| my.lancom-systems.de/download/LANtools/LANmonitor-10.90.0019-RU2.exe |  176.9.82.168 | 200 OK | 15 MB |
URL User Request GET my.lancom-systems.de/download/LANtools/LANmonitor-10.90.0019-RU2.exe IP176.9.82.168:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerDigiCert Inc Subjectmy.lancom-systems.de Fingerprint58:A7:12:F4:16:6E:14:5C:5F:BB:1B:96:1D:18:AB:14:5C:48:5A:0A ValidityWed, 19 Mar 2025 00:00:00 GMT - Sun, 19 Apr 2026 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 4 sections Size15 MB (15176128 bytes) Hashcb56aae4453c0132af74d7968cb5610f 0ca35b9c4b6d45a7837344853af3e9168d59f3e5 756b340e052d5a5acf18f4db45919bf1c212313b4b8c0ebb636c89d6787973b3
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | Detect pe file that no import table |
GET /download/LANtools/LANmonitor-10.90.0019-RU2.exe HTTP/1.1
Host: my.lancom-systems.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 21 Mar 2025 13:53:14 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
Feature-Policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'
Last-Modified: Thu, 20 Mar 2025 09:55:48 GMT
ETag: "e791c0-630c3246ad100"
Accept-Ranges: bytes
Content-Length: 15176128
Access-Control-Allow-Origin: *
Cache-Control: public
X-Frame-Options: allow-from https://www.lancom-systems.com
Content-Security-Policy: default-src https: 'unsafe-eval' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.lancom-systems.de *.lancom-systems.com www.googletagmanager.com www.google-analytics.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net ajax.googleapis.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com dq4irj27fs462.cloudfront.net d3dc1lgancj6l0.cloudfront.net *.api.here.com *.wp.com lftracker.leadfeeder.com www.youtube.com www.youtube-nocookie.com s.ytimg.com; frame-src 'self' http: https:; object-src 'self'; img-src * 'self' https: data: userlike-cdn-operators.s3-eu-west-1.amazonaws.com dq4irj27fs462.cloudfront.net; style-src 'unsafe-inline' 'self' *.lancom-systems.de *.lancom-systems.com fonts.googleapis.com js.api.here.com cdnjs.cloudflare.com s0.wp.com; font-src 'self' data: fonts.gstatic.com dq4irj27fs462.cloudfront.net d3dc1lgancj6l0.cloudfront.net *.api.here.com s0.wp.com; connect-src 'self' blob: *.lancom-systems.de *.lancom-systems.com *.google-analytics.com www.userlike.com wss://umd.userlike.com wss://chat.userlike.com chat.userlike.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net www.google-analytics.com *.doubleclick.net *.hereapi.com js.api.here.com ; media-src 'self' dq4irj27fs462.cloudfront.net blob: ; worker-src 'self' blob: ;, frame-ancestors 'self' www.lancom-systems.de www.lancom-systems.com;
Keep-Alive: timeout=5, max=200
Connection: Keep-Alive
Content-Type: application/x-msdos-program
|