Report - www.legrand.cl/sites/g/files/ocwmcr826/files/files/collection_detail

Report Overview

Visited public
2023-12-15 03:22:23
Tags
URL
www.legrand.cl/sites/g/files/ocwmcr826/files/files/collection_detail_2/Plug-in-Dialux.zip
Finishing URL
about:privatebrowsing
IP / ASN
34.251.194.21
#16509 AMAZON-02
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
status.thawte.com	5123	1996-02-10	2017-11-27 13:33:51	2023-12-14 18:13:38	341 B	642 B	192.229.221.95
www.legrand.cl	unknown	1997-08-01	2013-05-10 08:31:26	2023-12-15 04:21:56	555 B	2.5 MB	34.251.194.21

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.legrand.cl/sites/g/files/ocwmcr826/files/files/collection_detail_2/Plug-in-Dialux.zip
IP
34.251.194.21
ASN
#16509 AMAZON-02

File type
Zip archive data, at least v1.0 to extract, compression method=store - data
Size
2.5 MB (2529730 bytes)
Hash
48966d1fcd18b7df9ed703d0ca833cf8
6c5357431ed9d4493e0888ab5b87a983ccc6fb83
7d3e7440771a8ed1a8fb37704d4e47d78bcc6d925be8a92f90f2aeb77ce2a994

Archive (2)

Filename

Md5

File type

Manual de Instalacion Plug In.pdf

669fbd0754e8da92f3814cb557b9cdb6

PDF document, version 1.5, 7 pages

PlugIn Dialux LEGRAND_CHILE_ES_1.2.zip

592a6c93114b26f0b755d63accec166f

Zip archive data, at least v2.0 to extract, compression method=deflate

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/63

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

status.thawte.com/

192.229.221.95

471 B

URL
status.thawte.com/
IP
192.229.221.95:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
c36ad10af00a0a02e1bdca80b9d8cd88
dbccee41f51506e1d69aa8616f79ed3a0d5f29dc
f14ec4eb2cd82c1f8157f0e1b33387a666279df458bba291901d6481ccce7693

HTTP Headers

POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Fri, 15 Dec 2023 03:21:57 GMT
Server: ECAcc (amb/6AD5)
Content-Length: 471

www.legrand.cl/sites/g/files/ocwmcr826/files/files/collection_detail_2/Plug-in-Dialux.zip

34.251.194.21

200 OK

2.5 MB

URL User Request GET HTTP/2
www.legrand.cl/sites/g/files/ocwmcr826/files/files/collection_detail_2/Plug-in-Dialux.zip
IP
34.251.194.21:443
ASN
#16509 AMAZON-02

Certificate
IssuerDigiCert Inc
Subjectlegrand.se
Fingerprint48:FB:67:5A:5C:B3:EA:2C:4D:5E:D5:4B:E9:12:E5:2B:EF:9A:E2:46
ValidityWed, 30 Aug 2023 00:00:00 GMT - Thu, 29 Aug 2024 23:59:59 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store - data
Size
2.5 MB (2529730 bytes)
Hash
48966d1fcd18b7df9ed703d0ca833cf8
6c5357431ed9d4493e0888ab5b87a983ccc6fb83
7d3e7440771a8ed1a8fb37704d4e47d78bcc6d925be8a92f90f2aeb77ce2a994

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/63

HTTP Headers

GET /sites/g/files/ocwmcr826/files/files/collection_detail_2/Plug-in-Dialux.zip HTTP/1.1
Host: www.legrand.cl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 15 Dec 2023 03:21:58 GMT
content-type: application/zip
content-length: 2529730
x-content-type-options: nosniff
last-modified: Fri, 16 Jun 2023 13:28:43 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 14 Jan 2024 03:21:57 GMT
x-request-id: v-1a72cfa6-9af9-11ee-a9e9-4f333cf42003
x-ah-environment: 01live
x-geo-country: NO
vary: Host,X-Geo-Country
age: 0
via: varnish
x-cache: MISS
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (2)

Detections

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers