ET INFO Executable Download from dotted-quad Host
ET MALWARE Generic .bin download from Dotted Quad
ET INFO DYNAMIC_DNS Query to a *.gotdns .ch Domain
ET JA3 Hash - Remcos 3.x TLS Connection
ET POLICY PE EXE or DLL Windows file download HTTP
ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download
ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response