| 692.cdn.zerocdn.com/mapper.exe | 176.58.48.48 | 302 Found | 0 B |
URL User Request GET HTTP/1.1692.cdn.zerocdn.com/mapper.exe IP176.58.48.48:443
CertificateIssuerLet's Encrypt Subjectzerocdn.com FingerprintCC:2C:7C:19:32:13:9F:B4:0C:61:CB:DB:BE:2F:B7:2D:86:71:DE:94 ValiditySat, 04 May 2024 15:30:37 GMT - Fri, 02 Aug 2024 15:30:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mapper.exe HTTP/1.1
Host: 692.cdn.zerocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:57:44 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Language: en
Vary: Accept-Language, Cookie
Location: https://692.ranger.zerocdn.com/mapper.exe
Allow: HEAD, OPTIONS, PROPFIND, LOCK, UNLOCK, GET, DELETE, PROPPATCH, COPY, MOVE, PUT, MKCOL
|
| 692.ranger.zerocdn.com/mapper.exe | 176.58.38.59 | 200 OK | 564 kB |
URL User Request GET HTTP/1.1692.ranger.zerocdn.com/mapper.exe IP176.58.38.59:443
CertificateIssuerLet's Encrypt Subjectzerocdn.com Fingerprint0B:BA:8C:87:0C:C2:47:66:7B:0C:FE:C6:D5:83:C4:F0:84:5B:39:B9 ValidityWed, 03 Apr 2024 13:15:33 GMT - Tue, 02 Jul 2024 13:15:32 GMT
File typePE32+ executable (console) x86-64, for MS Windows, 11 sections Size564 kB (563712 bytes) Hash9d5ab8b8021d3f87470a1cd44f0f161c 3508d0afff20ad3c342137c33e71ac4e826bf217 9b6f50dfad6e8f3c1e49a50e7405bdeaabde8bc22097651f46e7739e9075923d
Analyzer | Verdict | Alert | VirusTotal | malicious | |
GET /mapper.exe HTTP/1.1
Host: 692.ranger.zerocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:57:48 GMT
Content-Type: application/x-msdos-program
Content-Length: 563712
Last-Modified: Mon, 26 Feb 2024 00:48:23 GMT
Connection: keep-alive
ETag: "65dbdfd7-89a00"
Accept-Ranges: bytes, bytes
|