www.heuristicresearch.com/download/fb5.exe
192.254.186.43301 Moved Permanently 462 B URL User Request GET HTTP/1.1 www.heuristicresearch.com/download/fb5.exe
IP 192.254.186.43:80
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash dbf8ec3db1d4b93b848197591827939c
2e12f671d6101f52060133c32f8d359af756f9b2
63c52aa99ca361b59a27e7f51fe5fadffef99e671f8b4f9560fab204219e0666
NIDS Severity Alert suricata medium ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile
GET /download/fb5.exe HTTP/1.1
Host: www.heuristicresearch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
last-modified: Thu, 26 Sep 2019 23:26:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 462
content-type: text/html
date: Wed, 07 Jun 2023 01:26:32 GMT
server: Apache
X-Firefox-Spdy: h2
www.heuristicresearch.com/download/fb5.exe
192.254.186.43301 Moved Permanently 270 B URL User Request GET HTTP/1.1 www.heuristicresearch.com/download/fb5.exe
IP 192.254.186.43:80
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 96938a90a0cd03af64c928a12eedf626
cdcb2a0a9c481094f98a758a762143fa009e278d
cc3a1d18f6a044c06e64fc3ab9b0d7d3f50b81a4bd30188bf39c63ab9f6908bc
NIDS Severity Alert suricata medium ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile
GET /download/fb5.exe HTTP/1.1
Host: www.heuristicresearch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Jun 2023 01:26:32 GMT
Server: Apache
Location: https://www.heuristicresearch.com/public_html/download/fb5.exe
Content-Length: 270
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.heuristicresearch.com/public_html/download/fb5.exe
192.254.186.43404 Not Found 462 B URL User Request GET HTTP/2 www.heuristicresearch.com/public_html/download/fb5.exe
IP 192.254.186.43:443
ASN #46606 UNIFIEDLAYER-AS-1
Certificate IssuerLet's Encrypt
Subjectheuristicresearch.com
FingerprintFA:A0:0D:EB:05:6F:35:E1:32:07:C2:E2:61:A9:21:EA:95:78:36:24
ValiditySun, 07 May 2023 08:35:14 GMT - Sat, 05 Aug 2023 08:35:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash dbf8ec3db1d4b93b848197591827939c
2e12f671d6101f52060133c32f8d359af756f9b2
63c52aa99ca361b59a27e7f51fe5fadffef99e671f8b4f9560fab204219e0666
GET /public_html/download/fb5.exe HTTP/1.1
Host: www.heuristicresearch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
last-modified: Thu, 26 Sep 2019 23:26:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 462
content-type: text/html
date: Wed, 07 Jun 2023 01:26:33 GMT
server: Apache
X-Firefox-Spdy: h2
www.heuristicresearch.com/favicon.ico
192.254.186.43200 OK 15 kB URL GET HTTP/2 www.heuristicresearch.com/favicon.ico
IP 192.254.186.43:443
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.heuristicresearch.com/public_html/download/fb5.exe
Certificate IssuerLet's Encrypt
Subjectheuristicresearch.com
FingerprintFA:A0:0D:EB:05:6F:35:E1:32:07:C2:E2:61:A9:21:EA:95:78:36:24
ValiditySun, 07 May 2023 08:35:14 GMT - Sat, 05 Aug 2023 08:35:13 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 4c548fc813a0f672ae108ad6a13df23d
910b41f45c9814e77ffe90360f0e02ede4d20fc3
549e6fb1b3ff0ef3be3799d7586529bfa4ac764d0a01a92cb23adf857ab3542c
GET /favicon.ico HTTP/1.1
Host: www.heuristicresearch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.heuristicresearch.com/public_html/download/fb5.exe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Oct 2020 18:23:09 GMT
accept-ranges: bytes
content-length: 15406
cache-control: max-age=604800
expires: Wed, 14 Jun 2023 01:26:33 GMT
content-type: image/x-icon
date: Wed, 07 Jun 2023 01:26:33 GMT
server: Apache
X-Firefox-Spdy: h2