{"Endpoints":{"http:8088":{"Firsttime":1765436840.2326937,"lasttime":1772307972.0562854,"paths":["/IE9CompatViewList.xml","/__utm.gif","/dot.gif","/activity","/ca","/visit.js","/load","/ga.js","/updates.rss","/fwlink"],"port":"8088","protocol":"http","seen_in":[{"arch":"x64","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"d97ad37168f6d7667c25a6412374554b28180c841aab01a7a1c9c7b3064b817e","trial":false,"ts":1765436845.9019916,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"d59f9a30f4ece1fd225b94e78b24f2ef17a6f7c181282fe1fd3262f06b76a6e2","trial":false,"ts":1767078636.213707,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"9153a35f2ecdcb8fc4fbb21aa3286bf3821c388dc84113bb3e71343ded449e5c","trial":false,"ts":1765436840.2326937,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"825f6f7acb705bac1e7d8ac4ab215c05d9471a63318f46e18c0b9d3cbe80465c","trial":false,"ts":1767078634.1428912,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"0a8ab977f1563ab940eac05e8f963aa6356755844d76d94944f0427141cc60a9","trial":false,"ts":1768259755.572344,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"e2fc50e6cf1d13680cbecd7cea7a1e6ff76ac52895b0f956627c8815c817cd9c","trial":false,"ts":1768259757.4827275,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"0ee22c1112c9355f16ed3e023cd42e024c1c91319f47c48ae07659800bf406d7","trial":false,"ts":1768748869.9692867,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"f6d611b8b1e538d620bb37485351a9743fa518c6998fe384966bdc141c6961fa","trial":false,"ts":1768748872.1530015,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"7eccec1604550bdfc2c97881ab2e978d02bce302a78ddd0b8d821e5756d69dc0","trial":false,"ts":1769094344.1990645,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"063379331ad1b68148734fb6d58c2a16664c1c22c8f503e39eeef5ac76017627","trial":false,"ts":1769094346.9269516,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"466ce5b4e35a3518cadc3dc1b13f5dd662fe135006ab2c0af19330befb4b28ac","trial":false,"ts":1770674480.2567117,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"a65becb837053058eb986f13e0a7594e0d99d5f06968d29060088296975b572a","trial":false,"ts":1770674483.3864582,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"f498668ce8f89c20d03128ecca1940e092fd4e148f32d03b84f985da2c427c44","trial":false,"ts":1772307969.6995075,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"118.89.73.78","beacon_port":"8088","config_hash":"f7916782a5e650a74ab88bd6549fbb42b7339f4b5152deb385917f383fd98ea5","trial":false,"ts":1772307972.0562854,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666}],"submituris":["/submit.php"],"urls":["http://fx.doubao.com:8088/IE9CompatViewList.xml/submit.php","http://fx.doubao.com:8088/submit.php","http://fx.doubao.com:8088/__utm.gif/submit.php","http://fx.doubao.com:8088/dot.gif/submit.php","http://fx.doubao.com:8088/activity/submit.php","http://fx.doubao.com:8088/ca/submit.php","http://fx.doubao.com:8088/visit.js/submit.php","http://fx.doubao.com:8088/load/submit.php","http://fx.doubao.com:8088/ga.js/submit.php","http://fx.doubao.com:8088/updates.rss/submit.php","http://fx.doubao.com:8088/fwlink/submit.php"]}},"Firsttime":1765436840.2326937,"Host":"fx.doubao.com","IP":null,"IPs":[],"Paths":["/IE9CompatViewList.xml","/__utm.gif","/dot.gif","/activity","/ca","/visit.js","/load","/ga.js","/updates.rss","/fwlink"],"Ports":["8088"],"Protocols":["http"],"SubmitURIs":["/submit.php"],"URLs":["http://fx.doubao.com:8088/IE9CompatViewList.xml/submit.php","http://fx.doubao.com:8088/submit.php","http://fx.doubao.com:8088/__utm.gif/submit.php","http://fx.doubao.com:8088/dot.gif/submit.php","http://fx.doubao.com:8088/activity/submit.php","http://fx.doubao.com:8088/ca/submit.php","http://fx.doubao.com:8088/visit.js/submit.php","http://fx.doubao.com:8088/load/submit.php","http://fx.doubao.com:8088/ga.js/submit.php","http://fx.doubao.com:8088/updates.rss/submit.php","http://fx.doubao.com:8088/fwlink/submit.php"],"lasttime":1772307972.0562854}