| dl1.wikishare.ir/sdlftpuser/92/09/10/Unlocker_1.9.exe |  193.151.157.44 | 302 Found | 138 B |
URL User Request GET HTTP/2dl1.wikishare.ir/sdlftpuser/92/09/10/Unlocker_1.9.exe IP193.151.157.44:443 ASN#43754 Asiatech Data Transmission company
CertificateIssuerLet's Encrypt Subjectdl1.wikishare.ir Fingerprint5A:29:4B:6D:0E:38:BF:22:35:32:BD:69:ED:7F:9A:FF:D9:B3:10:15 ValidityMon, 30 Oct 2023 06:41:40 GMT - Sun, 28 Jan 2024 06:41:39 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashaff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /sdlftpuser/92/09/10/Unlocker_1.9.exe HTTP/1.1
Host: dl1.wikishare.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 13 Nov 2023 18:23:26 GMT
content-type: text/html
content-length: 138
location: https://dlwikishare.84.ir.cdn.ir/sdlftpuser/92/09/10/Unlocker_1.9.exe
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
|
| dlwikishare.84.ir.cdn.ir/sdlftpuser/92/09/10/Unlocker_1.9.exe | 193.151.157.105 | 302 | 0 B |
URL User Request GET HTTP/1.1dlwikishare.84.ir.cdn.ir/sdlftpuser/92/09/10/Unlocker_1.9.exe IP193.151.157.105:443 ASN#43754 Asiatech Data Transmission company
CertificateIssuerLet's Encrypt Subject*.84.ir.cdn.ir Fingerprint40:F8:33:D4:AB:11:6D:79:D4:6E:47:A5:0A:68:EC:21:9B:6C:B7:31 ValiditySat, 21 Oct 2023 04:34:34 GMT - Fri, 19 Jan 2024 04:34:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdlftpuser/92/09/10/Unlocker_1.9.exe HTTP/1.1
Host: dlwikishare.84.ir.cdn.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302
access-control-allow-origin: *
Location: https://edge10.84.ir.cdn.ir/sdlftpuser/92/09/10/Unlocker_1.9.exe
Content-Length: 0
Date: Mon, 13 Nov 2023 18:23:27 GMT
Keep-Alive: timeout=10
Connection: keep-alive
|
| edge10.84.ir.cdn.ir/sdlftpuser/92/09/10/Unlocker_1.9.exe | 31.7.66.189 | 200 OK | 1.3 MB |
URL User Request GET HTTP/1.1edge10.84.ir.cdn.ir/sdlftpuser/92/09/10/Unlocker_1.9.exe IP31.7.66.189:443 ASN#43754 Asiatech Data Transmission company
CertificateIssuerLet's Encrypt Subject*.84.ir.cdn.ir Fingerprint40:F8:33:D4:AB:11:6D:79:D4:6E:47:A5:0A:68:EC:21:9B:6C:B7:31 ValiditySat, 21 Oct 2023 04:34:34 GMT - Fri, 19 Jan 2024 04:34:33 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive\012- data Size1.3 MB (1321457 bytes) Hash3ca31f92604dbb9264dd422e3712cec6 0a30491edbaa6dd7dc13b23af8e88fc34d205df9 a5074bd3345d9327bbe69002fe1bcdde8370e74adeaed0507c6c4e868635dbda
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /sdlftpuser/92/09/10/Unlocker_1.9.exe HTTP/1.1
Host: edge10.84.ir.cdn.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 13 Nov 2023 18:19:47 GMT
Content-Type: application/octet-stream
Content-Length: 1321457
Last-Modified: Mon, 27 Jan 2014 15:07:55 GMT
Server: AsiatechCDN/2.1
Accept-Ranges: bytes
Via: http/1.1 mid02.cdn.ir (AsiatechEdge/2.1), http/1.1 edge10.cdn.ir (AsiatechEdge/2.1)
Etag: "52e6764b-1429f1"
Age: 363
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, no-transform
|