IP104.18.38.66:0
Hash0f25de725432b9c889e001639ab4cdb0 f063b99c98bbd8fe749eaec7272a670f30f96e9c 558a7958efbac30cba1404d50f7bff4f7103d67ee13b6aaddaca7f353ba2830a
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:39:56 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 06 May 2024 05:25:47 GMT
Expires: Mon, 13 May 2024 05:25:46 GMT
Etag: "f063b99c98bbd8fe749eaec7272a670f30f96e9c"
Cache-Control: max-age=491749,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 88014692188c56c0-OSL
|
IP104.18.38.66:0
Hash0f25de725432b9c889e001639ab4cdb0 f063b99c98bbd8fe749eaec7272a670f30f96e9c 558a7958efbac30cba1404d50f7bff4f7103d67ee13b6aaddaca7f353ba2830a
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:39:56 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 06 May 2024 05:25:47 GMT
Expires: Mon, 13 May 2024 05:25:46 GMT
Etag: "f063b99c98bbd8fe749eaec7272a670f30f96e9c"
Cache-Control: max-age=492093,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 880146921b7d56a9-OSL
|
| download.caihong.com/gamewd/yhdl.exe | 123.6.72.100 | 200 OK | 1.5 MB |
URL User Request GET HTTP/2download.caihong.com/gamewd/yhdl.exe IP123.6.72.100:443 ASN#4837 CHINA UNICOM China169 Backbone
CertificateIssuersslTrus Subject*.caihong.com Fingerprint74:2C:61:0C:A3:32:27:65:81:31:EE:51:DD:41:9C:A3:67:19:D6:B0 ValidityTue, 17 Oct 2023 00:00:00 GMT - Sat, 16 Nov 2024 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections Size1.5 MB (1507656 bytes) Hashd6affe0bfbe329109f5dc3e785fce0b4 cc340be4c3fcb28c2ad22169eb90cf12ecf017f3 8e56c3d8c063172bf227e1980b09c41576440a1c3edef604cf5238f7c7299e3d
Analyzer | Verdict | Alert | VirusTotal | malicious | |
GET /gamewd/yhdl.exe HTTP/1.1
Host: download.caihong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Byte-nginx
content-type: application/octet-stream
content-length: 1507656
accept-ranges: bytes
age: 782916
content-disposition: attachment; filename*="UTF-8''yhdl.exe"
content-language: zh-CN
etag: d6affe0bfbe329109f5dc3e785fce0b4
last-modified: Thu, 09 Jan 2020 05:57:01 GMT
x-bdcdn-cache-status: TCP_HIT
x-cos-object-type: normal
x-cos-storage-class: STANDARD
x-request-id: 37c524214ddc4e44bd509b242d97eb73
x-request-ip: 91.90.42.154
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
x-tt-trace-tag: id=5
date: Tue, 07 May 2024 12:39:56 GMT
via: cache21.zzcu
access-control-allow-origin: *
X-Firefox-Spdy: h2
|