GET 46.228.223.162/d/msdownload/update/software/uprl/2024/04/windows-kb890830-x64-v5.123_12cbe1571c83eb7c16bfdfde1426dff713619670.exe?cacheHostOrigin=au.download.windowsupdate.com
200 OK 16 MB URL User Request GET HTTP/1.1 46.228.223.162/d/msdownload/update/software/uprl/2024/04/windows-kb890830-x64-v5.123_12cbe1571c83eb7c16bfdfde1426dff713619670.exe?cacheHostOrigin=au.download.windowsupdate.com
IP
ASN #48326 DataNetworks s.r.o.
Size 16 MB (16022931 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
NIDS Severity Alert suricata high ET POLICY PE EXE or DLL Windows file download HTTP
suricata medium ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response
GET /d/msdownload/update/software/uprl/2024/04/windows-kb890830-x64-v5.123_12cbe1571c83eb7c16bfdfde1426dff713619670.exe?cacheHostOrigin=au.download.windowsupdate.com HTTP/1.1
Host: 46.228.223.162
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 10 Apr 2024 22:54:50 GMT
Content-Type: application/octet-stream
Content-Length: 69014128
Connection: keep-alive
Cache-Control: public,max-age=172800
Last-Modified: Mon, 01 Apr 2024 11:38:37 GMT
Via: 1.1 varnish
Age: 2
X-Served-By: cache-vie6346-VIE
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1712682011.792939,VS0,VE1
X-CID: 10002
X-CCC: f9a2db7b-7e0b-4e14-8070-1150b56b2bf1
X-Cache-Status: HIT
Accept-Ranges: bytes
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Frame-Options: SAMEORIGIN, DENY
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' http: https: data: blob: 'unsafe-inline', default-src 'self';
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
GET 46.228.223.162/d/msdownload/update/software/uprl/2024/04/windows-kb890830-x64-v5.123_12cbe1571c83eb7c16bfdfde1426dff713619670.exe?cacheHostOrigin=au.download.windowsupdate.com
0 B URL User Request GET 46.228.223.162/d/msdownload/update/software/uprl/2024/04/windows-kb890830-x64-v5.123_12cbe1571c83eb7c16bfdfde1426dff713619670.exe?cacheHostOrigin=au.download.windowsupdate.com
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
NIDS Severity Alert suricata high ET POLICY PE EXE or DLL Windows file download HTTP
suricata medium ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response
GET /d/msdownload/update/software/uprl/2024/04/windows-kb890830-x64-v5.123_12cbe1571c83eb7c16bfdfde1426dff713619670.exe?cacheHostOrigin=au.download.windowsupdate.com HTTP/1.1
Host: 46.228.223.162
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
46.228.223.162
0.0.0.0