# Windows Analysis Report http://www.cpskb0.com/darterp.php?z=hemorrhoid

## Overview

### General Information

 Sample URL: http://www.cpskb0.com/darterp.php?z=hemorrhoid Analysis ID: 715086 Infos:

### Detection

 Score: 0 Range: 0 - 100 Whitelisted: false Confidence: 60%

### Signatures

No high impact signatures.

### Classification

There are no high impact signatures.

 Source: global traffic HTTP traffic detected: GET /darterp.php?z=hemorrhoid HTTP/1.1Host: www.cpskb0.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9 Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.cpskb0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://www.cpskb0.com/darterp.php?z=hemorrhoidAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
 Source: unknown DNS traffic detected: queries for: accounts.google.com
 Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingDate: Mon, 03 Oct 2022 14:07:57 GMTLast-Modified: Mon, 03 Oct 2022 13:07:57 GMTExpires: Mon, 03 Oct 2022 13:37:57 GMTCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0Cache-Control: max-age=0Pragma: no-cacheContent-Encoding: gzipData Raw: 61 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8e cb 0e 82 30 10 45 7f 65 64 2f 83 86 e5 a4 0b 79 44 12 44 62 ca c2 25 a6 43 20 41 8a b4 68 fc 7b ab dd b8 99 e4 de 7b 72 32 b4 49 cf 89 bc d6 19 1c e5 a9 84 ba 39 94 45 02 c1 16 b1 c8 64 8e 98 ca d4 2f fb 30 42 cc aa 40 50 6f ef a3 bb dc 2a 41 76 b0 23 8b 38 8a a1 d2 16 72 bd 4e 8a d0 97 84 1e b9 69 f5 76 f8 4e fc 11 2e d1 2c 64 cf b0 f0 63 65 63 59 41 73 29 e1 d5 1a 98 9c a8 fb 8a 40 4f 60 fb c1 80 e1 e5 c9 4b 48 38 0b 42 af c3 df 13 1f 46 56 d5 16 bd 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: a7M0Eed/yDDb%C Ah{{r2I9Ed/0B@Po*Av#8rNivN.,dcecYAs)@O`KH8BFV0 Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 03 Oct 2022 14:07:58 GMTContent-Type: text/htmlContent-Length: 548Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: 404 Not Found

nginx
 Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49700 Source: unknown Network traffic detected: HTTP traffic on port 49757 -> 443 Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49688 Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49776 Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49686 Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763 Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 443 Source: unknown Network traffic detected: HTTP traffic on port 49686 -> 443 Source: unknown Network traffic detected: HTTP traffic on port 49700 -> 443 Source: unknown Network traffic detected: HTTP traffic on port 49688 -> 443 Source: unknown Network traffic detected: HTTP traffic on port 49805 -> 443 Source: unknown Network traffic detected: HTTP traffic on port 49776 -> 443 Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49805 Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49757
 Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1 Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1 Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1 Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1 Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.132 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.132 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.132 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.132 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.132 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.132 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.132 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.132 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35 Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.35
 Source: classification engine Classification label: clean0.win@25/0@5/111