| www.artplus.hr/dl/Homage_to_Cosmos_2014.exe | 160.153.131.219 | 301 Moved Permanently | 268 B |
URL User Request GET HTTP/2www.artplus.hr/dl/Homage_to_Cosmos_2014.exe IP160.153.131.219:443 ASN#21501 Host Europe GmbH
CertificateIssuerLet's Encrypt Subjectartplus.hr Fingerprint58:85:BF:65:64:06:34:32:6E:67:38:D6:B1:E2:B1:F6:BD:0F:0D:C7 ValidityWed, 06 Mar 2024 08:59:32 GMT - Tue, 04 Jun 2024 08:59:31 GMT
File typeHTML document, ASCII text Hash341fc885c8cd8494075e7357ecad2eef cec4c776978261e92ca9ae690aeda441c036a989 a9085dbc3dea2643bdf929468362314e6ecee740d925c99999c5abf17d169a97
GET /dl/Homage_to_Cosmos_2014.exe HTTP/1.1
Host: www.artplus.hr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://www.artplussoftware.com/dl/Homage_to_Cosmos_2014.exe
content-length: 268
content-type: text/html; charset=iso-8859-1
date: Tue, 07 May 2024 13:20:08 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.artplussoftware.com/dl/Homage_to_Cosmos_2014.exe | 160.153.131.219 | 302 Found | 232 B |
URL User Request GET HTTP/2www.artplussoftware.com/dl/Homage_to_Cosmos_2014.exe IP160.153.131.219:443 ASN#21501 Host Europe GmbH
CertificateIssuerLet's Encrypt Subjectartplussoftware.com FingerprintDE:29:F3:DD:63:35:52:1B:B8:AB:A2:F0:3D:85:7A:C1:5D:85:6A:08 ValidityWed, 06 Mar 2024 08:58:47 GMT - Tue, 04 Jun 2024 08:58:46 GMT
File typeHTML document, ASCII text Hash635c4da1895f961ff4578df05441b0c7 43804efb3dfa661f031a64ed8ee18098b73b4d16 e13df758685c4da3f6a2066b3c8a086b505d0472d7f428e2b4d71296db54d9e3
GET /dl/Homage_to_Cosmos_2014.exe HTTP/1.1
Host: www.artplussoftware.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://artplussoftware.com/cgi/dl.cgi?dl=COSMOS
content-length: 232
content-type: text/html; charset=iso-8859-1
date: Tue, 07 May 2024 13:20:09 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| artplussoftware.com/cgi/dl.cgi?dl=COSMOS | 160.153.131.219 | 301 Moved Permanently | 260 B |
URL User Request GET HTTP/2artplussoftware.com/cgi/dl.cgi?dl=COSMOS IP160.153.131.219:443 ASN#21501 Host Europe GmbH
CertificateIssuerLet's Encrypt Subjectartplussoftware.com FingerprintDE:29:F3:DD:63:35:52:1B:B8:AB:A2:F0:3D:85:7A:C1:5D:85:6A:08 ValidityWed, 06 Mar 2024 08:58:47 GMT - Tue, 04 Jun 2024 08:58:46 GMT
File typeHTML document, ASCII text Hasha5b6d780a159235225fd6d31bf946d1c 593a97a52cfb3bf82d87337b19be67b3a6850215 138cc4e74b3ab40fa141100be570aeb4a92b41740e51282aaf8bf9f0353ed8bd
GET /cgi/dl.cgi?dl=COSMOS HTTP/1.1
Host: artplussoftware.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
location: https://www.artplussoftware.com/cgi/dl.cgi?dl=COSMOS
content-length: 260
content-type: text/html; charset=iso-8859-1
date: Tue, 07 May 2024 13:20:09 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.artplussoftware.com/cgi/dl.cgi?dl=COSMOS | 160.153.131.219 | 302 Found | 236 B |
URL User Request GET HTTP/2www.artplussoftware.com/cgi/dl.cgi?dl=COSMOS IP160.153.131.219:443 ASN#21501 Host Europe GmbH
CertificateIssuerLet's Encrypt Subjectartplussoftware.com FingerprintDE:29:F3:DD:63:35:52:1B:B8:AB:A2:F0:3D:85:7A:C1:5D:85:6A:08 ValidityWed, 06 Mar 2024 08:58:47 GMT - Tue, 04 Jun 2024 08:58:46 GMT
File typeHTML document, ASCII text Hashca013985daf915c40e18879c38e2e438 8a9e4149c47d7606968c93329d5b90f893e5b5f5 05a57ed183431bad6f9c5ed68e925925e8d9f6bb13eacc1f04cc5a22c0d85ec9
GET /cgi/dl.cgi?dl=COSMOS HTTP/1.1
Host: www.artplussoftware.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
location: https://www.epixeditions.com/dl/Homage_to_Cosmos.exe
content-length: 236
content-type: text/html; charset=iso-8859-1
date: Tue, 07 May 2024 13:20:09 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.epixeditions.com/dl/Homage_to_Cosmos.exe | 160.153.131.219 | 200 OK | 14 MB |
URL User Request GET HTTP/2www.epixeditions.com/dl/Homage_to_Cosmos.exe IP160.153.131.219:443 ASN#21501 Host Europe GmbH
CertificateIssuerLet's Encrypt Subjectepixeditions.com FingerprintE0:9C:BE:C3:5B:A2:C7:64:B9:45:7D:2C:6F:86:00:8B:2E:CB:07:A3 ValidityWed, 06 Mar 2024 09:01:50 GMT - Tue, 04 Jun 2024 09:01:49 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections Size14 MB (13766790 bytes) Hashb143469084434057fc71cc63558aae0a 0dae54683d00d176d7a3524f564ea16e3b87fcc0 f225f1532bae30428521e8913c36c20a699f8e0ef0d855e158f414b19a054c24
Analyzer | Verdict | Alert | VirusTotal | suspicious | |
GET /dl/Homage_to_Cosmos.exe HTTP/1.1
Host: www.epixeditions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 12 May 2020 19:25:19 GMT
etag: "970383d-db6b50-5a5786c93c544-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-type: application/octet-stream
date: Tue, 07 May 2024 13:20:09 GMT
server: Apache
X-Firefox-Spdy: h2
|
|