Report - excelkid.com/wp-content/uploads/2024/02/GaugeBuilder.zip

Report Overview

Submitted URL
excelkid.com/wp-content/uploads/2024/02/GaugeBuilder.zip
IP
104.26.13.53
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 06:26:23
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
excelkid.com	176268	2015-08-08	2015-08-09	2024-04-14	510 B	8.7 MB	104.26.13.53

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
excelkid.com/wp-content/uploads/2024/02/GaugeBuilder.zip
IP
104.26.13.53
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
8.7 MB (8658705 bytes)
Hash
675968ecae838a61135945123c46e18f
d22393f5a4d116c378fd00314aa1d3ebe8b7bb83
447dd408fea3eb27ae8881756e270e7321fd64d043ad3b671d8d75cc1d8596c5

Archive (20)

Filename

Md5

File type

001 - Gauge Chart.pdf

013ecaffd0e01f89a38589dd05a2b5ab

PDF document, version 1.4, 9 pages

002 - Dual Gauge Chart.pdf

d72d1760cc1e691bd30ec8a341f20801

PDF document, version 1.4, 4 pages

003 - Traffic Lights.pdf

f7ac06b540e91181d62bf3d0b7c1a95d

PDF document, version 1.4, 4 pages

004 - Radial Bar Chart.pdf

08ff3310237379107ea73447e8eff384

PDF document, version 1.4, 2 pages

005 - Sales Funnel Chart.pdf

1651bbc05936fbf10e7bfa914f71eafc

PDF document, version 1.4, 2 pages

006 - Sankey Diagram.pdf

94c760c3a0abfdb2a798c2e5e194ecad

PDF document, version 1.4, 4 pages

007 - Sankey Diagram - Income Statement.pdf

7a2a40745c03a81d9665f8c330f02233

PDF document, version 1.4, 4 pages

008 - Polar Area Chart.pdf

eab1a5032be06d455fce686d020333d4

PDF document, version 1.4, 2 pages

009 - Cycle Plot.pdf

2daccbc1e5c2a16bd31a680bfb2e82de

PDF document, version 1.4, 3 pages

010 - Progress Circle Chart.pdf

7d2a12286206dcc094208d682a1ffcb4

PDF document, version 1.4, 2 pages

011 - Bullet charts.pdf

28628920b85678b51d675730a39af2f8

PDF document, version 1.4, 3 pages

012 - Score Meter Chart.pdf

a3cb58d8c27dc7fc5fc7b6c9dee680cd

PDF document, version 1.4, 3 pages

013 - Variance Charts.pdf

b1c4d84da41883dfb1a20fa06f70321c

PDF document, version 1.4, 3 pages

014 - Variance Charts II..pdf

c601efece6b2835f1658b3a6a1be8bd5

PDF document, version 1.4, 5 pages

015 - Mekko Chart.pdf

f71317da8bd4e70c3bd308e6262b4d5a

PDF document, version 1.4, 3 pages

016 - Mekko Chart II..pdf

fde00efe75a6379da8bc65abc613e503

PDF document, version 1.4, 3 pages

017 - Waterfall chart.pdf

2aa33027c9086b01ce4996c70b050eed

PDF document, version 1.4, 3 pages

018 - TreeMaps.pdf

f3ecb07da9d88eae6dc4ba2a47a05746

PDF document, version 1.4, 3 pages

019 - Organizational Chart.pdf

206b984cb23b9e8fc1b7ce303fdb2075

PDF document, version 1.4, 3 pages

GaugeBuilder.xlam

8791b4ecb8fff10df9604da35dda2bc4

Microsoft Excel 2007+

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/63

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

excelkid.com/wp-content/uploads/2024/02/GaugeBuilder.zip

104.26.13.53

200 OK

8.7 MB

URL User Request GET HTTP/2
excelkid.com/wp-content/uploads/2024/02/GaugeBuilder.zip
IP
104.26.13.53:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectexcelkid.com
Fingerprint73:E0:B3:2B:68:DF:8C:17:61:73:57:2F:24:60:F9:A0:1C:C3:1D:96
ValiditySat, 30 Mar 2024 11:47:24 GMT - Fri, 28 Jun 2024 11:47:23 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
8.7 MB (8658705 bytes)
Hash
675968ecae838a61135945123c46e18f
d22393f5a4d116c378fd00314aa1d3ebe8b7bb83
447dd408fea3eb27ae8881756e270e7321fd64d043ad3b671d8d75cc1d8596c5

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/63

HTTP Headers

GET /wp-content/uploads/2024/02/GaugeBuilder.zip HTTP/1.1
Host: excelkid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:25:55 GMT
content-type: application/zip
content-length: 8658705
last-modified: Wed, 21 Feb 2024 10:32:50 GMT
vary: User-Agent, Accept-Encoding
cache-control: max-age=345600
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h7I9LzBdBsSWUrtbKWTtn%2BxpvhjvaQeFeTWnp4i7NAJL%2BrfcIzVpN2bGF0mgnN7zQ1GaIOJl9nuxdE9xfQ6ZkDj%2Ba3XHx%2FYsL7jnFgK8L2PKIaIMFL3d5fNF1IUZ9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876294927f4e56c3-OSL
X-Firefox-Spdy: h2