Report - www.bernd-leitenberger.de/download/smarteditor.zip

Report Overview

Submitted URL
www.bernd-leitenberger.de/download/smarteditor.zip
IP
85.13.151.179
ASN
#34788 Neue Medien Muennich GmbH
Submitted
2024-05-04 10:46:05
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.bernd-leitenberger.de	unknown	unknown	2017-04-27	2024-03-16	504 B	8.8 MB	85.13.151.179

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.bernd-leitenberger.de/download/smarteditor.zip
IP
85.13.151.179
ASN
#34788 Neue Medien Muennich GmbH

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
8.8 MB (8757777 bytes)
Hash
db3df97c4edf36bf7c7d3d0ffc06f56c
2432e8507a7bf11e232ab10ff4f51395197e2ae7
772450581b1bee77cd43e993063eec2d7656de34bbb4602757a0690fa56f8114

Archive (26)

Filename

Md5

File type

OSEK-OIL.def

f8564d45710c2a0bb7335f27e290adeb

Generic INItialization configuration [Example]

z80.def

b0bd96bdde24c1f309c03cb6b0980ca3

Generic INItialization configuration [Example]

gpss.def

411f8adfa0e1221dd4b27accce30947d

Generic INItialization configuration [Example]

FCEA.def

9c274d55dfcdfc49379995e113008693

Generic INItialization configuration [Example]

Algol68.def

d42975ae39c208468cc9c483a6b04fea

Generic INItialization configuration [Example]

c167.def

e3da8ff2ef998818e123b9c8ea77745d

Generic INItialization configuration [Example]

6502.def

98db2fcb906ef0b8f4e380f67ff40c6e

Generic INItialization configuration [Example]

Objectpascal.dci

8a0bb27572ca611b2d0ed897197089de

ISO-8859 text, with CRLF line terminators

PHP.dci

bb708d47ca1c27ff663cd0e493216fbb

exported SGML document, ASCII text, with CRLF line terminators

VisualBasic.dci

43209ad4602c744efcd7e9402871e194

ASCII text

Vrml97.dci

1212bbbbf4e89009ee17c79bad76a52e

ASCII text

TeX.dci

5d7feddf04f90437660963b4dae2a179

LaTeX 2e document, ASCII text

R.dci

a918ff7124140208d3ed5b5aa076deb2

ASCII text

MS-DOS Batch.dci

f83a2a30396803823670c8a40c9dc680

ASCII text

JavaScript.dci

b80a6ca2622432db1b5da215e724d60f

ASCII text

Java.dci

10c6edfea16d695925ddfd5a713b8c36

ASCII text

HTML.dci

3af24b465c06c297cd2b175784a3c657

HTML document, ASCII text

tokens.key

be6106b77e321ec271bef03d8a0e8464

Generic INItialization configuration [Token1]

I8051.def

4ed686c91b8ae7c8dec3c19556e0917c

Generic INItialization configuration [Example]

libtidy.dll

8ab055532a2c564056aebece28b7a67b

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections

ObjectPascal.struc

bce4bd64c1e2ca3baa5628136d7aec28

Generic INItialization configuration [Delimiter]

CandCPlusPlus.struc

4cc2abac93d1ee68e4e67548b450716b

Generic INItialization configuration [Delimiter]

Java.struc

8f783c7d44b26d796d9655443491d3f8

Generic INItialization configuration [Delimiter]

MyPreviewHandlerLib.dll

de49e84e316525d6cb05ef26f67cd191

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 10 sections

SmartEditor.chm

7fe56c85026b027a82ff765f2ad13b63

MS Windows HtmlHelp Data

SmartEditor.exe

1fcdd2e084404ffbf10f3914207e58c7

PE32 executable (GUI) Intel 80386, for MS Windows, 11 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	www.bernd-leitenberger.de/download/smarteditor.zip	85.13.151.179	200 OK	8.8 MB
URL User Request GET HTTP/2 www.bernd-leitenberger.de/download/smarteditor.zip IP 85.13.151.179:443 ASN #34788 Neue Medien Muennich GmbH Certificate IssuerLet's Encrypt Subjectbernd-leitenberger.de Fingerprint05:51:40:35:B1:C0:B5:44:2E:09:D3:94:36:83:D8:FB:DC:E1:32:CF ValiditySat, 13 Apr 2024 00:27:15 GMT - Fri, 12 Jul 2024 00:27:14 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 8.8 MB (8757777 bytes) Hash db3df97c4edf36bf7c7d3d0ffc06f56c 2432e8507a7bf11e232ab10ff4f51395197e2ae7 772450581b1bee77cd43e993063eec2d7656de34bbb4602757a0690fa56f8114 HTTP Headers `GET /download/smarteditor.zip HTTP/1.1 Host: www.bernd-leitenberger.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK last-modified: Thu, 26 Nov 2020 09:54:26 GMT etag: "85a211-5b4ff8785b832" accept-ranges: bytes content-length: 8757777 vary: User-Agent content-type: application/zip date: Sat, 04 May 2024 10:45:36 GMT server: Apache X-Firefox-Spdy: h2`

www.bernd-leitenberger.de/download/smarteditor.zip

85.13.151.179

200 OK

8.8 MB

URL User Request GET HTTP/2
www.bernd-leitenberger.de/download/smarteditor.zip
IP
85.13.151.179:443
ASN
#34788 Neue Medien Muennich GmbH

Certificate
IssuerLet's Encrypt
Subjectbernd-leitenberger.de
Fingerprint05:51:40:35:B1:C0:B5:44:2E:09:D3:94:36:83:D8:FB:DC:E1:32:CF
ValiditySat, 13 Apr 2024 00:27:15 GMT - Fri, 12 Jul 2024 00:27:14 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
8.8 MB (8757777 bytes)
Hash
db3df97c4edf36bf7c7d3d0ffc06f56c
2432e8507a7bf11e232ab10ff4f51395197e2ae7
772450581b1bee77cd43e993063eec2d7656de34bbb4602757a0690fa56f8114

HTTP Headers

GET /download/smarteditor.zip HTTP/1.1
Host: www.bernd-leitenberger.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 26 Nov 2020 09:54:26 GMT
etag: "85a211-5b4ff8785b832"
accept-ranges: bytes
content-length: 8757777
vary: User-Agent
content-type: application/zip
date: Sat, 04 May 2024 10:45:36 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (26)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers