GET desktop.ezfn.dev/updater/EZFNLauncher.msi
200 OK 11 MB URL User Request GET HTTP/2 desktop.ezfn.dev/updater/EZFNLauncher.msi
IP
Certificate IssuerGoogle Trust Services LLC
Subjectdesktop.ezfn.dev
Fingerprint21:4F:2D:5D:A4:C2:D0:7B:9C:31:33:25:93:F7:8B:E1:21:86:08:EC
ValidityWed, 31 Jan 2024 13:55:04 GMT - Tue, 30 Apr 2024 13:55:03 GMT
File type Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: EZFN Launcher, Author: ezfn, Keywords: Installer, Comments: This installer database contains the logic and data required to install EZFN Launcher., Template: x64;0, Revision Number: {B6A50779-7F9D-4B7F-9E32-795C3B1501FE}, Create Time/Date: Thu Feb 15 17:36:52 2024, Last Saved Time/Date: Thu Feb 15 17:36:52 2024, Number of Pages: 450, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2
Size 11 MB (10719232 bytes)
Hash a5bd01f63995002da244b92fc0f59f6a
9339443de6591b3ac85f99241ef0aae9e772ba81
b0049cd8d457c1e60e9f378ffb7ea3ebbad1a601c8957aa2bf3e5a8b0ce57901
Analyzer Verdict Alert YARAhub by abuse.ch malware Detect files is `SliverFox` malware
GET /updater/EZFNLauncher.msi HTTP/1.1
Host: desktop.ezfn.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Feb 2024 06:23:30 GMT
content-type: application/octet-stream
content-length: 10719232
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "af8010d26f8f3b4a13bd795cfe379afd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FT0vDIKYmVeOyhONFUyqRJjSZ20FldwatrWZv4hK6%2B%2F4f9QslUZQtCrmkrS0HTwjldk7WodiiJWLSCqDRZUbZQ9EE8jKkQydy8bZDJ%2FAQmCq3mVePir%2Fx2aX12fAJipCndjT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8563b3c44b7b712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
104.26.7.31