| huodroid-my.sharepoint.com/personal/daxia1_moxueyun_cn/_layouts/15/download.aspx?UniqueId=b76e1aaf-eede-42dd-afb9-e64236f091cc&Translate=false&tempauth=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfZGlzcGxheW5hbWUiOiJPbmVNYW5hZ2VyIiwiYXBwaWQiOiI3MzRlZjkyOC1kNzRjLTQ1NTUtOGQxYi1kOTQyZmEwYTFhNDEiLCJhdWQiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAvaHVvZHJvaWQtbXkuc2hhcmVwb2ludC5jb21AY2E1MTBlNjEtZTRiYS00YjU1LTk3YjYtOTUwNjAxY2ZlZjQwIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8MTAwMzIwMDE2ZGMwN2FmM0BsaXZlLmNvbSIsImNpZCI6IjI2dHFLVUlLSUU2M0MzSzdMYUwweHc9PSIsImVuZHBvaW50dXJsIjoiRkJOQjBDUUJmVnpEaVZocmYxWGc4aXdTQllYYTZFaG40TWxYNXZDVHpmWT0iLCJlbmRwb2ludHVybExlbmd0aCI6IjE1MCIsImV4cCI6IjE3MTMyOTkxNjIiLCJmYW1pbHlfbmFtZSI6IuWkp-S-oOmYvyIsImlwYWRkciI6IjIwLjE5MC4xNDQuMTcyIiwiaXNsb29wYmFjayI6IlRydWUiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAiLCJuYmYiOiIxNzEzMjk1NTYyIiwicHVpZCI6IjEwMDMyMDAxNkRDMDdBRjMiLCJzY3AiOiJhbGxmaWxlcy53cml0ZSBhbGxzaXRlcy53cml0ZSIsInNpdGVpZCI6Ik9USTROVEpqTUdRdE5UaG1aaTAwT1Rjd0xUaGhZV1V0WkRVNU1UbGpPRFU0TlRCayIsInRpZCI6ImNhNTEwZTYxLWU0YmEtNGI1NS05N2I2LTk1MDYwMWNmZWY0MCIsInR0IjoiMiIsInVwbiI6ImRheGlhMUBtb3h1ZXl1bi5jbiIsInZlciI6Imhhc2hlZHByb29mdG9rZW4ifQ.lCdh5vPBMOE4Puv7_-CmUN0q9qV9E9HxUOWH0peFE4o&ApiVersion=2.0 |  13.107.138.10 | 200 OK | 12 MB |
URL User Request GET HTTP/2huodroid-my.sharepoint.com/personal/daxia1_moxueyun_cn/_layouts/15/download.aspx?UniqueId=b76e1aaf-eede-42dd-afb9-e64236f091cc&Translate=false&tempauth=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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-S-oOmYvyIsImlwYWRkciI6IjIwLjE5MC4xNDQuMTcyIiwiaXNsb29wYmFjayI6IlRydWUiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAiLCJuYmYiOiIxNzEzMjk1NTYyIiwicHVpZCI6IjEwMDMyMDAxNkRDMDdBRjMiLCJzY3AiOiJhbGxmaWxlcy53cml0ZSBhbGxzaXRlcy53cml0ZSIsInNpdGVpZCI6Ik9USTROVEpqTUdRdE5UaG1aaTAwT1Rjd0xUaGhZV1V0WkRVNU1UbGpPRFU0TlRCayIsInRpZCI6ImNhNTEwZTYxLWU0YmEtNGI1NS05N2I2LTk1MDYwMWNmZWY0MCIsInR0IjoiMiIsInVwbiI6ImRheGlhMUBtb3h1ZXl1bi5jbiIsInZlciI6Imhhc2hlZHByb29mdG9rZW4ifQ.lCdh5vPBMOE4Puv7_-CmUN0q9qV9E9HxUOWH0peFE4o&ApiVersion=2.0 IP13.107.138.10:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerMicrosoft Corporation Subject*.sharepoint.com Fingerprint4F:05:25:62:5B:8B:B9:4F:5F:54:60:7F:43:4A:D6:26:33:61:44:3E ValidityThu, 12 Oct 2023 00:01:20 GMT - Sun, 06 Oct 2024 00:01:20 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections Size12 MB (12320875 bytes) Hash7168f5e5015d44392901d05124defda4 3db14440db9bf8b8569a92f69b8fe053269af7c4 fcb11bc419f470164fe33667d88b937af278d10a9520e9bc9d010b4ea1a9932f
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /personal/daxia1_moxueyun_cn/_layouts/15/download.aspx?UniqueId=b76e1aaf-eede-42dd-afb9-e64236f091cc&Translate=false&tempauth=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfZGlzcGxheW5hbWUiOiJPbmVNYW5hZ2VyIiwiYXBwaWQiOiI3MzRlZjkyOC1kNzRjLTQ1NTUtOGQxYi1kOTQyZmEwYTFhNDEiLCJhdWQiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAvaHVvZHJvaWQtbXkuc2hhcmVwb2ludC5jb21AY2E1MTBlNjEtZTRiYS00YjU1LTk3YjYtOTUwNjAxY2ZlZjQwIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8MTAwMzIwMDE2ZGMwN2FmM0BsaXZlLmNvbSIsImNpZCI6IjI2dHFLVUlLSUU2M0MzSzdMYUwweHc9PSIsImVuZHBvaW50dXJsIjoiRkJOQjBDUUJmVnpEaVZocmYxWGc4aXdTQllYYTZFaG40TWxYNXZDVHpmWT0iLCJlbmRwb2ludHVybExlbmd0aCI6IjE1MCIsImV4cCI6IjE3MTMyOTkxNjIiLCJmYW1pbHlfbmFtZSI6IuWkp-S-oOmYvyIsImlwYWRkciI6IjIwLjE5MC4xNDQuMTcyIiwiaXNsb29wYmFjayI6IlRydWUiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAiLCJuYmYiOiIxNzEzMjk1NTYyIiwicHVpZCI6IjEwMDMyMDAxNkRDMDdBRjMiLCJzY3AiOiJhbGxmaWxlcy53cml0ZSBhbGxzaXRlcy53cml0ZSIsInNpdGVpZCI6Ik9USTROVEpqTUdRdE5UaG1aaTAwT1Rjd0xUaGhZV1V0WkRVNU1UbGpPRFU0TlRCayIsInRpZCI6ImNhNTEwZTYxLWU0YmEtNGI1NS05N2I2LTk1MDYwMWNmZWY0MCIsInR0IjoiMiIsInVwbiI6ImRheGlhMUBtb3h1ZXl1bi5jbiIsInZlciI6Imhhc2hlZHByb29mdG9rZW4ifQ.lCdh5vPBMOE4Puv7_-CmUN0q9qV9E9HxUOWH0peFE4o&ApiVersion=2.0 HTTP/1.1
Host: huodroid-my.sharepoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
content-length: 12320875
content-type: application/octet-stream
accept-ranges: bytes
etag: "{B76E1AAF-EEDE-42DD-AFB9-E64236F091CC},2"
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
x-networkstatistics: 0,525568,0,0,738,0,24211
x-sharepointhealthscore: 0
docid: huodroid-my.sharepoint.com_92852c0d-58ff-4970-8aae-d5919c85850d_b76e1aaf-eede-42dd-afb9-e64236f091cc
x-download-options: noopen
content-disposition: attachment;filename*=utf-8''adb%5Fdriver%2Eexe;filename="adb_driver.exe"
ctag: {B76E1AAF-EEDE-42DD-AFB9-E64236F091CC},2,2
x-aspnet-version: 4.0.30319
x-databoundary: NONE
x-1dscollectorurl: https://mobile.events.data.microsoft.com/OneCollector/1.0/
x-ariacollectorurl: https://browser.pipe.aria.microsoft.com/Collector/3.0/
sprequestguid: 6faa1fa1-00a3-3000-342d-0ab8688eb1c0
request-id: 6faa1fa1-00a3-3000-342d-0ab8688eb1c0
ms-cv: oR+qb6MAADA0LQq4aI6xwA.0
report-to: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ca510e61-e4ba-4b55-97b6-950601cfef40&destinationEndpoint=Edge-Prod-OSL30r4B&frontEnd=AFD&RemoteIP=91.90.42.0"}]}
nel: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0}
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.office365.com *.powerapps.com *.yammer.com engage.cloud.microsoft *.officeapps.live.com *.office.com *.microsoft365.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;
x-powered-by: ASP.NET
microsoftsharepointteamservices: 16.0.0.24727
x-content-type-options: nosniff
x-ms-invokeapp: 1; RequireReadOnly
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: EE7B6BB7E21A4A37A31E80121EF63389 Ref B: OSL30EDGE0122 Ref C: 2024-04-16T19:55:01Z
date: Tue, 16 Apr 2024 19:55:01 GMT
X-Firefox-Spdy: h2
|
| yun.daxiaamu.com/files/Tool/adb%E5%92%8Cfastboot%E9%A9%B1%E5%8A%A8/adb_driver.exe |  120.24.193.70 | 302 Found | 12 MB |
URL User Request GET HTTP/2yun.daxiaamu.com/files/Tool/adb%E5%92%8Cfastboot%E9%A9%B1%E5%8A%A8/adb_driver.exe IP120.24.193.70:443 ASN#37963 Hangzhou Alibaba Advertising Co.,Ltd.
CertificateIssuerLet's Encrypt Subjectyun.daxiaamu.com FingerprintE0:66:74:69:E9:86:E0:2B:BC:58:00:DE:99:60:B0:59:DA:5D:56:54 ValidityWed, 28 Feb 2024 17:52:43 GMT - Tue, 28 May 2024 17:52:42 GMT
Size12 MB (12320875 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /files/Tool/adb%E5%92%8Cfastboot%E9%A9%B1%E5%8A%A8/adb_driver.exe HTTP/1.1
Host: yun.daxiaamu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 16 Apr 2024 19:55:00 GMT
content-type: text/html;charset=UTF-8
location: https://huodroid-my.sharepoint.com/personal/daxia1_moxueyun_cn/_layouts/15/download.aspx?UniqueId=b76e1aaf-eede-42dd-afb9-e64236f091cc&Translate=false&tempauth=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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-S-oOmYvyIsImlwYWRkciI6IjIwLjE5MC4xNDQuMTcyIiwiaXNsb29wYmFjayI6IlRydWUiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAiLCJuYmYiOiIxNzEzMjk1NTYyIiwicHVpZCI6IjEwMDMyMDAxNkRDMDdBRjMiLCJzY3AiOiJhbGxmaWxlcy53cml0ZSBhbGxzaXRlcy53cml0ZSIsInNpdGVpZCI6Ik9USTROVEpqTUdRdE5UaG1aaTAwT1Rjd0xUaGhZV1V0WkRVNU1UbGpPRFU0TlRCayIsInRpZCI6ImNhNTEwZTYxLWU0YmEtNGI1NS05N2I2LTk1MDYwMWNmZWY0MCIsInR0IjoiMiIsInVwbiI6ImRheGlhMUBtb3h1ZXl1bi5jbiIsInZlciI6Imhhc2hlZHByb29mdG9rZW4ifQ.lCdh5vPBMOE4Puv7_-CmUN0q9qV9E9HxUOWH0peFE4o&ApiVersion=2.0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|