FILE_NEW file #0, 0, 0 FILE_OVER_NEW_CONNECTION FILE_STATE_REMOVE file #0, 77, 0 [orig_h=10.10.1.4, orig_p=1470/tcp, resp_h=74.53.140.153, resp_p=25/tcp] FILE_BOF_BUFFER Hello\x0d\x0a\x0d\x0a \x0d MIME_TYPE text/plain source: SMTP MD5: 58aff3af22807bc5f4b6357c0038256c SHA1: c39dc8cd0f8d8b1f7fc8b362c41e69fdf20f668a SHA256: 8d057f3af311c20675eea767a9df5fa31ff3597c6d5d50fd0cdc34766c40204d FILE_NEW file #1, 0, 0 FILE_OVER_NEW_CONNECTION FILE_STATE_REMOVE file #1, 1868, 0 [orig_h=10.10.1.4, orig_p=1470/tcp, resp_h=74.53.140.153, resp_p=25/tcp] FILE_BOF_BUFFER On 25 J MIME_TYPE text/plain source: SMTP MD5: f6bf92b103a9d008e070c53bdf9a640c SHA1: 3443cbe561b33a606d2c0638eca61deb303c4dd7 SHA256: acdef841cc054f2afdf800cb2c48300244ca1376d0438141e91ef60986fbeb6d FILE_NEW file #4, 0, 0 FILE_OVER_NEW_CONNECTION FILE_STATE_REMOVE file #4, 1406, 0 [orig_h=192.168.133.100, orig_p=49655/tcp, resp_h=17.167.150.73, resp_p=443/tcp] FILE_BOF_BUFFER 0\x82\x05z0\x82\x04b\xa0\x03\x02 MIME_TYPE application/pkix-cert source: SSL MD5: 1bf9696d9f337805383427e88781d001 SHA1: f5ccb1a724133607548b00d8eb402efca3076d58 FILE_NEW file #5, 0, 0 FILE_OVER_NEW_CONNECTION FILE_STATE_REMOVE file #5, 1092, 0 [orig_h=192.168.133.100, orig_p=49655/tcp, resp_h=17.167.150.73, resp_p=443/tcp] FILE_BOF_BUFFER 0\x82\x04@0\x82\x03(\xa0\x03\x02 MIME_TYPE application/pkix-cert source: SSL MD5: 48f0e38385112eeca5fc9ffd402eaecd SHA1: 8e8321ca08b08e3726fe1d82996884eeb5f0d655