IP 66.39.83.117:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (11216), with no line terminators
Hash 7a21cd0b96b64e8ae717c60e36ccc29b
6657d1ceb93b274fa8e47f995f75e5ed40d67ae4
9ac335412cc3b40d23fd7e71f968f2f79d5f10d316105b24d2833ce228f0cca5
GET / HTTP/1.1
Host: www.audiochannel.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 07:15:03 GMT
Server: Apache
Last-Modified: Mon, 30 Apr 2018 16:31:40 GMT
ETag: "2bd0-56b13636a1300"
Accept-Ranges: bytes
Content-Length: 11216
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
GET www.audiochannel.net/components/toolbars/NCH_Chrome.exe
66.39.83.117200 OK 44 kB URL User Request GET HTTP/1.1 www.audiochannel.net/components/toolbars/NCH_Chrome.exe
IP 66.39.83.117:80
File type PE32 executable (console) Intel 80386, for MS Windows\012- data
Hash 1fa71e5dd8875b1e9107e901191e6b46
61afdccfcd733380ca2efbcaa041d48dae9374d9
a38d7a8e1da71873bd038e72d6ec88aef28c6ce79a9965ae71dbf4a9b73cf2a3
NIDS Severity Alert suricata low ET INFO Packed Executable Download
suricata high ET POLICY PE EXE or DLL Windows file download HTTP
suricata low ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging)
GET /components/toolbars/NCH_Chrome.exe HTTP/1.1
Host: www.audiochannel.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 07:15:03 GMT
Server: Apache
Last-Modified: Fri, 02 Oct 2015 00:19:19 GMT
ETag: "ace8-521141d592fc0"
Accept-Ranges: bytes
Content-Length: 44264
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-msdownload