| www.videohelp.com/download/yt-dlp.exe?r=QZNFlrSlppTf |  81.171.6.66 | 301 Moved Permanently | 266 B |
URL User Request GET HTTP/1.1www.videohelp.com/download/yt-dlp.exe?r=QZNFlrSlppTf IP81.171.6.66:443 ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerLet's Encrypt Subjectwww.videohelp.com FingerprintC3:20:BB:A2:31:D4:B9:C7:E5:35:92:43:E0:B3:C7:E1:45:0C:24:BC ValidityFri, 01 Mar 2024 04:15:24 GMT - Thu, 30 May 2024 04:15:23 GMT
File typeHTML document, ASCII text Hash27d7637741ec666eefa779f27ee8dc3f cdb9469d1588f58b0287a4cef51bfc3fcaf4ce47 393dffed772180a08e2c37bdb82f97c4e7a1d231512e27433642f87cce4b4eea
GET /download/yt-dlp.exe?r=QZNFlrSlppTf HTTP/1.1
Host: www.videohelp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 23 Apr 2024 07:09:53 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
Strict-Transport-Security: max-age=31536000;
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
Referrer-Policy: strict-origin-when-cross-origin
X-Permitted-Cross-Domain-Policies: all
Location: https://www.videohelp.com/download-QZNFlrSlppTf/yt-dlp.exe
Content-Length: 266
Keep-Alive: timeout=2, max=500
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
| www.videohelp.com/download-QZNFlrSlppTf/yt-dlp.exe | 81.171.6.66 | 200 OK | 18 MB |
URL User Request GET HTTP/1.1www.videohelp.com/download-QZNFlrSlppTf/yt-dlp.exe IP81.171.6.66:443 ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerLet's Encrypt Subjectwww.videohelp.com FingerprintC3:20:BB:A2:31:D4:B9:C7:E5:35:92:43:E0:B3:C7:E1:45:0C:24:BC ValidityFri, 01 Mar 2024 04:15:24 GMT - Thu, 30 May 2024 04:15:23 GMT
File typePE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows, 11 sections Size18 MB (18023276 bytes) Hash779d5e9530d01b2e94697d3644b7139f ac45fc039bdd7f58bfa20f3f78d80e2d6ef8335a 913be69456c242dd81d796eae5ad36d32564573d625fcdf91d0207b1f9cb2a6b
| Analyzer | Verdict | Alert |
|---|
| Public InfoSec YARA rules | malware | Identifies executable converted using PyInstaller. |
GET /download-QZNFlrSlppTf/yt-dlp.exe HTTP/1.1
Host: www.videohelp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 23 Apr 2024 07:09:53 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
Strict-Transport-Security: max-age=31536000;
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
Referrer-Policy: strict-origin-when-cross-origin
X-Permitted-Cross-Domain-Policies: all
Last-Modified: Tue, 09 Apr 2024 18:21:48 GMT
ETag: "113036c-615adfec7c927"
Accept-Ranges: bytes
Content-Length: 18023276
Content-Disposition: attachment
Keep-Alive: timeout=2, max=499
Connection: Keep-Alive
Content-Type: application/octet-stream
|