| akvis-dl.sfo2.cdn.digitaloceanspaces.com/akvis-hdrfactory-setup.exe |  172.64.145.29 | 200 OK | 57 MB |
URL User Request GET akvis-dl.sfo2.cdn.digitaloceanspaces.com/akvis-hdrfactory-setup.exe IP172.64.145.29:443
File typePE32 executable (GUI) Intel 80386, for MS Windows, 6 sections Size57 MB (56987248 bytes) Hash18fc028ebd6d3f4a699a597080bdc5fc de0c88c3544f9af0a57984411125ab9feed9231e c3eb04f5a0f288bebdaf189b70b5ca87e401e45e5d93888a76810f3d2c1be857
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | Detect pe file that no import table |
GET /akvis-hdrfactory-setup.exe HTTP/1.1
Host: akvis-dl.sfo2.cdn.digitaloceanspaces.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 May 2025 00:21:13 GMT
content-type: application/x-msdownload
content-length: 56987248
last-modified: Wed, 20 Dec 2023 16:01:28 GMT
x-rgw-object-type: Normal
etag: "42f8c2b82f8eac3defe7a9943c50246f-7"
x-amz-meta-s3b-last-modified: 20231220T154137Z
x-amz-meta-sha256: 10e0e54ae37b327114e5d38718e07e44fc3c03c1fa59df8eb1b9b4d6aef1822b
content-disposition: attachment; filename="akvis-hdrfactory-setup.exe"
x-amz-request-id: tx000005f29c938e40dbdaf-0067f6109d-f539434-sfo2b
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-do-cdn-uuid: a24cfce9-193d-4c5b-8e3d-f6e76d0e8f78
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
set-cookie: __cf_bm=R6Up9msUyS01Temou7CU8.qhfkqPjXB35X6Dfvx5VsE-1746318073-1.0.1.1-h797P.JOVvQWjaM7v21H9fBlsJwoiAhA_jVlvd13aOwrPiXIV0ZudBT0IukpUACix9RC6a85eFlXUewMl.FroxorEuG8ON__JuJAmVxgaVY; path=/; expires=Sun, 04-May-25 00:51:13 GMT; domain=.digitaloceanspaces.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 93a3d639af2e56b7-OSL
X-Firefox-Spdy: h2
|
| download.akvis.com/akvis-hdrfactory-setup.exe |  208.76.171.26 | 302 Moved Temporarily | 57 MB |
URL User Request GET download.akvis.com/akvis-hdrfactory-setup.exe IP208.76.171.26:443
CertificateIssuerLet's Encrypt Subjectdownload.akvis.com Fingerprint65:2A:AD:90:35:2B:3B:AC:A1:F7:78:73:A5:35:11:A5:F2:BC:B1:A2 ValiditySun, 27 Apr 2025 04:01:45 GMT - Sat, 26 Jul 2025 04:01:44 GMT
Size57 MB (56987248 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /akvis-hdrfactory-setup.exe HTTP/1.1
Host: download.akvis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.18.0
Date: Sun, 04 May 2025 00:20:58 GMT
Content-Type: text/html
Content-Length: 145
Connection: keep-alive
Location: https://akvis-dl.sfo2.cdn.digitaloceanspaces.com/akvis-hdrfactory-setup.exe
Strict-Transport-Security: max-age=31536000
|