Report - install.protected.net/windows/cdn3/6.3.371/TotalAV.exe

Report Overview

Visitedpublic

2025-04-06 14:16:29

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
install.protected.net	908225	2003-08-06	2018-02-11	2025-03-12	522 B	219 kB	195.16.73.219

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

install.protected.net/windows/cdn3/6.3.371/TotalAV.exe

IP / ASN

195.16.73.219

#56655 Gigahost AS

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

Size218 kB (218496 bytes)

MD56d2f198d364aba8eee71013309be6a55

SHA1f1bc6c30fbb520f989d203ce66b1aaca547c138e

SHA256716f7d2c9875df349a2fd8efa1ed974f014b6cfc1b29a7b6f9e6f0cf14d99af4

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/72

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET install.protected.net/windows/cdn3/6.3.371/TotalAV.exe

195.16.73.219

200 OK

218 kB

URL

install.protected.net/windows/cdn3/6.3.371/TotalAV.exe

IP / ASN

195.16.73.219

#56655 Gigahost AS

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

First Seen2025-04-06

Last Seen2025-04-06

Times Seen1

Size218 kB (218496 bytes)

MD56d2f198d364aba8eee71013309be6a55

SHA1f1bc6c30fbb520f989d203ce66b1aaca547c138e

SHA256716f7d2c9875df349a2fd8efa1ed974f014b6cfc1b29a7b6f9e6f0cf14d99af4

Certificate Info

IssuerSectigo Limited

Subject*.protected.net

FingerprintEA:E1:8B:32:B4:99:D5:8B:76:D2:83:28:1F:E1:AE:4C:D0:8D:06:A9

ValidityTue, 10 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/72

HTTP Headers

GET /windows/cdn3/6.3.371/TotalAV.exe HTTP/1.1
Host: install.protected.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: keycdn
date: Sun, 06 Apr 2025 14:16:06 GMT
content-type: application/octet-stream
content-length: 218496
x-guploader-uploadid: AKDAyIstsVARxoPLiCBfg8T-DI3PaTyBm5I8_Ws4oa2T50KoUjLILLewiVkNANKBGbki1nU
expires: Sun, 13 Apr 2025 14:16:06 GMT
cache-control: max-age=604800
last-modified: Thu, 03 Apr 2025 16:04:06 GMT
etag: "6d2f198d364aba8eee71013309be6a55"
x-goog-generation: 1743696246380811
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 218496
x-goog-hash: crc32c=Xj4ojw==, md5=bS8ZjTZKuo7ucQEzCb5qVQ==
x-goog-storage-class: STANDARD
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
link: <https://storage.googleapis.com/ss-installers/windows/cdn3/6.3.371/TotalAV.exe>; rel="canonical"
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2