Report - public-s3.m3cloud.net/packages/m3/m3util.min.zip

Report Overview

Submitted URL
public-s3.m3cloud.net/packages/m3/m3util.min.zip
IP
143.204.55.109
ASN
#16509 AMAZON-02
Submitted
2024-04-17 19:57:37
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-04-17	338 B	942 B	3.164.222.26
public-s3.m3cloud.net	unknown	2016-07-27	2022-08-04	2024-04-16	502 B	16 MB	143.204.55.109

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
public-s3.m3cloud.net/packages/m3/m3util.min.zip
IP
143.204.55.109
ASN
#16509 AMAZON-02

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
16 MB (16084248 bytes)
Hash
9b9a0c9bca0a69d40fefd35882c1d552
3e577564fa60168c9a6d6f6ab2f16930e2f26a9b
b8ac7398e701a73ed6ed4c568cd1eab55feb930f06c2ed3c9c79aeb508820a2a

Archive (62)

Filename

Md5

File type

AWSSDK.Core.dll

2f242e23b7afeed2cf4799b7f5dddbae

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AWSSDK.IdentityManagement.dll

b94575d056c958951ea1fbb857785867

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AWSSDK.S3.dll

9595e506daeaa998092b71b2617ed3de

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AWSSDK.SecretsManager.dll

013c54f77a85afdb9e40f963e04bdc06

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Colorful.Console.dll

5f3d2cfbc21591b8feef1efa3e59a4d0

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ColorMine.dll

c1db8375b10988930f55bedaf42581e3

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

CSScriptLibrary.dll

a359b28b6d8abcfd584ade82cee6e7d3

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

CsvHelper.dll

a425cc428cd4a1b96c2f12dbe934bce2

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DotNetZip.dll

922600856b3253908e815082db7be337

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Fasterflect.dll

7be66d62e4086029e9233ece9142f900

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Fizzler.dll

3c558d9a97f8ddd707e59a5cd8dc735f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Flee.Net45.dll

c70d946ccf8f1d04db796c49c2659ea9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

GdPicture.NET.14.dll

e2d7a5b37df7c861a146c4ec60c56139

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Interop.WUApiLib.dll

f6b770b51cf9d008a73b4de7e9576a93

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Jint.dll

734c5ce8f9b104d8ad3c7b494e96f9b9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Markdig.dll

f8cb5c18e73c2e3949f2c53dc2a57c72

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.CodeAnalysis.CSharp.dll

86786b9aef7fd72de54e2bc4ac12d4f9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.CodeAnalysis.CSharp.Scripting.dll

3f71fbd66af93c52d17f85dd2518e9e0

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.CodeAnalysis.dll

8cd4b0d6b895e7c4816f90c21064a3b8

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.CodeAnalysis.Scripting.dll

339c3aa60f7bbbcb56252c0a19493b4e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Extensions.DependencyInjection.Abstractions.dll

baaae120a7cc0a736887334f2ec38e78

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MiniProfiler.EF6.dll

4699fc5b03dc60f2ed19a628d4ed44ef

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MiniProfiler.Shared.dll

c7511520206cf19e970faf42f91a9056

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Mono.CSharp.dll

a76472ab21428bc17af0d2ade0c54500

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 4 sections

MX.Candybag.dll

83a1b75ef15e5678955e9bd1fbf12655

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MX.Columbus.dll

9c63f7211718fa0abc1ed4fbbe1bcc50

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MX.Framework.dll

79c7bd60984697a718f93d523002e10d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MX.Jack.dll

f8d946b2d26ffdfca14014472f1ae901

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MX.Kitt.dll

1ef15ce1bd52f6472ccc5733dd2ad612

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MX.Kitt.Platform.Net.dll

5c7c847a1df3617c587412a4d6da642f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MX.Kitt.Platform.Wpf.dll

351ff65573a4a3f4318ded49db62fed5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MX.Kitt.Runtime.Net.dll

d9c0989cdc7a0116b696fa9670c26ab9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MX.Kitt.Tools.Net.dll

5d11d12b31d5469cc64dafc3684d31c0

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MX.Kitt.Utils.Net.dll

a87453c7f39e3fa0499878d4917034eb

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Newtonsoft.Json.dll

081d9558bbb7adce142da153b2d5577a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

NLog.dll

b70274014c925937f0f2e79de6a17615

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

QRCodeDecoderLibrary.dll

8d53483312b5baf872c33c476354a804

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ReactiveUI.dll

dc97b4e48d19e34cf442779816dbe1af

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

RestSharp.dll

d294a1a08de13d8f8a8be2d6cc4261ea

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Splat.dll

0b2db2e58865360fddf093154a731188

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Svg.dll

7a5463254ea16a3cbb9d370241012880

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Buffers.dll

ecdfe8ede869d2ccc6bf99981ea96400

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Collections.Immutable.dll

8f55c22412f7d448d6e7b83102665368

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.DiagnosticSource.dll

3777318fb7bc4f0e8c0053fac2daffbe

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Memory.dll

6fb95a357a3f7e88ade5c1629e2801f8

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Numerics.Vectors.dll

aaa2cbf14e06e9d3586d8a4ed455db33

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Reactive.Core.dll

39dba19c792581d4b454d58e35878d86

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Reactive.Interfaces.dll

b80e8c6c63a953fc1258d28996b0ca8f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Reactive.Linq.dll

46da475b75ee3f8dde6d6541dcf7d9d2

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Reactive.PlatformServices.dll

37ce61ce49ccb77d852950b7589f56a3

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Reflection.Metadata.dll

da4b3709022f3efd9cb4198a72555a55

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.CompilerServices.Unsafe.dll

2a9dd5fc3e337d2239bd7b92c51ae328

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Text.Encoding.CodePages.dll

668893de548e0adde40e8e3c021978bb

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Threading.Tasks.Extensions.dll

ef26e8a9829d19bf95a11df63fa94815

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Ude.dll

165cf9459f929921020c86581b4f994d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

zxing.dll

acaa23fe37ede977e6f81d497d74e8e6

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

m3.system.config

f6a74390979bca4a1cad687f727ba63c

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

M3-SystemCheck.bat

7414faaa6abe632193067b807d87ec0c

ASCII text, with no line terminators

M3-SystemCheck.ksh

e7d46b4bac3570883b94ae167b006d36

Unicode text, UTF-8 text, with CRLF line terminators

m3util.exe

5844bb9c3b2d92cb0a9f0c660c3ae2b8

PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

m3util.exe.config

08f3d7d1f732513545072dc854868ccc

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

m3util.pdb

08a9d6f3902390dfe9c78244ae3e48e9

MSVC program database ver 7.00, 512*995 bytes

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/64

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

ocsp.r2m03.amazontrust.com/

3.164.222.26

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
3.164.222.26:0
ASN
#0

File type
data
Size
471 B (471 bytes)
Hash
27992fb4edb524067c1b39b6dfd1d6c8
297bbea985717115d4d84049454ef521341e5bc5
7e2e13a975dda3215ca9068373e818dd15a8e2fb596e6f4a56306f4b54b19e6f

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 19:57:00 GMT
Last-Modified: Wed, 17 Apr 2024 19:06:35 GMT
Server: ECAcc (amb/6AB3)
X-Cache: Miss from cloudfront
Via: 1.1 5d83ff4fc3f1b992abe457ff43255c0a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN53-P1
X-Amz-Cf-Id: KX619eHpmhaenALrSvAzB1Q51W2Txw5_JdtauaOHhcvhnDu5iNRwgQ==
Age: 3026

public-s3.m3cloud.net/packages/m3/m3util.min.zip

143.204.55.109

200 OK

16 MB

URL User Request GET HTTP/1.1
public-s3.m3cloud.net/packages/m3/m3util.min.zip
IP
143.204.55.109:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subject*.m3cloud.net
Fingerprint4F:0E:B5:A5:3F:DF:4D:43:F4:C8:04:6B:42:6F:A1:2E:CA:B0:B7:56
ValidityWed, 03 Jan 2024 00:00:00 GMT - Sat, 01 Feb 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
16 MB (16084248 bytes)
Hash
9b9a0c9bca0a69d40fefd35882c1d552
3e577564fa60168c9a6d6f6ab2f16930e2f26a9b
b8ac7398e701a73ed6ed4c568cd1eab55feb930f06c2ed3c9c79aeb508820a2a

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/64

HTTP Headers

GET /packages/m3/m3util.min.zip HTTP/1.1
Host: public-s3.m3cloud.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/x-zip-compressed
Content-Length: 16084248
Connection: keep-alive
Date: Wed, 17 Apr 2024 19:57:01 GMT
Last-Modified: Wed, 15 Dec 2021 09:31:43 GMT
ETag: "9b9a0c9bca0a69d40fefd35882c1d552"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lQEGb28O6uzbv2hDLo_YFQK5_TzFMSzX1jqZRY2NAhTRad1XikVaOA==