![[ICO]](/icons/blank.gif){kind=icon}
![[PARENTDIR]](/icons/back.gif){kind=icon}
![[ ]](/icons/unknown.gif){kind=icon}
![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/folder.gif){kind=icon}
![[ ]](/icons/compressed.gif){kind=icon}
| Name | Last modified | Size | Description |
|---|---|---|---|---|
| Parent Directory | - | ||
| 2015-04-23_capture-win9.biargus | 2017-04-25 09:43 | 318K | |
| 2015-04-23_capture-win9.binetflow | 2017-04-25 09:43 | 39K | |
| 2015-04-23_capture-win9.capinfos | 2017-04-25 09:43 | 1.1K | |
| 2015-04-23_capture-win9.dnstop | 2017-04-25 09:43 | 14K | |
| 2015-04-23_capture-win9.html | 2015-04-23 13:35 | 528K | |
| 2015-04-23_capture-win9.json | 2015-04-23 13:35 | 161K | |
| 2015-04-23_capture-win9.passivedns | 2017-04-25 09:43 | 23K | |
| 2015-04-23_capture-win9.pcap | 2017-04-25 09:43 | 5.9M | |
| 2015-04-23_capture-win9.rrd | 2015-04-23 13:32 | 8.0M | |
| 2015-04-23_capture-win9.tcpdstat | 2017-04-25 09:43 | 1.7K | |
| 2015-04-23_capture-win9.weblogng | 2016-06-15 17:44 | 21K | |
| README.html | 2017-04-25 09:43 | 348 | |
| README.md | 2015-04-23 13:34 | 222 | |
| bro/ | 2017-04-25 09:43 | - | |
| e515267ba19417974a63b51e4f7dd9e9.exe.zip | 2015-12-16 10:26 | 39K | |
| fast-flux-dga-first-analysis.txt | 2017-04-25 09:43 | 44K | |
Started win9 already infected
Approximately at this hour the VM was powered off alone. Weird.