| download.pplive.com/PPTV_forqd47.exe |  36.155.192.250 | 301 Moved Permanently | 177 B |
URL User Request GET HTTP/1.1download.pplive.com/PPTV_forqd47.exe IP36.155.192.250:80 ASN#56046 China Mobile communications corporation
File typeHTML document, ASCII text, with CRLF line terminators Hashf54c7e6bb75767aca5ccf89f57a211cc 727eb27cf24bd0f5d8deee8380fa3abdb5fbc255 f2ad1fe4f548a607486b947a480cfe17aca8e499b0668a5350e36f2e7ca24dc9
GET /PPTV_forqd47.exe HTTP/1.1
Host: download.pplive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: styx
Date: Tue, 23 Apr 2024 11:28:06 GMT
Content-Type: text/html
Content-Length: 177
Connection: keep-alive
Location: http://ossapp.suning.com/pcoss/dl/PPTV_forqd47.exe
|
| ossapp.suning.com/pcoss/dl/PPTV_forqd47.exe | 171.15.110.132 | 200 OK | 12 MB |
URL User Request GET HTTP/1.1ossapp.suning.com/pcoss/dl/PPTV_forqd47.exe IP171.15.110.132:443 ASN#137687 Luoyang, Henan Province, P.R.China.
CertificateIssuerGlobalSign nv-sa Subject*.suning.com Fingerprint4D:0F:13:53:12:F8:24:79:39:A8:1D:C4:12:71:03:D6:6E:C5:7F:CC ValidityWed, 12 Jul 2023 01:18:26 GMT - Mon, 12 Aug 2024 01:18:25 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections Size12 MB (12431160 bytes) Hashea8b2ce22c6ae88ee1d1f97620f0f234 8841bcca9ac1d30f8da8088b1d3195e1cd04b9be 16349118ef4b8bc7db7a64f1158738b687f1e613c1163bb94ae3607ae37a972d
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /pcoss/dl/PPTV_forqd47.exe HTTP/1.1
Host: ossapp.suning.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Byte-nginx
Content-Type: application/octet-stream
Content-Length: 12431160
Connection: keep-alive
Accept-Ranges: bytes
Age: 6252174
Cache-Control: max-age=7776000
Content-Disposition: filename="PPTV_forqd47.exe"
Etag: 3fcdf52a
Last-Modified: Fri, 15 Jan 2021 05:13:52 GMT
Requestid: MTAuMTA4LjQ2LjE0Mzo6ODg4OHwxNzA3NjE5NTE0fDU1MDQ5MDA0NQ==
Strict-Transport-Security: max-age=300
X-Bdcdn-Cache-Status: TCP_HIT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Request-Id: 3d4778b063a77bc578112a0d186906b3
X-Request-Ip: 91.90.42.154
X-Response-Cache: edge_hit
X-Response-Cinfo: 91.90.42.154
X-Sdoss-Expiration:
X-Sdoss-Request-Id: MTAuMTA4LjQ2LjE0Mzo6ODg4OHwxNzA3NjE5NTE0fDU1MDQ5MDA0NQ==
X-Tt-Trace-Tag: id=5
X-Xss-Protection: 1; mode=block
Date: Tue, 23 Apr 2024 11:28:08 GMT
via: cache11.hnzzct04
|