IP 104.18.14.101:0
Hash5193c14b74cf82039fffed6c44e3c280 a7fa6c8a097fa22e15faeee6c5e9337b01b16e63 33ea6084068a6b3759ead7305d8e0615dbff41b106bdc793513778a44cc8020d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 05:58:18 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 05 Jun 2023 14:20:45 GMT
Expires: Mon, 12 Jun 2023 14:20:44 GMT
Etag: "a7fa6c8a097fa22e15faeee6c5e9337b01b16e63"
Cache-Control: max-age=548061,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d2e6c3d7a7eb4f9-OSL
|
IP104.18.14.101:0
Hash5193c14b74cf82039fffed6c44e3c280 a7fa6c8a097fa22e15faeee6c5e9337b01b16e63 33ea6084068a6b3759ead7305d8e0615dbff41b106bdc793513778a44cc8020d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 05:58:18 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 05 Jun 2023 14:20:45 GMT
Expires: Mon, 12 Jun 2023 14:20:44 GMT
Etag: "a7fa6c8a097fa22e15faeee6c5e9337b01b16e63"
Cache-Control: max-age=547945,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d2e6c3eb9a40b3d-OSL
|
| www.checkmal.com/download/AppCheckSetup.exe |  52.78.76.217 | 200 OK | 15 MB |
URL User Request GET HTTP/1.1www.checkmal.com/download/AppCheckSetup.exe IP52.78.76.217:443
CertificateIssuerSectigo Limited Subjectwww.checkmal.com Fingerprint75:20:E3:48:B4:8F:7E:B9:11:3A:B5:E4:3B:96:37:3B:D6:3A:4F:7B ValidityMon, 19 Sep 2022 00:00:00 GMT - Fri, 20 Oct 2023 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive\012- data Size15 MB (14604656 bytes) Hashd51c5579636d791c64f16f28650dd1d4 e5c34665ad0fb38743cb52d25902aa8b1d8c572b 92bc3aae02081ff84326a2ae7d4ca14f237fa26c173eda12b3ecaf7f3b8887f2
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | 0/67 | |
GET /download/AppCheckSetup.exe HTTP/1.1
Host: www.checkmal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Jun 2023 05:58:18 GMT
Content-Type: application/octet-stream
Content-Length: 14604656
Last-Modified: Wed, 16 Nov 2022 04:04:25 GMT
Connection: keep-alive
ETag: "63746149-ded970"
Accept-Ranges: bytes
|