| download.hitpaw.com/go/hitpaw-video-enhancer_4803.exe?rnclid=11708992000175340901/ |  104.18.25.102 | 302 Found | 786 kB |
URL User Request GET HTTP/2download.hitpaw.com/go/hitpaw-video-enhancer_4803.exe?rnclid=11708992000175340901/ IP104.18.25.102:443
CertificateIssuerGoogle Trust Services LLC Subjecthitpaw.com FingerprintB6:05:06:C7:B9:E4:EC:5A:65:40:20:6E:71:CA:3B:27:FB:4B:F8:82 ValiditySun, 17 Mar 2024 13:48:03 GMT - Thu, 13 Jun 2024 05:09:17 GMT
Size786 kB (786432 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/hitpaw-video-enhancer_4803.exe?rnclid=11708992000175340901/ HTTP/1.1
Host: download.hitpaw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 29 Mar 2024 07:14:10 GMT
content-type: text/html
location: https://go.hitpaw.com/go?c=download&a=track&name=hitpaw-video-enhancer_4803.exe&back_url=https://download.hitpaw.com/downloads/hitpaw-video-enhancer.exe
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
cf-cache-status: HIT
expires: Sat, 06 Apr 2024 07:14:10 GMT
cache-control: public, max-age=691200
set-cookie: __cflb=02DiuFeyhpMyGHH4ZBan3htggpYdCxGv9U9vr2HoVK1Pz; SameSite=Lax; path=/; expires=Sat, 30-Mar-24 06:14:10 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 86be0fba68eb56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| go.hitpaw.com/go?c=download&a=track&name=hitpaw-video-enhancer_4803.exe&back_url=https://download.hitpaw.com/downloads/hitpaw-video-enhancer.exe | 104.18.25.102 | 302 Found | 786 kB |
URL User Request GET HTTP/3go.hitpaw.com/go?c=download&a=track&name=hitpaw-video-enhancer_4803.exe&back_url=https://download.hitpaw.com/downloads/hitpaw-video-enhancer.exe IP104.18.25.102:443
CertificateIssuerGoogle Trust Services LLC Subjecthitpaw.com FingerprintB6:05:06:C7:B9:E4:EC:5A:65:40:20:6E:71:CA:3B:27:FB:4B:F8:82 ValiditySun, 17 Mar 2024 13:48:03 GMT - Thu, 13 Jun 2024 05:09:17 GMT
Size786 kB (786432 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?c=download&a=track&name=hitpaw-video-enhancer_4803.exe&back_url=https://download.hitpaw.com/downloads/hitpaw-video-enhancer.exe HTTP/1.1
Host: go.hitpaw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Fri, 29 Mar 2024 07:14:10 GMT
content-type: text/html; charset=UTF-8
location: https://download.hitpaw.com/downloads/hitpaw-video-enhancer.exe
cache-control: no-cache, private
cf-cache-status: DYNAMIC
set-cookie: XSRF-TOKEN=eyJpdiI6IkVLcTBqbWdsNGlBNlRHQkJrQ1NHVVE9PSIsInZhbHVlIjoiTFNZd0kwVHZOT0dKOVErT3BRbjNxYTNBMzBPYVwvckt2WVIwdFFUZUtLN05oR2doUG9KNVoxcmthUXpnc1JlMmpBMUFyM1BMRFI2S281bVBhRXkrdlVKbTl2cTlGaTlsSXpWTzJjSk84OGJ4ek0rcnZ5NVRmY0VGUk1kVkxjQXR1IiwibWFjIjoiNzdkZjIwZTVkZDkwNjFlZjRiMTE0ZjI0NzgzZDhmOWM5YTU1Y2I2MjUwOTEyM2Q3ZjJiNDlmM2U4OTQyNGIxNCJ9; expires=Fri, 29-Mar-2024 09:14:10 GMT; Max-Age=7200; path=/
laravel_session=eyJpdiI6InU3UDN5MmxmSkpwdkZwNWg4eG1qK3c9PSIsInZhbHVlIjoiSGZGYTNQMlZVem8zaEdGZG9rbjcrYXYrTnpRUTN2cmF1WFZQUkRnMmRBOU5YTno5aGJGWERHa3VzWmdRTjBzcHZ1elRUSjBoRTlUQ2xjakFYV2VrYXprWnE5bUVvREhRWGJ6c3BrZFdCVjRINkdRRVpZWTNnZ3BtckIzeVlpT2MiLCJtYWMiOiI2NTc2YjdiNzBkNzQ1ZTYzYTUzM2M4ZWJkMTgzYzY4NDhhN2FlYTdmZTcyZjYwZTFkMmZhNmExZGUxYTQxZDJhIn0%3D; expires=Fri, 29-Mar-2024 09:14:10 GMT; Max-Age=7200; path=/; httponly
__cflb=02DiuFSmiBfoL4CdhAn2QDpzXBcfceqo5cwXQ7ao3VJzx; SameSite=Lax; path=/; expires=Sat, 30-Mar-24 06:14:10 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 86be0fbe4c485693-OSL
alt-svc: h3=":443"; ma=86400
|
| download.hitpaw.com/downloads/hitpaw-video-enhancer.exe | 104.18.25.102 | 200 OK | 786 kB |
URL User Request GET HTTP/3download.hitpaw.com/downloads/hitpaw-video-enhancer.exe IP104.18.25.102:443
CertificateIssuerGoogle Trust Services LLC Subjecthitpaw.com FingerprintB6:05:06:C7:B9:E4:EC:5A:65:40:20:6E:71:CA:3B:27:FB:4B:F8:82 ValiditySun, 17 Mar 2024 13:48:03 GMT - Thu, 13 Jun 2024 05:09:17 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections Size786 kB (786432 bytes) Hasheee67002714dd8719d07917f20e71931 1761e1f25a6a1f9acd6dd6ce7218b7e4b20f18e1 2ca129dcb4f113bab41ddec235a614b0ede0689b8e34fa709dd723f451d97b37
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | Detect pe file that no import table |
GET /downloads/hitpaw-video-enhancer.exe HTTP/1.1
Host: download.hitpaw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuFeyhpMyGHH4ZBan3htggpYdCxGv9U9vr2HoVK1Pz
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 07:14:10 GMT
content-type: application/octet-stream
content-length: 1882376
cf-ray: 86be0fbf3cb55693-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 2004767
cache-control: public, max-age=691200
content-disposition: attachment;filename=hitpaw-video-enhancer.exe
etag: "65a48a82-1cb908"
expires: Sat, 06 Apr 2024 07:14:10 GMT
last-modified: Mon, 15 Jan 2024 01:29:38 GMT
vary: Accept-Encoding
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
server: cloudflare
alt-svc: h3=":443"; ma=86400
|