| ocsp.r2m03.amazontrust.com/ |  18.238.246.206 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP18.238.246.206:0
Hash55c8fdac590814662fa9551232c8ee60 e6574adea7c637d87eec835bbdd156d745fde0bb 5835c6316bbec76709edc5af77f7b97ce9e90d5728a0bca6227d457f9e532ea6
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 12 Jun 2024 08:27:54 GMT
Server: ECAcc (amb/6AB4)
X-Cache: Miss from cloudfront
Via: 1.1 941049c97e511f86acc1525badae21c2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: bkPaoWds3r3_lUiHhaZr5x_4moWwjU3Dg3yPOzxr3Gsm66JJUCzpEQ==
|
| GET www.compuclever.com/products/ultra-file-opener/download/ultrafileopener.exe | 54.83.205.140 | 302 Found | 0 B |
URL User Request GET HTTP/2www.compuclever.com/products/ultra-file-opener/download/ultrafileopener.exe IP54.83.205.140:443
CertificateIssuerAmazon Subjectwww.compuclever.com Fingerprint66:E3:ED:7B:88:6F:02:3F:04:51:98:52:70:26:E3:78:B1:58:64:0D ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 19 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /products/ultra-file-opener/download/ultrafileopener.exe HTTP/1.1
Host: www.compuclever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 12 Jun 2024 08:27:54 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://dl2.compuclever.com/ultrafileopener_setup.exe
server: Apache/2.4.59 () OpenSSL/1.0.2k-fips PHP/7.4.33
x-powered-by: PHP/7.4.33
vary: User-Agent
X-Firefox-Spdy: h2
|
| GET dl2.compuclever.com/ultrafileopener_setup.exe | 3.164.240.119 | 200 OK | 26 MB |
URL User Request GET HTTP/2dl2.compuclever.com/ultrafileopener_setup.exe IP3.164.240.119:443
CertificateIssuerAmazon Subjectwww.compuclever.com Fingerprint66:E3:ED:7B:88:6F:02:3F:04:51:98:52:70:26:E3:78:B1:58:64:0D ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 19 Feb 2025 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections Size26 MB (25728344 bytes) Hashc19e7c2f7ffe2eb6cb5b6e7ffe4915ab 4f9b6a5d2f9f645e7cd403306d187dc2da071ece dbafa9901da02d926a3efc388040edbf33f4d47348c473092b796d87cbfca6cd
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /ultrafileopener_setup.exe HTTP/1.1
Host: dl2.compuclever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 25728344
last-modified: Mon, 28 Oct 2019 18:29:01 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 12 Jun 2024 08:27:56 GMT
etag: "38b3f9a4ae2a6d65c592e06cea5c33b0-2"
x-cache: RefreshHit from cloudfront
via: 1.1 3fef473b9069c3a6b17fb47d4e1f2460.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: zIS58Rym_MY9d_rKoUqwSklvhcmuzRPIOtDMJ-p0eCwG8MISmhdsAQ==
X-Firefox-Spdy: h2
|