| a0069a666686.vip/setup-%E9%80%9A%E7%94%A8%E7%89%886052.exe |  172.67.205.4 | 200 OK | 6.8 kB |
URL User Request GET HTTP/1.1a0069a666686.vip/setup-%E9%80%9A%E7%94%A8%E7%89%886052.exe IP172.67.205.4:80
File typeHTML document, ASCII text, with very long lines (394) Hash3325f42d99045faeec6111538a739de9 645858662a60d3a0b6d44df09ec4e0b889ee2d40 3219450cbddd645457481bda8a624e50c3977619144dd088b6ce9c7f5b90d88a
GET /setup-%E9%80%9A%E7%94%A8%E7%89%886052.exe HTTP/1.1
Host: a0069a666686.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 521 No Reason Phrase
date: Wed, 17 Apr 2024 20:51:37 GMT
content-type: text/html; charset=UTF-8
content-length: 6833
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cEw6gavcf5Hj5UwR3c4Nnb%2FxiYyOsuwPSd%2B6dv4qK%2Bzvu7gvqzJqdhoJPnhawJV5ZWeiYaAS6hZriWM97c%2B91XSgxVsCgL1GhSZiK7RFB7owllMn14QvK0xYAj7toEEviLKy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 875f4b4c1ef8b521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| a0069a666686.vip/setup-%E9%80%9A%E7%94%A8%E7%89%886052.exe | 172.67.205.4 | 200 OK | 49 kB |
URL User Request GET HTTP/1.1a0069a666686.vip/setup-%E9%80%9A%E7%94%A8%E7%89%886052.exe IP172.67.205.4:80
File typePE32+ executable (GUI) x86-64, for MS Windows, 6 sections Hashad36dab62255d7beab5af64e0d34311d 5f069504168956a5e98bf29adde30283580e14f3 98b0aef834309db4f87730023eff44a9b648d00f0c04fd09cc519bb1ae70ad84
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | malicious | |
GET /setup-%E9%80%9A%E7%94%A8%E7%89%886052.exe HTTP/1.1
Host: a0069a666686.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 17 Apr 2024 20:51:38 GMT
Content-Type: application/octet-stream
Content-Length: 49152
Connection: keep-alive
ETag: 935f24190cafade388639f63c1666587
Last-Modified: Wed, 17 Apr 2024 07:53:50 GMT
Content-Disposition: attachment; filename*=UTF-8''setup-%E9%80%9A%E7%94%A8%E7%89%886052.exe; filename=setup-%E9%80%9A%E7%94%A8%E7%89%886052.exe
CF-Cache-Status: BYPASS
Set-Cookie: HFS_SID_=zLxpegYr5kAAAADI44CAPw; path=/; HttpOnly
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ASTEe93o9TaseDeJ%2B3Yex6aD06dDMhd3M4Pmt4NglWE%2BAPQe3af3rsLqcYvhmia46mI2pJ5rRobsElspte5XllzvkxxfUU94wYu0DKJQjOeG4vtXN9LdJv31g7bCmb%2F3fJ3g"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 875f4b4e9883568e-OSL
alt-svc: h2=":443"; ma=60
|