IP 104.18.15.101:0
Hashf2ed06c7f8d1b6f5733a62731d9be38e 227cbf611e91096c1e16254c602dc5bea33caa7e 2f906eef371b19aa632965f8eb3d9b6ef58c6ca80f98105e9e8e581000331951
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 20 Sep 2023 01:52:16 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 17 Sep 2023 12:54:17 GMT
Expires: Sun, 24 Sep 2023 12:54:16 GMT
Etag: "227cbf611e91096c1e16254c602dc5bea33caa7e"
Cache-Control: max-age=384720,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80966d92fa2256cb-OSL
|
| GET dw50.malavida.com/dwn/36362976f8e2e34a663cd001e0e8eb96d826f3b458f32464a445645c1bebc3d2/MegaDownloader_v1.8.exe |  5.145.168.47 | 200 OK | 3.3 MB |
URL User Request GET HTTP/2dw50.malavida.com/dwn/36362976f8e2e34a663cd001e0e8eb96d826f3b458f32464a445645c1bebc3d2/MegaDownloader_v1.8.exe IP5.145.168.47:443 ASN#39020 Comvive Servidores S.L.
CertificateIssuerSectigo Limited Subject*.malavida.com FingerprintDD:AD:14:1C:69:D1:86:8F:20:49:51:28:42:E5:20:08:49:C8:28:B2 ValidityMon, 12 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows\012- data Size3.3 MB (3252185 bytes) Hashe88a876515ddca653c424791d614e58e 4dd7b4bddac0aac4439e0e1582a943628b670e63 76a56aa46b0102a96a4af355f5e03aff2b6ae6076f040ff4ff4e0d943a75d411
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /dwn/36362976f8e2e34a663cd001e0e8eb96d826f3b458f32464a445645c1bebc3d2/MegaDownloader_v1.8.exe HTTP/1.1
Host: dw50.malavida.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 20 Sep 2023 01:52:16 GMT
server: Apache
accept-ranges: bytes
cache-control: public
x-robots-tag: noindex
last-modified: Mon, 22 Jun 2020 11:18:01 GMT
content-length: 3252185
content-type: application/x-dosexec
X-Firefox-Spdy: h2
|