Home
Result
Report
Detail Analysis

Network Analysis

Download pcap

Hosts 3 DNS 0 TCP 5 UDP 7 HTTP(S) 17 ICMP 0 IRC 0 Suricata Snort

IP Address	Status	Action
117.18.232.200	Active	Moloch
164.124.101.2	Active	Moloch
94.156.6.203	Active	Moloch

Name	Response	Post-Analysis Lookup
No hosts contacted.

TCP Requests

UDP Requests

OPTIONS 200 http://94.156.6.203/

REQUEST

OPTIONS / HTTP/1.1 Connection: Keep-Alive User-Agent: DavClnt translate: f Host: 94.156.6.203

RESPONSE

HTTP/1.1 200 OK Allow: OPTIONS, LOCK, DELETE, PROPPATCH, COPY, MOVE, UNLOCK, PROPFIND Dav: 1, 2 Ms-Author-Via: DAV Date: Wed, 09 Aug 2023 08:06:41 GMT Content-Length: 0

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

OPTIONS 200 http://94.156.6.203/Downloads

REQUEST

OPTIONS /Downloads HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 translate: f Host: 94.156.6.203

RESPONSE

HTTP/1.1 200 OK Allow: OPTIONS, LOCK, DELETE, PROPPATCH, COPY, MOVE, UNLOCK, PROPFIND Dav: 1, 2 Ms-Author-Via: DAV Date: Wed, 09 Aug 2023 08:06:47 GMT Content-Length: 0

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads

REQUEST

PROPFIND /Downloads HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:06:47 GMT Content-Length: 539

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads

REQUEST

PROPFIND /Downloads HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:06:48 GMT Content-Length: 539

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads

REQUEST

PROPFIND /Downloads HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:06:48 GMT Content-Length: 539

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads

REQUEST

PROPFIND /Downloads HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:06:48 GMT Content-Length: 539

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads/revenue-en-local.lnk

REQUEST

PROPFIND /Downloads/revenue-en-local.lnk HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:06:49 GMT Content-Length: 690

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads/revenue-en-local.lnk

REQUEST

PROPFIND /Downloads/revenue-en-local.lnk HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:06:49 GMT Content-Length: 690

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

GET 200 http://94.156.6.203/Downloads/revenue-en-local.lnk

REQUEST

GET /Downloads/revenue-en-local.lnk HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 translate: f Host: 94.156.6.203

RESPONSE

HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1370 Content-Type: application/octet-stream Etag: "1779865c4a89f40055a" Last-Modified: Tue, 08 Aug 2023 21:41:06 GMT Date: Wed, 09 Aug 2023 08:06:50 GMT

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads

REQUEST

PROPFIND /Downloads HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:07:05 GMT Content-Length: 539

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads

REQUEST

PROPFIND /Downloads HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:07:05 GMT Content-Length: 539

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 404 http://94.156.6.203/Downloads/desktop.ini

REQUEST

PROPFIND /Downloads/desktop.ini HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 404 Not Found Date: Wed, 09 Aug 2023 08:07:06 GMT Content-Length: 9 Content-Type: text/plain; charset=utf-8

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads/revenue-en-local.lnk

REQUEST

PROPFIND /Downloads/revenue-en-local.lnk HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:07:06 GMT Content-Length: 690

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads/revenue-en-local.lnk

REQUEST

PROPFIND /Downloads/revenue-en-local.lnk HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:07:06 GMT Content-Length: 690

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads/revenue-en-local.lnk

REQUEST

PROPFIND /Downloads/revenue-en-local.lnk HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:07:07 GMT Content-Length: 690

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads/revenue-en-local.lnk

REQUEST

PROPFIND /Downloads/revenue-en-local.lnk HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:07:17 GMT Content-Length: 690

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

PROPFIND 207 http://94.156.6.203/Downloads/revenue-en-local.lnk

REQUEST

PROPFIND /Downloads/revenue-en-local.lnk HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601 Depth: 0 translate: f Content-Length: 0 Host: 94.156.6.203

RESPONSE

HTTP/1.1 207 Multi-Status Content-Type: text/xml; charset=utf-8 Date: Wed, 09 Aug 2023 08:07:18 GMT Content-Length: 690

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts