| www.smartftp.com/get/Client?platform=x86 |  148.251.142.74 | 302 Found | 12 MB |
URL User Request GET www.smartftp.com/get/Client?platform=x86 IP148.251.142.74:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subject*.smartftp.com FingerprintA4:48:52:B1:70:7B:91:16:B5:C9:CA:33:AE:AE:AE:DF:1B:BB:35:D4 ValiditySun, 02 Mar 2025 03:17:37 GMT - Sat, 31 May 2025 03:17:36 GMT
Size12 MB (11696504 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/Client?platform=x86 HTTP/1.1
Host: www.smartftp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
location: https://static.smartftp.com/static/Products/Client/10.0.3050.0/x86/SmartFTP-Setup.exe
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' cdn.paddle.com public.profitwell.com; connect-src 'self' apple.com; img-src 'self' data:; style-src 'self' 'unsafe-inline' cdn.paddle.com; font-src 'self'; frame-src 'self' mailto: tel: sandbox-buy.paddle.com; base-uri 'self'
feature-policy: camera 'none';microphone 'none';geolocation 'none';
referrer-policy: strict-origin
alt-svc: h3=":443"; ma=86400
accept-ch: Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch
date: Thu, 24 Apr 2025 05:14:28 GMT
content-length: 0
X-Firefox-Spdy: h2
|
| static.smartftp.com/static/Products/Client/10.0.3050.0/x86/SmartFTP-Setup.exe |  104.21.112.1 | 200 OK | 12 MB |
URL User Request GET static.smartftp.com/static/Products/Client/10.0.3050.0/x86/SmartFTP-Setup.exe IP104.21.112.1:443
CertificateIssuerGoogle Trust Services Subjectsmartftp.com FingerprintF6:DF:20:1C:16:43:D7:3B:AA:91:83:83:A2:EA:AB:0C:D0:01:A2:1B ValidityMon, 24 Feb 2025 10:21:05 GMT - Sun, 25 May 2025 11:18:25 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections Size12 MB (11696504 bytes) Hashca3d63597f7d40f5125cda384f4dd5d8 9e504530c880c78398ec213b57a47c3d160ccef1 a0dc588fc5d46766c08cfdd2f7589db5647b7aaa0f781a61462b198173e86c37
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware | | VirusTotal | suspicious | |
GET /static/Products/Client/10.0.3050.0/x86/SmartFTP-Setup.exe HTTP/1.1
Host: static.smartftp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Apr 2025 05:14:28 GMT
content-type: application/octet-stream
content-length: 11696504
last-modified: Fri, 01 Nov 2024 23:22:47 GMT
accept-ranges: bytes
etag: "868115f6b42cdb1:0"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' cdn.paddle.com public.profitwell.com; connect-src 'self' apple.com; img-src 'self' data:; style-src 'self' 'unsafe-inline' cdn.paddle.com; font-src 'self'; frame-src 'self' mailto: tel: sandbox-buy.paddle.com; base-uri 'self'
feature-policy: camera 'none';microphone 'none';geolocation 'none';
referrer-policy: strict-origin
alt-svc: h3=":443"; ma=86400
accept-ch: Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch
cache-control: max-age=7200
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 93531e0678c1b524-OSL
X-Firefox-Spdy: h2
|
| www.smartftp.com/get/SFTPMSI86.exe | 148.251.142.74 | 301 Moved Permanently | 12 MB |
URL User Request GET www.smartftp.com/get/SFTPMSI86.exe IP148.251.142.74:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subject*.smartftp.com FingerprintA4:48:52:B1:70:7B:91:16:B5:C9:CA:33:AE:AE:AE:DF:1B:BB:35:D4 ValiditySun, 02 Mar 2025 03:17:37 GMT - Sat, 31 May 2025 03:17:36 GMT
Size12 MB (11696504 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/SFTPMSI86.exe HTTP/1.1
Host: www.smartftp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
location: https://www.smartftp.com/get/Client?platform=x86
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' cdn.paddle.com public.profitwell.com; connect-src 'self' apple.com; img-src 'self' data:; style-src 'self' 'unsafe-inline' cdn.paddle.com; font-src 'self'; frame-src 'self' mailto: tel: sandbox-buy.paddle.com; base-uri 'self'
feature-policy: camera 'none';microphone 'none';geolocation 'none';
referrer-policy: strict-origin
alt-svc: h3=":443"; ma=86400
accept-ch: Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch
date: Thu, 24 Apr 2025 05:14:28 GMT
content-length: 171
X-Firefox-Spdy: h2
|