Report - open.u-tools.cn/download/uTools-5.2.1.exe

Report Overview

Visited public
2024-11-02 09:47:39
Tags
URL
open.u-tools.cn/download/uTools-5.2.1.exe
Finishing URL
about:privatebrowsing
IP / ASN
120.25.166.231
#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
open.u-tools.cn	221234	2018-05-26	2024-11-02	2024-11-02	763 B	68 MB	120.25.166.231
res.u-tools.cn	unknown	2018-05-26	2020-07-02	2023-10-15	582 B	68 MB	221.194.141.165

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-11-02 09:47:11	low	120.25.166.231	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
res.u-tools.cn/version2/uTools-5.2.1.exe?auth_key=1730541131-L9WzPjknbRkjbrahn8HznVQNAfmqijmI-0-a6a3ac4b214849f21ef33ad03741c2eb
IP
221.194.141.165
ASN
#4837 CHINA UNICOM China169 Backbone

File type
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections
Size
68 MB (68309720 bytes)
Hash
fb8d9b87708ff90abd08b8b6f2905a2e
8e85c968a59cfec8170542bf0b0634630c7a0816
9b4d68b62ce22e1a962f801d4be3554d62abe08a20947d548b55fe6c05f61423

JavaScript (1)

		Size	First Seen	Last Seen
	#1 Eval - d41d8cd98f00b204e9800998ecf8427e	0 B	0001-01-01 00:00	2025-04-28 05:43
Pretty Observations First Seen0001-01-01 00:00 Last Seen2025-04-28 05:43 Times Seen4561876 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (3)

	URL	IP	Response	Size
	open.u-tools.cn/	120.25.166.231	404 Not Found	2.3 kB
URL open.u-tools.cn/ IP 120.25.166.231:0 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. File type HTML document, Unicode text, UTF-8 text, with very long lines (5395) Size 2.3 kB (2305 bytes) Hash 730bbf1b517f640b1154bf3d49aa4d5a 792e3abb85ac7b5d39ae05b498f93ddb5a162c1b 8e00f04e1402b75979d820ee83d0e9227ba29a962e353edbd16ab63745aef63f HTTP Headers `GET / HTTP/1.1 Host: open.u-tools.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: nginx Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Cache-Control: no-cache, private date: Sat, 02 Nov 2024 09:47:13 GMT Content-Encoding: gzip`

	res.u-tools.cn/version2/uTools-5.2.1.exe?auth_key=1730541131-L9WzPjknbRkjbrahn8HznVQNAfmqijmI-0-a6a3ac4b214849f21ef33ad03741c2eb	221.194.141.165	200 OK	68 MB
URL User Request GET HTTP/2 res.u-tools.cn/version2/uTools-5.2.1.exe?auth_key=1730541131-L9WzPjknbRkjbrahn8HznVQNAfmqijmI-0-a6a3ac4b214849f21ef33ad03741c2eb IP 221.194.141.165:443 ASN #4837 CHINA UNICOM China169 Backbone Certificate IssuerZeroSSL Subject.u-tools.cn Fingerprint59:C8:86:7C:3F:CD:6D:6B:39:B9:7E:AE:04:85:EA:55:E6:1F:ED:69 ValidityThu, 24 Oct 2024 00:00:00 GMT - Wed, 22 Jan 2025 23:59:59 GMT File type PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections Size 68 MB (68309720 bytes) Hash fb8d9b87708ff90abd08b8b6f2905a2e 8e85c968a59cfec8170542bf0b0634630c7a0816 9b4d68b62ce22e1a962f801d4be3554d62abe08a20947d548b55fe6c05f61423 HTTP Headers GET /version2/uTools-5.2.1.exe?auth_key=1730541131-L9WzPjknbRkjbrahn8HznVQNAfmqijmI-0-a6a3ac4b214849f21ef33ad03741c2eb HTTP/1.1 Host: res.u-tools.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Sat, 02 Nov 2024 09:47:14 GMT content-type: application/octet-stream content-length: 68309720 server: openresty x-oss-request-id: 671AEA72DDD87E3637899079 etag: "786DE08697F2F9E13725881DDB6A5566-7" last-modified: Tue, 20 Aug 2024 13:35:28 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 14395117935540602743 x-oss-storage-class: Standard x-oss-version-id: CAEQMhiBgMCe6v._ixkiIDE3YzQ3MzdiODBmMjRhMDQ5ZTVjOGNhNWY0NTMxMWVm x-oss-server-time: 84 x-ccdn-expires: 1896994 via: CHN-HElangfang-AREACUCC2-CACHE36[11],CHN-HElangfang-AREACUCC2-CACHE9[0,TCP_HIT,8],CHN-HElangfang-GLOBAL6-CACHE127[16],CHN-HElangfang-GLOBAL6-CACHE73[0,TCP_HIT,14] x-hcs-proxy-type: 1 x-ccdn-cachettl: 2592000 x-ccdn-req-id-46b1: 059eb3c3f469bea8cbef3accd39ed430 nginx-hit: 1 age: 695030 accept-ranges: bytes content-disposition: inline access-control-allow-origin: https://www.u-tools.cn,https://www.u.tools,https://u.tools,http://www.u.tools,http://u.tools access-control-allow-methods: GET, POST, OPTIONS X-Firefox-Spdy: h2

	open.u-tools.cn/download/uTools-5.2.1.exe	120.25.166.231	302 Found	68 MB
URL User Request GET HTTP/2 open.u-tools.cn/download/uTools-5.2.1.exe IP 120.25.166.231:443 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. Certificate IssuerZeroSSL Subject.u-tools.cn Fingerprint59:C8:86:7C:3F:CD:6D:6B:39:B9:7E:AE:04:85:EA:55:E6:1F:ED:69 ValidityThu, 24 Oct 2024 00:00:00 GMT - Wed, 22 Jan 2025 23:59:59 GMT File type Size 68 MB (68309720 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /download/uTools-5.2.1.exe HTTP/1.1 Host: open.u-tools.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found server: nginx content-type: text/html; charset=UTF-8 location: https://res.u-tools.cn/version2/uTools-5.2.1.exe?auth_key=1730541131-L9WzPjknbRkjbrahn8HznVQNAfmqijmI-0-a6a3ac4b214849f21ef33ad03741c2eb cache-control: no-cache, private date: Sat, 02 Nov 2024 09:47:11 GMT set-cookie: XSRF-TOKEN=eyJpdiI6IlFzalB5QnpSV2t5S2FIVGdmQ29BdWc9PSIsInZhbHVlIjoiaWtCVGJtaXZ3T1laZUs5RFNrVUtKUEZmZFlmT05QbllrNHZYU2cvdTZpdm5TTmtpSStuSlcwK2JBMmVqTzFRbHJobmFnR25qZ1hQZ0I2cHRiQjRpYnZZenByMWZLaC9YakVDcFRNaWRUTGw2L0NVZ3lMbFFZZ280eVJyQWtJZGYiLCJtYWMiOiI4N2I0ZWVjMmU3M2U3ZmViNmExNWZjMGZkOWEzM2YzNzY4ZjIzMDE3MjdkMDcwNDczZWI2ZjAxNGY3MDliNWM4IiwidGFnIjoiIn0%3D; expires=Sat, 02-Nov-2024 11:47:11 GMT; Max-Age=7200; path=/; samesite=lax utools_api_session=eyJpdiI6InRDTEcvM0Zna3pxVXk1MThhSFhNaGc9PSIsInZhbHVlIjoieTYxUC9zUkM2RkgyODNrZ2dRcG84RGdrektVR1MvU1hmRVh0cTl4RUd0YTM1M2xmc1NjNmRQSFhkbWh0MGZndEJXZGE0L1Zld0NLcUxLWVFWYkwrM3pQdkIwODNRdzR5ZDQ5eHJXc2x0eS84Q1BnTFBaS2pzaDQwR0Y3WWxtbk8iLCJtYWMiOiJkZWFmMjZmZjVlNDViMzU2NTY1OTA1YTg1ZmU3ZWFiNjIxYzk3YTdiZTNkNGE1NDBjNTQzNjk4OTNlNzBiZGU0IiwidGFnIjoiIn0%3D; expires=Sat, 02-Nov-2024 11:47:11 GMT; Max-Age=7200; path=/; httponly; samesite=lax X-Firefox-Spdy: h2