Report - static.perimeter81.com/agents/windows/Harmony_SASE

Report Overview

Visitedpublic

2025-01-26 05:23:03

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
static.perimeter81.com	839875	2017-11-09	2019-02-11	2025-01-21	520 B	62 MB	54.240.174.47

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

static.perimeter81.com/agents/windows/Harmony_SASE_11.2.1.2378.msi

IP / ASN

54.240.174.47

#16509 AMAZON-02

File Overview

File TypeComposite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Harmony SASE, Author: Check Point Software Technologies Ltd, Keywords: Installer, Comments: This installer database contains the logic and data required to install Harmony SASE., Template: x64;1033, Revision Number: {7195B264-96BA-4512-83C2-9665EB9D5138}, Create Time/Date: Tue Jan 14 15:28:04 2025, Last Saved Time/Date: Tue Jan 14 15:28:04 2025, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2

Size62 MB (61652992 bytes)

MD5d2fa2dcb659bca804a8c2699b8ba4b62

SHA1da2709d5c41d092b28ba4e55078bcbc9943ec23c

SHA25645ae2e9157c198fb90c6a25c860b47e15cef79b2643708b29b228116162140b2

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/48

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET static.perimeter81.com/agents/windows/Harmony_SASE_11.2.1.2378.msi

54.240.174.47

200 OK

62 MB

URL User Request GET HTTPS

static.perimeter81.com/agents/windows/Harmony_SASE_11.2.1.2378.msi

IP / ASN

54.240.174.47

#16509 AMAZON-02

Requested byN/A

Resource Info

File typeComposite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Harmony SASE, Author: Check Point Software Technologies Ltd, Keywords: Installer, Comments: This installer database contains the logic and data required to install Harmony SASE., Template: x64;1033, Revision Number: {7195B264-96BA-4512-83C2-9665EB9D5138}, Create Time/Date: Tue Jan 14 15:28:04 2025, Last Saved Time/Date: Tue Jan 14 15:28:04 2025, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2

First Seen2025-01-22

Last Seen2025-01-30

Times Seen6

Size62 MB (61652992 bytes)

MD5d2fa2dcb659bca804a8c2699b8ba4b62

SHA1da2709d5c41d092b28ba4e55078bcbc9943ec23c

SHA25645ae2e9157c198fb90c6a25c860b47e15cef79b2643708b29b228116162140b2

Certificate Info

IssuerAmazon

Subjectstatic.safervpn.com

FingerprintA4:A8:DD:09:E4:6C:35:46:AD:FE:1F:1B:C1:39:FC:55:DE:03:5D:AE

ValidityFri, 02 Aug 2024 00:00:00 GMT - Sat, 30 Aug 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/48

HTTP Headers

GET /agents/windows/Harmony_SASE_11.2.1.2378.msi HTTP/1.1
Host: static.perimeter81.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 61652992
date: Sun, 26 Jan 2025 05:22:37 GMT
last-modified: Wed, 15 Jan 2025 09:28:34 GMT
etag: "d2fa2dcb659bca804a8c2699b8ba4b62"
x-amz-server-side-encryption: AES256
x-amz-meta-version: 11.2.1.2378
x-amz-meta-platform: windows
x-amz-meta-filetype: msi
x-amz-meta-signature: 45ae2e9157c198fb90c6a25c860b47e15cef79b2643708b29b228116162140b2
x-amz-meta-arch: x64
x-amz-version-id: dgeCbqBMLQsyWBCep8A5IiHBZGbNS.K_
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0rLg59UZNJTJNo7xAZfAUDyGWNeef-aQkNzqyP8c4LlxJs5BRXTYiw==
X-Firefox-Spdy: h2