Report - www.advancedrenamer.com/down/advanced_renamer_portable_3_88

Report Overview

Submitted URL
www.advancedrenamer.com/down/advanced_renamer_portable_3_88_1.zip
IP
104.26.5.120
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 13:30:34
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.advancedrenamer.com	unknown	2010-04-03	2012-07-15	2024-04-14	519 B	16 MB	104.26.5.120

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.advancedrenamer.com/down/advanced_renamer_portable_3_88_1.zip
IP
104.26.5.120
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
16 MB (15818079 bytes)
Hash
99d595006f7203a3a1bd8ddac8dd7bf2
4190c3dd8912cada14e14f17534d6c7f1c33e502
6398700c0c0c834d58e19afeda5ac0009335af2a6205ce0e3418e540cfe82920

Archive (48)

Filename

Md5

File type

ARen.exe

76ee6e34d273ee53d0fc46ae617b3ace

PE32+ executable (GUI) x86-64, for MS Windows, 11 sections

globalsettings.ini

c4755039ea6e63dbf693d6105eb44840

Unicode text, UTF-16, little-endian text, with CRLF line terminators

columnsets-folders.ini

8ab0199774ec94505e405e919577e049

Unicode text, UTF-16, little-endian text, with CRLF line terminators

columnsets.ini

099089016c898bc7a00d06a6eb0ef1f8

Unicode text, UTF-16, little-endian text, with CRLF line terminators

paternlist.dat

56b38a3325c6d890acbff3d2ea92dcb4

ASCII text, with CRLF line terminators

versions.txt

52232710253d29a435a07cdce97f632b

ASCII text, with very long lines (307), with CRLF line terminators

columnsets.ini

099089016c898bc7a00d06a6eb0ef1f8

Unicode text, UTF-16, little-endian text, with CRLF line terminators

columnsets-folders.ini

8ab0199774ec94505e405e919577e049

Unicode text, UTF-16, little-endian text, with CRLF line terminators

paternlist.dat

56b38a3325c6d890acbff3d2ea92dcb4

ASCII text, with CRLF line terminators

Filename cleanup.aren

f2c5b488e50ba0a4f04bd3935ff88132

Generic INItialization configuration [namecollision]

Weboptimized filenames.aren

c1c4d97a6f7a80e1519ecc8305573fdc

Generic INItialization configuration [namecollision]

MediaInfo.dll

e0e9d5f719b1307bbbcf5878424d2cee

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

arenc.exe

46edc16dbb347e13509eae87e224541c

PE32+ executable (console) x86-64, for MS Windows, 11 sections

Randomize sorting.aren

a08e1f91093ae7e19006e832c5cbe791

Generic INItialization configuration [namecollision]

Sequence.aren

f6b6927f2677809678032f610273a123

Generic INItialization configuration [namecollision]

ch.lng

1cb36b9966f033336912fd44585324ea

Unicode text, UTF-16, little-endian text, with CRLF line terminators

da.lng

baa0f15fcb59bbac62dd9868bf76301c

Unicode text, UTF-16, little-endian text, with CRLF line terminators

de.lng

fa030daaea974005ef78c5fedbcf1b2c

Unicode text, UTF-16, little-endian text, with very long lines (363), with CRLF line terminators

fi.lng

126efe108e58ea39cc9d0d40ccf03bbf

Unicode text, UTF-16, little-endian text, with CRLF line terminators

it.lng

c8ebd5a0347f7acb689bc4f635c7ccb5

Unicode text, UTF-16, little-endian text, with very long lines (344), with CRLF line terminators

pl.lng

d6a1de92652bc95245257b3045f12031

Unicode text, UTF-16, little-endian text, with very long lines (307), with CRLF line terminators

ptbr.lng

d6cdd21db96b4f8d6179379ba62ae37a

Unicode text, UTF-16, little-endian text, with very long lines (390), with CRLF line terminators

ru.lng

704f2fa3b8a5d15430fde08ae66fab3f

Unicode text, UTF-16, little-endian text, with very long lines (358), with CRLF line terminators

se.lng

2f7e4caa4346752412ef20f04a8f36cb

Unicode text, UTF-16, little-endian text, with CRLF line terminators

tr.lng

91c198c4530c2e09be6aae307c7a81d5

Unicode text, UTF-16, little-endian text, with very long lines (363), with CRLF line terminators

fr.lng

8fc4e2ff4adee2e1a22fe1a48a0eca3c

Unicode text, UTF-16, little-endian text, with very long lines (312), with CRLF line terminators

nl.lng

709e0527dc264778e03677c41c3196a0

Unicode text, UTF-16, little-endian text, with very long lines (398), with CRLF line terminators

gr.lng

e3f00d15422d34eeedc36dbf3e82a3d3

Unicode text, UTF-16, little-endian text, with CRLF line terminators

sk.lng

ec27e3b391efa824b9248bbdd25d43fa

Unicode text, UTF-16, little-endian text, with CRLF line terminators

exiftool.exe

8bdd726af0adc3cc4207eaf40c19ad2a

PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, 8 sections

ja.lng

09e4268f29d8815b63ad8ee9f9ec3f95

Unicode text, UTF-16, little-endian text, with CRLF line terminators

arencm64.dll

cfac969993b417e2e0ce77c48549b0f5

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 9 sections

sl.lng

d2d4d17c88f176e19cbe8c04b076bbf2

Unicode text, UTF-16, little-endian text, with very long lines (335), with CRLF line terminators

ar.lng

f2c511c39f07d61ba71eba8c3512ae48

Unicode text, UTF-16, little-endian text, with very long lines (329), with CRLF line terminators

cz.lng

e37f4426fe245ce39e2ef57846acc537

Unicode text, UTF-16, little-endian text, with very long lines (303), with CRLF line terminators

ca.lng

c01a15cf1a6a5ece5c88bef0f715539e

Unicode text, UTF-16, little-endian text, with very long lines (373), with CRLF line terminators

es.lng

3cbdc8c13f271f8b0c4926062048d935

Unicode text, UTF-16, little-endian text, with very long lines (379), with CRLF line terminators

es2.lng

ae77c0786a161089c8e4030a9fb18b54

Unicode text, UTF-16, little-endian text, with very long lines (375), with CRLF line terminators

kr.lng

b3a06cddb80f417ab564e32e6c7a6e78

Unicode text, UTF-16, little-endian text, with CRLF line terminators

ro.lng

98e676d997ffaae46f0f4f24fd8fe244

Unicode text, UTF-16, little-endian text, with very long lines (366), with CRLF line terminators

tw.lng

4ce6ffe145b351591d9b6aebdeed784e

Unicode text, UTF-16, little-endian text, with CRLF line terminators

license.txt

71a047ebcd404bae165ce3579ba13b54

ASCII text, with CRLF line terminators

writeable.txt

bf6d5a360a48ae4a42be766884b35a4c

ASCII text, with CRLF line terminators

ua.lng

f3040bc4e30f03ff841f66840db60228

Unicode text, UTF-16, little-endian text, with very long lines (353), with CRLF line terminators

bg.lng

29cbb29577f2e5a8427769a7128da8ba

Unicode text, UTF-16, little-endian text, with very long lines (360), with CRLF line terminators

id.lng

fdbbe66275a012f00c1c6042762139dd

Unicode text, UTF-16, little-endian text, with very long lines (360), with CRLF line terminators

de-AT.lng

32a5c418fca37ae1c3f4bbefe30b6acb

Unicode text, UTF-16, little-endian text, with very long lines (324), with CRLF line terminators

duktape64.dll

8350e97ead9927f10e70c3e3c0cc93ab

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 5 sections

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	www.advancedrenamer.com/down/advanced_renamer_portable_3_88_1.zip	104.26.5.120	200 OK	16 MB
URL User Request GET HTTP/2 www.advancedrenamer.com/down/advanced_renamer_portable_3_88_1.zip IP 104.26.5.120:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjectadvancedrenamer.com Fingerprint91:DE:D1:22:A1:34:33:B6:43:71:BB:17:71:B1:32:CE:15:7E:21:E8 ValidityThu, 14 Mar 2024 06:58:15 GMT - Wed, 12 Jun 2024 06:58:14 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 16 MB (15818079 bytes) Hash 99d595006f7203a3a1bd8ddac8dd7bf2 4190c3dd8912cada14e14f17534d6c7f1c33e502 6398700c0c0c834d58e19afeda5ac0009335af2a6205ce0e3418e540cfe82920 HTTP Headers GET /down/advanced_renamer_portable_3_88_1.zip HTTP/1.1 Host: www.advancedrenamer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Fri, 26 Apr 2024 13:30:02 GMT content-type: application/zip content-length: 15818079 last-modified: Thu, 15 Jul 2021 08:16:38 GMT etag: "f15d5f-5c725170d0580" cache-control: max-age=3600 cf-cache-status: HIT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IApnX0p8fU18%2BizAYZgsCRT4Wuv2TRuatSMD4Kzy4VhJ99bMEv3yG64Ae2VSM1DbHXW4kTmY%2F2CugC8Mtf6sotzBBM%2F7M5pBLZ78uyUeEIHceG8sdZSPwBNH8APDpL%2Bpy4LJWgB0RsZX"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 87a6ecd25838b4ee-OSL X-Firefox-Spdy: h2

www.advancedrenamer.com/down/advanced_renamer_portable_3_88_1.zip

104.26.5.120

200 OK

16 MB

URL User Request GET HTTP/2
www.advancedrenamer.com/down/advanced_renamer_portable_3_88_1.zip
IP
104.26.5.120:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectadvancedrenamer.com
Fingerprint91:DE:D1:22:A1:34:33:B6:43:71:BB:17:71:B1:32:CE:15:7E:21:E8
ValidityThu, 14 Mar 2024 06:58:15 GMT - Wed, 12 Jun 2024 06:58:14 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
16 MB (15818079 bytes)
Hash
99d595006f7203a3a1bd8ddac8dd7bf2
4190c3dd8912cada14e14f17534d6c7f1c33e502
6398700c0c0c834d58e19afeda5ac0009335af2a6205ce0e3418e540cfe82920

HTTP Headers

GET /down/advanced_renamer_portable_3_88_1.zip HTTP/1.1
Host: www.advancedrenamer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 13:30:02 GMT
content-type: application/zip
content-length: 15818079
last-modified: Thu, 15 Jul 2021 08:16:38 GMT
etag: "f15d5f-5c725170d0580"
cache-control: max-age=3600
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IApnX0p8fU18%2BizAYZgsCRT4Wuv2TRuatSMD4Kzy4VhJ99bMEv3yG64Ae2VSM1DbHXW4kTmY%2F2CugC8Mtf6sotzBBM%2F7M5pBLZ78uyUeEIHceG8sdZSPwBNH8APDpL%2Bpy4LJWgB0RsZX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a6ecd25838b4ee-OSL
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (48)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers