Report - d2u2qhufg0q9tn.cloudfront.net/assets/arquivos/manual_bfd3aadb-fc10-4525-aa53-bb39c1a48a17_ELGIN%20Printer%20Driver

Report Overview

Visitedpublic

2024-07-11 13:21:02

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-10 18:12:52	2.0 kB	5.3 kB	23.36.76.226
d2u2qhufg0q9tn.cloudfront.net	unknown	2008-04-25	2023-08-29 19:24:03	2024-03-25 14:05:43	580 B	1.5 MB	143.204.55.71

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

d2u2qhufg0q9tn.cloudfront.net/assets/arquivos/manual_bfd3aadb-fc10-4525-aa53-bb39c1a48a17_ELGIN%20Printer%20Driver_v-1.7.7.zip

IP / ASN

143.204.55.71

#16509 AMAZON-02

File Overview

File TypeZip archive data, at least v2.0 to extract, compression method=deflate

Size1.5 MB (1536576 bytes)

MD50e0409f0c33419bea74d58b8fc3e55d8

SHA124ab8a6cbbfacbc66f3f2f8c76599f77fb2e2832

SHA256c6d856195654f2bd6006226839e68ed5eae640c26f409b8097c8a63c39489b50

Archive (1)

Modified	Filename	Size	MD5	File type
2023-12-15 14:21	ELGIN Printer Driver_v-1.7.7.exe	1.6 MB	b0347163cd7872453cd1bdd1af227f1a	PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

JavaScript (0)

HTTP Transactions (7)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.76.226		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.36.76.226 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-09 Last Seen2024-08-19 Times Seen18846 Size504 B (504 bytes) MD5c2f3e4e1f94efa7a80f9deeb3d459176 SHA17a8f013a3d13ffe4241b8e2a8b9ca63daeeace53 SHA2565f9feb641b1e74a7c14eee1104953d1e9faa0341d1f27fdbd50fa8207e6c0ac8 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5F9FEB641B1E74A7C14EEE1104953D1E9FAA0341D1F27FDBD50FA8207E6C0AC8" Last-Modified: Tue, 09 Jul 2024 15:27:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16489 Expires: Thu, 11 Jul 2024 17:55:25 GMT Date: Thu, 11 Jul 2024 13:20:36 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.36.76.226 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-10 Last Seen2024-08-19 Times Seen34251 Size504 B (504 bytes) MD5ee5b6dc3e7ab972df60b36582e3eaaf4 SHA12a5185acc539fcddac9c33895ec74faf552b62dd SHA256be84262bbb3f3aabae368745bc3e85b816e372b16bc37327a1887d3a19992df6 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "BE84262BBB3F3AABAE368745BC3E85B816E372B16BC37327A1887D3A19992DF6" Last-Modified: Wed, 10 Jul 2024 13:53:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5514 Expires: Thu, 11 Jul 2024 14:52:30 GMT Date: Thu, 11 Jul 2024 13:20:36 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.36.76.226 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-10 Last Seen2024-08-19 Times Seen39709 Size504 B (504 bytes) MD5e7492695b5254a3a63fcffb4f1ee8cec SHA10361713c6d8129210245347284c7c6babfd28fb7 SHA2565d1bc1c01894fd88a0d4680490977488d6458bb58a98ace24ef8aa103538bc1f HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5D1BC1C01894FD88A0D4680490977488D6458BB58A98ACE24EF8AA103538BC1F" Last-Modified: Tue, 09 Jul 2024 23:47:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8111 Expires: Thu, 11 Jul 2024 15:35:47 GMT Date: Thu, 11 Jul 2024 13:20:36 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.36.76.226 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-09 Last Seen2024-08-19 Times Seen23416 Size504 B (504 bytes) MD5fc076d7a99abd74b9da6b35304bb93e9 SHA19d541501d5141dcf7b4d839d6fcffabec81e1a14 SHA256c86804eff01a7bb9ff866508bfdb1b071cfa4a26617d11094b9f5226e1a4b970 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "C86804EFF01A7BB9FF866508BFDB1B071CFA4A26617D11094B9F5226E1A4B970" Last-Modified: Tue, 09 Jul 2024 16:18:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18903 Expires: Thu, 11 Jul 2024 18:35:40 GMT Date: Thu, 11 Jul 2024 13:20:37 GMT Connection: keep-alive`

	GET d2u2qhufg0q9tn.cloudfront.net/assets/arquivos/manual_bfd3aadb-fc10-4525-aa53-bb39c1a48a17_ELGIN%20Printer%20Driver_v-1.7.7.zip	143.204.55.71	200 OK	1.5 MB
URL User Request GET HTTPS d2u2qhufg0q9tn.cloudfront.net/assets/arquivos/manual_bfd3aadb-fc10-4525-aa53-bb39c1a48a17_ELGIN%20Printer%20Driver_v-1.7.7.zip IP / ASN 143.204.55.71 #16509 AMAZON-02 Requested byN/A Resource Info File typeZip archive data, at least v2.0 to extract, compression method=deflate First Seen2024-08-19 Last Seen2025-03-10 Times Seen2 Size1.5 MB (1536576 bytes) MD50e0409f0c33419bea74d58b8fc3e55d8 SHA124ab8a6cbbfacbc66f3f2f8c76599f77fb2e2832 SHA256c6d856195654f2bd6006226839e68ed5eae640c26f409b8097c8a63c39489b50 Certificate Info IssuerAmazon Subject.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT HTTP Headers GET /assets/arquivos/manual_bfd3aadb-fc10-4525-aa53-bb39c1a48a17_ELGIN%20Printer%20Driver_v-1.7.7.zip HTTP/1.1 Host: d2u2qhufg0q9tn.cloudfront.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: application/zip content-length: 1536576 date: Thu, 11 Jul 2024 13:20:38 GMT last-modified: Fri, 15 Dec 2023 17:24:08 GMT etag: "0e0409f0c33419bea74d58b8fc3e55d8" x-amz-storage-class: ONEZONE_IA x-amz-server-side-encryption: AES256 x-amz-version-id: VMQL9ingnBkwYECK3Wn1JGZoabvz_iqa accept-ranges: bytes server: AmazonS3 x-cache: Miss from cloudfront via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-C1 x-amz-cf-id: tGCYW-IU4bYtbXKBtJpuvZmDMFbyT5XytKgZ9lePOTvjJrHPt87Ucw== X-Firefox-Spdy: h2

	r10.o.lencr.org/	23.36.76.226		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.36.76.226 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-10 Last Seen2024-08-19 Times Seen38767 Size504 B (504 bytes) MD550e4489707989517510128817aedd2ea SHA136a54d7b34a9ac621715b569e5a870f62671c574 SHA2563e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9155 Expires: Thu, 11 Jul 2024 15:53:13 GMT Date: Thu, 11 Jul 2024 13:20:38 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.36.76.226 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-10 Last Seen2024-08-19 Times Seen38767 Size504 B (504 bytes) MD550e4489707989517510128817aedd2ea SHA136a54d7b34a9ac621715b569e5a870f62671c574 SHA2563e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9155 Expires: Thu, 11 Jul 2024 15:53:13 GMT Date: Thu, 11 Jul 2024 13:20:38 GMT Connection: keep-alive`

Detections

Host Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

File detected

JavaScript (0)

HTTP Transactions (7)

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers