Report - m.shouji.360tpcdn.com/131119/ac85802a8887c6c41b83abb68a0c2c01/com.sz.games.duiduipeng

Report Overview

Submitted URL
m.shouji.360tpcdn.com/131119/ac85802a8887c6c41b83abb68a0c2c01/com.sz.games.duiduipeng_10406.apk
IP
104.192.108.17
ASN
#55992 Beijing Qihu Technology Company Limited
Submitted
2024-04-24 02:25:08
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
m.shouji.360tpcdn.com	unknown	2013-02-18	2013-07-21	2024-04-18	549 B	6.3 MB	104.192.108.17
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-22	512 B	1.2 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
m.shouji.360tpcdn.com/131119/ac85802a8887c6c41b83abb68a0c2c01/com.sz.games.duiduipeng_10406.apk
IP
104.192.108.17
ASN
#55992 Beijing Qihu Technology Company Limited

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
6.3 MB (6317131 bytes)
Hash
ac85802a8887c6c41b83abb68a0c2c01
340b7e1a2a44eaa70f7b97a0e0154f4ada9e8e7a
85dd3796c112d97f07dd24802d319bfec84d1852676c96301159caff63d5707b

Archive (62)

Modified	Filename	Size	Md5	File type
2013-11-18 10:34	MANIFEST.MF	5.4 kB	8c2c1cd0f27606071caf5649d901bd56	JAR Manifest, ASCII text, with CRLF line terminators
2013-11-18 10:34	ANDROID.SF	5.6 kB	beb2ef0826577ef30236143dc3c21ea6	JAR Signature File, ASCII text, with CRLF line terminators
2013-11-18 10:34	ANDROID.RSA	924 B	e446a4d1d7478b10edc312454370228b	DER Encoded PKCS#7 Signed Data
2013-11-18 10:34	data.zip	3.5 MB	56dc833c250948df3374f9bdf432e0a4	Zip archive data, at least v2.0 to extract, compression method=store
2013-11-18 10:34	from.txt	4 B	4aecfbe5d21e3f7912bf8eb29124423a	ASCII text, with no line terminators
2013-01-15 11:29	zhanglian.zip	1.1 MB	b6bdfcf9527e1058970385b545f2992b	Zip archive data, at least v1.0 to extract, compression method=store
2013-01-15 11:29	zlresver.txt	1 B	8f14e45fceea167a5a36dedd4bea2543	very short file (no magic)
2013-11-18 10:34	AndroidManifest.xml	2.8 kB	bf84fcb6e243e20eb63ffcd5fd0da4f8	Android binary XML
2013-11-18 10:34	resources.arsc	1.0 kB	6c0d440de99548fb2fca4e540d8aa538	Android package resource table (ARSC), 4 string(s)
2013-11-18 10:34	icon.png	13 kB	a9c7fcb7894a284a42556043a49cb893	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	icon.png	3.8 kB	1edadb2d609b455d3964a85a403bcf13	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	icon.png	6.3 kB	82da491890c5e93addf127ebcc94e851	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
2013-06-04 17:10	classes.dex	82 kB	3c1256380cc68a9a6e09b5ce8a9eeaef	Dalvik dex file version 035
2013-11-18 10:34	CopyrightDeclaration.xml	3.2 kB	619844631f7784b49eb48b1607cba368	XML 1.0 document, ASCII text, with very long lines (3233), with no line terminators
2013-11-18 10:34	VERSION	8 B	7dea655fba32a484b53d78e07696203b	ASCII text, with CRLF line terminators
2013-11-18 10:34	bg.png	44 kB	f705481222d4f784d6908e9d5eb2d39f	PNG image data, 480 x 76, 8-bit/color RGB, non-interlaced
2013-11-18 10:34	bg_transparent.png	3.2 kB	9e838f82a8b02516edc1e634462762d0	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	button1_Confirm.9.png	2.8 kB	79f4425935ff2b2efb76fd47a19a68cd	PNG image data, 460 x 66, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	button1_Confirm_Press.9.png	2.5 kB	21613cdfea2422e05a36f7132d1697a4	PNG image data, 460 x 66, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	button_back.png	3.1 kB	0d1156a52d2aea810915f881e846d20b	PNG image data, 61 x 37, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	button_back_Press.png	2.9 kB	ce8d660b30a2e684120f2abf02988054	PNG image data, 61 x 37, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	button_finishbilling.png	6.1 kB	5e13b2462cd589c87e35b0edd963a1b3	PNG image data, 98 x 42, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	button_finishbilling_press.png	5.5 kB	fa9d3d3477cffc4e580a2aef6594bdf6	PNG image data, 98 x 42, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	editbg.9.png	1.2 kB	5db59158b069e4f51053199330c102b7	PNG image data, 328 x 45, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	editbg_a.9.png	1.2 kB	cfd0f0aa9be43eb15d5300530faf3ddd	PNG image data, 186 x 47, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	editbg_b.9.png	835 B	57736f8779d431686f8b6124de7ba0f5	PNG image data, 184 x 45, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	get_verificationcode.9.png	1.2 kB	7737d054ee143db0dd912360a106ac56	PNG image data, 124 x 45, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	get_verificationcode_press.9.png	966 B	40a9b07a870a591d8e1a563cabffbf33	PNG image data, 124 x 45, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	get_verificationcode_press.png	4.3 kB	c1d61064502380e7915264cdb2c7adde	PNG image data, 124 x 45, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	icon_chifubao.png	7.6 kB	21b9fd43a8098216c0269034f7dcfb84	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	icon_false.png	6.1 kB	d18cca19e49a4199baf19cfd9fa09512	PNG image data, 76 x 76, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	icon_info.png	9.2 kB	7289782fa195bd196424417b50f9fd3d	PNG image data, 76 x 76, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	icon_success.png	7.2 kB	df968eaa044e5f912b2b234cd61f28a7	PNG image data, 76 x 76, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	infobg.9.png	902 B	12b5128b03eafc623e0bb4e1cdc09834	PNG image data, 66 x 40, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	infoline.png	181 B	51581a56654be4c1ff657c54690a4c02	PNG image data, 453 x 5, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	keyboard_bg.png	1.3 kB	34b84a1972dbd058655da92c6bafc0cb	PNG image data, 1 x 340, 8-bit colormap, non-interlaced
2013-11-18 10:34	keyboard_button.png	2.1 kB	daa271b37eba12606ba47ebb3be89830	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	keyboard_button_delete.png	2.7 kB	93761699caae3dfd46b6ee0a373acf27	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	keyboard_button_delete_press.png	2.7 kB	82e429c2d609f5db30c6da54222cbd61	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	keyboard_button_hide.png	3.2 kB	00c7765ded305e001bad0040db8e8317	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	keyboard_button_hide_press.png	3.5 kB	8f7a885f757d797b584da1c4d0af5f50	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	keyboard_button_press.png	2.2 kB	fcd84c995f532f8445110ed4d23b97f1	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	line.png	1.2 kB	745c6999db7f9540e67744fdcfa0c4a8	PNG image data, 456 x 2, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	loading.png	4.0 kB	29223b446bcd7643e4b72fb3fea956ca	PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	logo1.png	16 kB	60d5b0a404d5bea1f2d2a4534d50028a	PNG image data, 226 x 76, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	logo2.png	3.6 kB	1c107fbd398d9f68106b52c2b06fdfd8	PNG image data, 38 x 30, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	logo3.png	4.7 kB	764290a054dde29b001c6ce3cb183e6d	PNG image data, 48 x 36, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	splash_h.jpg	32 kB	48ad9ddfd825ac54c5e1db63c51b4221	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 800x480, components 3
2013-11-18 10:34	splash_v.jpg	33 kB	9da0641ff698780069de532208789c57	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 480x800, components 3
2013-11-18 10:34	title1_bg.png	1.2 kB	8465dba3163062fa6ac3136603cc4219	PNG image data, 1 x 80, 8-bit/color RGB, non-interlaced
2013-11-18 10:34	title2_bg.png	1.1 kB	3a41e90099429af14ba175c287c0f555	PNG image data, 1 x 54, 8-bit/color RGB, non-interlaced
2013-11-18 10:34	title2_bg_shadow.png	1.1 kB	65e116aebcee69e46688a45a36451998	PNG image data, 1 x 6, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	top_button_back.png	5.6 kB	7c160da8d68f5f83871dd5b7d9431f0a	PNG image data, 70 x 42, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	top_button_back_press.png	5.2 kB	2442b11ed8371fd3bb4430a15a0da950	PNG image data, 70 x 42, 8-bit/color RGBA, non-interlaced
2013-11-18 10:34	yanzhengma_bg.png	3.3 kB	03bc6c709898c90296d90d58a093abc0	PNG image data, 132 x 36, 8-bit/color RGB, non-interlaced
2013-11-18 10:34	mmiap.xml	87 B	de6199f371ee64fe01780010256ea5ff	XML 1.0 document, ASCII text, with CRLF line terminators
2013-03-28 15:38	lib4000-0005-0003-0000.so	721 kB	46c0fc0fe9a828194f28c9dc27e2d977	ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)
2013-05-23 11:55	libSzBridge.so	19 kB	65840f6b02b42a68d339b6ad019f6f94	ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)
2013-05-23 11:59	libSzBrowse_001.so	279 kB	25c30a1b80e95e86f6e588b62ad972b0	ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)
2012-08-02 17:42	libSzSkia.so	1.1 MB	a756551f49d3848e5f93a68c0183c172	ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)
2013-05-23 11:53	libSzStd_001.so	631 kB	c8f176e4f4a105c65cf59f6143b0808f	ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)
2013-05-24 10:10	libZlApp_001.so	78 kB	5e2985541ff6982bc0406e1b2a22430a	ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 12/61

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

m.shouji.360tpcdn.com/131119/ac85802a8887c6c41b83abb68a0c2c01/com.sz.games.duiduipeng_10406.apk

104.192.108.17

200 OK

6.3 MB

URL User Request GET HTTP/1.1
m.shouji.360tpcdn.com/131119/ac85802a8887c6c41b83abb68a0c2c01/com.sz.games.duiduipeng_10406.apk
IP
104.192.108.17:443
ASN
#55992 Beijing Qihu Technology Company Limited

Certificate
IssuerWoTrus CA Limited
Subject*.shouji.360tpcdn.com
FingerprintB3:0C:6C:65:C8:1A:74:48:EA:CB:93:29:04:89:94:06:CC:6F:C1:E7
ValidityWed, 18 Oct 2023 00:00:00 GMT - Thu, 17 Oct 2024 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
6.3 MB (6317131 bytes)
Hash
ac85802a8887c6c41b83abb68a0c2c01
340b7e1a2a44eaa70f7b97a0e0154f4ada9e8e7a
85dd3796c112d97f07dd24802d319bfec84d1852676c96301159caff63d5707b

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 12/61

HTTP Headers

GET /131119/ac85802a8887c6c41b83abb68a0c2c01/com.sz.games.duiduipeng_10406.apk HTTP/1.1
Host: m.shouji.360tpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 02:24:44 GMT
Content-Type: application/vnd.android.package-archive
Content-Length: 6317131
Connection: keep-alive
Expires: Wed, 01 May 2024 02:24:44 GMT
Last-Modified: Tue, 19 Nov 2013 07:15:04 GMT
Cache-Control: s-maxage=604800, max-age=604800
KCS-Via: HIT from w-f01.lato;HIT from back-f01.dl.lato;MISS from w-subsrc02.lato
K-Cache-status: HIT
K-RateLimit-used: 1
K-RateLimit-limit: 1000
K-RateLimit-reset: 1714003200
K-RateLimit-remaining: 999
K-RateLimit: dl
Accept-Ranges: bytes

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

444 B

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
XML 1.0 document, ASCII text, with very long lines (332)
Size
444 B (444 bytes)
Hash
3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=f_GrzlLpF8Jq7rFPIYkPI4rgXIaERMhtPLZYu1gIdd_uaKIFh26c745nq2tt-zet8eR9REu4Ik8X-IJVgNNGDVAMsSpo4KycdZz3mqsiDoTGPwgexKuMNV0maHL9Xpv-
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Wed, 24 Apr 2024 02:24:34 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 27
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (62)

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers