IP 1.194.253.35:0
ASN#139019 Henan Xinxiang MAN
Hash361b9b37676defefca34dce8e840df9b 5f2d38878bd29084396112bc832b776e5fa0c1e6 c311a0119945cb91a0106dc3914813cbc537eb162a4eb28199d3fa70e47957e8
GET / HTTP/1.1
Host: down.ruanmei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: JSP3/2.0.14
Date: Sat, 18 Jan 2025 13:07:34 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 101
Connection: keep-alive
x-bce-debug-id: cPjqpcWSEyjZt46qk58YffTbRi2tv6YNJkwk2BS5rEdddJUDiwvu0YOko35tsSwUhViEy1JbgAif308FU2Xmzg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 8596402b-59cb-4b65-b063-9a0d7b9ce1ed
Ohc-Cache-HIT: xxct63 [1], cdix158 [1]
Ohc-File-Size: 101
X-Error-Info: Origin
X-Cache-Status: MISS
|
| down.ruanmei.com/mytime/files/3.3.7.0/mytime.exe?skq=-1281386668/ | 42.101.56.35 | 200 OK | 12 MB |
URL User Request GET HTTP/2down.ruanmei.com/mytime/files/3.3.7.0/mytime.exe?skq=-1281386668/ IP42.101.56.35:443 ASN#137698 HaerbingHeilongjiang Province, P.R.China.
CertificateIssuerSectigo Limited Subject*.ruanmei.com FingerprintA9:98:72:19:88:14:4E:45:46:76:68:B2:38:82:92:2C:23:86:DA:76 ValidityFri, 13 Dec 2024 00:00:00 GMT - Tue, 13 Jan 2026 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 7 sections Size12 MB (11738520 bytes) Hashdb70260e486dc426331bdef6877cd522 fbf926ffdaf136c78e56fc6c7fbfa80236bc7d94 a903d0587ded9fc9a32dbce79ba8c3dcd61930e0bbbc8b2be2d7c918d77d39b7
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | malicious | |
GET /mytime/files/3.3.7.0/mytime.exe?skq=-1281386668/ HTTP/1.1
Host: down.ruanmei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 18 Jan 2025 13:07:33 GMT
content-type: application/x-msdownload
content-length: 11738520
expires: Fri, 27 Dec 2024 17:29:10 GMT
last-modified: Wed, 14 Jul 2021 01:31:10 GMT
etag: "db70260e486dc426331bdef6877cd522"
age: 2142107
accept-ranges: bytes
content-md5: 23AmDkhtxCYzG972h3zVIg==
x-bce-content-crc32: 3240872267
x-bce-debug-id: Robu7+Pb/VcRegQg5qs6SuSS1MblSynovd0fvBtWZLRj2um/wIvwVE4NITUuac9PEQ9S+ky/VXdqg52nphJPmg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: e1c5a704-ecf7-438c-b466-b20efe9235c1
x-bce-storage-class: STANDARD
ohc-global-saved-time: Tue, 24 Dec 2024 17:29:10 GMT
ohc-cache-hit: hrb4ct88 [2], csix99 [4]
ohc-file-size: 11738520
x-cache-status: HIT
X-Firefox-Spdy: h2
|