Report - oss.asklink.com/updata/official-version/windows/AskLink-Installer-v3.6.1.1-x64-20241015-1853.exe

Report Overview

Visitedpublic

2025-04-07 13:12:52

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
oss.asklink.com	unknown	1999-11-10	2024-10-10	2025-01-26	564 B	21 MB	47.246.44.198

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-04-07	medium	oss.asklink.com/updata/official-version/windows/AskLink-Installer-v3.6.1.1-x64-20241015-1853.exe	Detect pe file that no import table

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

oss.asklink.com/updata/official-version/windows/AskLink-Installer-v3.6.1.1-x64-20241015-1853.exe

IP / ASN

47.246.44.198

#24429 Zhejiang Taobao Network Co.,Ltd

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 10 sections

Size21 MB (20804696 bytes)

MD56bbf2fed11fca30d4adfe09bf1372af4

SHA1f65ea1ba3d49f6a0dbf94a06b3cd50f08cf84d15

SHA25634af7bf01c587126660955561b363211de99a2621581750feffb50e7f7dfc65e

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET oss.asklink.com/updata/official-version/windows/AskLink-Installer-v3.6.1.1-x64-20241015-1853.exe

47.246.44.198

200 OK

21 MB

URL User Request GET HTTPS

oss.asklink.com/updata/official-version/windows/AskLink-Installer-v3.6.1.1-x64-20241015-1853.exe

IP / ASN

47.246.44.198

#24429 Zhejiang Taobao Network Co.,Ltd

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 10 sections

First Seen2025-04-07

Last Seen2025-04-07

Times Seen1

Size21 MB (20804696 bytes)

MD56bbf2fed11fca30d4adfe09bf1372af4

SHA1f65ea1ba3d49f6a0dbf94a06b3cd50f08cf84d15

SHA25634af7bf01c587126660955561b363211de99a2621581750feffb50e7f7dfc65e

Certificate Info

IssuerDigiCert Inc

Subject*.asklink.com

Fingerprint02:4E:A3:9A:08:73:51:F5:24:A0:90:0C:3A:DC:F3:C6:BD:34:16:B2

ValidityThu, 01 Aug 2024 00:00:00 GMT - Sun, 10 Aug 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

HTTP Headers

GET /updata/official-version/windows/AskLink-Installer-v3.6.1.1-x64-20241015-1853.exe HTTP/1.1
Host: oss.asklink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/octet-stream
Content-Length: 20804696
Connection: keep-alive
Date: Mon, 07 Apr 2025 13:00:11 GMT
x-oss-request-id: 67F3CC5B805403313626B22B
x-oss-cdn-auth: success
Accept-Ranges: bytes
x-oss-object-type: Multipart
x-oss-storage-class: Standard
ETag: "9DCB6BAC309C3397C18170D851CD6352-2"
Last-Modified: Tue, 15 Oct 2024 15:42:45 GMT
x-oss-hash-crc64ecma: 1266219789932477045
x-oss-server-time: 99
Via: cache22.l2fr1[818,831,200-0,H], cache24.l2fr1[832,0], ens-cache11.se2[0,0,200-0,H], ens-cache1.se2[3,0]
Age: 740
Ali-Swift-Global-Savetime: 1744030811
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Mon, 07 Apr 2025 13:00:11 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: 2ff62c9517440315514334132e