GET download.dnsfilter.com/User_Agent/Windows/DNS_Agent_Setup.msi
200 OK 3.9 MB URL User Request GET HTTP/2 download.dnsfilter.com/User_Agent/Windows/DNS_Agent_Setup.msi
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:15:BE:3B:0E:19:17:86:2B:40:A1:77:CF:7A:E5:48:69:0A:26:C5
ValidityTue, 18 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: DNS Agent, Author: DNS, Keywords: Installer, Comments: Version 1.12.0.0, Template: x64;1033, Revision Number: {0FE44A1B-D28E-427B-820E-D7D40894E8D6}, Create Time/Date: Wed Jan 10 17:41:58 2024, Last Saved Time/Date: Wed Jan 10 17:41:58 2024, Number of Pages: 400, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2
Size 3.9 MB (3911680 bytes)
Hash fa544009359cd78232d7c643811ffb68
6916489dc0334337e904adbe0099f22e4a966462
6b5dca1ef099c2704c8c31a2f772cc90d5f96afcb2ffea5979ab3c271951fb74
Analyzer Verdict Alert YARAhub by abuse.ch malware Detect files is `SliverFox` malware
GET /User_Agent/Windows/DNS_Agent_Setup.msi HTTP/1.1
Host: download.dnsfilter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Mar 2024 07:48:45 GMT
content-type: binary/octet-stream
content-length: 3911680
x-amz-id-2: VthHxmhW/cWNKH7YIH/iKFkMJrKeLGOv71m2arVCL9Bb6WUJDF9il2b6j97MSFoDodjE56VjgH0=
x-amz-request-id: MKXP49QQC9EHSH1X
last-modified: Wed, 10 Jan 2024 17:43:09 GMT
x-amz-version-id: rGV3DFBb_Kp1gqCpFVBg_CdiJhRnE8Ah
etag: "fa544009359cd78232d7c643811ffb68"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f7gvWVBuUmEs01%2BhO1y%2BNzrBsi5nhqPLxemLDRNgsl%2B5s1oFljJq%2BXSjvw%2FwM3%2FI1WZK5IVcVG4mkmIpzdg1v4PhWBqq5pHzcR%2Bnauem1vXQDFn%2BqcujdgGseE4DpNkkaxpJmxQ%2Ffjw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8608fc295bec1c0a-OSL
X-Firefox-Spdy: h2
104.26.3.59