Report - rbsoft.org/downloads/AutoUpdaterTest.zip

Report Overview

Submitted URL
rbsoft.org/downloads/AutoUpdaterTest.zip
IP
172.67.195.161
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-28 18:42:57
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
rbsoft.org	142729	2012-05-09	2012-06-04	2024-02-05	494 B	968 kB	104.21.12.195

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
rbsoft.org/downloads/AutoUpdaterTest.zip
IP
104.21.12.195
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
968 kB (967677 bytes)
Hash
f1252e35a69bc47582d3b267ee1e63e3
b1dec6d14153e4e1a590885843c9248ba9a27ada
1816fcd89493c1c005dc71bb2cc6b374f7d44076158cbb11a6d700c042ba4b19

Archive (37)

Filename

Md5

File type

AutoUpdater.NET.resources.dll

8db0586eb0b5668b001add11b2b429b9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.dll

b283072ea91c8115892ed18abf4e392a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.pdb

90a8351ec9478ed5231d8e91283c33ae

MSVC program database ver 7.00, 512*263 bytes

AutoUpdater.NET.xml

a41d22d59bd5f77cf53a0f0b585ecc20

XML 1.0 document, ASCII text, with CRLF line terminators

AutoUpdaterTest.deps.json

66759de34578934ae75ff389ceda9629

JSON text data

AutoUpdaterTest.dll

90f1ef1f67ee63c65623d02d31890ea5

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdaterTest.exe

55c9c1498afc638a43013f9fb1f125af

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

AutoUpdaterTest.pdb

7a7c8f403124141a874533ee8cd92554

Microsoft Roslyn C# debugging symbols version 1.0

AutoUpdaterTest.runtimeconfig.json

cc164c1b948924c198019ea9b728e06e

JSON text data

AutoUpdater.NET.resources.dll

5d13ddf748082260010307a4b0c205d9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

4365cdb2a6029ad7d83cbaeb09445e2d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

e9402d4be2d48cd3c5a307bf0380412b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

c6e2ca2f2e657ea5d506e3da47d88718

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

98c72b2d025d576119db87b037032aa2

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

4c31fad0b68bafba6d8456495a79ad3b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

19813890e2c3e206fdde4f4ed40833ab

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

0db19dbdbf27886a03874f9bb895aac2

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

f6fb9947de468692c6605d7731036aa4

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Web.WebView2.Core.dll

0901d7f2f8b621433f3eaee6a63cb8d1

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Web.WebView2.WinForms.dll

f696f28047246a651f90900475186ea1

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Web.WebView2.Wpf.dll

c83529d6c90dc9644779207d81bb6539

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Newtonsoft.Json.dll

adf3e3eecde20b7c9661e9c47106a14a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

bd06bdccad8bebb88dfc3be9309c72ab

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

ab2b0e74b7e3795ea76eb823352a81ed

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

043a393f32d223ceb04732900570654a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

22f850e95f02ba11cf2a480c4876c4f9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

71c74e339f23728bf1c392f6d6945cf9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

WebView2Loader.dll

f8a6724aedd31892a6147eb0a720503a

PE32+ executable (DLL) (console) Aarch64, for MS Windows, 8 sections

WebView2Loader.dll

e8894bce4a8fbd1a059023b3b3c7849e

PE32+ executable (DLL) (console) x86-64, for MS Windows, 11 sections

WebView2Loader.dll

33f7fa1198c0bf4988a0210f144b20b4

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 7 sections

AutoUpdater.NET.resources.dll

b4a2261317264620bfa7f738596fecff

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

8a6aef305f4a2b6efc8b5ca53d8eb5ca

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

8d5bbc3c366e2d49cde94d7e8175e324

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

23410e4512d7aebf91984b256ddb4f43

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

48b49c26dafee9369cf9ad58e6484154

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AutoUpdater.NET.resources.dll

fc85cca5190905c6b3f9daf47f870113

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Readme.txt

c42da509a1435f85ede865a46edfe6e4

ASCII text, with very long lines (713), with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	rbsoft.org/downloads/AutoUpdaterTest.zip	104.21.12.195	200 OK	968 kB
URL User Request GET HTTP/2 rbsoft.org/downloads/AutoUpdaterTest.zip IP 104.21.12.195:443 ASN #13335 CLOUDFLARENET Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint9A:7C:9D:94:CC:90:80:3B:19:22:DC:16:DA:BB:8C:56:55:A9:3B:10 ValidityWed, 14 Jun 2023 00:00:00 GMT - Thu, 13 Jun 2024 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 968 kB (967677 bytes) Hash f1252e35a69bc47582d3b267ee1e63e3 b1dec6d14153e4e1a590885843c9248ba9a27ada 1816fcd89493c1c005dc71bb2cc6b374f7d44076158cbb11a6d700c042ba4b19 HTTP Headers `GET /downloads/AutoUpdaterTest.zip HTTP/1.1 Host: rbsoft.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Thu, 28 Mar 2024 18:42:30 GMT content-type: application/zip content-length: 967677 last-modified: Tue, 07 Nov 2023 09:34:18 GMT etag: "654a049a-ec3fd" strict-transport-security: max-age=0; includeSubDomains x-powered-by: PleskLin cache-control: max-age=14400 cf-cache-status: MISS accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=obfJTQX8CKIXlCk5d9gyhJTrBJId22fVAMPgz1Y2lVddBvQIxS%2BsNjGPAziya%2BQyBgQ5s1%2Famj7gsX5z%2FtUNSLzbIChvy%2BxLY0Y2jSw1Ocwc0%2Brz%2FY%2Flk2gvU%2Fhz"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding x-content-type-options: nosniff server: cloudflare cf-ray: 86b9c2a9cee9b521-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

rbsoft.org/downloads/AutoUpdaterTest.zip

104.21.12.195

200 OK

968 kB

URL User Request GET HTTP/2
rbsoft.org/downloads/AutoUpdaterTest.zip
IP
104.21.12.195:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint9A:7C:9D:94:CC:90:80:3B:19:22:DC:16:DA:BB:8C:56:55:A9:3B:10
ValidityWed, 14 Jun 2023 00:00:00 GMT - Thu, 13 Jun 2024 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
968 kB (967677 bytes)
Hash
f1252e35a69bc47582d3b267ee1e63e3
b1dec6d14153e4e1a590885843c9248ba9a27ada
1816fcd89493c1c005dc71bb2cc6b374f7d44076158cbb11a6d700c042ba4b19

HTTP Headers

GET /downloads/AutoUpdaterTest.zip HTTP/1.1
Host: rbsoft.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 28 Mar 2024 18:42:30 GMT
content-type: application/zip
content-length: 967677
last-modified: Tue, 07 Nov 2023 09:34:18 GMT
etag: "654a049a-ec3fd"
strict-transport-security: max-age=0; includeSubDomains
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=obfJTQX8CKIXlCk5d9gyhJTrBJId22fVAMPgz1Y2lVddBvQIxS%2BsNjGPAziya%2BQyBgQ5s1%2Famj7gsX5z%2FtUNSLzbIChvy%2BxLY0Y2jSw1Ocwc0%2Brz%2FY%2Flk2gvU%2Fhz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86b9c2a9cee9b521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (37)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers