GET /default/US/DOC/Invoice-07-09-18/ HTTP/1.1 

                                        
                                            
Host: srgcapital.com 

                                        
                                    

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-us,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip,deflate 

                                        
                                            
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 

                                        
                                            
Keep-Alive: 115 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                    

                                         
                                         160.153.137.16

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/msword 

                                        
                                    

                                        

                                        
                                            
Expires: Tue, 01 Jan 1970 00:00:00 GMT 

                                        
                                            
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Content-Disposition: attachment; filename="INVOICE-0990662/6.doc" 

                                        
                                            
Content-Transfer-Encoding: binary 

                                        
                                            
Last-Modified: Wed, 11 Jul 2018 11:10:45 GMT 

                                        
                                            
X-Port: port_10916 

                                        
                                            
X-Cacheable: YES:Forced 

                                        
                                            
Content-Length: 249344 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Date: Wed, 11 Jul 2018 16:58:41 GMT 

                                        
                                            
Age: 20876 

                                        
                                            
Vary: User-Agent 

                                        
                                            
X-Cache: cached 

                                        
                                            
X-Cache-Hit: HIT 

                                        
                                            
X-Backend: all_requests 

                                        
                                            
 

                                        
                                        

                                            

                                            --- Additional Info ---

                                            
                                                Magic:  CDF V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Author: Utaec-PC, Template: Normal.dotm, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Tue Jul 10 07:54:00 2018, Last Saved Time/Date: Tue Jul 10 07:54:00 2018, Number of Pages: 1, Number of Words: 0, Number of Characters: 1, Security: 0, Title: 89183Ut57577, Subject: 26395Ut86701

                                                Size:   249344

                                                Md5:    5838aa4eb0ae8ba7467877584f968e76

                                                Sha1:   0e34a812ec88bfff8f582b8522aabdb0f3a90d82

                                                Sha256: 8c9394ff3f6aae30b9ce30847cd13f999c9319d37471093b8f74034e6cdfb3d8

                                            

                                            
                                                
Alerts:

                                                

                                                
                                                
                                                
                                                      IDS:

                                                    
                                                            - ET WEB_CLIENT SUSPICIOUS Possible Office Doc with Embedded VBA Project (Wide)