmBu5vz+1/4THSiSfHaG","tlshash":"77540998b291703a43e764b9413f130fb23a6489640d84b8f265e8d67cb985e9337f7d","first_seen":"2025-06-03T11:41:42.331594Z","last_seen":"2026-04-13T06:01:09.539822Z","times_seen":13,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/users/91e77b3899a042a08cfdc0c96e91f03a/walkme_config_549fef888b914197b61538428b15e119.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:07.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /users/91e77b3899a042a08cfdc0c96e91f03a/walkme_config_549fef888b914197b61538428b15e119.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: 14Loj/BhGz3/VEi254k2X6RI7dgp3ibyMYxKgYUB7y0ULyC16ne4Dm9KhBaA2pWbxmYZf66QJtc=\r\nx-amz-request-id: B4CJGFP24BJ04M03\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 14 Mar 2025 16:07:54 GMT\r\netag: \"8e16715a67577c7a75c92ecdad8f17cd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: jwwYz09V9X5_6dYDv4ZS7uZI9drGNnzV\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ncontent-length: 2541\r\ncache-control: max-age=30228718\r\ndate: Mon, 04 Aug 2025 10:58:07 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5428,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5428), with no line terminators","md5":"8e16715a67577c7a75c92ecdad8f17cd","sha1":"bbfcac031b118955d5afb4e0285e4efd5e2a9061","sha256":"3ffa09d87b3823c6ef498c243900d64cee50d2493922b751c5abad7959904011","sha512":"a02ff29f37282977e7105472f49e7af857539508a478db3f8660332dfc3bf4baff8a68f524160ebaa6dc3121c6cb36b8f4bb8ee7cd98616dc2a6545a90ce37ed","ssdeep":"96:sYyuwymU/8pJNz7FEGcYD7Kjs+FjP88iPAPVlvxZmJDZGK0/tEjs9P6IgB:eVUUN7FEGLD7W4PAPVlpZmDZr0VEjQC","tlshash":"88b1b6733605a1b60d4be237fa65618226b0884b396c643470fe5fbc07977d413fa9a9","first_seen":"2025-06-03T11:41:42.31093Z","last_seen":"2025-08-04T14:05:17.22732Z","times_seen":4,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/App_Extensions/82ff7736-d40b-43f0-9375-3394e4cdfb61/Style.css","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:05.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /App_Extensions/82ff7736-d40b-43f0-9375-3394e4cdfb61/Style.css HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 4553\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: -1\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7264,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3181), with CRLF line terminators","md5":"1f04519ace205da1b61f7a5d8401d232","sha1":"479fde264ece9439d96e74bcc9d46d6942b8dee8","sha256":"4d8c6971c72ade531df3f4c52119b0c84e6ca3f7bd60a1bd836618e52bb85679","sha512":"b66f68deb7cd7f56e8c4c2deb117f850c0e0161b9c0a9bb126c0d1d7d573657d7857a390b360da6b593d010c084f38dc911e897837af0235b473a45ef0fc01d9","ssdeep":"192:ip8J+955rPEOa28QVp8sPhLuZXprvzFibsv0He/qI:i68EOaBQV6jZrbFibsvNz","tlshash":"0ae14a701633786dc26a80669be5174cad9deb1220049c15b3d6522baf435eee8ff386","first_seen":"2023-04-06T17:41:32Z","last_seen":"2026-03-25T17:32:34.806791Z","times_seen":14,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.screenconnect.com/scripts/Service/GetMessages","fqdn":"cloud.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"104.45.153.136","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P521","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"POST /scripts/Service/GetMessages HTTP/1.1\r\nHost: cloud.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: fwoBfoFxopq6hB2VPqTXDyKe0bjKxLhD9HVsQ7iwta8BAADnU3oSRcAtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 179\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: -1\r\nvary: Accept-Encoding\r\nserver: Control Server\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nfeature-policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\ncontent-length: 206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":196,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7c2ec0020f3c358f04500d7cd3afecef","sha1":"f55837b1d86c5f711f44abe725e7da476b026069","sha256":"a25b47dade1424e1bca851047d5526bd2970209173efe34cd0d90d29f949f94b","sha512":"32e5c50c8c65290a8959528fb6f1e4eff904934a291b6d90ad3a92d958ca1da038203263a04c92b987d7c1cde010366ed50a4f2f6efd4edf92e278c255a48a7c","ssdeep":"","tlshash":"00d0123b5ce4cea8f6c296c3020d3a21855cf4027b984d3c8e048e3800d82400211640","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-04-13T06:01:09.556499Z","times_seen":23,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/deepui/0/1.9c9e90554f4d46bc2b5d.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /deepui/0/1.9c9e90554f4d46bc2b5d.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: kAuqw2QpA/hs4dJRjc6RJFuJiFGmrj13TZ0XfMWC9xclN5fN7Ue8i38iHlVnelWsK5KERgbdt/q4eKggmmTbnHO9wFuML+cFfLLPywsCl1w=\r\nx-amz-request-id: 07K1DY3E3NP1QGQ9\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Sun, 03 Aug 2025 10:09:05 GMT\r\netag: \"e0d36c3c02dfc46ce2d00a0204b1fc3a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K0RjnLtu.9OJ.CIktMCDcnyNPm2DwcCV\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: max-age=507\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\ncontent-length: 227145\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":627696,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"e0d36c3c02dfc46ce2d00a0204b1fc3a","sha1":"db062228fce60aba9d7dfde92f83d1670e94c403","sha256":"0fc88fe426c6948d7beee391141f0fa7fc09a2646abccbb01fd0045eba77ad38","sha512":"b5d9feb94e142906d9ddd302e964d48a78d4e38cf011a097b8490255b0302d3e98c929d4ea07ebaf3df49143709fe83ef850441e76a2ded3e5ea18643f65a3d4","ssdeep":"12288:xAjhdRCBSSLvNDTzsT5sthWmmeW+umR7APtb5ACx6pj:xAj6D3sT5sthWmmejmPN5ACx6pj","tlshash":"d9d43add7ac7f02653f36136506f140bb33a694a640c8510e625dcd6bcb899ea237fac","first_seen":"2025-08-04T09:18:34.15113Z","last_seen":"2025-10-19T03:07:37.884551Z","times_seen":22,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ec-playback.walkme.com/session/init","fqdn":"ec-playback.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"34.117.60.46","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:09.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.walkme.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Oct 2024 00:00:00 GMT","end":"Sat, 01 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8B:61:4B:02:96:D4:9B:EA:8D:7B:A4:C3:07:8D:9E:96:67:0C:EE:72","sha256":"5E:22:22:38:5A:A9:63:77:CB:79:C9:1D:64:B2:C0:61:54:CB:86:C4:4B:AF:8E:C1:31:3C:79:F0:C3:5A:60:B8"}}},"request":{"raw":"POST /session/init HTTP/1.1\r\nHost: ec-playback.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 94\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 55\r\netag: W/\"37-MSEp1m/b750q46s8vz9q6BmNGMc\"\r\ndate: Mon, 04 Aug 2025 10:58:09 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":55,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b89085d55a593f95a11efbd4490d6e76","sha1":"312129d66fdbef9d2ae3ab3cbf3f6ae8198d18c7","sha256":"f291886271aaa3bc01bf0f6f3e402c448a9c9714d2577d72ffac7eacf2f3f157","sha512":"24c9d6ec3ee1a25da26f0877ee5439aa56d2965dd5fd4aed3d40d418178c4874679451649a7bd60bfb46425ee0ab758cccf7d01ac1ede6fb980725c525e08736","ssdeep":"","tlshash":"ed90025281c768574a11990085189995c86114522652896010ad8510d081685c82d908","first_seen":"2023-04-24T16:54:29Z","last_seen":"2026-04-19T02:09:42.9282Z","times_seen":81,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":76,"dns":12,"connect":25,"send":0,"wait":183,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/users/91e77b3899a042a08cfdc0c96e91f03a/data_590fe771dd6f434c8bc93c6893223548.br.json","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /users/91e77b3899a042a08cfdc0c96e91f03a/data_590fe771dd6f434c8bc93c6893223548.br.json HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pmr.screenconnect.com/\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: M0QMC/tbvRorYoFRvCvKUj6tTQRJlYDA5GZhoQ84td6iS9c3AAFKPRUh5G+2ulJ//jVnMVF0bRU=\r\nx-amz-request-id: YKCG535N5CDQ6TKH\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 28 Mar 2025 20:36:09 GMT\r\netag: \"abd33f39510954b9d5cac2fec236c3fb\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nx-amz-version-id: phJr.TYYOmd09DlcyiQvj9FMEWvoA.Rm\r\naccept-ranges: bytes\r\ncontent-type: application/json\r\ncontent-length: 38768\r\ncache-control: max-age=30110102\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297610,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7e8383aa26b0b01fa47a1d63b33f7ae2","sha1":"0a785a2453d11bd59127a06a08260d82d5ae3da4","sha256":"f88822fca9a34fef7e3bd9ca7c8f566d2522c06a173e907f8fef1a4966ced80c","sha512":"16fb9aa0f62d813d369f926d254334597a83764b136427485484cada9fae81884aacedc94d80424198cf317a8301b9e010fa9f2279ada3d3cc3cf2c6fcbcafd5","ssdeep":"6144:65U5uppeppmgGV+gfOTlZ/Casoeb3c+yrrKpC3D0SNJ7:q+Zh","tlshash":"bb54d71a7a212dff061f1b05d0c73f8e69fc41739f950d7485a46e6c82fa1ed2369a0a","first_seen":"2025-06-03T11:41:42.338174Z","last_seen":"2025-08-04T14:05:17.244094Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Services/PageService.ashx/GetLiveData","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: fwoBfoFxopq6hB2VPqTXDyKe0bjKxLhD9HVsQ7iwta8BAADnU3oSRcAtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 144\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b35c0251ad76e866864c21dde59bc666","sha1":"61304f5b03346d15b145af55303a0053cb6804db","sha256":"d7ddde448c0b4d380ccd2c07c9029d68cbf65ac4cfb80f3b273c5629b94e4020","sha512":"3c860afe6f7dc1679ac82f8c3e409d7e53fa9d10255f07ee227efe33bbd6abe228d08811034dbb0a699cbdb0f96f32530f82a0631f4f4fabdebe67b30609cf5d","ssdeep":"","tlshash":"e4c04c9e8a7025b6554883384d7f3950d6b82262b078a4f91665009853a176d46156a6","first_seen":"2025-08-04T10:58:35.32983Z","last_seen":"2025-08-04T10:58:35.32983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Services/PageService.ashx/GetLiveData","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:10.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: fwoBfoFxopq6hB2VPqTXDyKe0bjKxLhD9HVsQ7iwta8BAADnU3oSRcAtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 144\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\ndate: Mon, 04 Aug 2025 10:58:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ec0e2899fcc53a2fb227814e37f2626e","sha1":"909929a88c86a77d8b2813a9f8d18d957d960646","sha256":"9cf6d01ead23f4b2d2950e6cff8b742d8f5a0011887cacfd89352e4d9796c14f","sha512":"5e41a14584682ce1408789d296d9dbd418af847f0ca6cb45b02df227509df877fea2545b6522d242d7b8409830bf9830b91f9e8a34a464c79d11e674ae2b7ad5","ssdeep":"","tlshash":"4fc08cca8a3025b2184883380c7e3910d6b82212b078a4b90220008843a032902112a6","first_seen":"2025-08-04T10:58:35.331023Z","last_seen":"2025-08-04T10:58:35.331023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.screenconnect.com/scripts/instance.js?Instance=mxdfn0","fqdn":"cloud.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"104.45.153.136","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:05.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P521","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /scripts/instance.js?Instance=mxdfn0 HTTP/1.1\r\nHost: cloud.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: Control Server\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nfeature-policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'\r\ndate: Mon, 04 Aug 2025 10:58:05 GMT\r\ncontent-length: 2145\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5305,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1350638fda7c9d323c624f1c05b9f077","sha1":"1f0160f7b5ae33addbee5cf0b7ebe409ef0da322","sha256":"284b97ad0e757e5467447c052357ca7be9b5478b2397908a08d1a7b9e7462d5b","sha512":"9d464fefab5a733bfb833f701b290f46932220899803039f5754d6ba98f160519aefd9e9f5f05a75d72f844583449960b4dc1d4e1c11e5b32a7cffa42dce24f1","ssdeep":"96:DWWfzhT/toAuvnW4RV01b7EUamSDvP33TWAr4RMW65ETNeflZjZ7ZN3I8EB6Bj0y:iWfzhT/ttu/W4jy7N3mvP33CMW6uTqPl","tlshash":"f5b174c976caaef5c9ce236b20379105fd6cc4d16001d1227959485c6ee4ecaa3d379e","first_seen":"2024-05-03T21:01:38Z","last_seen":"2026-04-13T06:01:09.548642Z","times_seen":23,"resource_available":true,"data":null}},"time_used":724,"timings":{"blocked":304,"dns":11,"connect":96,"send":0,"wait":97,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/player/resources/wmjQuery360.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:07.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /player/resources/wmjQuery360.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: r00VdSCqG4BwODrFNvOtMUwqYT71ux3HhIxDNTclcGnWws4lwnQKeKflnyOXylszqlpy4VYYevc=\r\nx-amz-request-id: RM32Z7HREZECAH4E\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 09 Nov 2022 13:17:27 GMT\r\netag: \"0e308a7d717f3a246c25d36fb83309f1\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: _lGj1E1EF8Fn58WW0A81tWj0XFSDXKxP\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 31502\r\ncache-control: max-age=29761527\r\ndate: Mon, 04 Aug 2025 10:58:07 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":91679,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446)","md5":"3b14da39ee5f1d8410660360dccebe6d","sha1":"eeccc45f94d1dee8c13f54863fe00f6fb1aa6177","sha256":"41549a387785352a5ee11381a3fd323aec93b6e9b518ce3e598396235d4b59f5","sha512":"85732940423d4e7b1d4864459a4579d9451a47ad313b87cd2bd884ffb969e9d2bd31944857f5595db9c9047d3ffdd4125f17ccb763f2ae7ec49677c77ccada83","ssdeep":"1536:JKw8h5IqxDa8ZdckVc5Xigu9+iRCP24dA1YjhSpCdR2F8mEIs4BSFfAaBsO1grfZ:b+UP1hSig29F7t1PGvm5W","tlshash":"3793f9dd72c6706257ab70b9106f110ff236199e684d4500f229d4eabcb8a4e827bf7d","first_seen":"2023-09-14T08:28:45Z","last_seen":"2026-04-20T18:49:34.871917Z","times_seen":402,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/player/lib/20250319-122134-b84f67bd-f513126f.br/9.d8fb1c58.walkme_lib.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /player/lib/20250319-122134-b84f67bd-f513126f.br/9.d8fb1c58.walkme_lib.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: GxKp/1oahMav8Z0X0iby/DPwKnkNXRUhVCsOVIhbdqt0kwX3tzJ7TqaBKtuRm3HxsMtCyRtWXrg=\r\nx-amz-request-id: CWPAHDSBVGVH227S\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 19 Mar 2025 12:45:27 GMT\r\netag: \"80da9f5726dad8b6786ba7bce912e284\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nx-amz-version-id: uGhvSwJ.JipOQSu3goJ23yyl9J7iSSt6\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 2860\r\ncache-control: max-age=28577771\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9147,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9147), with no line terminators","md5":"cffef0bec2517a959d3e589c76bd419d","sha1":"9e4e78a21fa4d4948606dcb17d4a3ae0757c81e9","sha256":"4c22c9e46cd8ee5013605464eeac7676443d4f45c4ef3ec1c97de6abce4c80e8","sha512":"45f9087152b201e71c12f36c63d81444df78692133a3493aa4ce9fbceb068879ee47c80b15f84a36c1e82a3171f6061eb30804d224119d6299c7992919bba05f","ssdeep":"192:4AzrADxq2RV0wojJ56Djp/yCax5vL0FnDpa3DsoDOrNm8L:ZvAPjTvp/I5wFnY3oo8","tlshash":"d112318ab2d6b04307a3b494453f204bb237656904ed5464a668e8fdbcf458fd12be7c","first_seen":"2025-06-03T11:41:42.304893Z","last_seen":"2025-08-04T14:05:17.245776Z","times_seen":4,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/users/91e77b3899a042a08cfdc0c96e91f03a/custom_css_590fe771dd6f434c8bc93c6893223548.css","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /users/91e77b3899a042a08cfdc0c96e91f03a/custom_css_590fe771dd6f434c8bc93c6893223548.css HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: S15iMQyY0pg0POm19EEct9F9Pr+GsOH7q8thOtpk1b1oARATIXUMiNtMyVyhckbFZZPvV8gW6dg=\r\nx-amz-request-id: HZC9P1GD2FG6RT29\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 28 Mar 2025 20:36:07 GMT\r\netag: \"1c0383315f0554363f21987a702b6ff3\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: EmRoYWTkoGfSgoDkmw2ADc05Y.xg95dS\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\ncontent-length: 9343\r\ncache-control: max-age=29697587\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":185911,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"a9a1d64db6e2022fb6901c185bbbbb3d","sha1":"d7bd7f21fff15d34de19f436290561a2c72b4d8a","sha256":"20b084e9b1b67d8e101ee898781ecc5bfd082e4cccbd0daa52e85fdea300cc9b","sha512":"7b9bcb5fbe2c33aa8751b364c186565ad3b1f553ebbeec9e57aded589759a80129725f918e0ab3912e883e47193e466eb2382955bc5fe416a740b97c63e71d11","ssdeep":"3072:+Od1XiA/dPA7uJM1aMJJWVmLz4IqHUhYRhc8613Honjo7ki:X10","tlshash":"a1044966f8e951e193920e3cb12b6fbcf67b930137023df31586a97ccac85a51b39119","first_seen":"2025-06-03T11:41:42.327967Z","last_seen":"2026-04-13T06:01:09.581009Z","times_seen":13,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/player/lib/20250319-122134-b84f67bd-f513126f.br/29.c9ebcdde.walkme_lib.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /player/lib/20250319-122134-b84f67bd-f513126f.br/29.c9ebcdde.walkme_lib.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: U8skRJ8KRYOOCSnmR+65TBYOT/njb9qYwMewzQGBoi6cj8cuSamAnHu30/WA5SNprQMcg97iIDs=\r\nx-amz-request-id: 6YAZ4HX9CRCJNEP1\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 19 Mar 2025 12:45:26 GMT\r\netag: \"21b0bbd2846079cdc423fdcfba5001f3\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nx-amz-version-id: RGusBKa0AVSSmxbCizN9Ze628uEB_7ho\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 31588\r\ncache-control: max-age=28666069\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119951,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9e96a60bdf71a61f0dfd85800ba49355","sha1":"a400e799b4d31e6093e414f03e826955cecd0dd3","sha256":"efe5acad5d0b77b5f6e621651e92ca082f69ae8429dac9d68a13d759a4a5e3b6","sha512":"bfd8ea2c396b5303d5f638fa1a9cdcb5a990401744b7d4c1dc206895d8413074d5813deb42901b069e5b7990ec5578a2977445c0036ef995a67c1b0b800f4ed8","ssdeep":"1536:i5KgYePCEz31Df6wDtFGMyI2mreH+btWNUN/Bv6uk56tlx3fGxDgA98HX:AKgJlnt1yI2mBWcZ53fb5X","tlshash":"31c33d5d71c134aa429b30bab17f280ab7734556481d9820f92dca9c29bbdcd43b7e1f","first_seen":"2025-03-23T22:54:25.303422Z","last_seen":"2025-08-04T14:05:17.255532Z","times_seen":6,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Images/Applications.svg","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /Images/Applications.svg HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 821\r\ncontent-type: image/svg+xml\r\nexpires: Tue, 05 Aug 2025 10:58:06 GMT\r\nlast-modified: Wed, 23 Jul 2025 11:35:58 GMT\r\naccept-ranges: bytes\r\netag: \"1DBFBC5F54AA300\"\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":821,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2599340bf60ee89b13e6b91beefe1199","sha1":"4e0babcd7fdcabc1759ed0f130e06972340c5127","sha256":"5bf4f707f250958980d313203989f1fca55b9446f34d667e7256f853d52e494d","sha512":"b22ab922530cbabc1c9a2800218f620060b1be8b69ef67d47a8aba5f3897b1e651d1cf8025e933cfa70cc26fa8e50f8ac0f4318e51d3f876f2cef3f6b278ad19","ssdeep":"","tlshash":"8f018c6882e92a3e61136678d39085c53493f0c2ebb40918e8e4311983b4c43ef6db6f","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-04-16T03:31:28.24118Z","times_seen":466,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ec.walkme.com/event/postEvent","fqdn":"ec.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"35.201.109.167","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:09.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.walkme.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Oct 2024 00:00:00 GMT","end":"Sat, 01 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8B:61:4B:02:96:D4:9B:EA:8D:7B:A4:C3:07:8D:9E:96:67:0C:EE:72","sha256":"5E:22:22:38:5A:A9:63:77:CB:79:C9:1D:64:B2:C0:61:54:CB:86:C4:4B:AF:8E:C1:31:3C:79:F0:C3:5A:60:B8"}}},"request":{"raw":"POST /event/postEvent HTTP/1.1\r\nHost: ec.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 1745\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin\r\ncache-control: private, max-age=600\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; default-src 'none'; frame-ancestors: 'none'\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2\r\ndate: Mon, 04 Aug 2025 10:58:09 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-21T07:23:51.343773Z","times_seen":398692,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Services/PageService.ashx/GetLiveData","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:11.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: fwoBfoFxopq6hB2VPqTXDyKe0bjKxLhD9HVsQ7iwta8BAADnU3oSRcAtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 144\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\ndate: Mon, 04 Aug 2025 10:58:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f4bc3cb8a8e38c4eb99b1c2140c1e3fa","sha1":"21cf16f4b66c9625fe9430b5e22b42f7cbea95ce","sha256":"b466c7295891b22b0f939da02326506f510c6ccacc6a5823efc033ecc7e04928","sha512":"acde3883963ba5f42cecfd727bcd0d95145e8e2bef19cdfd808610fb0fb9ce9a14519441fb5f4b153e927eccd4dad75ff1f045cea756c7a4a5dccd8c3794ef86","ssdeep":"","tlshash":"90c08c8b8a3025b2144883380c7e3910c6b82212b078a8b91620008803a032902106a6","first_seen":"2025-08-04T10:58:35.34317Z","last_seen":"2025-08-04T10:58:35.34317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2518,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playerserver.walkme.com/EndUserStorage/Get?callback=wmjQuery36009166754971118207_1754305087226\u0026walkmeUserGuid=91e77b3899a042a08cfdc0c96e91f03a\u0026source=0\u0026endUserGuid=mxdfn0-\u0026secondsSinceUpdate=\u0026_=1754305087227","fqdn":"playerserver.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /EndUserStorage/Get?callback=wmjQuery36009166754971118207_1754305087226\u0026walkmeUserGuid=91e77b3899a042a08cfdc0c96e91f03a\u0026source=0\u0026endUserGuid=mxdfn0-\u0026secondsSinceUpdate=\u0026_=1754305087227 HTTP/1.1\r\nHost: playerserver.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\ncontent-length: 72\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nx-kong-upstream-latency: 22\r\nx-kong-proxy-latency: 0\r\nx-kong-request-id: ee849945a1fb2721ca59994743eeb349\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: strict-origin\r\ncontent-security-policy: default-src 'none'; upgrade-insecure-requests; block-all-mixed-content;\r\ncache-control: private, max-age=600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"307b2fb2038933c6d50f8d9086ca4931","sha1":"bf98f998405b326e7e4139ad414493e012b3082d","sha256":"c66c8463c273c2a9e9292f7e1b3f2d06e6263f35a2b7ebd98dd66397f7adb0b7","sha512":"6aff5e626ba514d1adafa5fe231d0a94d15ee7b951f5f67cc6719160286c21f40e2fe171ed9a6137e97053fa3be50424f9ddd4a7d671fd04a01a969a79d14a76","ssdeep":"","tlshash":"afa022000000030e83288b08e32fcfac08e80032c8a00b2ac38cb28a8f2203a2202800","first_seen":"2025-08-04T10:58:35.345189Z","last_seen":"2025-08-04T10:58:35.345189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/users/91e77b3899a042a08cfdc0c96e91f03a/runtime_data.json","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /users/91e77b3899a042a08cfdc0c96e91f03a/runtime_data.json HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pmr.screenconnect.com/\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: F5qqkxLp0naBwzcvN29VqcVANQ0k+bjojbzeUwJrqlljW6ipTmP9rIp889EGHHOLQZsyANC+eeE76Y+//TbvKuH68o4efDxzBwUwMDqMbSc=\r\nx-amz-request-id: VP081G10GX3GTKZP\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 26 Jun 2025 12:23:33 GMT\r\netag: \"2b8d637f752681e60b493d781c9b497c\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: K1hKxZoCKY1.z8JcdpDGGkgqsEbFTIw3\r\naccept-ranges: bytes\r\ncontent-type: application/json\r\ncontent-length: 249\r\ncache-control: max-age=37680\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":560,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"97a46d8b113446f02c5816368c66472a","sha1":"bd7d70459189ab509ffe6f485462141c619b99a3","sha256":"9aa0f25b8db3ba1cababd6b99dddaa26196290e3f31718e7ee72a3f9e502199e","sha512":"ee1354d0c2a89026d81c168ae00a7ccfeeba2f57945c3ff666ed73ccb968a67f06f23dbbb7070c3497b19fb05042ffc929ff8817ec0779d0f9320c46300b0826","ssdeep":"","tlshash":"caf03009bc0a429d8c66abe2c9a3d256ca4974026ac42ec058c3f751d25c5ab3783f37","first_seen":"2025-08-04T09:18:34.144745Z","last_seen":"2026-04-13T06:01:09.572264Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/player/lib/20250319-122134-b84f67bd-f513126f.br/resources/CD/cdHiddenIframeScript.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /player/lib/20250319-122134-b84f67bd-f513126f.br/resources/CD/cdHiddenIframeScript.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: A5FrdUdRJH7ACPab09FISXyLu7NKfr0Xbd/FZsRUwfwRaX2cTotM89WhvHOzjf54jyNUuluHPFU=\r\nx-amz-request-id: EMY5J4B3GJQ46FGM\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 19 Mar 2025 12:45:27 GMT\r\netag: \"64bad8dece3937c7177b75099c2b8972\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nx-amz-version-id: XCA00Ujcld8V3a56AFjb5c_udvHp1k0_\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 108\r\ncache-control: max-age=28654946\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":244,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"e413d69c5b17560a05e6c228392e7f7b","sha1":"a041ead4c6f965adf4117697de36701d89e5e8d3","sha256":"ddab192869f16ddcfbcbb9ed4372c4c1f5dc4ed47a1045287ac15699b33c1213","sha512":"8eae6e403cfbc14ef799afedbbf0370b46bcbe9b07825673ce11e9f991fc1e347a6c78aa5764c28a5dc9171c32210d9f9c4df52ad0143e2f68f6d649163e05f9","ssdeep":"","tlshash":"13d0a90eb83208ce2673220133b3330f382331944646a2a697550ac2bfa408b9002bc8","first_seen":"2023-03-07T12:05:11Z","last_seen":"2026-04-20T18:49:34.83698Z","times_seen":234,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/users/91e77b3899a042a08cfdc0c96e91f03a/settings.txt?forceUpdate=1754305096583","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:16.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /users/91e77b3899a042a08cfdc0c96e91f03a/settings.txt?forceUpdate=1754305096583 HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: XUQOWiZQSfgTrMb29krh3e43dwDp5eHscVTGS/DXc3ygQ9I3G8t4QFKfchtvcaXB7YL78sXB74g=\r\nx-amz-request-id: A28GJDKWCCW6NT74\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 23 Jul 2025 14:55:26 GMT\r\netag: \"8b5340367bf9321de0b670303daceabb\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: RzuGnhk11YFwxKrJZmDLh_9nKpy5A.ig\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ncache-control: max-age=900\r\ndate: Mon, 04 Aug 2025 10:58:16 GMT\r\ncontent-length: 805\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1897,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1897), with no line terminators","md5":"8b5340367bf9321de0b670303daceabb","sha1":"1e8f70cc612e95367ab6a112e74e712d8f54b327","sha256":"65e66fae50fed01d559c76db3e4559993f0d06ad1c65b747bfe92b85ce6b37a1","sha512":"4b3559a95a4bc5929836a5d07794bb4c48a7ca5baccd44a94d0c908ea8895e6fb857bdf79216e7bd458182c5aff9d611272131cfe9830f4067d3931c194e0bb0","ssdeep":"","tlshash":"2a4146f3766543f6d32622cbf0b37e8c6528328f78c9c986d47eb51708889ea016cd55","first_seen":"2025-08-04T09:18:34.089944Z","last_seen":"2025-08-04T14:05:17.220604Z","times_seen":3,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/users/91e77b3899a042a08cfdc0c96e91f03a/settings.txt","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:07.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /users/91e77b3899a042a08cfdc0c96e91f03a/settings.txt HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: rLc0NvWc0Y5mdUa7HhiPi3Kxgyy4UvYpQB3Peqeban8Il8ASM9+S1szhDPHSTRpxfxQI3JNw4IU=\r\nx-amz-request-id: PFN6N8BW4E96YCXC\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 23 Jul 2025 14:55:26 GMT\r\netag: \"8b5340367bf9321de0b670303daceabb\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: RzuGnhk11YFwxKrJZmDLh_9nKpy5A.ig\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ncache-control: max-age=870\r\ndate: Mon, 04 Aug 2025 10:58:07 GMT\r\ncontent-length: 805\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1897,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1897), with no line terminators","md5":"8b5340367bf9321de0b670303daceabb","sha1":"1e8f70cc612e95367ab6a112e74e712d8f54b327","sha256":"65e66fae50fed01d559c76db3e4559993f0d06ad1c65b747bfe92b85ce6b37a1","sha512":"4b3559a95a4bc5929836a5d07794bb4c48a7ca5baccd44a94d0c908ea8895e6fb857bdf79216e7bd458182c5aff9d611272131cfe9830f4067d3931c194e0bb0","ssdeep":"","tlshash":"2a4146f3766543f6d32622cbf0b37e8c6528328f78c9c986d47eb51708889ea016cd55","first_seen":"2025-08-04T09:18:34.089944Z","last_seen":"2025-08-04T14:05:17.220604Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/deepui/0/main.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /deepui/0/main.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: eHP4eCrkrzxw7h255GpBiSkZV5vtyp+PbRNY1plsJG3HQdFjZ0w4+v7659hLIBLQtTpCKoNTYa8=\r\nx-amz-request-id: A45HAR96VV76N1CK\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Sun, 03 Aug 2025 10:09:08 GMT\r\netag: \"975233cb8f22dd4e8136cc03af9cf51d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: RjVU8S5JCx2P0_L.2ZuTAQJrGcqCce1.\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: max-age=556\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\ncontent-length: 166231\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":576559,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65090)","md5":"975233cb8f22dd4e8136cc03af9cf51d","sha1":"552ae75affc9fe97ed9d66625b1d3986d8fcc2ef","sha256":"1af923b9c029d295a49d36bf30e89170bdfd3622126eeca23e2e9b5dab521003","sha512":"cc9d139fa0a2063bf1eb7412dc1741a891c26f4551a66c1f8957387c393a8e2e97fc65aba011aef84f10ebaac2691c51cc5a5d8d7399390c589f487a1d5f4f82","ssdeep":"6144:cBVWFrK6VX0VX6VW8WVXOVQLTTCVXOs2V4sVXwQMfdjUp7nVn0ZsVSilp+kfDX2t:coKmMnsPQMtUp7WZIAEn6","tlshash":"98c408c9b6d7f06913e76075802f110bf23aa95574498490e626dce1bcb898fa237f7c","first_seen":"2025-08-04T09:18:34.111142Z","last_seen":"2025-10-19T03:07:38.126796Z","times_seen":22,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/App_Themes/DarkTeal/Default.css?__Cache=0c7f273e-2a19-4b5b-a752-ff8de11d9b7c","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:05.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /App_Themes/DarkTeal/Default.css?__Cache=0c7f273e-2a19-4b5b-a752-ff8de11d9b7c HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=3600\r\ncontent-length: 135656\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: Mon, 04 Aug 2025 11:58:05 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":512869,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27376), with CRLF line terminators","md5":"83fee38536bdaa1e012120202d9c74fb","sha1":"144d6311b6c43137e6fb7ba7f6cef153e6bce7b9","sha256":"b3a491a95f0bceb6d6dddaa70ff147eb8b51536879980cbafc9615da66eecfc8","sha512":"cc6008d8348d4aae6fdc74487f04d0614cbfda54827d1d432b598a8af30f5e5e9cfd980fee1c7b067bc9a362bf087ef7ab06b4de9c441898543581c696600e63","ssdeep":"3072:g8B+8+a+WGg59pfbE5RvRVwJ9eEQfgNaFHZtjEirNzpwKOBpUJpbxS:BRUWGg+jvxFHZlpwKEj","tlshash":"52b4e826fb8f56e4c7da452a57b19250de2dc0b1164307f1786a98088f8b3943fa73db","first_seen":"2025-07-21T16:21:57.789786Z","last_seen":"2025-12-30T17:06:44.514122Z","times_seen":17,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/App_Extensions/2c4f522f-b39a-413a-8807-dc52a2fce13e/RemoteWorkforceStyle.css","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /App_Extensions/2c4f522f-b39a-413a-8807-dc52a2fce13e/RemoteWorkforceStyle.css HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 516\r\ncontent-type: text/css; charset=utf-8\r\nexpires: -1\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":516,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"844f217053396d817fae224c5e2d20ed","sha1":"e72d3d33d8a3cbe3087d79b3b0e514c272249ffb","sha256":"15df1a2eee8fc4bbdb86eac3f3f25c2c295eb65d47fb99fa5fa374f1425fefdb","sha512":"604e853a8e6efc57969efe7c7335a95f96d2c06cf7ca723f9c8dbe173be9bb100c8e30be9db2edd0b483fcc22840403dd325f63ecb8db3ad15df007d0117be93","ssdeep":"","tlshash":"5af0e94b571fd1bc1fd25ce70770915cad04d15a3a4e2dc5fb2eab2a432a05917170ce","first_seen":"2024-08-19T19:04:19.265332Z","last_seen":"2026-03-21T18:02:15.434895Z","times_seen":9,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Images/Extras.svg","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /Images/Extras.svg HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 322\r\ncontent-type: image/svg+xml\r\nexpires: Tue, 05 Aug 2025 10:58:06 GMT\r\nlast-modified: Wed, 23 Jul 2025 11:35:59 GMT\r\naccept-ranges: bytes\r\netag: \"1DBFBC5F5E33980\"\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":322,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"813c72f0a4741978669871e3800d5279","sha1":"ae5e036f992577f8afca3d99a352f44a217c2c2a","sha256":"8fce4aad3b04f9b76a08bad9b2459e355bbf16a470486d689fa801b9a30e3061","sha512":"bcb4de8eba321bfe1ec092e53c87275143508b2e3298a099ae0bc90449557ae741ad34b36795538c6a10493e9937c36fe2fb230513ff56fac05f2aae5ee8f796","ssdeep":"","tlshash":"3be08c40cf18378c7a5885942b2ce4990493e2abb0ce82d5a1cd1038f74476ae9f3292","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-04-16T03:31:28.234625Z","times_seen":463,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.screenconnect.com/scripts/Service/GetScripts","fqdn":"cloud.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"104.45.153.136","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P521","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"OPTIONS /scripts/Service/GetScripts HTTP/1.1\r\nHost: cloud.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-anti-forgery-token,x-unauthorized-status-code\r\nReferer: https://pmr.screenconnect.com/\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nexpires: -1\r\nserver: Control Server\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type,x-anti-forgery-token,x-unauthorized-status-code\r\naccess-control-allow-methods: POST\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nfeature-policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":338,"dns":1,"connect":97,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/player/lib/20250319-122134-b84f67bd-f513126f.br/23.3181d428.walkme_lib.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /player/lib/20250319-122134-b84f67bd-f513126f.br/23.3181d428.walkme_lib.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: zj7fIIwrF9ItRpKnuaHxi9KHjHjpM9o7nWtYbsrwcXm16H1E+BvunElh2o1irp2lPvU94ja0zk4=\r\nx-amz-request-id: EMYA8RGD9S0VY1ZC\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 19 Mar 2025 12:45:26 GMT\r\netag: \"407483bf73b626c8eab9acba73291daf\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nx-amz-version-id: gk81AMU0UnBSECPwHTFC1fDoWJcOIsa1\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 9935\r\ncache-control: max-age=28654946\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32866,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32866), with no line terminators","md5":"f80cac6ffe466d34be2b84c672ca011e","sha1":"eb76107e1492d068c37a79c11c7c38baad079e7f","sha256":"23ba9e9d38b69b17982938fde6e4241170e9db865472ff205aa234ba9303913d","sha512":"86b0792723fa3d7f794541218858da2fbbc7096fb7d7450684f61d0cea660eeeb7b9b011735df767e6a2f7c4191f0c74e460db293593179c1485a8ac991dac9f","ssdeep":"768:rONpIe8ZPt8eb6ZO3rVYN5YXoQQPLjxkC+BFu:EpIeQt8eb6ZUVYHY7u","tlshash":"02e2f75cf581b4744787a2e1512f141af23a0998b19a896cf866c4f63dbde8c0237fbd","first_seen":"2025-03-31T13:44:34.063777Z","last_seen":"2025-08-04T14:05:17.223576Z","times_seen":6,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Script.ashx?__Cache=90d0bc0a-2c61-4533-bd61-7389fa5932d0","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:05.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /Script.ashx?__Cache=90d0bc0a-2c61-4533-bd61-7389fa5932d0 HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=3600\r\ncontent-length: 63472\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: Mon, 04 Aug 2025 11:58:05 GMT\r\nvary: Accept-Encoding, Accept-Language, Host, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":484430,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (22090), with CRLF line terminators","md5":"3adc6775f5be61d25b53e226a86f4aa1","sha1":"3571ca7ee10a2def89a7d28be5f63543c9810286","sha256":"ee418a26fb810c47ad64417df256618eca52ab428d5119e1f8a802733f52fc14","sha512":"c71c5a1b55f53f49b32bfa40ba6b6235a7c3fc410318e506b01bae4c67ed5346bc54d80403e1a89668833ee37339449cd765f8dfb267c05b7c91dc1fe6bdfa46","ssdeep":"3072:JTdHvj9bzllvvpdJBjwPX501lVN7GNC5WgZBnGZezS1PQw2lZy3z1dhfqu37VeE1:ZdBllvvpdJBjwPXGVePZuZyXh0xh0","tlshash":"7fa4a50527bd34b26643c2f1ec77d49e77b8948576399072bd7f822dc35ab9402b238a","first_seen":"2025-08-04T10:58:35.354338Z","last_seen":"2025-08-04T10:58:35.354338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/App_Extensions/3b02f68b-6b56-4df8-b7b2-a215014f69ae/Styles.css","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /App_Extensions/3b02f68b-6b56-4df8-b7b2-a215014f69ae/Styles.css HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 203\r\ncontent-type: text/css; charset=utf-8\r\nexpires: -1\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":203,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF, LF line terminators","md5":"aec84e7a2c3205b7d48ab8a620db024e","sha1":"be77c39fb51f5f98435066fdad537166972db8c0","sha256":"679e446e3ddbb9b1fe6c6b0d65f6db3322df7e8475a4b10c36c5399a7a79890f","sha512":"cfbf13a6b14cb4ad6a126f0be70cf93d94e6f2dd203af95c17ad2818020c6876990f65db4199cfec653435f326c38cef45fd09bd7610c55f3c1fbd74516cde10","ssdeep":"","tlshash":"e0d0222b130ee0fc4fc24cf53b52800a2cac08813b0d08c0bf18312c4446a010f6bacf","first_seen":"2023-08-09T12:51:56Z","last_seen":"2026-03-27T14:07:16.600894Z","times_seen":6,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Images/ActivityIndicator.gif","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /Images/ActivityIndicator.gif HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/App_Themes/DarkTeal/Default.css?__Cache=0c7f273e-2a19-4b5b-a752-ff8de11d9b7c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 27503\r\ncontent-type: image/gif\r\nexpires: Tue, 05 Aug 2025 10:58:06 GMT\r\nlast-modified: Wed, 23 Jul 2025 11:35:58 GMT\r\naccept-ranges: bytes\r\netag: \"1DBFBC5F54AA300\"\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27503,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"c63792b958d231654ab54542fea871db","sha1":"c21cfffa5cbd2a7c94076324fe28c4596df92e0c","sha256":"9d070c98f02f1d6287952256b47f7cd72eda89bda25ef99782325214a042f01a","sha512":"adf5f76d848c6ecc5c0fc00e51f6ad76d716a3daea6417b533a7a0d00004dd0bba2a7f9c2743fd4a5b83fc4c1ce4178dcc64808254ba110a1774fc0208d78760","ssdeep":"384:ZPEb1PVCcijMhRFO9eiHcptlHdEw6ZCI1wsas2B/uyPs83VRKwaT+zJuXd:ZPAfCLMhzCxKdw1mpJT3bL0auN","tlshash":"61c2f14e883d941e94f546207b212b8c65126eea68dc01fdca9bfa289cdf73cb119dd1","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-04-16T03:31:28.2417Z","times_seen":504,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/users/91e77b3899a042a08cfdc0c96e91f03a/walkme_91e77b3899a042a08cfdc0c96e91f03a_https.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /users/91e77b3899a042a08cfdc0c96e91f03a/walkme_91e77b3899a042a08cfdc0c96e91f03a_https.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: DJIui+1KCc4z0qcgaJtahAsttaOo8m93qYka/kn9borl36xrEPNGxIAYcB5C/D4PIipWE5/rZWU=\r\nx-amz-request-id: ZWF79T2PNKRVVCAV\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 14 Mar 2025 16:07:54 GMT\r\netag: \"3511167c06d7b6bf465e3f89062dc0dc\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: 2vwnYGDCxXBj5hK6b5mUvQ9PHYL1A_nm\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 8897\r\ncache-control: max-age=80471\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25725,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25722), with no line terminators","md5":"f5979902a0284d90b3a6189b0b448fad","sha1":"0b663d0fe9e3d4c7f2c1cf08258e513a8b9bbf68","sha256":"e38a49dac3901bd18bfc6bfe87e369d718e3764a645c3ab0e7710ed14aacf0f2","sha512":"834de8930dc1673f9393f073cd5a3a947bf027fc624cbae5b9df4a7769e698386a1b394043afe94914c67224760ea624bdf4b660a6559d4a0a05442153819493","ssdeep":"384:DFl/j8VusN6L2uldGtMFxU1em/QHvA/XePo36H66c5JiIaT9F7O8a8F9J0/1:r8VNUauRsYm/QIZ36H66cfiIaPTG/1","tlshash":"fcc2d9b930a3b07acab321a1b17f6705733a5b255c4dd443c066e8d43c7995b823aeed","first_seen":"2025-06-03T11:41:42.317202Z","last_seen":"2025-08-04T14:05:17.20855Z","times_seen":4,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":42,"dns":31,"connect":1,"send":0,"wait":2,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/users/91e77b3899a042a08cfdc0c96e91f03a/external-data/insights-configuration/insights_configuration_a9900896b594424a9bba179461d01334.json","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:07.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /users/91e77b3899a042a08cfdc0c96e91f03a/external-data/insights-configuration/insights_configuration_a9900896b594424a9bba179461d01334.json HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: JV3IRSDj7WEc3+cXE36WT35HFjayRWOw3KzIsj7+xAZv7SrLruYw0nq1SWVqs+yphqDIJ2tlQXg=\r\nx-amz-request-id: TSBPWCZTRRD34HR9\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 23 Jul 2025 14:55:25 GMT\r\netag: \"99914b932bd37a50b983c5e7c90ae93b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: r8_iATmndHL8VQS1ho89La2EsHlfxLpb\r\naccept-ranges: bytes\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\ncache-control: max-age=30615176\r\ndate: Mon, 04 Aug 2025 10:58:07 GMT\r\ncontent-length: 22\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-21T07:32:49.384502Z","times_seen":589166,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/deepui/p/user/91e77b3899a042a08cfdc0c96e91f03a/0/590fe771dd6f434c8bc93c6893223548/data.js?cb=wm-deepui-um-cb","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /deepui/p/user/91e77b3899a042a08cfdc0c96e91f03a/0/590fe771dd6f434c8bc93c6893223548/data.js?cb=wm-deepui-um-cb HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 303\r\nx-wmdu-requestid: 071f99c8-4b7d-401f-8049-ab7aff6291e4\r\nx-wmdu-version: 0.116.0\r\nlocation: https://cdn.walkme.com/deepui/userMapping/91e77b3899a042a08cfdc0c96e91f03a/0/590fe771dd6f434c8bc93c6893223548/data.js?cb=wm-deepui-um-cb\r\nx-response-time: 3ms\r\nx-kong-upstream-latency: 4\r\nx-kong-proxy-latency: 0\r\nx-kong-request-id: ed37cd50629e0a26dd05616b7368651b\r\ncache-control: max-age=512\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41516,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=8ecec52c-e9cc-46bd-8796-616c7838cc28","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:05.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=8ecec52c-e9cc-46bd-8796-616c7838cc28 HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=3600\r\ncontent-length: 53424\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nexpires: Mon, 04 Aug 2025 11:58:05 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":271344,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"5bbc2c0fb7b3d8d32f2bf7a560ffffc7","sha1":"fe8b6196f16b11fa1321b204b38334bee05ac546","sha256":"3f8dfc97c3c556a9a9a189532e0035c019be668bf6614e4356773cd6224c6e47","sha512":"c9848474c601ee9b3e44a29c2ae49bacde8e1099bf3df812c9b2dfc33448929033458c3b7328c9c6341457ecf8e595ef687ddb6a483559cc43c742f42bb536d4","ssdeep":"6144:RITRvTL92lQ3p/Z7i++jri4iviSj//9RBSdFMKSF:GhpBv","tlshash":"4c44c589b5fb22b282b7713d8b6f4009763542431409dc257c6c9b846f6d92da1fafce","first_seen":"2025-07-21T16:21:57.777997Z","last_seen":"2026-03-27T05:21:06.884964Z","times_seen":41,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/FavIcon.axd?__Cache=452f8d19-5d27-4add-bf8d-264e4b420d64","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /FavIcon.axd?__Cache=452f8d19-5d27-4add-bf8d-264e4b420d64 HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=3600\r\ncontent-length: 1538\r\ncontent-type: image/vnd.microsoft.icon\r\nexpires: Mon, 04 Aug 2025 11:58:07 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1538,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 4 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 4 bits/pixel","md5":"d9c91e92af6776e767700c6f0c258ec0","sha1":"d083b5b8f069abd44ba4c30d806220375ce3e7ee","sha256":"0b95167676069a859a7535ce88e2b9f82520485d0102400d6d3e38a21f7c1f72","sha512":"06db40e54216ddc7f20de265a4c1b4d6cd054e64e305aa9d1300b9024662dd43a0796715bb95b88680cd6d4b94041159680e8888bb356a007177959bb1b591f0","ssdeep":"","tlshash":"5d3129c98342143cd04d53380c675212fec3914a4a83ba651f4f1a661533b169ff7ad0","first_seen":"2024-12-20T23:35:34.287272Z","last_seen":"2026-04-16T03:31:28.240243Z","times_seen":317,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Services/PageService.ashx/GetLiveData","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:07.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: fwoBfoFxopq6hB2VPqTXDyKe0bjKxLhD9HVsQ7iwta8BAADnU3oSRcAtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 144\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\ndate: Mon, 04 Aug 2025 10:58:07 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9662b60891ce100a9a27cc05a1a53984","sha1":"acad2a317b66a118596cfd92dca21fa578de71eb","sha256":"d617f98941c5157e836d87e21717889aaf9647fd9edea4c595c585b7b93ff5ca","sha512":"3f5e000f071ca62e70b9989e577d416d5d1b481049c744eae6a04655a66ba37100e43ae3835a06c11b6419b585ea1c6f695ab9890fb62584ee60b7d445fe0f6b","ssdeep":"","tlshash":"e1c08c8a8a7025b2184883380c3e2900cab83212b078a8ba0220009803b032a42112a6","first_seen":"2025-08-04T10:58:35.360409Z","last_seen":"2025-08-04T10:58:35.360409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/player/lib/20250319-122134-b84f67bd-f513126f.br/52.436eab54.walkme_lib.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /player/lib/20250319-122134-b84f67bd-f513126f.br/52.436eab54.walkme_lib.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: GfEU5H+7i4YyXoQbRZVYmvOAtZ8yq+mEu6frn9WJFm1SNiu0CI6nfTvho9nUTLZJK9150qwL/JU=\r\nx-amz-request-id: ZJQ919JXNS43XGQC\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 19 Mar 2025 12:45:26 GMT\r\netag: \"ed64c93c3be9915694b69e3f4de44dd2\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nx-amz-version-id: LYXzCSvxCSogGtNky7laZHbynQ9fjQ_5\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 709\r\ncache-control: max-age=28618271\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2835,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2835), with no line terminators","md5":"d440fcf50a36b7d6a09585e52f5647d1","sha1":"feb1646e237ef8ec6506e83dce3d4545b126566a","sha256":"56d16094f0b667c2777f66136c3d920a0b144f79871b8701576f7808311694b3","sha512":"4b85e4475a1c923642010a27fd370ad33b508e953c393c733794c6385715aacf3167b5bdc79e9c208a181bf01e9105a2833233f4187d90accfa23e2eca0b2aaa","ssdeep":"","tlshash":"3151bf37b9c36ee18411cf9522f76ff8be3e1d045bb16d3a4b4633a3879e8864109658","first_seen":"2025-06-03T11:41:42.336407Z","last_seen":"2025-08-04T14:05:17.247476Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/player/resources/fonts/notosans.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:09.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /player/resources/fonts/notosans.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: gk2JB0RlR6/oOS24d+zPbAax4p4RO99S+IpzxxjkMOw58QY0xs0iwk5CEWCvqWyRDBN9ObfrtHM=\r\nx-amz-request-id: 8N9JHYVZ0WH1F9F5\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Jun 2019 21:50:11 GMT\r\netag: \"7e9b968dcc783627e445ad04f4dab310\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: WjEbTtapEYtXvse9Ooq2w1BlT1_OhZB3\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ncontent-length: 21880\r\ndate: Mon, 04 Aug 2025 10:58:09 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28914,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (28605), with CRLF line terminators","md5":"7e9b968dcc783627e445ad04f4dab310","sha1":"cad8246497227877bad74f07969fab87559f1a82","sha256":"04492dc91f7b11414946c67dda4b85fba53e4ad6e76237095b73b30d1c6bbe5d","sha512":"568c445ea717431a0af65e5a4004994d45eee08258d7ce6fa54deb0706ce1cc512deebe1ec18d80d72a75d902f6efa831263214af8f6c088c724d22126da6c3a","ssdeep":"768:hkA8KMLV0JoOP+ePXRhsjhdioHB95vCeXIHFcLZ72H:yA8K+V0JQAXMq4B95vCeXqFcLN2H","tlshash":"cdd2e139e3d2f814543d5d60152bae8d8e881faf60b0780c3d5a519527d339ef464a37","first_seen":"2023-03-08T01:39:46Z","last_seen":"2026-04-19T03:04:39.682227Z","times_seen":151,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Services/PageService.ashx/GetLiveData","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:15.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: fwoBfoFxopq6hB2VPqTXDyKe0bjKxLhD9HVsQ7iwta8BAADnU3oSRcAtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 144\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\ndate: Mon, 04 Aug 2025 10:58:17 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"26e00b417315e965d3561d90727b3a0d","sha1":"d53c52be10c165fe407b6e08ef8d6cea5eaf7ee8","sha256":"d79bd977670fade88920be06f93f8616a2cd8737e348b1e3647a22aeff7980d0","sha512":"40a7fbdd717d11214e81b9afe9f1c44dae06055ab3de4e3b4234281b625308a06be7844caca9eaa57337cb7d744a6897ba7f74ac33a21fbc092859980e157c8f","ssdeep":"","tlshash":"acc08c8a8a7026b2154883380c7e3920c6b82212b078a4b90220008803a032902102a6","first_seen":"2025-08-04T10:58:35.363088Z","last_seen":"2025-08-04T10:58:35.363088Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Services/PageService.ashx/GetLiveData","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:19.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: fwoBfoFxopq6hB2VPqTXDyKe0bjKxLhD9HVsQ7iwta8BAADnU3oSRcAtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 144\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\ndate: Mon, 04 Aug 2025 10:58:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f83aec42555bd02ceab93ea28f73f9e","sha1":"c5c5575576c3606a1aeb606d41e5014ab2573c94","sha256":"2849a26ae3347ac4de79a34e1013871aa39338619a26c12e374d4474d34c95ed","sha512":"42accb3c4c43c6b2460a81186f1f69ae0b83179d25335b6b7b5fbdabc3085c418c17e4c8d2e6d4d0277c65b55467bb0c56855fc5677d3f2a84c39894cb440d44","ssdeep":"","tlshash":"a7c08c8a8a3025b2144883380c7e3a10c6b82213b078a4ba0221009803a032902102a6","first_seen":"2025-08-04T10:58:35.364103Z","last_seen":"2025-08-04T10:58:35.364103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.screenconnect.com/scripts/Service/GetMessages","fqdn":"cloud.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"104.45.153.136","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P521","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"OPTIONS /scripts/Service/GetMessages HTTP/1.1\r\nHost: cloud.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-anti-forgery-token,x-unauthorized-status-code\r\nReferer: https://pmr.screenconnect.com/\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nexpires: -1\r\nserver: Control Server\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type,x-anti-forgery-token,x-unauthorized-status-code\r\naccess-control-allow-methods: POST\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nfeature-policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":309,"dns":1,"connect":95,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/player/lib/walkme_lib_20250319-122134-b84f67bd-f513126f.br.js","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:07.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /player/lib/walkme_lib_20250319-122134-b84f67bd-f513126f.br.js HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: vSCE7HWUTSHgM+b1CrhsitIDAYL8KYcV4vgoL6Q7evIfMzw5X0fBTgM8nvyFtgFTTZID4dtyT4s=\r\nx-amz-request-id: X1F92JEMJ81BQGQ4\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 19 Mar 2025 12:45:39 GMT\r\netag: \"62f34471fb006ad102943b589355522b\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nx-amz-version-id: KoaNxWv4hiOteod1vdKUOVE7BqNwwJYo\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 639840\r\ncache-control: max-age=28632116\r\ndate: Mon, 04 Aug 2025 10:58:07 GMT\r\naccess-control-allow-private-network: true\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2439682,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65395)","md5":"9428e77c9c092b0678b5c277b306d651","sha1":"830477f8456b2604476c5e2205305a5836a08326","sha256":"b2c1b27b83bad7a5a0505dc1b68a5311cba307d7b382c3e3f18b858a0aa084b6","sha512":"dc88381a37fca0335c8f2bce75aaa1a6e3db61fcde61b83d61301816bbed6544d3b264e717dac16584625d8e84c67dd9dae9591a880593d4d80716931be0f0c6","ssdeep":"12288:IarSdcQI1yXKEkoW5qLhSaIyufRBiUbLqf9cgDyeosG8XyJyh/XAa7lC2:6dhKEH0aItqf9cgDyeosG8XyJyh/XAah","tlshash":"1b25f88df1c2b066079361f5913f001ef33b6899784a5424e969c4e93dbc98e9227fbd","first_seen":"2025-08-04T09:18:34.125548Z","last_seen":"2025-08-04T14:05:17.243136Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papi.walkme.com/conditions/evaluatedConditions?accountGuid=91e77b3899a042a08cfdc0c96e91f03a\u0026endUserId=mxdfn0-\u0026environment=0","fqdn":"papi.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:09.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /conditions/evaluatedConditions?accountGuid=91e77b3899a042a08cfdc0c96e91f03a\u0026endUserId=mxdfn0-\u0026environment=0 HTTP/1.1\r\nHost: papi.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 364\r\nx-correlation-id: 4ec421b8-aad4-4aaa-893e-f297b1262fd0\r\nx-datadog-trace-id: 7720880070464094894\r\naccess-control-allow-origin: *\r\netag: W/\"16c-Mlx5naS2ZONo8ejfaaqtQef1MCI\"\r\ndate: Mon, 04 Aug 2025 10:58:09 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":364,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"df952052f2b8427daacdd48bfa0aa443","sha1":"325c799da4b664e368f1e8df69aaad41e7f53022","sha256":"99dbe117eca0a57a56664deaaa33eed39beb49ddc0c89b9bfee100d45551189f","sha512":"0a60d18a8faab08ffa4c9733b79a4b18258db8bb2f4fffedc950ee493c2cb6030d1f3b8649a29d4d135fc8bf9d85deff98f9f0884bf7e44ca54b9111ae0f0b69","ssdeep":"","tlshash":"38e07ecd7e92068e58643e26f124062cdfaa05c52a60fbf4c09651bb2c8f3820032497","first_seen":"2025-06-03T11:41:42.356436Z","last_seen":"2025-08-04T14:05:17.234523Z","times_seen":4,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":48,"dns":31,"connect":1,"send":0,"wait":173,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Services/PageService.ashx/GetLiveData","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: fwoBfoFxopq6hB2VPqTXDyKe0bjKxLhD9HVsQ7iwta8BAADnU3oSRcAtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 60\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 144\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9234d216107385dc52b3b787c55fc1f2","sha1":"ca11540c33a4bca72c23abaa17c302945f8a0fa3","sha256":"55f2474c422b95253380d1730f86d3675bbc6ee2a29c1a2198d56fe0baad3ef2","sha512":"a5259a67138b0e5c565d1db19c4cbe2043c245b1dbaed9d51b4ed9b8124c1a3872c3ef241dd08c8d6b6b6dccb090570966fc7615315cc1118d2b52ace5b4c0de","ssdeep":"","tlshash":"cdc08cca8ab02572144883380c7a2900d6b82212b078a0b90220008843a026902112a6","first_seen":"2025-08-04T10:58:35.367059Z","last_seen":"2025-08-04T10:58:35.367059Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/player/lib/20250319-122134-b84f67bd-f513126f.br/resources/CD/CDhiddenIframe.compress.html","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /player/lib/20250319-122134-b84f67bd-f513126f.br/resources/CD/CDhiddenIframe.compress.html HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: /rGEKKdapisu0yebx2cHOKgtPDosQ4wGgXEgTdS0sNVPN4cNlH58u4VgEPNS/gM3Tei13Svd8xa8EcMS8cXvTfalGmxNqY+E\r\nx-amz-request-id: 2EAKPV0X5X872QN3\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 19 Mar 2025 12:45:27 GMT\r\netag: \"2fb53115add0bda82d02471d202346fd\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nx-amz-version-id: ywVuC8Xba5tsel4kY8qg5RjQ9fx4gNEA\r\naccept-ranges: bytes\r\ncontent-type: text/html\r\ncontent-length: 12492\r\ncache-control: max-age=28626372\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76344,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2be99f004faecf0c1d0310c2b1f3260e","sha1":"1942ad1fe298f2b88ae8f4704f5fdc4634bd348d","sha256":"d617ef3b7c9199e45ce3214f3da46388ee8d70bd56bbdfee918b6f7b3eb33140","sha512":"3eb4eb2bdccecc3d653c3ed82edebdfeca059f600fb9eb332ad8604332dba830f729d358cbe12b48970232719282970963e7942c65b5218d3d2356a333b023fb","ssdeep":"768:Yje1o/ywjq8n9Z++m+h+6RLsLaLKaTNTqa897/QoSv7T8Mf0wKqiZcAYY3pcVUfN:Y6lwm8n9Z++m+h+6EHZSjepu2kx8v","tlshash":"f173851b72cb10191167337aea7b5008ed39e023601ac66cbc9d66c42ff941567bafed","first_seen":"2024-09-19T07:56:07Z","last_seen":"2026-01-27T16:53:51.948421Z","times_seen":40,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-04T10:58:04.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private\r\ncontent-length: 68640\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\np3p: CP=\"NON CUR OUR STP STA PRE\"\r\ndate: Mon, 04 Aug 2025 10:58:04 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":293797,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"e853436cdf56ed5ca20ee6f10b3ea338","sha1":"0431655785830e2e9cf54b9359709333c9da0027","sha256":"19de71706bb6b63796b8d57c319543ffc8c530fcf6a9c793a00504242b50603b","sha512":"11270c1b20fbfc2216a92a0df5af4769216ec13871f61ce37726b6ac5db3bbb890a0e99a94e693d9aaf934666a0c6f327c7a59b712f51455120f01f4f1d9042c","ssdeep":"3072:dnWv2JrktrJUsSBgmkuRnGXLsKTaSwM+xVu:Mv2JQBJkGXLlaSwxnu","tlshash":"47544cd5719e257a82d632e2c47f448afa7cc171500488b5f878ded878b88889277bfd","first_seen":"2025-08-04T10:58:35.370603Z","last_seen":"2025-08-04T10:58:35.370603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1415,"timings":{"blocked":473,"dns":3,"connect":150,"send":0,"wait":161,"receive":307,"ssl":318},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.screenconnect.com/scripts/Service/GetScripts","fqdn":"cloud.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"104.45.153.136","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P521","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"POST /scripts/Service/GetScripts HTTP/1.1\r\nHost: cloud.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: fwoBfoFxopq6hB2VPqTXDyKe0bjKxLhD9HVsQ7iwta8BAADnU3oSRcAtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 146\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: -1\r\nvary: Accept-Encoding\r\nserver: Control Server\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nfeature-policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\ncontent-length: 5543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16577,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"daf7a773e783a2f9824f1f77c655e37f","sha1":"a04eda5df9389c389e29038b91feab2c5c04f39c","sha256":"52f885263e26ad193cac271a7262f2d261d56f9081f292f7f5e623d1efa171af","sha512":"eb54da873416771edd00e525234f13a1f108ceb205b9af0b01af358e4d197e72a1b170a0285d41c720fa37621726c5c0f022a068cf08e26fe924a81732a98395","ssdeep":"192:/mzT+qvls2aVZ9jLqYaybANSrJ4b3CKdwBtLMUGgR4pdZFZ0RVKKP4uOtSLP4uJ:+ess2pYnBtgUGgRayVTP4uOtSLP4uJ","tlshash":"d372b56f984eb6764b42107835ab404636eb35563540c437bc3c9c48cbe9e4ee4aafde","first_seen":"2025-08-04T10:58:35.371841Z","last_seen":"2025-08-04T10:58:35.371841Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Services/PageService.ashx/GetLiveData","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:14.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: fwoBfoFxopq6hB2VPqTXDyKe0bjKxLhD9HVsQ7iwta8BAADnU3oSRcAtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 144\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://pmr.screenconnect.com\r\naccess-control-allow-credentials: true\r\ndate: Mon, 04 Aug 2025 10:58:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e8c808024d29879e9b80229e3192207f","sha1":"0ed9605a2ac93d88f5a49ff9b8bf57f71ab40ebc","sha256":"2c275391fc58e9a5824e5c3646bb069a7497d642f3a36a62b1bab41f4ddd0857","sha512":"94a9017b4bc7d7737d05a10fab619adaa96cc85d046312e7817168f3c1ef1d6b48a230e3205eaa799d7ffcab9675c3f0c77ef17564f89370c196d08dcef67f50","ssdeep":"","tlshash":"72c04c9a8a7025b6554883384d7e3950d6b82252b078a4ba1665009863a176946156a6","first_seen":"2025-08-04T10:58:35.372963Z","last_seen":"2025-08-04T10:58:35.372963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pmr.screenconnect.com/Images/PageBackground.png","fqdn":"pmr.screenconnect.com","domain":"screenconnect.com","tld":"com"},"ip":{"addr":"15.204.108.82","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:06.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.screenconnect.com","organization":"ConnectWise, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:0D:A3:B8:02:BC:2E:55:BA:D0:44:EE:C4:FE:5D:DD:61:D6:CE:23","sha256":"88:34:29:BE:8C:75:80:5B:3C:A9:64:3A:6A:8C:74:5F:BF:16:11:A7:F4:F7:CF:CB:0F:4A:95:36:D4:00:DE:48"}}},"request":{"raw":"GET /Images/PageBackground.png HTTP/1.1\r\nHost: pmr.screenconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/App_Themes/DarkTeal/Default.css?__Cache=0c7f273e-2a19-4b5b-a752-ff8de11d9b7c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 1167577\r\ncontent-type: image/png\r\nexpires: Tue, 05 Aug 2025 10:58:06 GMT\r\nlast-modified: Wed, 23 Jul 2025 11:36:00 GMT\r\naccept-ranges: bytes\r\netag: \"1DBFBC5F67BD000\"\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Mon, 04 Aug 2025 10:58:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1167577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1350 x 832, 8-bit/color RGBA, non-interlaced","md5":"30526db545db88f273bd0fd0b3b97f07","sha1":"dc198f030b25441cd12bbd598163b0df65c8406c","sha256":"bb87e0a2b06d73e78797a269a15561e0600efacd420e677350665382c5e37954","sha512":"47ef1aaff384f33897acb382803700ec1631cd017a3c4e264e55b9848c22245d6529b8db61019628f9f2e952eb02e0cee1b0e51f6674b8d06028bd8afb7902ec","ssdeep":"24576:cO3/js4WC//Dr2yD7ibZKVMqn+NxGGP4pC2IYr9pKMBX:c6s4WC/QboVMdrhdYrzKIX","tlshash":"1f25332e7e221053654de92d379a3c1cdcca3e7462168924bfd81a736650fbcf89b19c","first_seen":"2025-07-27T05:51:54.932579Z","last_seen":"2026-04-14T08:32:47.325578Z","times_seen":97,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":471,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ec.walkme.com/event/log","fqdn":"ec.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"35.201.109.167","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.walkme.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 01 Oct 2024 00:00:00 GMT","end":"Sat, 01 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8B:61:4B:02:96:D4:9B:EA:8D:7B:A4:C3:07:8D:9E:96:67:0C:EE:72","sha256":"5E:22:22:38:5A:A9:63:77:CB:79:C9:1D:64:B2:C0:61:54:CB:86:C4:4B:AF:8E:C1:31:3C:79:F0:C3:5A:60:B8"}}},"request":{"raw":"POST /event/log HTTP/1.1\r\nHost: ec.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 625\r\nOrigin: https://pmr.screenconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin\r\ncache-control: private, max-age=600\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; default-src 'none'; frame-ancestors: 'none'\r\naccess-control-allow-origin: *\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":102,"dns":4,"connect":12,"send":0,"wait":168,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.walkme.com/deepui/userMapping/91e77b3899a042a08cfdc0c96e91f03a/0/590fe771dd6f434c8bc93c6893223548/data.js?cb=wm-deepui-um-cb","fqdn":"cdn.walkme.com","domain":"walkme.com","tld":"com"},"ip":{"addr":"2.18.174.59","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pmr.screenconnect.com/","date":"2025-08-04T10:58:08.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walkme.com","organization":"WalkMe LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:A5:8D:46:7E:EA:3F:74:A3:17:74:21:04:9D:3A:BF:86:21:AD:B9","sha256":"5A:74:A1:85:51:9F:49:4C:D0:1B:89:BD:AE:C3:D9:1C:FC:9E:98:DD:D4:77:92:1C:46:BF:9B:E4:8D:AF:57:F2"}}},"request":{"raw":"GET /deepui/userMapping/91e77b3899a042a08cfdc0c96e91f03a/0/590fe771dd6f434c8bc93c6893223548/data.js?cb=wm-deepui-um-cb HTTP/1.1\r\nHost: cdn.walkme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pmr.screenconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: wun1EnlgdLJY3iY4HYkQ3Sgp3bBboII+4dLWHnojTjnCgvu2SN14dcXcPh4m/T3kTymVGNdgrWA=\r\nx-amz-request-id: 83SZB5V073KKN29K\r\nlast-modified: Tue, 29 Jul 2025 15:38:31 GMT\r\netag: \"36783384bd38a5119d0d2605d0b68c5a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-ndu4mjq2ntc4nje%3d: 1\r\nx-amz-meta-nduyotiwmtyzmjy%3d: 1\r\ncontent-encoding: gzip\r\nx-amz-meta-otmymdy1nzu3mdk4: 1\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 4590\r\ncache-control: max-age=426\r\ndate: Mon, 04 Aug 2025 10:58:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-resource-policy: cross-origin\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000;includeSubdomains\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41516,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41267)","md5":"3a40f8170abb6c6d6bb410092ec15353","sha1":"31ed7c2e22aa5b86d7af7e2121cdc5a79748153c","sha256":"ebe701d6bca1d4998a3bb09bad9a2a9818769a9ade74dcdafa2d6cc4ea4c4805","sha512":"150b8e6f5b15c4f6f3dd03e67292691a8c9448e2b024b87f9296afedc56871db3a9fefe82a23f0f98150e0ecc68d5c19db3827a0d8bbf87cc1e017f1e6f062d3","ssdeep":"384:EiwwKV4RS48k6pcQJ3+2VCC79PxnbyOl2vO+nahGNkO+odXms/kazndNystYRGT+:EH0t83pcNIOOl2vOsXYF","tlshash":"911303a2ed12a07cd4156c6dad163b216fff5638f5145f9c86cc0b1297c789a33a20eb","first_seen":"2025-08-04T09:18:34.160302Z","last_seen":"2025-08-04T14:05:17.200641Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}