Report - www.hoverdesk.net/download/RegSeeker47.zip

Report Overview

Submitted URL
www.hoverdesk.net/download/RegSeeker47.zip
IP
87.98.154.146
ASN
#16276 OVH SAS
Submitted
2024-04-18 02:38:05
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.hoverdesk.net	unknown	2001-04-17	2012-10-01	2024-02-05	412 B	1.0 MB	87.98.154.146

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.hoverdesk.net/download/RegSeeker47.zip
IP
87.98.154.146
ASN
#16276 OVH SAS

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.0 MB (1029415 bytes)
Hash
90c673ee1ffc147026f6bf74b1a40710
2f21a735f798e8ba1c25284adb3464836d2631ea
835669088eb425053af1529dbf2e7cf5f7a8acb1f7b846cc7a4965caf1eac7de

Archive (57)

Filename

Md5

File type

autoclean.ini

17710a3ca46cd6a5249d9746f454c575

ASCII text, with CRLF line terminators

Empty.ico

613aaf04cc47c2708a79a8c1124d0cd2

MS Windows icon resource - 5 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 48x48, 32 bits/pixel

Exclude.lst

c6b5c673778817457ba40f834fde057b

ASCII text, with CRLF line terminators

history.txt

e544b104197a5b99104a3741b8db3fae

ASCII text, with CRLF line terminators

junkfiles.ini

950e3ab42e9894b682d165e821820ef6

ASCII text, with CRLF line terminators

lang.ini

45ed3371cbf1db2536ff2766dfd54157

ASCII text, with CRLF line terminators

Afrik.lng

da9d0f89f706684c4acc7a1f98e261d9

ISO-8859 text, with very long lines (454), with CRLF line terminators

Arabic.lng

3a445a642c815586399c1c129dc14b2e

ISO-8859 text, with very long lines (451), with CRLF line terminators

Catalan.lng

8dc4d487babf0b4989b3386370702076

ISO-8859 text, with very long lines (555), with CRLF line terminators

Chinese.lng

fcc117a91eeb1b33ba9739cfeaf3f812

ISO-8859 text, with very long lines (407), with CRLF line terminators

ChineseTraditional.lng

f47154b5cc879b5d03eff0173aad282f

ISO-8859 text, with very long lines (336), with CRLF line terminators

Czech.lng

5b32a6164c1c23738ccee8ea618e6175

Unicode text, UTF-8 text, with very long lines (512), with CRLF line terminators

Danish.lng

0b28c739d12b4f49ae73dd8a8abe4467

ISO-8859 text, with very long lines (492), with CRLF line terminators

Deutsch.lng

36fcc668092017c3dca67fc08f9d462c

ISO-8859 text, with very long lines (594), with CRLF line terminators

Dutch.lng

0d0a1b998d8a69ea2a9fe6bb720c6991

ISO-8859 text, with very long lines (483), with CRLF line terminators

English.lng

1392b9c1fd06fa2839512a3045ae318a

ASCII text, with very long lines (435), with CRLF line terminators

Espa�ol.lng

9974ce3439c26ea9698a701e7032d7f7

ISO-8859 text, with very long lines (514), with CRLF line terminators

Finnish.lng

3d1490993b78ad60a78602b6b9b714a9

ISO-8859 text, with very long lines (561), with CRLF line terminators

French.lng

3778d8b43a4a113f53a9bab2e6c3c83d

ISO-8859 text, with very long lines (489), with CRLF line terminators

Frisian.lng

0740aa50c5a4bca8157102d7b2982552

Non-ISO extended-ASCII text, with very long lines (518), with CRLF line terminators

Galego.lng

89b14c82974491150563ef8fde064ef5

ISO-8859 text, with very long lines (462), with CRLF line terminators

Hungarian.lng

4c5da639b9f7f806883c5929be9f644b

ISO-8859 text, with very long lines (490), with CRLF line terminators

Indonesian.lng

ecdb15253b7e80f5ea3f0d14bdce6c34

ISO-8859 text, with very long lines (478), with CRLF line terminators

Italiano.lng

644ef2c6f7beb9172286392c8086dfe4

ISO-8859 text, with very long lines (429), with CRLF line terminators

Korean.lng

4714bf80e92c3e8c77dd482d9331ac1e

ISO-8859 text, with very long lines (427), with CRLF line terminators

Lithuanian.lng

5900020c57eb37643c1fa46f450ff7c1

ISO-8859 text, with very long lines (519), with CRLF line terminators

Malagasy.lng

613600f9b13d34757981daf947078abf

ISO-8859 text, with very long lines (451), with CRLF line terminators

Norwegian.lng

16352dacce7655e03b4902427d23af79

ISO-8859 text, with very long lines (472), with CRLF line terminators

persian.lng

7791c2fa1657ef2682b7ae50e5e172b2

Non-ISO extended-ASCII text, with very long lines (534), with CRLF line terminators

Polish.lng

d2ac230002da964c2032ea4432992313

Non-ISO extended-ASCII text, with very long lines (492), with CRLF line terminators

Portugu�s-BR.lng

a3563bd134e8fae6f8fb8664dae92471

ISO-8859 text, with very long lines (548), with CRLF line terminators

Romana.lng

f488b5cd70c95f10017abe7c6e0b76f2

ISO-8859 text, with very long lines (623), with CRLF line terminators

Russian.lng

daab9ea9e28ca1ad57923a798c562268

ISO-8859 text, with very long lines (569), with CRLF line terminators

Serbian.lng

cb6f2ee5efaad47dfeb5b826017c1f7e

Non-ISO extended-ASCII text, with very long lines (526), with CRLF line terminators

Swedish.lng

f6d58bd43f9dc5151a19df6b9403d322

ISO-8859 text, with very long lines (487), with CRLF line terminators

Turkish.lng

c9873e9aa62c8dc248635886fdbb6c19

ISO-8859 text, with very long lines (526), with CRLF line terminators

license.rtf

35139137a3599dbedad0d75442992d44

Rich Text Format data, version 1, ANSI, code page 1252, default middle east language ID 1025

mycookies.ini

dc980b862c0ff875dabd6db9bcee82bd

ASCII text, with CRLF line terminators

recentfiles.ini

d120c8aa8683efe02fabe61e35d59780

ASCII text, with CRLF line terminators

regfav.ini

c88388692a8385c853a9a546a997ea9c

ASCII text, with CRLF line terminators

Regres.dll

b2ad733271729636d26e68cd0e25584a

PE32 executable (DLL) (console) Intel 80386, for MS Windows

RegSeeker.exe

6fbc087c110ed4b2110c63525cab34a6

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

RegSeeker.twk

fff06b240e9ce9b5da174c2bea052dba

ASCII text, with CRLF line terminators

RegSeeker_Guide.pdf

3f63edf97c81e5934c5a2a92666f3aaf

PDF document, version 1.5 (zip deflate encoded)

1-Hello world.rsc

c6d79a114f7d9ceafce210fe5e130ade

ASCII text, with CRLF line terminators

10-AutoClean and poweroff.rsc

93a0474cdfeb7e6b6abc561ea494961f

ASCII text, with CRLF line terminators

11-Clean Notification area icons.rsc

55665614884f516c8b2010b93d8a2b82

ASCII text, with CRLF line terminators

12 - Windows 10 Privacy settings.rsc

d9b77f666ee47f93cd8857ba5d1d762d

ASCII text, with CRLF line terminators

2-Read value types.rsc

1921e7ac2c2e55b7234a284a58a0def4

ASCII text, with CRLF line terminators

3-Tweak - DragFullWindows.rsc

d5e1f8b569762aa83251ed16844895b1

ASCII text, with CRLF line terminators

4-Display Windows version.rsc

79cb3e72ad1f55bbd2e0955597b2b510

ASCII text, with CRLF line terminators

5-CreateKey Read Modify Strings.rsc

c9a84f48b2bc3bcc88a001b3147ab41b

ASCII text, with CRLF line terminators

6-Custom IfResult.rsc

04cd3f40900f1491a21273272a15d447

ASCII text, with CRLF line terminators

7-Environment variables.rsc

bb5fbc2108470d27af63671b21808f66

ASCII text, with CRLF line terminators

8-IsRunning notepad.rsc

0678c7dcef798a6645e40af0e5d117d7

ASCII text, with CRLF line terminators

9-IsInstalled-RemoveApp.rsc

6ff90d0ccd24457d44fac37abf130b6c

ASCII text, with CRLF line terminators

Themes.ini

c38fc0c19c1f2386fe658c082e13b051

Generic INItialization configuration [Soft Gray]

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	www.hoverdesk.net/download/RegSeeker47.zip	87.98.154.146	200 OK	1.0 MB
URL User Request GET HTTP/1.1 www.hoverdesk.net/download/RegSeeker47.zip IP 87.98.154.146:80 ASN #16276 OVH SAS File type Zip archive data, at least v2.0 to extract, compression method=store Size 1.0 MB (1029415 bytes) Hash 90c673ee1ffc147026f6bf74b1a40710 2f21a735f798e8ba1c25284adb3464836d2631ea 835669088eb425053af1529dbf2e7cf5f7a8acb1f7b846cc7a4965caf1eac7de HTTP Headers `GET /download/RegSeeker47.zip HTTP/1.1 Host: www.hoverdesk.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK date: Thu, 18 Apr 2024 02:37:39 GMT content-type: application/zip content-length: 1029415 server: Apache last-modified: Sun, 13 May 2018 09:15:12 GMT accept-ranges: bytes x-iplb-request-id: 5B5A2A9A:6D13_57629A92:0050_66208773_D49C:1DD3 x-iplb-instance: 52438`

www.hoverdesk.net/download/RegSeeker47.zip

87.98.154.146

200 OK

1.0 MB

URL User Request GET HTTP/1.1
www.hoverdesk.net/download/RegSeeker47.zip
IP
87.98.154.146:80
ASN
#16276 OVH SAS

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.0 MB (1029415 bytes)
Hash
90c673ee1ffc147026f6bf74b1a40710
2f21a735f798e8ba1c25284adb3464836d2631ea
835669088eb425053af1529dbf2e7cf5f7a8acb1f7b846cc7a4965caf1eac7de

HTTP Headers

GET /download/RegSeeker47.zip HTTP/1.1
Host: www.hoverdesk.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 18 Apr 2024 02:37:39 GMT
content-type: application/zip
content-length: 1029415
server: Apache
last-modified: Sun, 13 May 2018 09:15:12 GMT
accept-ranges: bytes
x-iplb-request-id: 5B5A2A9A:6D13_57629A92:0050_66208773_D49C:1DD3
x-iplb-instance: 52438

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (57)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers