| repcdn.veryfast.io/download/2.349/Setup.exe |  195.181.172.5 | 200 OK | 121 kB |
URL User Request GET HTTP/2repcdn.veryfast.io/download/2.349/Setup.exe IP195.181.172.5:443 ASN#60068 Datacamp Limited
CertificateIssuerLet's Encrypt Subject1791066845.rsc.cdn77.org Fingerprint2E:A9:45:41:15:B9:14:BC:69:E9:56:E9:F1:A0:4E:E6:AD:5C:F9:A9 ValidityThu, 22 Aug 2024 04:59:02 GMT - Wed, 20 Nov 2024 04:59:01 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections Size121 kB (121016 bytes) Hash85f2849f25944fc15e58521a52b800ff 718d11673de4743835523983ab5e06f88785a03d c4942bad2eaaca0bb5ed7e6900d6c85f12f0db6de790072838ce3f854b9ad677
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | malicious | |
GET /download/2.349/Setup.exe HTTP/1.1
Host: repcdn.veryfast.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Oct 2024 04:54:16 GMT
content-type: application/x-msdownload
content-length: 121016
x-amz-id-2: E9MDN7dbF8oM9OESuu0fjCGCvZ3hW4MSprp5fpi8agvHP6bF725XBeO52BpRiRhP//mbfRASoWdMd68Ng8zk+w==
x-amz-request-id: Z09W6C36DAX8MMMW
last-modified: Tue, 01 Oct 2024 11:36:34 GMT
etag: "85f2849f25944fc15e58521a52b800ff"
x-amz-server-side-encryption: AES256
x-amz-version-id: Sem9mB.7nsd4BWtcM8cnIF3YxB..UgCv
x-77-nzt: FAwBw7WsBAHXY78AAAwBuUwKDAH3T3ILAAwBisclxAG3owEAAAwBuTvfFAG3JgIAAA
x-77-nzt-ray: bb9bdb1c92c0f27cf8751c679aecd325
x-77-cache: HIT
x-77-age: 48995
server: CDN77-Turbo
x-77-pop: amsterdamNL
accept-ranges: bytes
X-Firefox-Spdy: h2
|
| veryfast.io/download.php?guid=4E29518F-71BD-4AD3-AEAA-B9B737A21F6F&version=last |  161.35.127.181 | 302 Found | 121 kB |
URL User Request GET HTTP/2veryfast.io/download.php?guid=4E29518F-71BD-4AD3-AEAA-B9B737A21F6F&version=last IP161.35.127.181:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerDigiCert Inc Subjectveryfast.io FingerprintD4:F3:64:7E:DF:9A:57:25:31:52:AF:10:2E:FE:0C:46:46:FB:29:F9 ValiditySun, 04 Feb 2024 00:00:00 GMT - Wed, 19 Feb 2025 23:59:59 GMT
Size121 kB (121016 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /download.php?guid=4E29518F-71BD-4AD3-AEAA-B9B737A21F6F&version=last HTTP/1.1
Host: veryfast.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 26 Oct 2024 04:54:16 GMT
content-type: text/html; charset=UTF-8
location: https://repcdn.veryfast.io/download/2.349/Setup.exe
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
X-Firefox-Spdy: h2
|