Report - desktopgoose.ru/uploads/DesktopGoose.zip

Report Overview

Submitted URL
desktopgoose.ru/uploads/DesktopGoose.zip
IP
176.119.147.200
ASN
#35278 Sprinthost.ru LLC
Submitted
2024-04-25 14:05:09
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
desktopgoose.ru	unknown	unknown	No data	No data	494 B	4.3 MB	176.119.147.200

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
desktopgoose.ru/uploads/DesktopGoose.zip
IP
176.119.147.200
ASN
#35278 Sprinthost.ru LLC

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
4.3 MB (4338637 bytes)
Hash
eaad0961b52b14d9a323f092ef307d8a
feb3aedf16432b063ff93c90623a865a1fd5214a
e66264065923676807fd6d7b36f7c9dc52db9ef1c5399b2811738eb5e22a30f6

Archive (67)

Filename

Md5

File type

MemeAttributions.txt

fc280867f6cf727ff169b24371019a93

ASCII text, with CRLF line terminators

GooseDance.gif

b89e8c268b06e14d2dacabadcc1b7bfc

GIF image data, version 89a, 500 x 375

Meme1.png

ec6a7941aa0d1c3cd0a7b724324fbb96

PNG image data, 640 x 620, 8-bit colormap, non-interlaced

Meme2.png

4f21b82bac2893afec41a77eb024e3bb

PNG image data, 640 x 479, 8-bit/color RGB, non-interlaced

Meme3.png

cef6b9818bc01655614fb969cffc155f

PNG image data, 828 x 817, 8-bit colormap, non-interlaced

Meme4.png

af4bef7b9f4f37ac62e782b5b59d02aa

PNG image data, 960 x 720, 8-bit colormap, non-interlaced

Meme5.png

01f620eda22ae06fbcc60500374fdd88

PNG image data, 538 x 447, 8-bit colormap, non-interlaced

Meme6.png

e46d6d7154cebf37d064c537f5d01f36

PNG image data, 960 x 960, 8-bit colormap, non-interlaced

Meme7.png

245f29e1e0905c497306c8f06f503244

PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced

DonatePage.png

2e137058fea9426215796ff5c341d4aa

PNG image data, 500 x 600, 8-bit/color RGB, non-interlaced

heart.png

76f468aa187e5c042c7ef5ae6a8a0753

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

Autumn.dll

ad4b80cc7ea519628734687452b8ac0e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Rename me to just Music.mp3

3c954d9b4b6d739ef833fe72511f258b

Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo

BITE.mp3

5436e6aebabf071c1d832071a01b8bcd

MPEG ADTS, layer III, v1, 128 kbps, 48 kHz, Monaural

Honk1.mp3

db2b7cf36003b2b653df6f3ca986e007

Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 56 kbps, 44.1 kHz, Monaural

Honk2.mp3

3b86bf25cd702a3a071590f088fabf64

Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 56 kbps, 44.1 kHz, Monaural

Honk3.mp3

bcd1908ce864cb01a222b5cc791d7758

Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 56 kbps, 44.1 kHz, Monaural

Honk4.mp3

9b24558524e7f3ec1dd7d123d10541fc

Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 56 kbps, 44.1 kHz, Monaural

MudSquith.mp3

b2354d238829d09c54e272d8b4f60189

Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo

am goose.txt

9ce4fbca1e49909c6b3e2359a5dc07a8

Unicode text, UTF-8 (with BOM) text, with no line terminators

good work.txt

742d0427481d1a2c7171c4bd931bba03

Unicode text, UTF-8 (with BOM) text, with no line terminators

gooseASCII1.txt

dd50e283e56b85d013636d9672edbfec

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hard to type.txt

2655615ac813249e7f1370309a34e898

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

i cause problems.txt

f2703993f83add3a0f08e784a32685da

Unicode text, UTF-8 (with BOM) text, with no line terminators

peace was never.txt

7bbce054f64616da370f0fc6cf661a6f

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Autumn.txt

1438ee5e893c01a0901e65184729dd7d

ASCII text, with CRLF line terminators

changelog.txt

a257892446bd4f88fe97f83dd26a3a01

ASCII text, with very long lines (306), with CRLF line terminators

Close Goose.bat

1fdef6890e156b9aa7b662a4314dc712

ASCII text, with no line terminators

config.ini

0288c130074a043df404ac331b9842b3

ASCII text

.suo

1e86c71ff3e96943818e137054d0cc9f

Composite Document File V2 Document, Cannot read section info

.suo

a18c7639c990cc6a981edb0bd161bafc

Composite Document File V2 Document, Cannot read section info

DefaultMod.dll

d9d3634150a96a3d15961599979db1a8

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DefaultMod.pdb

ea84a9650bc71ee622841e827e4b39e2

MSVC program database ver 7.00, 512*27 bytes

GooseModdingAPI.dll

6f6c8f80d6c36739147b38016bd4b469

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

GooseModdingAPI.pdb

5e0ccb3bd78be9cd539fef6e4005e47a

MSVC program database ver 7.00, 512*51 bytes

DefaultMod.csproj

a0f74743c035216546f4e6cc47962605

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

ModMain.cs

f29e195027b1f1d540258c92ecfb6a81

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

DefaultMod.csproj.FileListAbsolute.txt

e1134893de6b2ee26f8d3816c383563f

ASCII text, with CRLF line terminators

DefaultMod.csprojResolveAssemblyReference.cache

c2bf8990e4fd74c0571c86c1dc9f3877

data

DefaultMod.dll

d9d3634150a96a3d15961599979db1a8

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DefaultMod.pdb

ea84a9650bc71ee622841e827e4b39e2

MSVC program database ver 7.00, 512*27 bytes

DesignTimeResolveAssemblyReferencesInput.cache

657b4e49c9c4f7a0416e8a40d7bb42d6

data

TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs

d41d8cd98f00b204e9800998ecf8427e

TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs

d41d8cd98f00b204e9800998ecf8427e

TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs

d41d8cd98f00b204e9800998ecf8427e

AssemblyInfo.cs

e834db0c7b40d1a72947e0f37c08ae39

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

TaskDemo_FollowLowAccel.cs

926774c249a3fa14f25a7062a93e317f

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

GooseMod.sln

2e3a859aaffaca5609bfbfb006281ffb

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

GooseModdingAPI.dll

6f6c8f80d6c36739147b38016bd4b469

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

GooseModdingAPI.pdb

5e0ccb3bd78be9cd539fef6e4005e47a

MSVC program database ver 7.00, 512*51 bytes

Exports.cs

99c09fceb14972f3c856e8754955586b

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

GooseModdingAPI.csproj

fdca76fc42abd5e97052f9210a6aceb7

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

GooseModdingAPI.csproj.FileListAbsolute.txt

92a78610ec073fdbbb813b9100654572

ASCII text, with CRLF line terminators

GooseModdingAPI.csprojResolveAssemblyReference.cache

e36940c1c2c1e0ff53623266e90c0659

data

GooseModdingAPI.dll

6f6c8f80d6c36739147b38016bd4b469

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

GooseModdingAPI.pdb

5e0ccb3bd78be9cd539fef6e4005e47a

MSVC program database ver 7.00, 512*51 bytes

TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs

d41d8cd98f00b204e9800998ecf8427e

TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs

d41d8cd98f00b204e9800998ecf8427e

TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs

d41d8cd98f00b204e9800998ecf8427e

AssemblyInfo.cs

e7c8e8e93ebc6982b70de1d5d1336981

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

SamEngine.cs

14708aa02689b9a5dd2dbfd7fa024ba5

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

What is this.txt

b78a6d4ab071680e5c44ef0a077e9be5

ASCII text, with CRLF line terminators

GooseDesktop.exe

c883e2c769ebe56240a71260b17f1b93

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

GooseModdingAPI.dll

9eb11041f2f11d939074e26b4b554088

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MMQ.dll

e27e8063b337045e69dc37964db09e35

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

patrons.txt

5ec0126112248aea6de1d86200e7b28e

Hewlett-Packard Graphics Language, starting with "SPECIAL THANKS TO THE GLORIOUS PATRONS of patreon.com/" with " ========="

Read me! Honk.txt

e4d12d2f2d12b38252ec25e28757fe1d

ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 9/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

desktopgoose.ru/uploads/DesktopGoose.zip

176.119.147.200

200 OK

4.3 MB

URL User Request GET HTTP/2
desktopgoose.ru/uploads/DesktopGoose.zip
IP
176.119.147.200:443
ASN
#35278 Sprinthost.ru LLC

Certificate
IssuerLet's Encrypt
Subjectdesktopgoose.ru
Fingerprint23:F4:8A:BB:DF:B2:3D:E3:EA:DC:FB:CF:1B:AD:8D:13:B3:A1:39:A4
ValidityMon, 04 Mar 2024 02:42:37 GMT - Sun, 02 Jun 2024 02:42:36 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
4.3 MB (4338637 bytes)
Hash
eaad0961b52b14d9a323f092ef307d8a
feb3aedf16432b063ff93c90623a865a1fd5214a
e66264065923676807fd6d7b36f7c9dc52db9ef1c5399b2811738eb5e22a30f6

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 9/66

HTTP Headers

GET /uploads/DesktopGoose.zip HTTP/1.1
Host: desktopgoose.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 14:04:42 GMT
content-type: application/zip
content-length: 4338637
last-modified: Sun, 17 Sep 2023 14:35:41 GMT
etag: "65070ebd-4233cd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (67)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers