Hosts
No hosts contacted.
TCP
Source |
Source Port |
Destination |
Destination Port |
192.168.56.101 |
49187 |
115.231.33.1 www.download.windowsupdate.com |
80 |
192.168.56.101 |
49179 |
3.215.109.160 trk.slimwareutilities.com |
80 |
192.168.56.101 |
49178 |
34.194.20.225 trk.slimwareutilities.com |
80 |
192.168.56.101 |
49180 |
50.17.172.165 apps-api.slimwareutilities.com |
80 |
192.168.56.101 |
49184 |
52.85.56.131 x.ss2.us |
80 |
192.168.56.101 |
49182 |
54.192.147.121 download.driverupdate.net |
443 |
192.168.56.101 |
49192 |
54.192.147.121 download.driverupdate.net |
443 |
UDP
Source |
Source Port |
Destination |
Destination Port |
192.168.56.101 |
50002 |
114.114.114.114 |
53 |
192.168.56.101 |
50568 |
114.114.114.114 |
53 |
192.168.56.101 |
53237 |
114.114.114.114 |
53 |
192.168.56.101 |
53380 |
114.114.114.114 |
53 |
192.168.56.101 |
56743 |
114.114.114.114 |
53 |
192.168.56.101 |
57756 |
114.114.114.114 |
53 |
192.168.56.101 |
58367 |
114.114.114.114 |
53 |
192.168.56.101 |
58970 |
114.114.114.114 |
53 |
192.168.56.101 |
61680 |
114.114.114.114 |
53 |
192.168.56.101 |
62318 |
114.114.114.114 |
53 |
192.168.56.101 |
62912 |
114.114.114.114 |
53 |
192.168.56.101 |
137 |
192.168.56.255 |
137 |
192.168.56.101 |
138 |
192.168.56.255 |
138 |
192.168.56.101 |
123 |
20.189.79.72 time.windows.com |
123 |
192.168.56.101 |
49235 |
224.0.0.252 |
5355 |
192.168.56.101 |
50534 |
224.0.0.252 |
5355 |
192.168.56.101 |
50849 |
224.0.0.252 |
5355 |
192.168.56.101 |
51963 |
224.0.0.252 |
5355 |
192.168.56.101 |
53657 |
224.0.0.252 |
5355 |
192.168.56.101 |
53661 |
224.0.0.252 |
5355 |
HTTP & HTTPS Requests
URI |
Data |
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab |
GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 3600
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Wed, 03 Mar 2021 06:32:16 GMT
If-None-Match: "0d8f4f3f6fd71:0"
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com
|
http://trk.slimwareutilities.com/ulc.php?ev=InstallerInvoked&upl=YTo4OntzOjk6InVsX3N0dWJpZCI7czozNjoiMDQ4NGUwZjAtMjkyOS00ZTJjLWI0ODMtNDM4ZmYwZmU2M2E2IjtzOjEwOiJ1bF9jb2JyYW5kIjtzOjM6IlNXMiI7czo3OiJwcm9kdWN0IjtzOjM6IlNXMiI7czoxMToiYnJvd3NlclR5cGUiO3M6NDoiRWRnZSI7czoxNDoiYnJvd3NlclZlcnNpb24iO3M6NjoiMTIuMjQ2IjtzOjE1OiJicm93c2VyTGFuZ3VhZ2UiO3M6MDoiIjtzOjEwOiJwbGF0Zm9ybU9TIjtzOjc6IldpbmRvd3MiO3M6MTc6InBsYXRmb3JtT1NWZXJzaW9uIjtzOjQ6IjEwLjAiO30%3D&machineId=DF14EA0D-0BBC-4B4B-89AE-C6D0B657DBD0&platformOS=Windows&platformOSVersion=6.1&installer=LI0&installerVersion=2.24.6.37&product=SW2&msBclVersion=4.0.0 |
GET /ulc.php?ev=InstallerInvoked&upl=YTo4OntzOjk6InVsX3N0dWJpZCI7czozNjoiMDQ4NGUwZjAtMjkyOS00ZTJjLWI0ODMtNDM4ZmYwZmU2M2E2IjtzOjEwOiJ1bF9jb2JyYW5kIjtzOjM6IlNXMiI7czo3OiJwcm9kdWN0IjtzOjM6IlNXMiI7czoxMToiYnJvd3NlclR5cGUiO3M6NDoiRWRnZSI7czoxNDoiYnJvd3NlclZlcnNpb24iO3M6NjoiMTIuMjQ2IjtzOjE1OiJicm93c2VyTGFuZ3VhZ2UiO3M6MDoiIjtzOjEwOiJwbGF0Zm9ybU9TIjtzOjc6IldpbmRvd3MiO3M6MTc6InBsYXRmb3JtT1NWZXJzaW9uIjtzOjQ6IjEwLjAiO30%3D&machineId=DF14EA0D-0BBC-4B4B-89AE-C6D0B657DBD0&platformOS=Windows&platformOSVersion=6.1&installer=LI0&installerVersion=2.24.6.37&product=SW2&msBclVersion=4.0.0 HTTP/1.1
Connection: Keep-Alive
User-Agent: DriverUpdate Installer/2.24.6.37 (os:windows; ver:6.1; arc:AMD64)
Host: trk.slimwareutilities.com
|
http://x.ss2.us/x.cer |
GET /x.cer HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: x.ss2.us
|
http://trk.slimwareutilities.com/ulc.php?ev=InstallerAccepted&upl=YTo4OntzOjk6InVsX3N0dWJpZCI7czozNjoiMDQ4NGUwZjAtMjkyOS00ZTJjLWI0ODMtNDM4ZmYwZmU2M2E2IjtzOjEwOiJ1bF9jb2JyYW5kIjtzOjM6IlNXMiI7czo3OiJwcm9kdWN0IjtzOjM6IlNXMiI7czoxMToiYnJvd3NlclR5cGUiO3M6NDoiRWRnZSI7czoxNDoiYnJvd3NlclZlcnNpb24iO3M6NjoiMTIuMjQ2IjtzOjE1OiJicm93c2VyTGFuZ3VhZ2UiO3M6MDoiIjtzOjEwOiJwbGF0Zm9ybU9TIjtzOjc6IldpbmRvd3MiO3M6MTc6InBsYXRmb3JtT1NWZXJzaW9uIjtzOjQ6IjEwLjAiO30%3D&machineId=DF14EA0D-0BBC-4B4B-89AE-C6D0B657DBD0&platformOS=Windows&platformOSVersion=6.1&installer=LI0&installerVersion=2.24.6.37&product=SW2 |
GET /ulc.php?ev=InstallerAccepted&upl=YTo4OntzOjk6InVsX3N0dWJpZCI7czozNjoiMDQ4NGUwZjAtMjkyOS00ZTJjLWI0ODMtNDM4ZmYwZmU2M2E2IjtzOjEwOiJ1bF9jb2JyYW5kIjtzOjM6IlNXMiI7czo3OiJwcm9kdWN0IjtzOjM6IlNXMiI7czoxMToiYnJvd3NlclR5cGUiO3M6NDoiRWRnZSI7czoxNDoiYnJvd3NlclZlcnNpb24iO3M6NjoiMTIuMjQ2IjtzOjE1OiJicm93c2VyTGFuZ3VhZ2UiO3M6MDoiIjtzOjEwOiJwbGF0Zm9ybU9TIjtzOjc6IldpbmRvd3MiO3M6MTc6InBsYXRmb3JtT1NWZXJzaW9uIjtzOjQ6IjEwLjAiO30%3D&machineId=DF14EA0D-0BBC-4B4B-89AE-C6D0B657DBD0&platformOS=Windows&platformOSVersion=6.1&installer=LI0&installerVersion=2.24.6.37&product=SW2 HTTP/1.1
Connection: Keep-Alive
User-Agent: DriverUpdate Installer/2.24.6.37 (os:windows; ver:6.1; arc:AMD64)
Host: trk.slimwareutilities.com
|
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab |
GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 900
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Mon, 19 Apr 2021 20:17:25 GMT
If-None-Match: "80f8835935d71:0"
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com
|
http://apps-api.slimwareutilities.com/install/du/6.1/x64/DriverUpdate-setup.msi.bz2?machineId=DF14EA0D-0BBC-4B4B-89AE-C6D0B657DBD0 |
GET /install/du/6.1/x64/DriverUpdate-setup.msi.bz2?machineId=DF14EA0D-0BBC-4B4B-89AE-C6D0B657DBD0 HTTP/1.1
Connection: Keep-Alive
User-Agent: DriverUpdate Installer/2.24.6.37 (os:windows; ver:6.1; arc:AMD64)
Host: apps-api.slimwareutilities.com
Cookie: AWSALBCORS=wzja4AzLWEYt3RAv2MulDCXgn13+PLEu4bgWKDZtmssESO7BEgHRFEclVGKgLhKp9cYgpE+JtVG/L8TCeuVMeiSFLOk8Ro1+fsNhTK7PwrJ9vuI8ukhI1yB/Q8/8; AWSALB=wzja4AzLWEYt3RAv2MulDCXgn13+PLEu4bgWKDZtmssESO7BEgHRFEclVGKgLhKp9cYgpE+JtVG/L8TCeuVMeiSFLOk8Ro1+fsNhTK7PwrJ9vuI8ukhI1yB/Q8/8
|
http://apps-api.slimwareutilities.com/install/du/6.1/x64/DriverUpdate-setup.msi.bz2?machineId=DF14EA0D-0BBC-4B4B-89AE-C6D0B657DBD0 |
GET /install/du/6.1/x64/DriverUpdate-setup.msi.bz2?machineId=DF14EA0D-0BBC-4B4B-89AE-C6D0B657DBD0 HTTP/1.1
Connection: Keep-Alive
User-Agent: DriverUpdate Installer/2.24.6.37 (os:windows; ver:6.1; arc:AMD64)
Host: apps-api.slimwareutilities.com
|
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts