| www.asusdriversdownload.com/Drivers-Download.exe |  149.56.123.234 | 302 Moved Temporarily | 138 B |
URL User Request GET HTTP/1.1www.asusdriversdownload.com/Drivers-Download.exe IP149.56.123.234:443
CertificateIssuerLet's Encrypt Subjectwww.asusdriversdownload.com Fingerprint3D:2E:F9:F8:EA:92:3B:67:5A:C4:0A:77:A4:BE:D4:3C:A5:C4:01:D7 ValidityMon, 08 May 2023 22:05:01 GMT - Sun, 06 Aug 2023 22:05:00 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashaff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /Drivers-Download.exe HTTP/1.1
Host: www.asusdriversdownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 07 Jun 2023 00:49:02 GMT
Content-Type: text/html
Content-Length: 138
Location: https://www.asusdriversdownload.com/driverFile.php?filename=Drivers-Download.exe
Connection: keep-alive
|
| www.asusdriversdownload.com/driverFile.php?filename=Drivers-Download.exe | 149.56.123.234 | 302 Moved Temporarily | 0 B |
URL User Request GET HTTP/1.1www.asusdriversdownload.com/driverFile.php?filename=Drivers-Download.exe IP149.56.123.234:443
CertificateIssuerLet's Encrypt Subjectwww.asusdriversdownload.com Fingerprint3D:2E:F9:F8:EA:92:3B:67:5A:C4:0A:77:A4:BE:D4:3C:A5:C4:01:D7 ValidityMon, 08 May 2023 22:05:01 GMT - Sun, 06 Aug 2023 22:05:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /driverFile.php?filename=Drivers-Download.exe HTTP/1.1
Host: www.asusdriversdownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 07 Jun 2023 00:49:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://cdn.asusdriversdownload.com/Drivers-Download.exe
|
| cdn.asusdriversdownload.com/Drivers-Download.exe | 149.56.123.234 | 200 OK | 2.2 MB |
URL User Request GET HTTP/1.1cdn.asusdriversdownload.com/Drivers-Download.exe IP149.56.123.234:80
File typePE32 executable (GUI) Intel 80386, for MS Windows\012- data Size2.2 MB (2211952 bytes) Hashc7c2b2d1e8a78b6e759a136291f5ce6e 6ac12b7a30fbd91371cc94eec70e715045b36a2a b179ef5a6843e1f06aae36222088cc4db3f604db4e7e1b6bb58fd36500b5d3b3
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | 33/71 | |
| NIDS | Severity | Alert |
|---|
| suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP |
GET /Drivers-Download.exe HTTP/1.1
Host: cdn.asusdriversdownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Jun 2023 00:49:02 GMT
Content-Type: application/octet-stream
Content-Length: 2211952
Last-Modified: Fri, 12 Nov 2021 03:36:01 GMT
Connection: keep-alive
ETag: "618de121-21c070"
Accept-Ranges: bytes
|