Report - download.macromedia.com/pub/extensionmanager/ExManCmd

Report Overview

Submitted URL
download.macromedia.com/pub/extensionmanager/ExManCmd_win.zip
IP
104.110.2.22
ASN
#16625 AKAMAI-AS
Submitted
2024-05-10 16:37:45
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
download.macromedia.com	29977	1993-05-13	2012-05-30	2024-04-28	515 B	6.8 MB	104.110.2.22

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
download.macromedia.com/pub/extensionmanager/ExManCmd_win.zip
IP
104.110.2.22
ASN
#16625 AKAMAI-AS

File type
Zip archive data, at least v1.0 to extract, compression method=deflate
Size
6.8 MB (6784020 bytes)
Hash
1d909ab08166024f12a70fc0d4e0f4e5
8377817c89670229f9c0bd85b40faee28971c99b
b07ae15a3df41ae89e86dcef2003438edb9ad43023d0b30effe6b5dcb59780b0

Archive (10)

Filename

Md5

File type

AID.dll

0846be56be6ef2a60f8d0fb5d14a6828

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

AdobeExtensionsService.exe

3966e98bc2c1c9fec16a75481b8df8a0

PE32 executable (GUI) Intel 80386, for MS Windows, 7 sections

ExManCmd.exe

6a684cfdde656992d1f11155d258d09c

PE32 executable (console) Intel 80386, for MS Windows, 7 sections

ExManCoreLib.dll

d592e044e8827e2ee68c81aebaa71dfe

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

ExManCoreLib.lib

9a39490a4ec3f588b660c01a42267e28

current ar archive

ExManZxpSign.dll

ab0d577b580d0fadfb1f971722129073

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

ExtLib.dll

6b91f48b814e70fea7bde8f403e4db15

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

README

7dda5bf6381aede28ae7d7836eb4d5bb

ASCII text, with no line terminators

VulcanControl.dll

5d016f808a7d1a01724626afebf6c3d4

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 7 sections

XManConfig.xml

a7d60d4e6b950f667219221df0092355

XML 1.0 document, ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	download.macromedia.com/pub/extensionmanager/ExManCmd_win.zip	104.110.2.22	200 OK	6.8 MB
URL User Request GET HTTP/2 download.macromedia.com/pub/extensionmanager/ExManCmd_win.zip IP 104.110.2.22:443 ASN #16625 AKAMAI-AS Certificate IssuerDigiCert Inc Subjectfpdownload.macromedia.com Fingerprint75:C1:49:E6:91:DF:BB:4C:D1:44:75:0B:37:B8:30:F4:86:85:0A:EB ValidityThu, 04 Apr 2024 00:00:00 GMT - Mon, 05 May 2025 23:59:59 GMT File type Zip archive data, at least v1.0 to extract, compression method=deflate Size 6.8 MB (6784020 bytes) Hash 1d909ab08166024f12a70fc0d4e0f4e5 8377817c89670229f9c0bd85b40faee28971c99b b07ae15a3df41ae89e86dcef2003438edb9ad43023d0b30effe6b5dcb59780b0 HTTP Headers `GET /pub/extensionmanager/ExManCmd_win.zip HTTP/1.1 Host: download.macromedia.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: Apache last-modified: Thu, 04 Mar 2021 13:52:15 GMT etag: "678414-5bcb6466f9dbe" accept-ranges: bytes content-length: 6784020 content-type: application/zip date: Fri, 10 May 2024 16:37:16 GMT X-Firefox-Spdy: h2`

download.macromedia.com/pub/extensionmanager/ExManCmd_win.zip

104.110.2.22

200 OK

6.8 MB

URL User Request GET HTTP/2
download.macromedia.com/pub/extensionmanager/ExManCmd_win.zip
IP
104.110.2.22:443
ASN
#16625 AKAMAI-AS

Certificate
IssuerDigiCert Inc
Subjectfpdownload.macromedia.com
Fingerprint75:C1:49:E6:91:DF:BB:4C:D1:44:75:0B:37:B8:30:F4:86:85:0A:EB
ValidityThu, 04 Apr 2024 00:00:00 GMT - Mon, 05 May 2025 23:59:59 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=deflate
Size
6.8 MB (6784020 bytes)
Hash
1d909ab08166024f12a70fc0d4e0f4e5
8377817c89670229f9c0bd85b40faee28971c99b
b07ae15a3df41ae89e86dcef2003438edb9ad43023d0b30effe6b5dcb59780b0

HTTP Headers

GET /pub/extensionmanager/ExManCmd_win.zip HTTP/1.1
Host: download.macromedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
last-modified: Thu, 04 Mar 2021 13:52:15 GMT
etag: "678414-5bcb6466f9dbe"
accept-ranges: bytes
content-length: 6784020
content-type: application/zip
date: Fri, 10 May 2024 16:37:16 GMT
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (10)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers