| www.wireshark.org/download/win32/all-versions/Wireshark-win32-1.8.7.exe |  104.26.11.240 | 200 OK | 21 MB |
URL User Request GET www.wireshark.org/download/win32/all-versions/Wireshark-win32-1.8.7.exe IP104.26.11.240:443
CertificateIssuerGoogle Trust Services Subjectwireshark.org Fingerprint46:52:DB:85:34:6B:92:BE:6C:F4:78:07:69:AA:33:0F:F5:1A:07:A7 ValidityMon, 05 May 2025 19:38:34 GMT - Sun, 03 Aug 2025 20:38:29 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections Size21 MB (20868704 bytes) Hash8cc7d649964c11beeed9bcf4f8ebaacd 769e5ade3292452eb2d4bc44854834527359b7bd dd1f807d92dcf3b3d086885ecb7d271c5e70de2f52ec668ca78ff827443fdd2d
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | Detect pe file that no import table |
GET /download/win32/all-versions/Wireshark-win32-1.8.7.exe HTTP/1.1
Host: www.wireshark.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 May 2025 09:27:10 GMT
content-type: application/x-msdos-program
content-length: 20868704
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-slogan: Sniffing the glue that holds the Internet together., Go deep.
last-modified: Fri, 17 May 2013 20:25:10 GMT
etag: "13e6e60-4dcefc78c5580"
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://*.googletagmanager.com https://conference.wireshark.org https://ticketing.wireshark.org; connect-src 'self' https://cloudflareinsights.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://ticketing.wireshark.org; style-src 'self' 'unsafe-inline' https://ticketing.wireshark.org; img-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com https://ipv6.google.com https://ipv4.google.com https://ticketing.wireshark.org; media-src data:; font-src 'self' https:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://ticketing.wireshark.org; report-uri https://wiresharkfoundation.uriports.com/reports/report; report-to default
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Platform, Sec-CH-UA-WoW64
cache-control: public, max-age=14400, s-maxage=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UefWNHmfkUCsbPvP6Yjj51Nnx80yjC2WH86ILyWE%2FLZAnbcv7FH854c7sfqrZpvWE8BquVyUuAeg2zw%2FYrAFhTRJ13N5zW%2Ba%2FyAJ07YNWvsCYDKkbvOwLXwA%2FvAAjiSxWMgG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93b770ad99d5b4ed-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=500&min_rtt=471&rtt_var=115&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3182&recv_bytes=1165&delivery_rate=7451114&cwnd=253&unsent_bytes=0&cid=3d69ae0f5ea38d8a&ts=827&x=0"
X-Firefox-Spdy: h2
|