| www.vsx.pl/download/npp.5.6.8.Installer.exe?amp |  172.67.167.166 | | 1.5 kB |
URL www.vsx.pl/download/npp.5.6.8.Installer.exe?amp IP172.67.167.166:0
File typeJavaScript source, ASCII text Hashbae9b61f24efdf490f6be22495660d05 87317279504a50962754f90f5ae9dbaf86cca9e5 973167917a82bbaf0975b0cd2dcbc47caae6a2e6dbfee4bb75a7bd95e0d92400
GET /download/npp.5.6.8.Installer.exe?amp HTTP/1.1
Host: www.vsx.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 00:33:38 GMT
content-length: 1499
cache-control: no-cache, no-store, must-revalidate, max-age=0, no-store, max-age=0
cf-edge-cache: no-cache
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qPsOeHbD0HTwvNun3L3JZ%2BB%2FV9V5B1gb3DtHE825s%2F9cgdcRz5S8VG75rgCTFWCqHhsUC9P2H8xnsCh4Wc%2FAbw0nMR2K2%2BD%2BMY951nrbefy%2BRL66v1qx41neFrca"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e14246ffb56ae-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| www.vsx.pl/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12003742 | 172.67.167.166 | | 0 B |
URL www.vsx.pl/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12003742 IP172.67.167.166:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12003742 HTTP/1.1
Host: www.vsx.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vsx.pl/download/npp.5.6.8.Installer.exe?amp
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sat, 11 May 2024 00:33:38 GMT
content-length: 0
location: http://www.vsx.pl/download/npp.5.6.8.Installer.exe?amp
x-forwarded-for: 91.90.42.154, 162.158.222.101
x-real-ip: 91.90.42.154
x-remote-ip: 162.158.222.101
set-cookie: wssplashuid=54b79f838bf1a232496a6424db79ba7f3255a849.1715391215.1; Path=/; Domain=www.vsx.pl; Max-Age=2592000; HttpOnly; SameSite=Lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6vMMaC%2BWm10Kgmt8ZjpbWtKL64CMnpm6SbT81IZGEBLMu1j2Mnk2rDKWS791DqG72F38pTUvk9RcX8uGqJqQBxSfUpGgKvOkze%2BuFSZ%2Fg8gG6n1pZIvJgfVcMSUp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e14280d8cb511-OSL
alt-svc: h3=":443"; ma=86400
|
| www.vsx.pl/download/npp.5.6.8.Installer.exe?amp | 172.67.167.166 | | 167 B |
URL www.vsx.pl/download/npp.5.6.8.Installer.exe?amp IP172.67.167.166:0
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /download/npp.5.6.8.Installer.exe?amp HTTP/1.1
Host: www.vsx.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: wssplashuid=54b79f838bf1a232496a6424db79ba7f3255a849.1715391215.1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sat, 11 May 2024 00:33:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 11 May 2024 01:33:38 GMT
Location: https://www.vsx.pl/download/npp.5.6.8.Installer.exe?amp
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G%2FMsbnh0LJxJp%2FdkGjUKY8yiv226WqU3kFWkr2OQXzDECwTFGj%2BoJURoU4oXGt0LPx0KLBC22No7%2BGi62UPGkWYoUm5Hn%2FkAwjea33PNhlJlG1ctwb3%2F9mUuRGh1"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 881e14291fec56c3-OSL
alt-svc: h2=":443"; ma=60
|
| www.vsx.pl/download/npp.5.6.8.Installer.exe?amp | 172.67.167.166 | | 3.3 MB |
URL www.vsx.pl/download/npp.5.6.8.Installer.exe?amp IP172.67.167.166:0
File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections Size3.3 MB (3336170 bytes) Hash273e9183b5e8991fd03a5622ea29c58b 473ac5bb2d1a18dbbc7eaed234f7cbfa72a1ebab 088879babee6525be968976779133eb061cc9c4123f509666496747b0698f42a
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware | | VirusTotal | suspicious | |
GET /download/npp.5.6.8.Installer.exe?amp HTTP/1.1
Host: www.vsx.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: wssplashuid=54b79f838bf1a232496a6424db79ba7f3255a849.1715391215.1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 May 2024 00:33:38 GMT
content-type: application/x-msdownload
content-length: 3336170
last-modified: Wed, 13 Oct 2010 10:18:12 GMT
etag: "32e7ea-4927ce925a100"
cache-control: max-age=16070400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ro1glOSByt275E6SFTRvfuVGE0zdBhBe20r%2FBLEDTZV0HcMJft5sAuOSFG56xTN8qifuhoBQj6YDmaKE%2BmWDycF5djOfif1dysT7jF8Uf4KJfpwt3DWEAQ85vv7V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e14294e51b511-OSL
alt-svc: h3=":443"; ma=86400
|
104.21.50.226