| ssocsp.cybertrust.ne.jp/OcspServer |  13.114.126.114 | | 1.5 kB |
URL ssocsp.cybertrust.ne.jp/OcspServer IP13.114.126.114:0
Hash70407b436070dc6089a442a0af9fc1cb 7d31c6b641e9096993bddcc23e7a700ed04e38ab 5f4b50450b792580da91853a33cf2fbb10f7e0ff05a239793286d46868f140ab
POST /OcspServer HTTP/1.1
Host: ssocsp.cybertrust.ne.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 00:26:41 GMT
Content-Type: application/ocsp-response
Content-Length: 1480
Connection: keep-alive
Keep-Alive: timeout=2
|
| support.d-imaging.sony.co.jp/download/DSC/DSCG3V2.exe?fm=jp | 54.64.134.71 | 302 Found | 226 B |
URL User Request GET HTTP/2support.d-imaging.sony.co.jp/download/DSC/DSCG3V2.exe?fm=jp IP54.64.134.71:443
CertificateIssuerCybertrust Japan Co., Ltd. Subject*.d-imaging.sony.co.jp FingerprintA3:3C:9E:B5:66:05:A0:3C:95:51:27:C5:94:5A:18:3A:42:23:45:5E ValidityThu, 18 Apr 2024 05:04:52 GMT - Mon, 21 Apr 2025 14:59:00 GMT
File typeHTML document, ASCII text Hashf5bf658ae713896c07d1be3341e16a2e 3f971e787dcff0d1d57a296564a794499d73c6d7 7818c568f17f85a700e6067895c012edbbf51a89c9fe8633a6458434ee8db6b7
GET /download/DSC/DSCG3V2.exe?fm=jp HTTP/1.1
Host: support.d-imaging.sony.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 25 Apr 2024 00:26:41 GMT
content-type: text/html; charset=iso-8859-1
content-length: 226
location: https://di.update.sony.net/DSC/DSCG3V2.exe
set-cookie: AWSALB=rZxxw90ZD0dbjcoK08UmN4oLHaavx1Cc8FmuvThslJ1tRP1LyDpgni0xs4bY3hNhWfirYZxwBlwMJ340Nfj4VQloj5kW5F6od2EJhu/yb9niFfrXDbIzidXcdAsA; Expires=Thu, 02 May 2024 00:26:41 GMT; Path=/
AWSALBCORS=rZxxw90ZD0dbjcoK08UmN4oLHaavx1Cc8FmuvThslJ1tRP1LyDpgni0xs4bY3hNhWfirYZxwBlwMJ340Nfj4VQloj5kW5F6od2EJhu/yb9niFfrXDbIzidXcdAsA; Expires=Thu, 02 May 2024 00:26:41 GMT; Path=/; SameSite=None; Secure
server: Apache
X-Firefox-Spdy: h2
|
| di.update.sony.net/DSC/DSCG3V2.exe |  23.210.235.150 | 200 OK | 56 MB |
URL User Request GET HTTP/1.1di.update.sony.net/DSC/DSCG3V2.exe IP23.210.235.150:443
CertificateIssuerDigiCert Inc Subjectdi.update.sony.net FingerprintDD:36:46:75:46:EC:C8:00:05:B7:CD:CE:6A:37:64:E7:5D:B2:DF:AA ValidityWed, 26 Jul 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 7 sections, LHa self-extracting archive Size56 MB (55928464 bytes) Hash664f503c73e426ce4260965eb876bbc6 724d9a88b747b88e2beaf45c2139e96b18e34fc6 a9698c7b3822f23d71de84ba5389453b847f6de19ab293a55ebe016490fd94d9
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /DSC/DSCG3V2.exe HTTP/1.1
Host: di.update.sony.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/octet-stream
ETag: "664f503c73e426ce4260965eb876bbc6:1237355855"
Last-Modified: Wed, 18 Mar 2009 05:57:35 GMT
Server: AkamaiNetStorage
Content-Length: 55928464
Date: Thu, 25 Apr 2024 00:26:42 GMT
Connection: keep-alive
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml |  35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=0wh9TPQDhA60PoEsBYy_5Vf0Z-CnkIaasDgVYzo1ZSkLqidxUia6DbhP1NPq64iSEgXbu9lEARWTnazDN2XbpK0DDy1H3YcM6EsygI58953XLb4YSwYBmyeZ4tI-NxrE
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Thu, 25 Apr 2024 00:25:45 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 77
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|