Report - cloud.fortect.com/app/installation/downloader/7221/Fortect.exe

Report Overview

Visitedpublic

2025-04-10 22:31:54

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
cloud.fortect.com	unknown	2022-01-21	2022-04-04	2025-04-09	530 B	845 kB	172.67.75.40

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-04-10 22:31:32	medium	Client IP	172.67.75.40	ET ADWARE_PUP Observed PC Optimizer Software Domain (fortect .com in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

cloud.fortect.com/app/installation/downloader/7221/Fortect.exe

IP / ASN

172.67.75.40

#13335 CLOUDFLARENET

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

Size844 kB (844344 bytes)

MD57a37e4fa137f818c2fdd000e202dd203

SHA19a9508bff9dc1a6585cff1761d7f0f79a2f0c294

SHA256d71bcaf99cf17c001cdc27550760f54ccb9805e80386a1b3ab5839f6bcf7436b

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	GET cloud.fortect.com/app/installation/downloader/7221/Fortect.exe	172.67.75.40	200 OK	844 kB
URL cloud.fortect.com/app/installation/downloader/7221/Fortect.exe IP / ASN 172.67.75.40 #13335 CLOUDFLARENET Requested byN/A Resource Info File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections First Seen2025-04-10 Last Seen2025-04-11 Times Seen2 Size844 kB (844344 bytes) MD57a37e4fa137f818c2fdd000e202dd203 SHA19a9508bff9dc1a6585cff1761d7f0f79a2f0c294 SHA256d71bcaf99cf17c001cdc27550760f54ccb9805e80386a1b3ab5839f6bcf7436b Certificate Info IssuerGoogle Trust Services Subjectfortect.com Fingerprint9D:46:E0:55:1A:2F:80:94:D3:23:26:25:F8:85:94:D9:6B:9C:F4:18 ValiditySun, 02 Mar 2025 18:25:54 GMT - Sat, 31 May 2025 19:25:25 GMT HTTP Headers GET /app/installation/downloader/7221/Fortect.exe HTTP/1.1 Host: cloud.fortect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Thu, 10 Apr 2025 22:31:32 GMT content-type: application/x-msdownload content-length: 844344 x-amz-id-2: w3vDW29srETrAaGKqihzPb+s6Y/mRzzUUV9OfI8ZT5DWS5mJcNuTy36/eUFJnvQxaZ2/7RvXrrQ= x-amz-request-id: M7HW1N8MJ528FP6H last-modified: Wed, 26 Mar 2025 10:22:06 GMT etag: "7a37e4fa137f818c2fdd000e202dd203" cache-control: max-age=2678400 cf-cache-status: HIT age: 4076 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KB1T4Ti64SlYVGAibR2gGZX3l1%2BcEVCon3cVnrUgyMs5tTTBV7SVqdjp8fv8Rw5TkkGAAjociXovIhqzPD3pYgrBZjwUzEphM1%2FBuNLFbTEfq%2FKZ93EvY5tacGedDhyosCdK"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 92e5b1e94ae956a3-OSL server-timing: cfL4;desc="?proto=TCP&rtt=735&min_rtt=480&rtt_var=408&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3197&recv_bytes=1157&delivery_rate=3917042&cwnd=253&unsent_bytes=0&cid=75ef01adcbd939b4&ts=39&x=0" X-Firefox-Spdy: h2

GET cloud.fortect.com/app/installation/downloader/7221/Fortect.exe

172.67.75.40

200 OK

844 kB

URL

cloud.fortect.com/app/installation/downloader/7221/Fortect.exe

IP / ASN

172.67.75.40

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

First Seen2025-04-10

Last Seen2025-04-11

Times Seen2

Size844 kB (844344 bytes)

MD57a37e4fa137f818c2fdd000e202dd203

SHA19a9508bff9dc1a6585cff1761d7f0f79a2f0c294

SHA256d71bcaf99cf17c001cdc27550760f54ccb9805e80386a1b3ab5839f6bcf7436b

Certificate Info

IssuerGoogle Trust Services

Subjectfortect.com

Fingerprint9D:46:E0:55:1A:2F:80:94:D3:23:26:25:F8:85:94:D9:6B:9C:F4:18

ValiditySun, 02 Mar 2025 18:25:54 GMT - Sat, 31 May 2025 19:25:25 GMT

HTTP Headers

GET /app/installation/downloader/7221/Fortect.exe HTTP/1.1
Host: cloud.fortect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 10 Apr 2025 22:31:32 GMT
content-type: application/x-msdownload
content-length: 844344
x-amz-id-2: w3vDW29srETrAaGKqihzPb+s6Y/mRzzUUV9OfI8ZT5DWS5mJcNuTy36/eUFJnvQxaZ2/7RvXrrQ=
x-amz-request-id: M7HW1N8MJ528FP6H
last-modified: Wed, 26 Mar 2025 10:22:06 GMT
etag: "7a37e4fa137f818c2fdd000e202dd203"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 4076
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KB1T4Ti64SlYVGAibR2gGZX3l1%2BcEVCon3cVnrUgyMs5tTTBV7SVqdjp8fv8Rw5TkkGAAjociXovIhqzPD3pYgrBZjwUzEphM1%2FBuNLFbTEfq%2FKZ93EvY5tacGedDhyosCdK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92e5b1e94ae956a3-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=735&min_rtt=480&rtt_var=408&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3197&recv_bytes=1157&delivery_rate=3917042&cwnd=253&unsent_bytes=0&cid=75ef01adcbd939b4&ts=39&x=0"
X-Firefox-Spdy: h2