Report - www.solvusoft.com/file-downloads/builds/static_delivery/installers/file-magic/spf/082323_build/Setup_File_Magic

Report Overview

Visitedpublic

2023-12-28 07:53:01

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
www.solvusoft.com	848833	2011-05-24	2012-05-24 17:13:49	2023-12-26 18:20:33	586 B	1.3 MB	104.110.28.77

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2023-12-28	medium	www.solvusoft.com/file-downloads/builds/static_delivery/installers/file-magic/spf/082323_build/Setup_File_Magic_2024.exe	meth_stackstrings

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

www.solvusoft.com/file-downloads/builds/static_delivery/installers/file-magic/spf/082323_build/Setup_File_Magic_2024.exe

IP / ASN

104.110.28.77

#16625 AKAMAI-AS

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows

Size1.3 MB (1295104 bytes)

MD558817ac22bc2f56e86d3c60253bdaed9

SHA131720777b45a52e0bee92e64105fdfdf68abea53

SHA25624b31c4a0c540ade7879ee68cfb3e03cbf411fd0b70aff00b2bc743809019b32

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_stackstrings
VirusTotal	suspicious	VirusTotal - Scan result 1/72

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET www.solvusoft.com/file-downloads/builds/static_delivery/installers/file-magic/spf/082323_build/Setup_File_Magic_2024.exe

104.110.28.77

200 OK

1.3 MB

URL

www.solvusoft.com/file-downloads/builds/static_delivery/installers/file-magic/spf/082323_build/Setup_File_Magic_2024.exe

IP / ASN

104.110.28.77

#16625 AKAMAI-AS

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows

First Seen2023-08-29

Last Seen2024-08-21

Times Seen4

Size1.3 MB (1295104 bytes)

MD558817ac22bc2f56e86d3c60253bdaed9

SHA131720777b45a52e0bee92e64105fdfdf68abea53

SHA25624b31c4a0c540ade7879ee68cfb3e03cbf411fd0b70aff00b2bc743809019b32

Certificate Info

IssuerDigiCert Inc

Subjectsolvusoft.com

FingerprintC6:C7:3A:CD:82:D5:8D:85:60:AC:B1:22:4E:42:5A:E4:66:22:33:C9

ValiditySat, 15 Apr 2023 00:00:00 GMT - Tue, 16 Apr 2024 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_stackstrings
VirusTotal	suspicious	VirusTotal - Scan result 1/72

HTTP Headers

GET /file-downloads/builds/static_delivery/installers/file-magic/spf/082323_build/Setup_File_Magic_2024.exe HTTP/1.1
Host: www.solvusoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/octet-stream
etag: "58817ac22bc2f56e86d3c60253bdaed9:1692819625.616959"
last-modified: Wed, 23 Aug 2023 19:40:29 GMT
server: AkamaiNetStorage
content-length: 1295104
date: Thu, 28 Dec 2023 07:52:35 GMT
X-Firefox-Spdy: h2