| cpnta.phsc.edu/csrs/IBConfigurationUtility.exe |  52.255.163.237 | 200 OK | 98 kB |
URL User Request GET HTTP/1.1cpnta.phsc.edu/csrs/IBConfigurationUtility.exe IP52.255.163.237:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerGoDaddy.com, Inc. Subject*.phsc.edu FingerprintD6:A9:B2:5F:3A:1C:16:CF:95:59:28:95:49:A6:90:C3:16:B3:0C:08 ValidityFri, 08 Sep 2023 19:50:51 GMT - Sat, 07 Sep 2024 14:24:50 GMT
File typePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 4 sections Hash88492a558e38abc84c1a3199fa01f0b8 51d7f0887948ac210853eda365bb77f37aa4a4d5 acde06448527d66321bca46de504b98423ad32ae4f0ea049ecb96da8e59ba6d0
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /csrs/IBConfigurationUtility.exe HTTP/1.1
Host: cpnta.phsc.edu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 98304
Content-Type: application/octet-stream
Last-Modified: Thu, 13 Sep 2012 17:40:14 GMT
Accept-Ranges: bytes
x-ms-proxy-app-id: 996bd470-8f5e-4ad2-a3a3-cb8028c0d5e5
x-ms-proxy-group-id: 53a57b6d-eaf3-49df-8705-392f8224b2b4
x-ms-proxy-subscription-id: 7dd6a106-eb4c-403c-b72a-817e4ca6a1b5
x-ms-proxy-transaction-id: 40fa76dd-a757-4241-b39d-2f67e862015f
x-ms-proxy-service-name: proxy-appproxy-EUS-BL02P-2
x-ms-proxy-data-center: EUS
x-ms-proxy-connector-id: 507a441d-d447-43fd-bc81-f6a4f92d761f
Etag: "093a1d4d691cd1:0"
X-Frame-Options: SAMEORIGIN
X-Powered-By: ASP.NET
Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://ffde.nelreports.net/api/report?cat=proxy-appproxy-EUS-BL02P-2"}]}
Set-Cookie: AzureAppProxyAnalyticCookie_996bd470-8f5e-4ad2-a3a3-cb8028c0d5e5_https_1.3=MGD:MIIBvAYJKoZIhvcNAQcDoIIBrTCCAakCAQIxggEvooIBKwIBBDCB7gRUTAAAAAAAAAABAAAAS0RTSwIAAABqAQAACwAAAAkAAAANmI+vcSayPiEeRxVf6EtDIAAAAJxBeG8FhElZuuFPeaVLZDbjRjuCZXszAFBAnGvObPXlMIGVBgkrBgEEAYI3SgEwgYcGCisGAQQBgjdKAQ0weTB3MHUMBERTVFMMbXVzZWFzdC1ka2RzLmRrZHMuY29yZS53aW5kb3dzLm5ldDtodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1lO2N3YXBwcm94eWRrZHNuYW0wCwYJYIZIAWUDBAEtBCjBYLJ2jFP+Hy4wWwtwQuBoC9Hqc2mK/fF0uiSBNFgDEHS2dfFc/VVGMHEGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMH2kwAuHD5cPpz/HmAgEQgETOqaRFvRp6Cmlg0Ds9JkoSLFW5C5OWn1Q85x8BCkNeA3XGTkINuqNezu6quLRN5JBzn9Ib/izlPpzvUHp4zRRwzQ3hMw==; path=/; HttpOnly; Secure; SameSite=None
Date: Wed, 17 Apr 2024 01:27:53 GMT
|