| www.getmydrivers.com/packages/GetMyDriversSetup.exe |  3.164.240.72 | 303 See Other | 0 B |
URL User Request GET HTTP/2www.getmydrivers.com/packages/GetMyDriversSetup.exe IP3.164.240.72:443
CertificateIssuerDigiCert Inc Subjectwww.getmydrivers.com Fingerprint47:67:BE:57:38:D6:35:5A:3E:B7:E8:51:82:13:1C:F7:10:BE:EB:76 ValidityMon, 12 Feb 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /packages/GetMyDriversSetup.exe HTTP/1.1
Host: www.getmydrivers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
content-type: text/html;charset=utf-8
content-length: 0
location: https://app.getmydrivers.com/packages/GetMyDriversSetup.exe
date: Fri, 19 Apr 2024 17:13:28 GMT
server: Apache
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-powered-by: Phusion Passenger(R) 6.0.20
set-cookie: Cps3.user_session_id=ee218fa0-d43e-013c-aa4a-0ecd9f54d08e; path=/; max-age=2591999; secure; SameSite=None
usts_web=8dc9bac6c7e2909a5e05024054912850056417d340706ab75c50deda61a83861; path=/; expires=Sun, 19 May 2024 17:13:27 GMT; secure; httponly
access-control-allow-methods: *
access-control-allow-headers: *
content-security-policy: frame-ancestors 'self';
status: 303 See Other
vary: Origin
x-robots-tag: noindex
cache-control: s-maxage=10
x-cache: Miss from cloudfront
via: 1.1 bf9e29084831d9a2b72227f617c2b80c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: FAkXE_Sg5RV7YxWTc8gSws7JZctLrbybpMLP09dxVJEqa68Dsk_8GQ==
X-Firefox-Spdy: h2
|
| app.getmydrivers.com/packages/GetMyDriversSetup.exe | 52.85.243.7 | 200 OK | 2.2 MB |
URL User Request GET HTTP/2app.getmydrivers.com/packages/GetMyDriversSetup.exe IP52.85.243.7:443
CertificateIssuerAmazon Subjectapp.ustechsupport.com FingerprintCA:9A:7F:E0:30:BE:48:92:C3:49:4C:A7:50:D5:F5:B6:03:05:62:16 ValiditySat, 01 Jul 2023 00:00:00 GMT - Mon, 29 Jul 2024 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections Size2.2 MB (2187520 bytes) Hash0f21221a5afda17f43e950adab3a6d29 2855651430dc6e6618b4511802b9591d43152448 882718338dbf9b5ff66470f00d767217fd1f0b3cdb4ebd714fe3435a8705c6a7
| Analyzer | Verdict | Alert |
|---|
| Public InfoSec YARA rules | malware | Identifies compiled AutoIT script (as EXE). | | VirusTotal | suspicious | |
GET /packages/GetMyDriversSetup.exe HTTP/1.1
Host: app.getmydrivers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-ms-dos-executable
content-length: 2187520
last-modified: Thu, 09 Mar 2023 18:26:05 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 19 Apr 2024 01:04:37 GMT
etag: "0f21221a5afda17f43e950adab3a6d29"
x-cache: Hit from cloudfront
via: 1.1 f46b6835a58763129c9d1db5dc3ef62e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 7U00o69IzlJ792q4s7X9Ja55ezuMjOgfH6jzJ3DBN3UktDvFVmKZag==
age: 58132
X-Firefox-Spdy: h2
|