| support.viewmydog.com/favicon.ico |  54.149.252.104 | 404 Not Found | 1.9 kB |
URL GET HTTP/1.1support.viewmydog.com/favicon.ico IP54.149.252.104:80
Requested byhttp://support.viewmydog.com/Bin/ScreenConnect.Windows.dll
File typeHTML document, ASCII text, with CRLF line terminators Hashfe13e7946b45b0110de267c1f85bd38c b4d864661a98607f5751dcb81bf87df80ea80822 cb659eae953d8a427ea235c2df88ede9e4258a932594362364e857c8d8078ed9
GET /favicon.ico HTTP/1.1
Host: support.viewmydog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://support.viewmydog.com/Bin/ScreenConnect.Windows.dll
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Length: 1922
Content-Type: text/html; charset=utf-8
Server: ScreenConnect/22.4.20001.8817-3469289027 Microsoft-HTTPAPI/2.0
Date: Thu, 25 Apr 2024 16:25:08 GMT
|
| support.viewmydog.com/Bin/ScreenConnect.Windows.dll | 54.149.252.104 | 200 OK | 806 kB |
URL User Request GET HTTP/1.1support.viewmydog.com/Bin/ScreenConnect.Windows.dll IP54.149.252.104:80
File typePE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections Size806 kB (805732 bytes) Hash8da38b800f449422e47ba3100933da25 a032cb551715c43928d57278ff9d175aa51a6969 7cf97fc27b46db262ac0d97a603f77c1e393c521fa93504c267a566459ff4c44
| NIDS | Severity | Alert |
|---|
| suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP | | suricata | high | ETPRO POLICY ScreenConnect Successful Connection Response Inbound | | suricata | high | ETPRO POLICY ScreenConnect Successful Connection Response Inbound |
GET /Bin/ScreenConnect.Windows.dll HTTP/1.1
Host: support.viewmydog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 805732
Content-Type: text/html
Content-Encoding: gzip
Server: ScreenConnect/22.4.20001.8817-3469289027 Microsoft-HTTPAPI/2.0
Date: Thu, 25 Apr 2024 16:25:06 GMT
|
| support.viewmydog.com/favicon.ico | 54.149.252.104 | 404 Not Found | 1.9 kB |
URL GET HTTP/1.1support.viewmydog.com/favicon.ico IP54.149.252.104:80
Requested byhttp://support.viewmydog.com/Bin/ScreenConnect.Windows.dll
File typeHTML document, ASCII text, with CRLF line terminators Hashfe13e7946b45b0110de267c1f85bd38c b4d864661a98607f5751dcb81bf87df80ea80822 cb659eae953d8a427ea235c2df88ede9e4258a932594362364e857c8d8078ed9
GET /favicon.ico HTTP/1.1
Host: support.viewmydog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://support.viewmydog.com/Bin/ScreenConnect.Windows.dll
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Length: 1922
Content-Type: text/html; charset=utf-8
Server: ScreenConnect/22.4.20001.8817-3469289027 Microsoft-HTTPAPI/2.0
Date: Thu, 25 Apr 2024 16:25:13 GMT
|
| support.viewmydog.com/Bin/ScreenConnect.Windows.dll | 54.149.252.104 | 200 OK | 806 kB |
URL User Request GET HTTP/1.1support.viewmydog.com/Bin/ScreenConnect.Windows.dll IP54.149.252.104:80
File typePE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections Size806 kB (805732 bytes) Hash8da38b800f449422e47ba3100933da25 a032cb551715c43928d57278ff9d175aa51a6969 7cf97fc27b46db262ac0d97a603f77c1e393c521fa93504c267a566459ff4c44
| NIDS | Severity | Alert |
|---|
| suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP | | suricata | high | ETPRO POLICY ScreenConnect Successful Connection Response Inbound | | suricata | high | ETPRO POLICY ScreenConnect Successful Connection Response Inbound |
GET /Bin/ScreenConnect.Windows.dll HTTP/1.1
Host: support.viewmydog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 805732
Content-Type: text/html
Content-Encoding: gzip
Server: ScreenConnect/22.4.20001.8817-3469289027 Microsoft-HTTPAPI/2.0
Date: Thu, 25 Apr 2024 16:25:11 GMT
|