| www.criasoft.com/softwares/full/SetupAutomacao.exe |  54.230.111.43 | | 162 B |
URL User Request GET www.criasoft.com/softwares/full/SetupAutomacao.exe IP54.230.111.43:0
CertificateIssuerAmazon Subject*.criasoft.com FingerprintB5:25:91:BB:FB:48:88:64:83:A9:A4:9E:FF:0B:24:E4:EE:0F:BA:76 ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 19 Aug 2024 23:59:59 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /softwares/full/SetupAutomacao.exe HTTP/1.1
Host: www.criasoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 162
location: http://download.criasoft.com/full/SetupAutomacao.exe
server: nginx
date: Sun, 03 Dec 2023 00:25:55 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: u_Qy-eWcCAxM-Yja2PVhRkO8ZF7QmMgHzhITPWMnT0fUczZT2oiMSA==
X-Firefox-Spdy: h2
|
| download.criasoft.com/full/SetupAutomacao.exe |  0.0.0.0 | | 0 B |
URL User Request GET download.criasoft.com/full/SetupAutomacao.exe IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET POLICY Executable served from Amazon S3 | | suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP |
GET /full/SetupAutomacao.exe HTTP/1.1
Host: download.criasoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: Z0FWij84Dlg5Agg4Utk/264uvJxUyiVOJSXjSFMfyYl6Dwp2yeqKcTCJtbINlLib5Gv1BwtKhGY=
x-amz-request-id: 1XKT856FNEDHEZMN
Date: Sun, 03 Dec 2023 00:25:56 GMT
Last-Modified: Tue, 31 Oct 2023 14:25:53 GMT
ETag: "1e7e7e1eaa4ccfe6f7d22787fa12cdb5"
Content-Type: application/x-msdownload
Server: AmazonS3
Content-Length: 14593280
|
16.12.0.83