Report - oss.fnjiasu.net.cn/PCgames/ChromeSetup.exe

Report Overview

Visited public
2023-09-16 01:53:41
Tags
URL
oss.fnjiasu.net.cn/PCgames/ChromeSetup.exe
Finishing URL
about:privatebrowsing
IP / ASN
47.246.44.208
#24429 Zhejiang Taobao Network Co.,Ltd
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
oss.fnjiasu.net.cn	unknown	2020-06-11	2021-07-16 14:04:45	2023-09-12 19:53:32	498 B	1.3 MB	47.246.44.208

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-09-16	medium	fnjiasu.net.cn	Sinkholed

ThreatFox

No alerts detected

Files detected

URL
oss.fnjiasu.net.cn/PCgames/ChromeSetup.exe
IP
47.246.44.208
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
PE32 executable (GUI) Intel 80386, for MS Windows\012- data
Size
1.3 MB (1343320 bytes)
Hash
d7fb8b5b6d2db6f3f41478ee77f04c97
3a95168bed693d83a5d846aecb98506dafe87d92
822cbee588c09a933c95aaa6cc20ef7e3e0addbf12f2ca2e430d11dc69e763c3

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

oss.fnjiasu.net.cn/PCgames/ChromeSetup.exe

47.246.44.208

200 OK

1.3 MB

URL User Request GET HTTP/2
oss.fnjiasu.net.cn/PCgames/ChromeSetup.exe
IP
47.246.44.208:443
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

Certificate
IssuerDigiCert Inc
Subjectoss.fnjiasu.net.cn
Fingerprint74:61:04:27:9D:B3:4A:30:18:CE:3E:29:10:6E:87:13:03:DE:2C:67
ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT

File type
PE32 executable (GUI) Intel 80386, for MS Windows\012- data
Size
1.3 MB (1343320 bytes)
Hash
d7fb8b5b6d2db6f3f41478ee77f04c97
3a95168bed693d83a5d846aecb98506dafe87d92
822cbee588c09a933c95aaa6cc20ef7e3e0addbf12f2ca2e430d11dc69e763c3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /PCgames/ChromeSetup.exe HTTP/1.1
Host: oss.fnjiasu.net.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: application/octet-stream
content-length: 1343320
date: Thu, 14 Sep 2023 15:21:00 GMT
x-oss-request-id: 650324DC375B533733028B81
x-oss-cdn-auth: success
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
content-md5: 1/uLW20ttvP0FHjud/BMlw==
x-oss-server-time: 64
ali-swift-global-savetime: 1694704860
via: cache20.l2de2[1250,1249,304-0,M], cache25.l2de2[1251,0], cache7.se1[0,14,200-0,H], cache2.se1[19,0]
etag: "D7FB8B5B6D2DB6F3F41478EE77F04C97"
last-modified: Tue, 08 Mar 2022 08:38:22 GMT
x-oss-hash-crc64ecma: 16144653043669055094
age: 124343
x-cache: HIT TCP_HIT dirn:8:817125630
x-swift-savetime: Thu, 14 Sep 2023 15:21:00 GMT
x-swift-cachetime: 2592000
timing-allow-origin: *
eagleid: 2ff62c9616948292030221182e
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers