Report - do.drivers-canon.com/canon/22/Canon-L11121e/Canon-L11121e-Driver-for-Windows-64-bit.exe?cdn_hash=c56ed682d72c6289880f06590f2ed89a&cdn_creation_time=1702959720&cdn

Report Overview

Visited public
2023-12-24 05:11:16
Tags
Submit Tags
URL
do.drivers-canon.com/canon/22/Canon-L11121e/Canon-L11121e-Driver-for-Windows-64-bit.exe?cdn_hash=c56ed682d72c6289880f06590f2ed89a&cdn_creation_time=1702959720&cdn_ttl=86400
Finishing URL
about:privatebrowsing
IP / ASN
185.59.220.198
#60068 Datacamp Limited
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
do.drivers-canon.com	unknown	2018-03-29	2022-04-24 10:37:20	2023-12-24 01:31:00	638 B	8.9 MB	185.59.220.198
aus5.mozilla.org	2548	1998-01-24	2015-10-27 08:06:24	2023-12-23 05:09:27	523 B	6.5 kB	35.244.181.201
ciscobinary.openh264.org	40822	2013-10-19	2014-10-07 07:43:56	2023-12-23 05:09:40	305 B	512 kB	62.115.252.115

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

GET do.drivers-canon.com/canon/22/Canon-L11121e/Canon-L11121e-Driver-for-Windows-64-bit.exe?cdn_hash=c56ed682d72c6289880f06590f2ed89a&cdn_creation_time=1702959720&cdn_ttl=86400

185.59.220.198

200 OK

8.9 MB

URL User Request GET HTTP/2
do.drivers-canon.com/canon/22/Canon-L11121e/Canon-L11121e-Driver-for-Windows-64-bit.exe?cdn_hash=c56ed682d72c6289880f06590f2ed89a&cdn_creation_time=1702959720&cdn_ttl=86400
IP
185.59.220.198:443
ASN
#60068 Datacamp Limited

Certificate
IssuerLet's Encrypt
Subjectdo.drivers-canon.com
Fingerprint2F:D2:DA:E4:00:3F:12:57:48:E3:AE:9C:4F:4F:6E:67:DA:FB:94:FF
ValiditySat, 14 Oct 2023 02:04:27 GMT - Fri, 12 Jan 2024 02:04:26 GMT

File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
8.9 MB (8872412 bytes)
Hash
367403a1b9e15c6656226b97fa7cf83f
deced5db114f7544e534e8f9bc11412f1e491d21
db470dbe06227e9855a609c002dabea764672c898c8c6cf3653127a46e166172

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 3/72

HTTP Headers

GET /canon/22/Canon-L11121e/Canon-L11121e-Driver-for-Windows-64-bit.exe?cdn_hash=c56ed682d72c6289880f06590f2ed89a&cdn_creation_time=1702959720&cdn_ttl=86400 HTTP/1.1
Host: do.drivers-canon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 24 Dec 2023 05:10:42 GMT
content-type: application/octet-stream
content-length: 8872412
server: BunnyCDN-DE1-723
cdn-pullzone: 301207
cdn-uid: 860d8ee2-3e13-4aa6-a97a-aa7b5f2a2a15
cdn-requestcountrycode: NO
cache-control: public, max-age=604800
etag: "628cd8a6-8761dc"
last-modified: Tue, 24 May 2022 13:07:50 GMT
cdn-cachedat: 12/17/2023 07:28:02
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1054
cdn-status: 200
cdn-requestid: b2189898282776193186b2627d7e6a05
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

5.8 kB

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#15169 GOOGLE

File type
gzip compressed data, max speed, from Unix
Size
5.8 kB (5759 bytes)
Hash
f3d07ad945c8c3b93c223e5931b73af4
82383fa91917741b5bc5be542438e30ade7289b2
e5fdb21341b3cacfdddacd06e03606991a439ce0eba926a8b5eb267579a88429

HTTP Headers

GET /update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 24 Dec 2023 05:11:01 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-02-08-20-06-05.chain; p384ecdsa=kyy4hWHL5FhQRVFlaWYyE0sU0zn95OxH5Cx9isPtA6jZbiw-p0r63tvja_OHNHrj9xzxGKeGNYbDuMSKyDxg693k-mK0aGNnYc8ELtcdwMRv8wwM-6QzESpoR6djGj6o
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip

62.115.252.115

512 kB

URL
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP
62.115.252.115:0
ASN
#1299 Telia Company AB

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
512 kB (511815 bytes)
Hash
152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48

HTTP Headers

GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 200 OK
Last-Modified: Thu, 16 Nov 2023 07:38:15 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1700120294.87662
Content-Type: application/zip
X-Trans-Id: tx15b69f172b404fa58b2bb-006555fb11dfw1
Cache-Control: public, max-age=150611
Expires: Mon, 25 Dec 2023 23:01:12 GMT
Date: Sun, 24 Dec 2023 05:11:01 GMT
Connection: keep-alive

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (3)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers