| www.mlcalc.com/files/mlcalc-setup.exe | 172.66.40.86 | 200 OK | 8.7 MB |
URL User Request GET HTTP/3www.mlcalc.com/files/mlcalc-setup.exe IP172.66.40.86:443
CertificateIssuerLet's Encrypt Subjectmlcalc.com Fingerprint6D:68:E0:2A:FF:7B:A5:24:BA:5B:04:9D:4F:3C:3E:B7:71:95:91:A2 ValiditySun, 10 Mar 2024 03:06:18 GMT - Sat, 08 Jun 2024 03:06:17 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections Size8.7 MB (8671344 bytes) Hash4b6033adc5542149581cec15c69f28ea 0aa55b1f7cb771bb208dac74a539c7f083693c9f d0aa4880cc7980b332845259556e73efeb6635b5c860cc4f3c1b6699756f3882
Analyzer | Verdict | Alert | YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware |
GET /files/mlcalc-setup.exe HTTP/1.1
Host: www.mlcalc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 12:55:24 GMT
content-type: application/octet-stream
content-length: 8671344
last-modified: Mon, 08 Apr 2024 05:15:23 GMT
etag: "66137d6b-845070"
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sX1Nqp1hMcX9tpteys0r6%2BA5Dms3wMG7A7jkUmc%2BwyRPsqqFcHyiXYemsDbrPUyGerJ73h6P5GdQ0vzo1h%2BvTGXcS72Qoi6ZqMQcdYA4ALuAhbJ2juHEeUoKQjpbIryJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 88015d38be8256ba-OSL
alt-svc: h3=":443"; ma=86400
|
| cdn.mlcalc.com/files/mlcalc-setup.exe | 172.66.40.86 | 301 Moved Permanently | 8.7 MB |
URL User Request GET HTTP/2cdn.mlcalc.com/files/mlcalc-setup.exe IP172.66.40.86:443
CertificateIssuerLet's Encrypt Subjectmlcalc.com Fingerprint6D:68:E0:2A:FF:7B:A5:24:BA:5B:04:9D:4F:3C:3E:B7:71:95:91:A2 ValiditySun, 10 Mar 2024 03:06:18 GMT - Sat, 08 Jun 2024 03:06:17 GMT
Size8.7 MB (8671344 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /files/mlcalc-setup.exe HTTP/1.1
Host: cdn.mlcalc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 07 May 2024 12:55:24 GMT
content-type: text/html
location: https://www.mlcalc.com/files/mlcalc-setup.exe
cache-control: max-age=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Wuenh4GXuf42tQR3nDMtS%2FJu81kWkjMc%2BdmRNbWsxMTqonjG3pBaSA7wszfoNaeaY%2BiQmQoC5pJE5%2B4B4%2Bcd6RFUEiKd%2FmdQKTbfk%2FXBKuOXA82pE5CDn6klv2%2BHL9x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 88015d36bfe456c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|