| swupdate.openvpn.org/community/releases/tap-windows-9.21.2.exe |  104.17.240.245 | 301 Moved Permanently | 256 kB |
URL User Request GET swupdate.openvpn.org/community/releases/tap-windows-9.21.2.exe IP104.17.240.245:443
CertificateIssuerGoogle Trust Services Subjectopenvpn.org Fingerprint77:E8:7F:9D:78:D5:63:D4:2E:E9:F4:03:0B:35:86:6E:CC:C0:E2:11 ValiditySun, 16 Mar 2025 04:50:22 GMT - Sat, 14 Jun 2025 05:50:13 GMT
Size256 kB (256240 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /community/releases/tap-windows-9.21.2.exe HTTP/1.1
Host: swupdate.openvpn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sun, 27 Apr 2025 21:56:46 GMT
content-type: text/html
content-length: 167
location: https://swupdate.openvpn.net/community/releases/tap-windows-9.21.2.exe
cache-control: max-age=3600
expires: Sun, 27 Apr 2025 22:56:46 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 9371925f9a0db4f4-OSL
X-Firefox-Spdy: h2
|
| swupdate.openvpn.net/community/releases/tap-windows-9.21.2.exe | 104.19.191.106 | 200 OK | 256 kB |
URL User Request GET swupdate.openvpn.net/community/releases/tap-windows-9.21.2.exe IP104.19.191.106:443
CertificateIssuerGoDaddy.com, Inc. Subject*.openvpn.net FingerprintE7:70:A3:16:A6:66:73:32:33:B7:BB:98:1F:6A:D0:0D:57:72:41:8A ValidityTue, 21 Jan 2025 21:17:36 GMT - Sun, 22 Feb 2026 21:17:36 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections Size256 kB (256240 bytes) Hash47fa5f0670cf191d066e5dfbf4f4ee70 db9d441c209fb28b7c07286a74fe000738304dac 645bee92ba4e9f32ddfdd9f8519dc1b9f9ff0b0a8e87e342f08d39da77e499a9
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware |
GET /community/releases/tap-windows-9.21.2.exe HTTP/1.1
Host: swupdate.openvpn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 27 Apr 2025 21:56:46 GMT
content-type: application/x-msdownload
content-length: 256240
x-amz-id-2: T/cSJWZWrYE/+ECrvpuPTPwf3zJDjAERD/42UObqw36wLc8pyBAeP1tRyiuogrSFIFbCvHYOtE5592i7m/5+DA==
x-amz-request-id: S6R0AP2JJ1G34SNS
last-modified: Fri, 06 Dec 2024 13:26:58 GMT
x-amz-version-id: izry0nPiPDpu781GmJEUDcWUzPasmbr9
etag: "47fa5f0670cf191d066e5dfbf4f4ee70"
x-amz-storage-class: STANDARD_IA
cf-cache-status: HIT
age: 593856
expires: Wed, 28 May 2025 21:56:46 GMT
cache-control: public, max-age=2678400
accept-ranges: bytes
vary: Accept-Encoding
set-cookie: _cfuvid=LLadFah0X.NoXWsRK29CpxtGHtQFZAs6IeBs_cR3yG4-1745791006811-0.0.1.1-604800000; path=/; domain=.openvpn.net; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 937192602b4a5685-OSL
X-Firefox-Spdy: h2
|