Report - free.360totalsecurity.com/totalsecurity/360TS_Setup_Mini_WW.Datacash.CPI202304

Report Overview

Visited public
2023-10-20 19:24:41
Tags
URL
free.360totalsecurity.com/totalsecurity/360TS_Setup_Mini_WW.Datacash.CPI202304_6.6.0.1054.exe
Finishing URL
about:privatebrowsing
IP / ASN
151.236.105.231
#204720 CDNetworks LLC
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
free.360totalsecurity.com	unknown	2014-04-18	2015-02-05 20:43:52	2023-10-17 19:41:13	549 B	1.5 MB	151.236.105.231
ocsp.crlocsp.cn	175388	2019-11-13	2020-04-10 16:39:04	2023-10-19 23:39:09	329 B	872 B	101.198.193.5

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
free.360totalsecurity.com/totalsecurity/360TS_Setup_Mini_WW.Datacash.CPI202304_6.6.0.1054.exe
IP
151.236.105.231
ASN
#204720 CDNetworks LLC

File type
PE32 executable (GUI) Intel 80386, for MS Windows\012- data
Size
1.5 MB (1524456 bytes)
Hash
9fc1787b914c1943f2581c4a497aef8f
00550786eaed8c2f4628c6933375ab8fa7dc9011
88777c5f1d707c8e51f78c7bac08425673a48d01d875c20dec83d9ab9a58b66c

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 5/72

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

ocsp.crlocsp.cn/

101.198.193.5

472 B

URL
ocsp.crlocsp.cn/
IP
101.198.193.5:0
ASN
#55992 Beijing Qihu Technology Company Limited

File type
data
Size
472 B (472 bytes)
Hash
da90293887e2c2bc80ffb76f2b08e4f2
8ae484e28cd1afde8ec20310773f404edd7c1834
c061cdeb9b8e67b99a43a33f495b0ede700393ea4d8ad47066118aa0a370dd12

HTTP Headers

POST / HTTP/1.1
Host: ocsp.crlocsp.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.9.14
Date: Fri, 20 Oct 2023 19:15:33 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Content-Transfer-Encoding: Binary
Last-modified: Wed, 18 Oct 2023 08:51:19 GMT
Expires: Wed, 25 Oct 2023 08:51:18 GMT
ETag: "8AE484E28CD1AFDE8EC20310773F404EDD7C1834"
cache-control: max-age=172800,public,no-transform,must-revalidate

free.360totalsecurity.com/totalsecurity/360TS_Setup_Mini_WW.Datacash.CPI202304_6.6.0.1054.exe

151.236.105.231

200 OK

1.5 MB

URL User Request GET HTTP/2
free.360totalsecurity.com/totalsecurity/360TS_Setup_Mini_WW.Datacash.CPI202304_6.6.0.1054.exe
IP
151.236.105.231:443
ASN
#204720 CDNetworks LLC

Certificate
IssuerWoTrus CA Limited
Subjectfree.360totalsecurity.com
Fingerprint0C:A1:47:7D:A4:EE:D3:A3:D9:66:93:80:62:66:71:2F:99:AC:01:BE
ValidityMon, 06 Mar 2023 00:00:00 GMT - Tue, 05 Mar 2024 23:59:59 GMT

File type
PE32 executable (GUI) Intel 80386, for MS Windows\012- data
Size
1.5 MB (1524456 bytes)
Hash
9fc1787b914c1943f2581c4a497aef8f
00550786eaed8c2f4628c6933375ab8fa7dc9011
88777c5f1d707c8e51f78c7bac08425673a48d01d875c20dec83d9ab9a58b66c

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 5/72

HTTP Headers

GET /totalsecurity/360TS_Setup_Mini_WW.Datacash.CPI202304_6.6.0.1054.exe HTTP/1.1
Host: free.360totalsecurity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 20 Oct 2023 19:24:25 GMT
content-type: application/octet-stream
content-length: 1524456
last-modified: Wed, 26 Apr 2023 07:54:47 GMT
expires: Fri, 20 Oct 2023 19:34:25 GMT
cache-control: max-age=600
x-cdn-edge-cache: MISS
x-cdn-edge-id: 93
x-cdn-request-id: 0664677299f44406a8a34fac438805ba
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers