Report - archive.swifdoo.com/tool/gtools.7z

Report Overview

Submitted URL
archive.swifdoo.com/tool/gtools.7z
IP
104.26.9.75
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-23 06:08:32
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
9

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
archive.swifdoo.com	unknown	2020-10-20	2021-02-22	2024-04-17	488 B	8.9 MB	104.26.8.75

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

Files detected

URL
archive.swifdoo.com/tool/gtools.7z
IP
104.26.8.75
ASN
#13335 CLOUDFLARENET

File type
7-zip archive data, version 0.4
Size
8.9 MB (8939861 bytes)
Hash
63bc82f41a3f1f6748d75663f2ef4a1b
3886b83bcd03f70dbdb21adcebb8819d6f57c120
e8666ad6ae2670f44b2b56433129446ba732afc16caa127503c6fbed90b9efc6

Archive (122)

Filename

Md5

File type

GCApp.exe.config

6c947fe5e479e169023832ec2aa89624

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

libgrpc_csharp_ext.x64.so

073469d9f9e287a5ab1be5afd90c5896

ELF 64-bit LSB shared object, x86-64, version 1 (GNU/Linux)

GCApp.exe

002563b41e24b53f6751cba17325af98

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Google.Api.CommonProtos.dll

5de7ca2c1ad6e552a336cb087246f28e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Google.Api.Gax.dll

801f8a1fe6481f4b421b32903ff8a093

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Google.Api.Gax.Grpc.dll

bfdffa1dc412755e1edd0efee9d7b0ac

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Google.Api.Gax.Grpc.GrpcCore.dll

cc08b059648063675843ffae188e50dc

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Google.Apis.Auth.dll

ac71a24e85dfad957bfcd6e52f62e8ed

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Google.Apis.Auth.PlatformServices.dll

1055f5871c09a4222cc411de803af100

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Google.Apis.Core.dll

96d8b4c488471aa9da5d9b73181fe95a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Google.Apis.dll

c4fdfc52a61d579712072074f892ed2a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Google.Apis.PlatformServices.dll

86e3f1977e2093abd07e6cd222cf1d4a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Google.Cloud.TextToSpeech.V1.dll

fec9a361709be28076231301a55b7a4a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Google.Protobuf.dll

521d912bf03896d6008edf48ef61af3a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Grpc.Auth.dll

e9d6f2b5b7207cebba4df8cd0bd7300f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Grpc.Core.Api.dll

40782c81d93a646c35095cbdb67bc308

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Grpc.Core.dll

13545740a984367060de1b16f89815ce

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

grpc_csharp_ext.x64.dll

b1d3fcdeaf1ef75c6e34c73701b3b718

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 10 sections

grpc_csharp_ext.x86.dll

d40a5099480c7f9d5846c379d3728dbf

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 9 sections

Microsoft.Bcl.AsyncInterfaces.dll

51498932d81573a557bc5006a1b0d762

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Win32.Primitives.dll

76b8d417c2f6416fa81eacc45977cea2

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

netstandard.dll

0adf6f32f4d14f9b0be9aa94f7efb279

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Newtonsoft.Json.dll

081d9558bbb7adce142da153b2d5577a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.AppContext.dll

8cc4c7dfeb41b6c227488ce52d1a8e74

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Buffers.dll

b66c85efa4d6f8c698476735c1ff4ecc

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Collections.Concurrent.dll

559c98eb9633c7ba1bc813f8e6e0e9a5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Collections.dll

1d8aafeca1ea565b257384d3f64864b0

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Collections.NonGeneric.dll

45ff71114047dbf934c90e17677fa994

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Collections.Specialized.dll

b52c339601cb264f83df72d802e98687

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.ComponentModel.dll

632cc8ad69b76fd9bb5847de1e1439f7

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.ComponentModel.EventBasedAsync.dll

6067ecbab3c6dddb6bf7c49c7948caa8

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.ComponentModel.Primitives.dll

2f39655ccfc010e32a7240d9bf5d0852

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.ComponentModel.TypeConverter.dll

d1699287934da769fc31e07f80762511

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Console.dll

ea9376c17ee0148f0503028ad4501a92

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Data.Common.dll

d712a5a82a446086443ce00b610d8a5d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.Contracts.dll

99373ab10858746aad424f28b48277f5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.Debug.dll

8b8c402311d7ab87e588675e736414fd

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.FileVersionInfo.dll

0d9a641105098d642567b22101a4de0b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.Process.dll

d86b0aca05321569d9383dc7c4e9e934

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.StackTrace.dll

fa98a0f020248c2be1dd40c07092f22a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.TextWriterTraceListener.dll

a964808487e671bb369dbc0e4dc5a947

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.Tools.dll

27c7d752c11c3f43f28eb31968e73e2b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.TraceSource.dll

37be4cce0ed037f8d9a7a3940bd2a2e1

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.Tracing.dll

60f59659db517c2f4dd4c5c583d43097

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Drawing.Primitives.dll

29b0a1554e54611ebba7911049f26fd3

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Dynamic.Runtime.dll

c5cadb1409f25b6a1c7a6dd4c2df236b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Globalization.Calendars.dll

ac2f4b435ddf0600d7a866f42f3b40d9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Globalization.dll

ae023bb0beee5189a07c7fd4e0cf3fca

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Globalization.Extensions.dll

c7c93de0627833900b8379fd181b7351

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.IO.Compression.dll

33b8972fa6b00b8922210ca95e5745d1

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.IO.Compression.ZipFile.dll

bb1a520f25bb93ace4dd0a060fba677d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.IO.dll

809fdbd7422a3e02c89244dc530a3367

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.IO.FileSystem.dll

bfceb4faca75681137455cd70f8038b6

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.IO.FileSystem.DriveInfo.dll

2fcb2158fc41d97e2bb71953664b99b9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.IO.FileSystem.Primitives.dll

51b07204081bde29a1f84a3b48554186

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.IO.FileSystem.Watcher.dll

3772a3a7e55178ec90ecb607aba28511

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.IO.IsolatedStorage.dll

ab8d293bcd7a13e83565b4afa8438988

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.IO.MemoryMappedFiles.dll

34e21101faf71a27c6819cc051debc9d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.IO.Pipes.dll

58a2e5ac0510b9223236b9317c505b58

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.IO.UnmanagedMemoryStream.dll

d74405753f829e75e89bba5ebc296112

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Linq.dll

5e33930fe2e0867cb1f9fabeddfbd7b1

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Linq.Expressions.dll

3b49bf361f3116de28176b40845bc199

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Linq.Parallel.dll

8be0caa60074176fa1e7e63c0aeb6c01

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Linq.Queryable.dll

e04cdb6229d83768285acb08d870f23a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Memory.dll

592a822d0136b14f8d661891ff17c33b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Net.Http.dll

665e355cbed5fe5f7bebc3cb23e68649

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Net.NameResolution.dll

2eec710dbaacd32bedfca09eca8de52d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Net.NetworkInformation.dll

f39a35095cfd0019d6d4bb8461750bf0

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Net.Ping.dll

2a459c2c395f54352a16de4aa0e5407f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Net.Primitives.dll

562f67001889cdbc2531947636418ee5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Net.Requests.dll

28141960a88365df6a60b0c6ff831b0b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Net.Security.dll

8d00682e84d1d773d2160b63c0380ba6

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Net.Sockets.dll

8c9d9f45b85526e491f6555b1566a41c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Net.WebHeaderCollection.dll

7da1fee108a0750f47b70f25fe2cc55a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Net.WebSockets.Client.dll

e06bae626965fbdb0bae5437498b5155

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Net.WebSockets.dll

2e6378feaeee2f745417fc025c7850f9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Numerics.Vectors.dll

482d88247171630099d81400dc0a1aa7

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.ObjectModel.dll

55d9528d161567a19dbb71244b3ae3ce

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Reflection.dll

1a3da139180e9fab380033d8d1fe3995

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Reflection.Extensions.dll

defaadd4a92d4d348b0827ab8159d2fe

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Reflection.Primitives.dll

cf318475e6a7a56789abb0f98c37abe1

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Resources.Reader.dll

f1cc91d25b52c7504dc5beab5d0f498c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Resources.ResourceManager.dll

9e71dfce86f14beeb8f3e9f00d0a472e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Resources.Writer.dll

05d1b950c470ea8b0aa357f9a59cf264

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.CompilerServices.Unsafe.dll

d9e308fe5f1ac35ce823964288da1ba5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.CompilerServices.VisualC.dll

9f31b6954fd453f13b5f39da36f2e8eb

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.dll

0e35085c130d2d91e5241334be7ef0da

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.Extensions.dll

b0346a4c5fa0fac135509a0e7d3c4449

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.Handles.dll

65fbba7a86b3e175200ae44727ab40e5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.InteropServices.dll

d7e74ea95786a02687ce43c356abdc95

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.InteropServices.RuntimeInformation.dll

05af54a1c6450b98ad0fb0e857b6a523

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.Numerics.dll

6ccca0ba6a7b9caf8b8d3b0287dbed8b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.Serialization.Formatters.dll

a42c32f4e98a9656fc2fed72d30e9380

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.Serialization.Json.dll

e1e2239979b853157ba75310fea7e65d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.Serialization.Primitives.dll

3373a24450373caf0cbb756e10097fd4

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.Serialization.Xml.dll

9087373eee85190daf8915e614b1e4bd

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.Claims.dll

99604779c668d9b8ef913854b9a24f9d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.Cryptography.Algorithms.dll

e4a1681e09aec6efb00fb2a9355a1296

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.Cryptography.Csp.dll

f554762fc38f81cb22d1dc8ab5cd40d5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.Cryptography.Encoding.dll

7ab10b31c5ce290672b319d403751e95

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.Cryptography.Primitives.dll

a60084f9988c7907f7092c143c8d3818

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.Cryptography.X509Certificates.dll

06d000552ed6785988ae188fc35d1b86

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.Principal.dll

6dcd91b6a029794728f4edeb2bf2e42d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.SecureString.dll

4523f60270149bad67f6ae63375d2cdb

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Text.Encoding.dll

7f65ccbf58c39f3853bb8dc4137dfd12

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Text.Encoding.Extensions.dll

d40515a84448b91315f956e6d1a6c64b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Text.RegularExpressions.dll

7d317d88f9860a18ecf7fb90b33995d3

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Threading.dll

11d674cfc81b7102c0bc6ffe58f6ac5e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Threading.Overlapped.dll

1a890c488cf2ecd406b804e7e3c5b7f0

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Threading.Tasks.dll

0ad301ee2b7282b87dcd0d862efe14dc

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Threading.Tasks.Extensions.dll

0f384afcf671483188b9019d3b7457a7

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Threading.Tasks.Parallel.dll

9088029e38b2a393f22afd9e576ce86e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Threading.Thread.dll

fdb3a743b2dae5924cba88a5c865128d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Threading.ThreadPool.dll

18ce4ecc42fc8d999ef091d812472cf0

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Threading.Timer.dll

824053272b268c577e9adf17ed398142

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.ValueTuple.dll

c8456355b990c6347ab2f3621e2010be

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Xml.ReaderWriter.dll

090ff56c4fe2eeff2e16f03099ad71e1

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Xml.XDocument.dll

37e21b63959f243a157534133f85c5af

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Xml.XmlDocument.dll

328d12af9613b0f3f25320b85dcccbf4

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Xml.XmlSerializer.dll

d9f02d9f7da653f82e75112a2ab99ce6

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Xml.XPath.dll

415e3ab72f17f10d646b3e2c7a76f612

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Xml.XPath.XDocument.dll

a5f541655a9edc24f4b5184a40e40227

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	archive.swifdoo.com/tool/gtools.7z	104.26.8.75	200 OK	8.9 MB
URL User Request GET HTTP/2 archive.swifdoo.com/tool/gtools.7z IP 104.26.8.75:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjectswifdoo.com FingerprintEB:3D:12:6C:DA:CD:AB:C0:3B:38:66:A4:4E:38:72:FC:FD:22:14:5D ValiditySat, 09 Mar 2024 08:13:32 GMT - Fri, 07 Jun 2024 08:13:31 GMT File type 7-zip archive data, version 0.4 Size 8.9 MB (8939861 bytes) Hash 63bc82f41a3f1f6748d75663f2ef4a1b 3886b83bcd03f70dbdb21adcebb8819d6f57c120 e8666ad6ae2670f44b2b56433129446ba732afc16caa127503c6fbed90b9efc6 HTTP Headers `GET /tool/gtools.7z HTTP/1.1 Host: archive.swifdoo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 23 Apr 2024 06:07:56 GMT content-type: application/x-7z-compressed content-length: 8939861 x-oss-request-id: 6606C34C066E2134396ED891 x-oss-cdn-auth: success etag: "63BC82F41A3F1F6748D75663F2EF4A1B" last-modified: Tue, 21 Jun 2022 07:55:59 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 15630020077863102972 x-oss-storage-class: Standard content-md5: Y7yC9Bo/H2dI11Zj8u9KGw== x-oss-server-time: 45 ali-swift-global-savetime: 1711719244 via: cache9.l2de2[376,375,200-0,M], cache26.l2de2[378,0], ens-cache2.se2[0,10,200-0,H], ens-cache9.se2[12,0] x-cache: HIT TCP_HIT dirn:11:300774045 x-swift-savetime: Fri, 29 Mar 2024 13:34:04 GMT x-swift-cachetime: 2592000 timing-allow-origin: * eagleid: 2ff62c9d17136988052367398e cache-control: max-age=86400 cf-cache-status: REVALIDATED accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5DK2Eqsnsa8U2X4DAsI%2F%2F%2B74q%2F5NI1%2BigrECL7VFaYmcDugiM07xXAa4MtpgjMU9GkaN2oQrq66II8iuvyZJkc4Yo0lmi1HwAW4jzv7fjAqQqIsH9gH2DWheMZV4DJL0ryutTT4%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 878bad16181db529-OSL X-Firefox-Spdy: h2

archive.swifdoo.com/tool/gtools.7z

104.26.8.75

200 OK

8.9 MB

URL User Request GET HTTP/2
archive.swifdoo.com/tool/gtools.7z
IP
104.26.8.75:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectswifdoo.com
FingerprintEB:3D:12:6C:DA:CD:AB:C0:3B:38:66:A4:4E:38:72:FC:FD:22:14:5D
ValiditySat, 09 Mar 2024 08:13:32 GMT - Fri, 07 Jun 2024 08:13:31 GMT

File type
7-zip archive data, version 0.4
Size
8.9 MB (8939861 bytes)
Hash
63bc82f41a3f1f6748d75663f2ef4a1b
3886b83bcd03f70dbdb21adcebb8819d6f57c120
e8666ad6ae2670f44b2b56433129446ba732afc16caa127503c6fbed90b9efc6

HTTP Headers

GET /tool/gtools.7z HTTP/1.1
Host: archive.swifdoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 23 Apr 2024 06:07:56 GMT
content-type: application/x-7z-compressed
content-length: 8939861
x-oss-request-id: 6606C34C066E2134396ED891
x-oss-cdn-auth: success
etag: "63BC82F41A3F1F6748D75663F2EF4A1B"
last-modified: Tue, 21 Jun 2022 07:55:59 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15630020077863102972
x-oss-storage-class: Standard
content-md5: Y7yC9Bo/H2dI11Zj8u9KGw==
x-oss-server-time: 45
ali-swift-global-savetime: 1711719244
via: cache9.l2de2[376,375,200-0,M], cache26.l2de2[378,0], ens-cache2.se2[0,10,200-0,H], ens-cache9.se2[12,0]
x-cache: HIT TCP_HIT dirn:11:300774045
x-swift-savetime: Fri, 29 Mar 2024 13:34:04 GMT
x-swift-cachetime: 2592000
timing-allow-origin: *
eagleid: 2ff62c9d17136988052367398e
cache-control: max-age=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5DK2Eqsnsa8U2X4DAsI%2F%2F%2B74q%2F5NI1%2BigrECL7VFaYmcDugiM07xXAa4MtpgjMU9GkaN2oQrq66II8iuvyZJkc4Yo0lmi1HwAW4jzv7fjAqQqIsH9gH2DWheMZV4DJL0ryutTT4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878bad16181db529-OSL
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (122)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers