| support.viewmydog.com/Bin/ScreenConnect.WindowsClient.exe |  54.149.252.104 | 200 OK | 244 kB |
URL User Request GET HTTP/1.1support.viewmydog.com/Bin/ScreenConnect.WindowsClient.exe IP54.149.252.104:80
File typePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections Size244 kB (244281 bytes) Hash4dfedffd8c05d1f0d75a63cd12cbd607 9535e180cd69099977b247888589bad32d507791 b656f907e18f5a7115c90c909ad91b7ec85a2f29b1d430a73943b109c95ed9ed
| NIDS | Severity | Alert |
|---|
| suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP | | suricata | high | ETPRO POLICY ScreenConnect Successful Connection Response Inbound | | suricata | high | ETPRO POLICY ScreenConnect Successful Connection Response Inbound |
GET /Bin/ScreenConnect.WindowsClient.exe HTTP/1.1
Host: support.viewmydog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 244281
Content-Type: text/html
Content-Encoding: gzip
Server: ScreenConnect/22.4.20001.8817-3469289027 Microsoft-HTTPAPI/2.0
Date: Thu, 25 Apr 2024 16:24:22 GMT
|
| support.viewmydog.com/favicon.ico | 54.149.252.104 | 404 Not Found | 1.9 kB |
URL GET HTTP/1.1support.viewmydog.com/favicon.ico IP54.149.252.104:80
Requested byhttp://support.viewmydog.com/Bin/ScreenConnect.WindowsClient.exe
File typeHTML document, ASCII text, with CRLF line terminators Hashfe13e7946b45b0110de267c1f85bd38c b4d864661a98607f5751dcb81bf87df80ea80822 cb659eae953d8a427ea235c2df88ede9e4258a932594362364e857c8d8078ed9
GET /favicon.ico HTTP/1.1
Host: support.viewmydog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://support.viewmydog.com/Bin/ScreenConnect.WindowsClient.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Length: 1922
Content-Type: text/html; charset=utf-8
Server: ScreenConnect/22.4.20001.8817-3469289027 Microsoft-HTTPAPI/2.0
Date: Thu, 25 Apr 2024 16:24:24 GMT
|
| support.viewmydog.com/Bin/ScreenConnect.WindowsClient.exe | 54.149.252.104 | 200 OK | 244 kB |
URL User Request GET HTTP/1.1support.viewmydog.com/Bin/ScreenConnect.WindowsClient.exe IP54.149.252.104:80
File typePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections Size244 kB (244281 bytes) Hash4dfedffd8c05d1f0d75a63cd12cbd607 9535e180cd69099977b247888589bad32d507791 b656f907e18f5a7115c90c909ad91b7ec85a2f29b1d430a73943b109c95ed9ed
| NIDS | Severity | Alert |
|---|
| suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP | | suricata | high | ETPRO POLICY ScreenConnect Successful Connection Response Inbound | | suricata | high | ETPRO POLICY ScreenConnect Successful Connection Response Inbound |
GET /Bin/ScreenConnect.WindowsClient.exe HTTP/1.1
Host: support.viewmydog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 244281
Content-Type: text/html
Content-Encoding: gzip
Server: ScreenConnect/22.4.20001.8817-3469289027 Microsoft-HTTPAPI/2.0
Date: Thu, 25 Apr 2024 16:24:25 GMT
|
| support.viewmydog.com/favicon.ico | 54.149.252.104 | 404 Not Found | 1.9 kB |
URL GET HTTP/1.1support.viewmydog.com/favicon.ico IP54.149.252.104:80
Requested byhttp://support.viewmydog.com/Bin/ScreenConnect.WindowsClient.exe
File typeHTML document, ASCII text, with CRLF line terminators Hashfe13e7946b45b0110de267c1f85bd38c b4d864661a98607f5751dcb81bf87df80ea80822 cb659eae953d8a427ea235c2df88ede9e4258a932594362364e857c8d8078ed9
GET /favicon.ico HTTP/1.1
Host: support.viewmydog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://support.viewmydog.com/Bin/ScreenConnect.WindowsClient.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Length: 1922
Content-Type: text/html; charset=utf-8
Server: ScreenConnect/22.4.20001.8817-3469289027 Microsoft-HTTPAPI/2.0
Date: Thu, 25 Apr 2024 16:24:27 GMT
|