| www.telatomic.com/s/cws_2022.exe |  198.49.23.144 | 302 Found | 0 B |
URL User Request GET HTTP/2www.telatomic.com/s/cws_2022.exe IP198.49.23.144:443
CertificateIssuerLet's Encrypt Subjectwww.telatomic.com Fingerprint02:A7:CD:6F:3D:E1:BC:97:88:CB:CA:CC:73:8A:38:2F:43:38:97:0B ValidityFri, 01 Mar 2024 03:52:55 GMT - Thu, 30 May 2024 03:52:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/cws_2022.exe HTTP/1.1
Host: www.telatomic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
age: 0
content-type: application/octet-stream
date: Thu, 25 Apr 2024 10:37:21 GMT
etag: W/"6842d3e9664434d20be28135c9dbb865"
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://static1.squarespace.com/static/582c914c414fb5b0fbbf17f2/t/65e5eb7912d52955adce592b/1709566841500/cws_2022.exe
server: Squarespace
set-cookie: crumb=BRN8rVskGAIeN2JiNDI3ZGIxODliODg2YTQzYjIyMmQ3YmNlZjEx;Secure;Path=/
strict-transport-security: max-age=0
x-content-type-options: nosniff
x-contextid: bR3tteAD/cSSE7JCa
content-length: 0
X-Firefox-Spdy: h2
|
| static1.squarespace.com/static/582c914c414fb5b0fbbf17f2/t/65e5eb7912d52955adce592b/1709566841500/cws_2022.exe | 151.101.128.238 | 200 OK | 803 kB |
URL User Request GET HTTP/2static1.squarespace.com/static/582c914c414fb5b0fbbf17f2/t/65e5eb7912d52955adce592b/1709566841500/cws_2022.exe IP151.101.128.238:443
CertificateIssuerDigiCert Inc Subject*.squarespace.com FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23 ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections Size803 kB (802816 bytes) Hashc8126cde75df0015144faca48841ab83 ae9630b6e5599868c3877252aad1ae6a9898b5ef d4768dbe387ea5dac5d6f662af7c2a8af94b39ae74512809ce16e33f3d2ac522
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /static/582c914c414fb5b0fbbf17f2/t/65e5eb7912d52955adce592b/1709566841500/cws_2022.exe HTTP/1.1
Host: static1.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: notice_gdpr_prefs=0:
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=94608000
content-disposition: attachment; filename="cws_2022.exe"; filename*=UTF-8''cws_2022.exe
content-type: application/x-msdownload
pragma: cache
server: Squarespace
timing-allow-origin: *
x-content-type-options: nosniff
x-contextid: OZDWrktR/M169wrDh
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 8
date: Thu, 25 Apr 2024 10:37:30 GMT
x-served-by: cache-dfw-kdfw8210113-DFW, cache-hel1410030-HEL
x-cache: HIT, MISS
x-cache-hits: 2, 0
x-timer: S1714041450.818415,VS0,VE691
vary: Accept-Encoding
tracepoint: Fastly
content-length: 802816
X-Firefox-Spdy: h2
|