IP23.38.202.187:0
Hashe4ae6b6968d59cb18363556a9a4fb3c9 0a55dadbea4fc9e996c106f3a875cf1fa638bf76 e1d548195b829322e87b23456207036aded501c2999b0fc4f176afe9dcf9d023
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "E1D548195B829322E87B23456207036ADED501C2999B0FC4F176AFE9DCF9D023"
Last-Modified: Sun, 05 May 2024 21:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3587
Expires: Mon, 06 May 2024 03:09:18 GMT
Date: Mon, 06 May 2024 02:09:31 GMT
Connection: keep-alive
|
| ch.promega.com/-/media/files/resources/tools/maxwell-rsc-48-software-and-firmware/maxwell-rsc-48-installer-v301161-v2.exe?rev=b24af8a8b842442aa44ea078bafb3216&sc_lang=en | 20.80.225.92 | 200 OK | 48 MB |
URL User Request GET HTTP/1.1ch.promega.com/-/media/files/resources/tools/maxwell-rsc-48-software-and-firmware/maxwell-rsc-48-installer-v301161-v2.exe?rev=b24af8a8b842442aa44ea078bafb3216&sc_lang=en IP20.80.225.92:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerEntrust, Inc. Subjectwww.promega.com Fingerprint72:AA:19:D1:0F:30:C4:6C:1D:8B:9E:F1:D7:8D:03:83:EC:94:09:AA ValidityMon, 19 Feb 2024 21:15:39 GMT - Wed, 12 Feb 2025 21:15:38 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections Size48 MB (47727864 bytes) Hashc703cc75335fe38967ee230e2968b8a1 f76727f976b20dee85e2ff4451689e4536ef326a b9e7897597386d918bfbae0dbba9939fbaf31f835ba067689669b25a58b7214a
Analyzer | Verdict | Alert | VirusTotal | suspicious | |
GET /-/media/files/resources/tools/maxwell-rsc-48-software-and-firmware/maxwell-rsc-48-installer-v301161-v2.exe?rev=b24af8a8b842442aa44ea078bafb3216&sc_lang=en HTTP/1.1
Host: ch.promega.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 May 2024 02:09:31 GMT
Content-Type: application/octet-stream
Content-Length: 47727864
Connection: keep-alive
Set-Cookie: ApplicationGatewayAffinityCORS=63ad0c588285ab4001553e1636fb8ca4; Path=/; SameSite=None; Secure
ApplicationGatewayAffinity=63ad0c588285ab4001553e1636fb8ca4; Path=/
website#lang=en; path=/; secure; SameSite=None
PromegaCompno=; domain=.promega.com; expires=Sun, 04-Aug-2024 02:09:31 GMT; path=/; secure; SameSite=None
PromegaCountry=; domain=.promega.com; expires=Sun, 04-Aug-2024 02:09:31 GMT; path=/; secure; SameSite=None
Country=; domain=.promega.com; expires=Sun, 04-Aug-2024 02:09:31 GMT; path=/; secure; SameSite=None
PreferredLanguage=; domain=.promega.com; expires=Sun, 04-Aug-2024 02:09:31 GMT; path=/; secure; SameSite=None
CommerceCustomerId=; domain=.promega.com; path=/; secure; SameSite=None
CustomerId=; domain=.promega.com; path=/; secure; SameSite=None
RememberMe=false; domain=.promega.com; expires=Sat, 02-Nov-2024 02:09:31 GMT; path=/; secure; SameSite=None
CanCheckOut=False; domain=.promega.com; path=/; secure; SameSite=None
ARRAffinity=6d30d96d358a640db6d4bdd5986b5152f53f0ed8bbc0899052d9863897d79b25;Path=/;HttpOnly;Secure;Domain=ch.promega.com
ARRAffinitySameSite=6d30d96d358a640db6d4bdd5986b5152f53f0ed8bbc0899052d9863897d79b25;Path=/;HttpOnly;SameSite=None;Secure;Domain=ch.promega.com
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: public, max-age=604800
ETag: 5e2eee17189c40cc970d10d335261079
Last-Modified: Wed, 08 Dec 2021 12:10:41 GMT
Request-Context: appId=cid-v1:7ec685f1-3b39-4d49-b37a-0ba5ae135637
X-Powered-By: ASP.NET
WhoamI: scv10mr-cdapp-websit-p-use2-00
|