| www.nengshenji.com/web/ggtupdate7.62.exe?random= | 0.0.0.0 | | 0 B |
URL User Request GET www.nengshenji.com/web/ggtupdate7.62.exe?random= IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP |
GET /web/ggtupdate7.62.exe?random= HTTP/1.1
Host: www.nengshenji.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 11589397
Content-Type: application/octet-stream
Last-Modified: Mon, 22 May 2023 03:36:31 GMT
Accept-Ranges: bytes
ETag: "8093f995e8cd91:bf5e"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 05 Jun 2023 23:07:03 GMT
|
| www.nengshenji.com/web/ggtupdate7.62.exe?random= | 0.0.0.0 | | 0 B |
URL User Request GET www.nengshenji.com/web/ggtupdate7.62.exe?random= IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP |
GET /web/ggtupdate7.62.exe?random= HTTP/1.1
Host: www.nengshenji.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|