IP 172.64.149.23:0
Hashea65e8bd078fd2ff2408314cc9a46427 abb04028047e5ae5cf6bb4b034cf5a9cb039a91f 64514fbaeab09e4298739c514342c91c553fdeee5a84559925a246bf5e503ac1
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 00:24:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 07 May 2024 23:09:18 GMT
Expires: Tue, 14 May 2024 23:09:17 GMT
Etag: "abb04028047e5ae5cf6bb4b034cf5a9cb039a91f"
Cache-Control: max-age=599663,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 88054f369a12569f-OSL
|
| www.aggsoft.com/download/sprnlogger2.exe? | 104.238.133.207 | 301 Moved Permanently | 268 B |
URL User Request GET HTTP/1.1www.aggsoft.com/download/sprnlogger2.exe? IP104.238.133.207:443
CertificateIssuerGoGetSSL Subject*.aggsoft.com Fingerprint78:30:54:A6:1E:7E:47:49:C8:DC:D1:10:6B:4A:CC:78:3C:61:2B:63 ValidityMon, 02 Oct 2023 00:00:00 GMT - Fri, 01 Nov 2024 23:59:59 GMT
File typeHTML document, ASCII text Hash9fa0bed1a67188bb69af8d01e87e0f80 2f6d0b388983d616d2df061f3a4528b689c763b8 e2e80807840190714f8edceb8e9dc19ecf980471c2f63e659f7e44d951b94cad
GET /download/sprnlogger2.exe? HTTP/1.1
Host: www.aggsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 08 May 2024 00:24:53 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains;
Content-Security-Policy: default-src *; font-src *;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline';
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Location: https://www.aggsoft.com/download/sprnlogger3.exe?
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 268
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
| www.aggsoft.com/download/sprnlogger3.exe? | 104.238.133.207 | 200 OK | 9.0 MB |
URL User Request GET HTTP/1.1www.aggsoft.com/download/sprnlogger3.exe? IP104.238.133.207:443
CertificateIssuerGoGetSSL Subject*.aggsoft.com Fingerprint78:30:54:A6:1E:7E:47:49:C8:DC:D1:10:6B:4A:CC:78:3C:61:2B:63 ValidityMon, 02 Oct 2023 00:00:00 GMT - Fri, 01 Nov 2024 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections Size9.0 MB (9006176 bytes) Hash0254d1896692ba111c6db42b7cb94120 1ed2774678ae08d833e31fed42d7b16f9cc76377 4c7183a7143525fa3a96a1cb1b3f11aff5a51e895e7cbcfd39842d42068bb41a
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /download/sprnlogger3.exe? HTTP/1.1
Host: www.aggsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 00:24:53 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains;
Content-Security-Policy: default-src *; font-src *;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline';
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Length: 9006176
X-XSS-Protection: 1
Access-Control-Allow-Origin: *
Pragma: no-cache
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Expires: Thu, 1 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/octet-stream
Content-Language: en
|