Report - logicfox.info/manuals/LP/PC/UPSmart-setup.exe

Report Overview

Visitedpublic

2024-08-02 09:50:56

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
logicfox.info	unknown	2016-05-01	2017-02-15 04:42:58	2021-02-02 13:01:39	499 B	9.5 MB	195.211.154.40
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-08-01 18:12:56	2.6 kB	7.1 kB	23.36.76.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

logicfox.info/manuals/LP/PC/UPSmart-setup.exe

IP / ASN

195.211.154.40

#59564 Unit-IS Ltd.

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

Size9.5 MB (9463974 bytes)

MD549ce59a15ac602890fb1bb015e350403

SHA1d7e1758ae676a0336555a27ee1861e9e9ea0e64f

SHA256a58f9b754d3f5f5399da7e8df38f09e8a1e40a2b18e38fa9951ccd7ea7eaba13

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/71

JavaScript (0)

HTTP Transactions (9)

URL IP Response Size

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-01

Last Seen2024-08-19

Times Seen14629

Size504 B (504 bytes)

MD51fc39f9a6ccc25867cc2924e625282d0

SHA1f859354fa7202cd2f2cbd279ad12ab0358c638d1

SHA256037bd31a93556f0a88d519cc4629ca3f8fcc94ffc357a71d34a133e5943c3b96

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "037BD31A93556F0A88D519CC4629CA3F8FCC94FFC357A71D34A133E5943C3B96"
Last-Modified: Thu, 01 Aug 2024 06:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13394
Expires: Fri, 02 Aug 2024 13:33:43 GMT
Date: Fri, 02 Aug 2024 09:50:29 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-02

Last Seen2024-08-19

Times Seen18150

Size504 B (504 bytes)

MD51f657e78cc6cd633543a7c714446bc96

SHA16c9ce1ef30668bf4e402d553e8c16b7d52871b7f

SHA2562a52e00c2d138753be73d181f49067827ab153e56cf68d50c690046b1a1873a7

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2A52E00C2D138753BE73D181F49067827AB153E56CF68D50C690046B1A1873A7"
Last-Modified: Thu, 01 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13342
Expires: Fri, 02 Aug 2024 13:32:51 GMT
Date: Fri, 02 Aug 2024 09:50:29 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-02

Last Seen2024-08-19

Times Seen18150

Size504 B (504 bytes)

MD51f657e78cc6cd633543a7c714446bc96

SHA16c9ce1ef30668bf4e402d553e8c16b7d52871b7f

SHA2562a52e00c2d138753be73d181f49067827ab153e56cf68d50c690046b1a1873a7

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2A52E00C2D138753BE73D181F49067827AB153E56CF68D50C690046B1A1873A7"
Last-Modified: Thu, 01 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13342
Expires: Fri, 02 Aug 2024 13:32:51 GMT
Date: Fri, 02 Aug 2024 09:50:29 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-01

Last Seen2024-08-19

Times Seen23918

Size504 B (504 bytes)

MD5d8c8330168da4a9d503ddb04a4df6f87

SHA108502623c14dd495434507146b62dd062e06c609

SHA256f37f00b9679113ac2b3b7d43e4d3afa8f3b1861b9f0b31744641771257b5714f

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F37F00B9679113AC2B3B7D43E4D3AFA8F3B1861B9F0B31744641771257B5714F"
Last-Modified: Thu, 01 Aug 2024 06:26:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6173
Expires: Fri, 02 Aug 2024 11:33:22 GMT
Date: Fri, 02 Aug 2024 09:50:29 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-01

Last Seen2024-08-19

Times Seen22007

Size504 B (504 bytes)

MD5a4d6b926b81d6d764f45acb544ca4e54

SHA1f123a7aae8e5c35edfde0506e9ae0d129b65f28b

SHA2566a327a87f207fd32257661671310e329c10e67ee895c4afc67b197ceb2af19b0

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6A327A87F207FD32257661671310E329C10E67EE895C4AFC67B197CEB2AF19B0"
Last-Modified: Thu, 01 Aug 2024 06:57:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6161
Expires: Fri, 02 Aug 2024 11:33:10 GMT
Date: Fri, 02 Aug 2024 09:50:29 GMT
Connection: keep-alive

GET logicfox.info/manuals/LP/PC/UPSmart-setup.exe

195.211.154.40

200 OK

9.5 MB

URL

logicfox.info/manuals/LP/PC/UPSmart-setup.exe

IP / ASN

195.211.154.40

#59564 Unit-IS Ltd.

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

First Seen2024-08-19

Last Seen2024-08-19

Times Seen1

Size9.5 MB (9463974 bytes)

MD549ce59a15ac602890fb1bb015e350403

SHA1d7e1758ae676a0336555a27ee1861e9e9ea0e64f

SHA256a58f9b754d3f5f5399da7e8df38f09e8a1e40a2b18e38fa9951ccd7ea7eaba13

Certificate Info

IssuerLet's Encrypt

Subjectlogicfox.info

Fingerprint6C:AD:7D:CD:01:2E:64:B9:66:DF:A3:F4:99:25:12:DA:06:B4:56:7C

ValidityMon, 20 May 2024 23:32:15 GMT - Sun, 18 Aug 2024 23:32:14 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/71

HTTP Headers

GET /manuals/LP/PC/UPSmart-setup.exe HTTP/1.1
Host: logicfox.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 02 Aug 2024 09:50:29 GMT
Content-Type: application/octet-stream
Content-Length: 9463974
Connection: keep-alive
Last-Modified: Thu, 29 Jun 2023 12:48:58 GMT
ETag: "38a07e0-9068a6-5ff441fb06afd"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000;

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-01

Last Seen2024-08-19

Times Seen30862

Size504 B (504 bytes)

MD5086417994a199f2bbee25bd5c76ce9d7

SHA16de33407c60c52a9ed18403c3d0edebefec7c48a

SHA2560998db04ec6e07ad3a0ac6fb2410cd5d1c9ab6ea0b036c89c79f51f024e3a1f8

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0998DB04EC6E07AD3A0AC6FB2410CD5D1C9AB6EA0B036C89C79F51F024E3A1F8"
Last-Modified: Thu, 01 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10164
Expires: Fri, 02 Aug 2024 12:39:55 GMT
Date: Fri, 02 Aug 2024 09:50:31 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-01

Last Seen2024-08-19

Times Seen30862

Size504 B (504 bytes)

MD5086417994a199f2bbee25bd5c76ce9d7

SHA16de33407c60c52a9ed18403c3d0edebefec7c48a

SHA2560998db04ec6e07ad3a0ac6fb2410cd5d1c9ab6ea0b036c89c79f51f024e3a1f8

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0998DB04EC6E07AD3A0AC6FB2410CD5D1C9AB6EA0B036C89C79F51F024E3A1F8"
Last-Modified: Thu, 01 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10164
Expires: Fri, 02 Aug 2024 12:39:55 GMT
Date: Fri, 02 Aug 2024 09:50:31 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-01

Last Seen2024-08-19

Times Seen30862

Size504 B (504 bytes)

MD5086417994a199f2bbee25bd5c76ce9d7

SHA16de33407c60c52a9ed18403c3d0edebefec7c48a

SHA2560998db04ec6e07ad3a0ac6fb2410cd5d1c9ab6ea0b036c89c79f51f024e3a1f8

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0998DB04EC6E07AD3A0AC6FB2410CD5D1C9AB6EA0B036C89C79F51F024E3A1F8"
Last-Modified: Thu, 01 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10164
Expires: Fri, 02 Aug 2024 12:39:55 GMT
Date: Fri, 02 Aug 2024 09:50:31 GMT
Connection: keep-alive