| download.trafficland.com/ |  54.231.196.189 | | 107 B |
URL download.trafficland.com/ IP54.231.196.189:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash9d2a751959d3379e658a785c065ac6b8 17c2d5e472c321b524a3f63052aa6822bd4f8440 b4ce3f27ed2279663959e0ed5388d44fe6d5978862a27da0ad90a6c26589243e
GET / HTTP/1.1
Host: download.trafficland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: daJTMsQhoiwMjCfT8G2cTeyICM2xiqpRuyJzuAOee7i4+abqLd1DZrF2Oxta8xYymL0Ebz0yChM=
x-amz-request-id: 5X7BH3WXDHF6A6DG
Date: Sat, 02 Dec 2023 13:25:56 GMT
Last-Modified: Thu, 19 Nov 2015 16:55:42 GMT
ETag: "9d2a751959d3379e658a785c065ac6b8"
Content-Type: text/html
Server: AmazonS3
Content-Length: 107
|
| GET download.trafficland.com/vmc/admin/install/Application%20Files/Vmc_4_01_05_00/Modules.SearchCameras.dll.deploy | 54.231.196.13 | 200 OK | 55 kB |
URL User Request GET HTTP/1.1download.trafficland.com/vmc/admin/install/Application%20Files/Vmc_4_01_05_00/Modules.SearchCameras.dll.deploy IP54.231.196.13:80
File typePE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows\012- data Hash72acc5a21e0fd497d64665438279cf4e a5123a2dee32b51b329121b9fed2678d91327d8b 0bab37cd0f5d056786b30dda1b33d1c957d3a27587fcb78313e2e1785b2affc2
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET POLICY Executable served from Amazon S3 | | suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP |
GET /vmc/admin/install/Application%20Files/Vmc_4_01_05_00/Modules.SearchCameras.dll.deploy HTTP/1.1
Host: download.trafficland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: JQ+2tRJlD2J0tBj7Qx42Sk5NLLNHegppdHKvkOv2m6IdeBolHdr8MD3pgULC+SqtiqW5K6Bt07E=
x-amz-request-id: GPA8AXN684V3943M
Date: Sat, 02 Dec 2023 13:25:57 GMT
Cache-Control: public, max-age=864000
x-amz-meta-hashtag: 72acc5a21e0fd497d64665438279cf4e
Last-Modified: Sat, 02 Dec 2023 04:45:25 GMT
ETag: "72acc5a21e0fd497d64665438279cf4e"
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 55296
|