| GET www.rarsoft.com/rar/wrar401.exe |  51.195.68.162 | 301 Moved Permanently | 1.4 MB |
URL User Request GET www.rarsoft.com/rar/wrar401.exe IP51.195.68.162:443
CertificateIssuerLet's Encrypt Subjectrarlabs.com FingerprintE2:28:4D:C5:E7:9E:D8:57:B9:61:D8:4C:16:C7:1C:3C:86:D7:30:E0 ValidityMon, 17 Mar 2025 22:01:51 GMT - Sun, 15 Jun 2025 22:01:50 GMT
Size1.4 MB (1448993 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rar/wrar401.exe HTTP/1.1
Host: www.rarsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
content-length: 0
location: https://www.rarlab.com/rar/wrar401.exe
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: frame-ancestors 'none';
X-Firefox-Spdy: h2
|
| GET www.rarlab.com/rar/wrar401.exe | 51.195.68.162 | 200 OK | 1.4 MB |
URL User Request GET www.rarlab.com/rar/wrar401.exe IP51.195.68.162:443
CertificateIssuerLet's Encrypt Subjectrarlab.com Fingerprint71:DA:B0:1E:0E:3C:92:34:FE:67:B2:D6:61:01:52:FB:36:B4:41:2D ValidityMon, 17 Mar 2025 22:04:40 GMT - Sun, 15 Jun 2025 22:04:39 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive, 5 sections Size1.4 MB (1448993 bytes) Hash8b9b452a9a020476f657912fe7b4179a 31375512e96bbfaf41e1884c87464fe6ab3d244f d8f6414c57222b1740cf842245623da2bd5e1a9db03790ead39e4dfdaf24139f
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /rar/wrar401.exe HTTP/1.1
Host: www.rarlab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 21 Mar 2025 18:27:31 GMT
server: Apache
last-modified: Sat, 28 May 2011 15:05:49 GMT
etag: "161c21-4a45763b8ad40"
accept-ranges: bytes
content-length: 1448993
content-type: application/octet-stream
x-frame-options: DENY
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: frame-ancestors 'none';
X-Firefox-Spdy: h2
|