Report - eatme.pro/download/renamer-win10/EatMe_-_Renamer_v245w11_-_windows_11_-

Report Overview

Submitted URL
eatme.pro/download/renamer-win10/EatMe_-_Renamer_v245w11_-_windows_11_-_freeware.zip
IP
109.74.192.51
ASN
#63949 Akamai Connected Cloud
Submitted
2024-04-18 01:55:06
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
eatme.pro	unknown	2013-01-08	2017-04-21	2024-02-25	454 B	1.3 MB	109.74.192.51

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
eatme.pro/download/renamer-win10/EatMe_-_Renamer_v245w11_-_windows_11_-_freeware.zip
IP
109.74.192.51
ASN
#63949 Akamai Connected Cloud

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.3 MB (1295549 bytes)
Hash
3f6f8ab5f27cd7701820f35d7655a78b
00471829b4f3c732d6298a386be0b15f15541a01
1465b615cdab0ec65dde685c8c36fabaa04c45600cd9a33c803148b505437668

Archive (11)

Filename

Md5

File type

RENAMER.1

189ab06b85c4ee9b73a638ae08c53b80

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

RENAMER.2

167235bbc5de639b8b067a8aa7e64591

JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2005:03:05 17:48:31], baseline, precision 8, 300x244, components 3

RENAMER.3

cecd5be4b42c0bae172eec2ed6c55ca2

HTML document, ASCII text, with CRLF line terminators

RENAMER.4

89af6bc3f71794edd6b174c1c23e2d80

PC bitmap, Windows 3.x format, 555 x 47 x 24, image size 78396, resolution 3780 x 3780 px/m, cbSize 78450, bits offset 54

RENAMER.5

32b6f00e7417cb01a329f32d3bd280de

PC bitmap, Windows 3.x format, 554 x 66 x 24, image size 109824, resolution 3780 x 3780 px/m, cbSize 109878, bits offset 54

RENAMER.6

7b2c2c3b11e4264ef9277392c2202a5e

HTML document, ASCII text, with CRLF line terminators

RENAMER.7

ef5d1f606b3b758d7040b6c0b1244031

Windows Registry text (Win95 or above)

RENAMER.8

789f8fa885a41862bcc8dc5896b062bc

ASCII text, with CRLF line terminators

setup.DLL

b4f0fe7a1653db4b54e3db8d2e3d88b3

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections

setup.exe

951ffb48b234a062cd48d5ef664a561c

PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections

VisualBasic6-KB896559-v1-ENU.exe

76758b356e8c447df3cde0f15d950620

PE32 executable (GUI) Intel 80386, for MS Windows, MS CAB-Installer self-extracting archive, 3 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	detect_Redline_Stealer

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	eatme.pro/download/renamer-win10/EatMe_-_Renamer_v245w11_-_windows_11_-_freeware.zip	109.74.192.51	200 OK	1.3 MB
URL User Request GET HTTP/1.1 eatme.pro/download/renamer-win10/EatMe_-_Renamer_v245w11_-_windows_11_-_freeware.zip IP 109.74.192.51:80 ASN #63949 Akamai Connected Cloud File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 1.3 MB (1295549 bytes) Hash 3f6f8ab5f27cd7701820f35d7655a78b 00471829b4f3c732d6298a386be0b15f15541a01 1465b615cdab0ec65dde685c8c36fabaa04c45600cd9a33c803148b505437668 HTTP Headers `GET /download/renamer-win10/EatMe_-_Renamer_v245w11_-_windows_11_-_freeware.zip HTTP/1.1 Host: eatme.pro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 01:54:40 GMT Content-Type: application/zip Content-Length: 1295549 Last-Modified: Wed, 17 Apr 2024 04:33:48 GMT Connection: keep-alive ETag: "661f512c-13c4bd" X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes`

eatme.pro/download/renamer-win10/EatMe_-_Renamer_v245w11_-_windows_11_-_freeware.zip

109.74.192.51

200 OK

1.3 MB

URL User Request GET HTTP/1.1
eatme.pro/download/renamer-win10/EatMe_-_Renamer_v245w11_-_windows_11_-_freeware.zip
IP
109.74.192.51:80
ASN
#63949 Akamai Connected Cloud

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.3 MB (1295549 bytes)
Hash
3f6f8ab5f27cd7701820f35d7655a78b
00471829b4f3c732d6298a386be0b15f15541a01
1465b615cdab0ec65dde685c8c36fabaa04c45600cd9a33c803148b505437668

HTTP Headers

GET /download/renamer-win10/EatMe_-_Renamer_v245w11_-_windows_11_-_freeware.zip HTTP/1.1
Host: eatme.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 01:54:40 GMT
Content-Type: application/zip
Content-Length: 1295549
Last-Modified: Wed, 17 Apr 2024 04:33:48 GMT
Connection: keep-alive
ETag: "661f512c-13c4bd"
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (11)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers