Report - www.tavi.co.uk/os2pages/ews/fmos2.zip

Report Overview

Submitted URL
www.tavi.co.uk/os2pages/ews/fmos2.zip
IP
81.187.30.81
ASN
#20712 Andrews & Arnold Ltd
Submitted
2024-05-05 06:47:36
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.tavi.co.uk	unknown	1996-12-30	2013-09-30	2024-02-27	491 B	158 kB	81.187.30.81

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.tavi.co.uk/os2pages/ews/fmos2.zip
IP
81.187.30.81
ASN
#20712 Andrews & Arnold Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
158 kB (158014 bytes)
Hash
cefa209b3ad91317c9f49bdd4e909c7e
6b3b70ecc41fb5d55affc92af2d4f790bf24f579
5011d2edeefd04e5cdc4f5269de06beb822bd2ac2fe1803b7aa9a373af76af50

Archive (11)

Filename

Md5

File type

fmos2.exe

23987d4d3ebe208096645dd9e89d05c1

MS-DOS executable, LX for OS/2 (console) i80386

fmos2.inf

517b66a6f19a5af2784d47788d160635

OS/2 INF (FILE MANager for OS2 - 1.13)

fmos2.new

624026f3b7dfa2054afe78983942305d

ASCII text, with CRLF line terminators

fmos2.sam

ea179444ab96381fa1c797e0fe6a53e9

data

fmdemo.sam

bca003f108c30aaa8d5ce2ee75528b11

data

fmrecovr.sam

3dabcb8d53754cd0c8c51522b37392dd

data

fmpro.cmd

a016ade931f7e0332d1736d0b0934396

ISO-8859 text, with CRLF line terminators

fmos2_2.ico

9835e8c0ed4923daef2a991038911e72

OS/2 1.x color icon 32 x 32, hotspot 16x16, cbSize 26, bits offset 106

fmos2_1.ico

9b8204ea2f5db54d649a512a486179e8

OS/2 graphic array, cbSize 40; 1st OS/2 1.x color icon 32 x 32, hotspot 16x16, cbSize 26, bits offset 120

fmos2.abs

f23918d3318b0f727ac676201ad15175

ASCII text, with CRLF line terminators

license.txt

88ba85644a2f0ab31f83c782e05a35fa

ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	www.tavi.co.uk/os2pages/ews/fmos2.zip	81.187.30.81	200 OK	158 kB
URL User Request GET HTTP/1.1 www.tavi.co.uk/os2pages/ews/fmos2.zip IP 81.187.30.81:443 ASN #20712 Andrews & Arnold Ltd Certificate IssuerLet's Encrypt Subjecteda.tavi.co.uk Fingerprint9B:E8:65:BD:E4:16:43:3A:48:43:D4:FA:8E:57:69:18:1E:5D:3E:C4 ValidityFri, 26 Apr 2024 16:14:18 GMT - Thu, 25 Jul 2024 16:14:17 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 158 kB (158014 bytes) Hash cefa209b3ad91317c9f49bdd4e909c7e 6b3b70ecc41fb5d55affc92af2d4f790bf24f579 5011d2edeefd04e5cdc4f5269de06beb822bd2ac2fe1803b7aa9a373af76af50 HTTP Headers `GET /os2pages/ews/fmos2.zip HTTP/1.1 Host: www.tavi.co.uk User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Sun, 05 May 2024 06:47:11 GMT Content-Type: application/zip Content-Length: 158014 Connection: keep-alive Cache-Control: public, must-revalidate Last-Modified: Wed, 30 Mar 2005 23:52:02 GMT`

www.tavi.co.uk/os2pages/ews/fmos2.zip

81.187.30.81

200 OK

158 kB

URL User Request GET HTTP/1.1
www.tavi.co.uk/os2pages/ews/fmos2.zip
IP
81.187.30.81:443
ASN
#20712 Andrews & Arnold Ltd

Certificate
IssuerLet's Encrypt
Subjecteda.tavi.co.uk
Fingerprint9B:E8:65:BD:E4:16:43:3A:48:43:D4:FA:8E:57:69:18:1E:5D:3E:C4
ValidityFri, 26 Apr 2024 16:14:18 GMT - Thu, 25 Jul 2024 16:14:17 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
158 kB (158014 bytes)
Hash
cefa209b3ad91317c9f49bdd4e909c7e
6b3b70ecc41fb5d55affc92af2d4f790bf24f579
5011d2edeefd04e5cdc4f5269de06beb822bd2ac2fe1803b7aa9a373af76af50

HTTP Headers

GET /os2pages/ews/fmos2.zip HTTP/1.1
Host: www.tavi.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sun, 05 May 2024 06:47:11 GMT
Content-Type: application/zip
Content-Length: 158014
Connection: keep-alive
Cache-Control: public, must-revalidate
Last-Modified: Wed, 30 Mar 2005 23:52:02 GMT

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (11)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers