{"report_id":"32336eb4-6f36-4681-9aa6-ca70929e1876","version":6,"status":"done","tags":[],"date":"2024-05-15T16:03:24Z","url":{"schema":"http","addr":"www.pgware.com/downloads/pcswift.exe","fqdn":"www.pgware.com","domain":"pgware.com","tld":"com"},"ip":{"addr":"170.249.239.24","port":0,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T16:50:54Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.pgware.com","ip":{"addr":"170.249.239.24","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"domain_registered":"2000-07-23","domain_rank":0,"first_seen":"2012-05-21 20:09:44","last_seen":"2024-02-10 00:37:35","alert_count":1,"request_count":1,"received_data":5189296,"sent_data":490,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"0ee841a0233cd005bdf4be3833ccd765","sha1":"fe95aa1a3d99f3e63dfd1bc5ab502762bbe1a01b","sha256":"bbe9455894f94f807af23a77a8070d09b40731df65d527c72d68ff4f8f778682","sha512":"31c44bcbf4be52f0e255b4bdc8e2f27173073487f1597a2312de41aca90b421cf85fcf02177e53900f70e93116c8213eb89a0c58f6349442914538e94f45ee50","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 10 sections","size":5188894,"url":{"schema":"https","addr":"www.pgware.com/downloads/pcswift.exe","fqdn":"www.pgware.com","domain":"pgware.com","tld":"com"},"ip":{"addr":"170.249.239.24","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"archive":null,"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-05-14","alert":"Scan result 52/73","trigger":"bbe9455894f94f807af23a77a8070d09b40731df65d527c72d68ff4f8f778682","verdict":"malicious","severity":"","comment":"malicious - 52/73","link":"https://www.virustotal.com/gui/file/bbe9455894f94f807af23a77a8070d09b40731df65d527c72d68ff4f8f778682","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.pgware.com/downloads/pcswift.exe","fqdn":"www.pgware.com","domain":"pgware.com","tld":"com"},"ip":{"addr":"170.249.239.24","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-05-15T16:02:59.037Z","timestamp":1715788979037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pgware.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Apr 2024 00:24:20 GMT","end":"Sat, 13 Jul 2024 00:24:19 GMT"},"fingerprint":{"sha1":"A5:FF:94:FF:C6:BE:AE:43:1E:9B:A3:56:32:45:12:28:40:BA:42:67","sha256":"87:E8:D6:AB:77:63:CE:56:A6:4D:E7:D5:31:7B:60:70:1E:B3:57:E4:1F:C1:E6:2E:D1:17:BD:8F:E9:A0:AA:53"}}},"request":{"raw":"GET /downloads/pcswift.exe HTTP/1.1\r\nHost: www.pgware.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-msdownload\r\nlast-modified: Wed, 14 Feb 2024 06:27:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5188894\r\ndate: Wed, 15 May 2024 16:02:59 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5188894,"size_decoded":5188894,"mime_type":"application/x-msdownload","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 10 sections","md5":"0ee841a0233cd005bdf4be3833ccd765","sha1":"fe95aa1a3d99f3e63dfd1bc5ab502762bbe1a01b","sha256":"bbe9455894f94f807af23a77a8070d09b40731df65d527c72d68ff4f8f778682","sha512":"31c44bcbf4be52f0e255b4bdc8e2f27173073487f1597a2312de41aca90b421cf85fcf02177e53900f70e93116c8213eb89a0c58f6349442914538e94f45ee50","ssdeep":"98304:SkLsI5NRqYIisVYejVCVnjlzPV4S68XIzA3+bsTTa7U:9sIzR3IisZYhjlbF6QW3sTCU","tlshash":"2d36123ff268a53ec56a1a32097393509977ba61a81a8c1f47fc344dcf725b01e3b616","first_seen":"2024-02-22T13:43:53Z","last_seen":"2024-10-18T06:41:45.024444Z","times_seen":153,"resource_available":false,"data":null}},"time_used":1659,"timings":{"blocked":260,"dns":31,"connect":111,"send":0,"wait":114,"receive":1022,"ssl":118},"alerts":{"ids":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-05-14","alert":"Scan result 52/73","trigger":"bbe9455894f94f807af23a77a8070d09b40731df65d527c72d68ff4f8f778682","verdict":"malicious","severity":"","comment":"malicious - 52/73","link":"https://www.virustotal.com/gui/file/bbe9455894f94f807af23a77a8070d09b40731df65d527c72d68ff4f8f778682","meta":null}],"urlquery":null}}]}