| www.driversdownloader.com/drivers_download/DriversDownloader_for_PalmDesktopWin62.exe |  149.56.0.212 | 302 Moved Temporarily | 138 B |
URL User Request GET HTTP/1.1www.driversdownloader.com/drivers_download/DriversDownloader_for_PalmDesktopWin62.exe IP149.56.0.212:443
CertificateIssuerLet's Encrypt Subjectwww.driversdownloader.com Fingerprint2C:92:83:E1:EA:7D:D4:6D:D1:1F:AE:6A:F2:69:0C:BD:26:8C:5A:4D ValidityMon, 08 May 2023 22:05:17 GMT - Sun, 06 Aug 2023 22:05:16 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashaff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /drivers_download/DriversDownloader_for_PalmDesktopWin62.exe HTTP/1.1
Host: www.driversdownloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 01 Jun 2023 04:37:05 GMT
Content-Type: text/html
Content-Length: 138
Location: https://www.driversdownloader.com/driverFile.php?filename=drivers_download/DriversDownloader_for_PalmDesktopWin62.exe
Connection: keep-alive
|
| www.driversdownloader.com/driverFile.php?filename=drivers_download/DriversDownloader_for_PalmDesktopWin62.exe | 149.56.0.212 | 302 Moved Temporarily | 0 B |
URL User Request GET HTTP/1.1www.driversdownloader.com/driverFile.php?filename=drivers_download/DriversDownloader_for_PalmDesktopWin62.exe IP149.56.0.212:443
CertificateIssuerLet's Encrypt Subjectwww.driversdownloader.com Fingerprint2C:92:83:E1:EA:7D:D4:6D:D1:1F:AE:6A:F2:69:0C:BD:26:8C:5A:4D ValidityMon, 08 May 2023 22:05:17 GMT - Sun, 06 Aug 2023 22:05:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /driverFile.php?filename=drivers_download/DriversDownloader_for_PalmDesktopWin62.exe HTTP/1.1
Host: www.driversdownloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 01 Jun 2023 04:37:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://down.driversdownloader.com/drivers_download/DriversDownloader_for_PalmDesktopWin62.exe
|
| down.driversdownloader.com/drivers_download/DriversDownloader_for_PalmDesktopWin62.exe | 149.56.0.212 | 200 OK | 2.2 MB |
URL User Request GET HTTP/1.1down.driversdownloader.com/drivers_download/DriversDownloader_for_PalmDesktopWin62.exe IP149.56.0.212:80
File typePE32 executable (GUI) Intel 80386, for MS Windows\012- data Size2.2 MB (2212008 bytes) Hashd8f9a2adeaf9ba290ef88dfaf52c5e12 cc96596304b2456c73c28b7861625a9739281218 81e5cbfa6009be4f1a7c59dd1eaa122a0c2ca126b8755b4989d9bbaa28843a35
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | 34/70 | |
| NIDS | Severity | Alert |
|---|
| suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP |
GET /drivers_download/DriversDownloader_for_PalmDesktopWin62.exe HTTP/1.1
Host: down.driversdownloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jun 2023 04:37:06 GMT
Content-Type: application/octet-stream
Content-Length: 2212008
Last-Modified: Fri, 12 Nov 2021 06:05:30 GMT
Connection: keep-alive
ETag: "618e042a-21c0a8"
Accept-Ranges: bytes
|