| downloads.videosoftdev.com/WMFdist.exe |  172.67.70.163 | 200 OK | 4.1 MB |
URL User Request GET HTTP/3downloads.videosoftdev.com/WMFdist.exe IP172.67.70.163:443
CertificateIssuerGoogle Trust Services LLC Subjectvideosoftdev.com FingerprintA1:EB:7A:F3:2C:09:32:81:4A:4C:63:89:50:04:4F:13:D4:52:47:4D ValidityWed, 31 Jan 2024 22:09:18 GMT - Tue, 30 Apr 2024 22:09:17 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, MS CAB-Installer self-extracting archive, 3 sections Size4.1 MB (4085904 bytes) Hash6e05e7d536b34f171ed70e4353d553c2 333750aa2d2121ad3e332ada651add83170b7bf8 fd0754a2ef3567859db0bf3c75f18ec50aaeae6a7561aff9e7f6c7775a945ed7
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | detect_Redline_Stealer |
GET /WMFdist.exe HTTP/1.1
Host: downloads.videosoftdev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:43:52 GMT
content-type: application/octet-stream
content-length: 4085904
last-modified: Sun, 02 Dec 2018 16:18:36 GMT
etag: "05650ad5a8ad41:0"
x-powered-by: ASP.NET
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8B6Byf4durF9Qtwfp9IACLbKdgT0AAZb%2F9xBmoRc9q3M50q01YqAKa3cu4p7d8JRpJ84RS%2B%2FjuhTh%2Frqk0Z31FzL2qdNZUvtGyA7PMwU73VldmuvMUkspshBqmxoCiMb4ZHtZljkyrK3tMeP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9c4a7ef4b56c0-OSL
alt-svc: h3=":443"; ma=86400
|
| www.videosoftdev.com/downloads/WMFdist.exe | 172.67.70.163 | 301 Moved Permanently | 4.1 MB |
URL User Request GET HTTP/2www.videosoftdev.com/downloads/WMFdist.exe IP172.67.70.163:443
CertificateIssuerGoogle Trust Services LLC Subjectvideosoftdev.com FingerprintA1:EB:7A:F3:2C:09:32:81:4A:4C:63:89:50:04:4F:13:D4:52:47:4D ValidityWed, 31 Jan 2024 22:09:18 GMT - Tue, 30 Apr 2024 22:09:17 GMT
Size4.1 MB (4085904 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /downloads/WMFdist.exe HTTP/1.1
Host: www.videosoftdev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 28 Mar 2024 18:43:50 GMT
content-type: text/html; charset=UTF-8
location: https://www.videosoftdev.com/downloads/WMFdist.exe/
x-powered-by: ASP.NET
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DIX6Ps3vgvCiN%2BrC8LpD09t6TqIyVJWoCKyqsYIcTtWkoJhFAicVL82jsSsgM4eIoh3GPqSmfeSELAPQdFsGB%2Bosv87Ce32Omtl5J4YF90%2Bh%2Bn5e44b13Qgtqy%2FFoOLEoLRQDOkG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9c49e9e2656cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| www.videosoftdev.com/downloads/WMFdist.exe/ | 172.67.70.163 | 302 Found | 4.1 MB |
URL User Request GET HTTP/2www.videosoftdev.com/downloads/WMFdist.exe/ IP172.67.70.163:443
CertificateIssuerGoogle Trust Services LLC Subjectvideosoftdev.com FingerprintA1:EB:7A:F3:2C:09:32:81:4A:4C:63:89:50:04:4F:13:D4:52:47:4D ValidityWed, 31 Jan 2024 22:09:18 GMT - Tue, 30 Apr 2024 22:09:17 GMT
Size4.1 MB (4085904 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /downloads/WMFdist.exe/ HTTP/1.1
Host: www.videosoftdev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 28 Mar 2024 18:43:51 GMT
content-type: text/html; charset=utf-8
location: https://downloads.videosoftdev.com/WMFdist.exe
cache-control: private
x-aspnet-version: 2.0.50727
x-powered-by: ASP.NET
x-frame-options: SAMEORIGIN
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UX%2FQwGlO4dCcLg61PQMQNQH4Swc7ZnN7jdlVyUoOKsOX5956TD6au3mr%2BJEaLH%2BbEE6uZP616%2BTOSIDdL8dDa9%2F6YSVMUzibexzZHOMmEOCdRW7YWiM4yGWnFlV6mCAZWDUGM%2FUt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9c4a35a5656cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
104.26.6.250