IP 47.246.44.205:0
ASN#24429 Zhejiang Taobao Network Co.,Ltd
Hashd5daaa320f2b97e5cb66bf659659bb20 326bc3395b0d676143ea8b117d8156475a5f42d7 91e5e371ef95b429fbdc3f25b04a92cad9d4f0b6e9ae3af4bf484005e3c98773
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sun, 03 Dec 2023 12:41:54 GMT
Ali-Swift-Global-Savetime: 1701607314
Via: cache6.l2de2[194,194,200-0,M], cache6.l2de2[195,0], cache3.se1[217,217,200-0,M], cache3.se1[224,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 03 Dec 2023 12:41:54 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9717016073146864536e
|
IP47.246.44.205:0 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Hashd5daaa320f2b97e5cb66bf659659bb20 326bc3395b0d676143ea8b117d8156475a5f42d7 91e5e371ef95b429fbdc3f25b04a92cad9d4f0b6e9ae3af4bf484005e3c98773
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sun, 03 Dec 2023 12:41:55 GMT
Ali-Swift-Global-Savetime: 1701607315
Via: cache12.l2de2[516,516,200-0,M], cache12.l2de2[518,0], cache3.se1[541,540,200-0,M], cache3.se1[543,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 03 Dec 2023 12:41:55 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9717016073147554695e
|
| taxcache.51fapiao.cn/client/autoupdate/AutoUpdate.exe?X-OpenDNS-Session=_aeb3c159071b004b3e083a50357d5d5da09e9270fb4a_Ubw93fPY_ |  58.218.215.162 | 200 OK | 165 kB |
URL User Request GET HTTP/1.1taxcache.51fapiao.cn/client/autoupdate/AutoUpdate.exe?X-OpenDNS-Session=_aeb3c159071b004b3e083a50357d5d5da09e9270fb4a_Ubw93fPY_ IP58.218.215.162:443
CertificateIssuerDigiCert Inc Subject*.51fapiao.cn Fingerprint49:FC:95:CE:C6:7E:F3:17:AB:9C:F1:64:31:95:23:B6:44:61:EA:A0 ValidityTue, 22 Aug 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows\012- data Size165 kB (165104 bytes) Hash02e48fce0d829c88d19c57ea9820d71b 78c6a9a4dadc41aa2882bcfa090f8b4e58e71d31 8a3831662ff5ff4548b5f9e367d0d9f5468ab2b81708d786cee5cd41a9af591d
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /client/autoupdate/AutoUpdate.exe?X-OpenDNS-Session=_aeb3c159071b004b3e083a50357d5d5da09e9270fb4a_Ubw93fPY_ HTTP/1.1
Host: taxcache.51fapiao.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/x-msdownload
Content-Length: 165104
Connection: keep-alive
Date: Sun, 03 Dec 2023 12:41:50 GMT
x-oss-request-id: 656C778E0E1FCB3932CB82C2
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "02E48FCE0D829C88D19C57EA9820D71B"
Last-Modified: Fri, 20 Oct 2023 14:13:03 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1415689218216284817
x-oss-storage-class: Standard
Content-MD5: AuSPzg2CnIjRnFfqmCDXGw==
x-oss-server-time: 10
Ali-Swift-Global-Savetime: 1701607310
Via: cache29.l2cn2647[105,105,200-0,M], cache61.l2cn2647[106,0], kunlun2.cn192[0,0,200-0,H], kunlun8.cn192[2,0]
Age: 5
X-Cache: HIT TCP_MEM_HIT dirn:8:1057916974
X-Swift-SaveTime: Sun, 03 Dec 2023 12:41:50 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: 3adad01c17016073151436485e
|