buffer:HTTP/1.1 200 OK
Date: Sun, 23 Oct 2022 02:53:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Thu, 22 Sep 2022 05:54:20 GMT
ETag: "4ac400-5e93db1463b00"
Accept-Ranges: bytes
Content-Length: 4899840
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-msdos-program
MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L iþSc à ÒG ð þïG H @ K ` ´ïG J H Þì K H .text ÐG ÒG `.rsrc Þì H î ÔG @ @.reloc K ÂJ @ B äïG H üâG ¸ (
*.+{ *+÷B++ } *+õ+ô (
*Ö+ ÀG %Ð + ++*(
+â(
+ío
+è( +ã 0 ¥ ,_+x8 received:1024 socket:720
1
1024
0
InternetReadFile
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L iþSc à ÒG ð þïG H @ K ` ´ïG J H Þì K H .text ÐG ÒG `.rsrc Þì H î ÔG @ @.reloc K ÂJ @ B äïG H üâG ¸ (
*.+{ *+÷B++ } *+õ+ô (
*Ö+ ÀG %Ð + ++*(
+â(
+ío
+è( +ã 0 ¥ ,_+x8 request_handle:0x00cc000c
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ Z/. Nf} Nf} Nf}ªÒ}Nf}ªÒ}Nf}ªÒ}Nf}%e| Nf}%c|"Nf}%b|<Nf}ûc| Nf}ñ}Nf} Ng}mNf}o| Nf}d| Nf}Rich Nf} PE L $î0_ à V P ® p @ ð @ ,h x À \& 9 8 : ¸9 @ p .text {U V `.rdata p Z @ @.data È \ @ À.gfids l @ @.tls ° p @ À.reloc \& À ( r @ B base_address:0x00400000 process_identifier:604 process_handle:0x00000224
1
1
0
WriteProcessMemory
buffer:Ìa ±a V ;f Uf V £f V ë V Fî ¢ L ¦ z f BÅ 1Å >I æH V V ¥¤ ø£ ]f )f @ ú bö ÄM G G \ h7 @8 Ç
â }l Ñ » X ì
ªÍ g Öá 4> ? _ ^ d ± o q o Ð o Ö J J ê ð ï ô ð ï ð ï
ð ï # $ " J J ' o 6 o < # $ " A @ D # $ " H G K o R ^ ~ } | { z y h g ~ { ¨ ã Å Ä Ã Â Á ð ï Ç c ° ³ î ü û
í ä ì ä ø ä ä
é ê ö 9 < 8 ; Ê Ë Ì Í Î Ï Ð Ñ Ò Ó Ô Ù
b
E r 4 N ] Z [
Y base_address:0x0043a000 process_identifier:604 process_handle:0x00000224
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L iþSc à ÒG ð þïG H @ K ` ´ïG J H Þì K H .text ÐG ÒG `.rsrc Þì H î ÔG @ @.reloc K ÂJ @ B base_address:0x00400000 process_identifier:2248 process_handle:0x000002e4
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ Z/. Nf} Nf} Nf}ªÒ}Nf}ªÒ}Nf}ªÒ}Nf}%e| Nf}%c|"Nf}%b|<Nf}ûc| Nf}ñ}Nf} Ng}mNf}o| Nf}d| Nf}Rich Nf} PE L $î0_ à V P ® p @ ð @ ,h x À \& 9 8 : ¸9 @ p .text {U V `.rdata p Z @ @.data È \ @ À.gfids l @ @.tls ° p @ À.reloc \& À ( r @ B base_address:0x00400000 process_identifier:604 process_handle:0x00000224
1
1
0
WriteProcessMemory
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L iþSc à ÒG ð þïG H @ K ` ´ïG J H Þì K H .text ÐG ÒG `.rsrc Þì H î ÔG @ @.reloc K ÂJ @ B base_address:0x00400000 process_identifier:2248 process_handle:0x000002e4
1
1
0
WriteProcessMemory
buffer:MZ ÿÿ ¸ @ 8 º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ ÞVcÛ7
7
7
.«ü7
.«þ]7
.«ÿ¾7
Ê7
¡i7
E ý6
i7
i Æ7
GÈÝ7
GÈÜ7
GÈÆ7
7 ß5
n7
GÈÃ7
¡i °7
¡i 7
i7
i7
Rich7
PE L òÓÛ` à ì- < ¤( . @ à< D¤8 ( : ¼I ¬4 Ð 2 @ . Ô Ì8 .text ê- ì- `.rdata ¶º
. ¼
ð- @ @.data À8 " ¬8 @ À.gfids ø `: Î9 @ @.tls : à9 @ À.reloc ¼I : J â9 @ B base_address:0x00400000 process_identifier:2920 process_handle:0x00000374
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ Z/. Nf} Nf} Nf}ªÒ}Nf}ªÒ}Nf}ªÒ}Nf}%e| Nf}%c|"Nf}%b|<Nf}ûc| Nf}ñ}Nf} Ng}mNf}o| Nf}d| Nf}Rich Nf} PE L $î0_ à V P ® p @ ð @ ,h x À \& 9 8 : ¸9 @ p .text {U V `.rdata p Z @ @.data È \ @ À.gfids l @ @.tls ° p @ À.reloc \& À ( r @ B base_address:0x00400000 process_identifier:604 process_handle:0x00000224
buffer:Ìa ±a V ;f Uf V £f V ë V Fî ¢ L ¦ z f BÅ 1Å >I æH V V ¥¤ ø£ ]f )f @ ú bö ÄM G G \ h7 @8 Ç
â }l Ñ » X ì
ªÍ g Öá 4> ? _ ^ d ± o q o Ð o Ö J J ê ð ï ô ð ï ð ï
ð ï # $ " J J ' o 6 o < # $ " A @ D # $ " H G K o R ^ ~ } | { z y h g ~ { ¨ ã Å Ä Ã Â Á ð ï Ç c ° ³ î ü û
í ä ì ä ø ä ä
é ê ö 9 < 8 ; Ê Ë Ì Í Î Ï Ð Ñ Ò Ó Ô Ù
b
E r 4 N ] Z [
Y base_address:0x0043a000 process_identifier:604 process_handle:0x00000224
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L iþSc à ÒG ð þïG H @ K ` ´ïG J H Þì K H .text ÐG ÒG `.rsrc Þì H î ÔG @ @.reloc K ÂJ @ B base_address:0x00400000 process_identifier:2248 process_handle:0x000002e4
Rckjlz.exe