Report - gitcode.net/FoxaXu1/fxtoolcds/-/raw/master/Install.zip

Report Overview

Submitted URL
gitcode.net/FoxaXu1/fxtoolcds/-/raw/master/Install.zip
IP
123.249.40.22
ASN
#55990 Huawei Cloud Service data center
Submitted
2024-05-07 12:09:27
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
5

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
gitcode.net	310367	2017-07-19	2016-04-02	2024-04-14	508 B	2.7 MB	123.249.40.22

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
gitcode.net/FoxaXu1/fxtoolcds/-/raw/master/Install.zip
IP
123.249.40.22
ASN
#55990 Huawei Cloud Service data center

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
2.7 MB (2722969 bytes)
Hash
da769e4111c477f0b67c1dae3daf1f7c
86ad2657add692590c04a9da88613c54322f3530
41a8f3d1039914136c7009648e826ba8d7626ff577dda2dbc408e54a60bd851f

Archive (16)

Filename

Md5

File type

7z.dll

4504079bc85b03cc805bc3c1a092cfaf

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

7z.exe

7a6c9341962ca9e04c15ea4ff6cd1c88

PE32 executable (console) Intel 80386, for MS Windows, 6 sections

Cac.exe

f3728a562c431f7352d809e4a089c387

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

Calcium.exe

87fcad63fc1dd585bdacbdc8b0063767

PE32 executable (console) Intel 80386, for MS Windows, 5 sections

CaMainTain.exe

a3d4c2cfa8143b27153bd2468288cdd9

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

CaOutage.exe

26a9d7d6932f162ed36238773474bf75

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

CaShell.exe

55f3b592df2f866e60d030f7306cede4

PE32 executable (console) Intel 80386, for MS Windows, 5 sections

config.ini

e884a014c23dd53e0769a7a01d48bb69

Generic INItialization configuration [default]

DefaultICON.ico

2baf08fe178e851fc3dc27095696253f

MS Windows icon resource - 3 icons, 64x64, 32 bits/pixel, -128x-128, 32 bits/pixel

DefaultSettings.ini

ce50e9f8304ea436acd9aca62ceb8be4

Generic INItialization configuration [Default]

FXROOT.cer

129a50023f15be13956ff40c50d2faf0

Certificate, Version=3

en-us.calang

fb5a05714af4b0f4cf8077016efff1c9

ASCII text, with CRLF line terminators

zh-cn.calang

acca222b187aa2a993ee920f7f7298a2

ISO-8859 text, with CRLF line terminators

msvcp140.dll

dc739066c9d0ca961cba2f320cade28e

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections

urlmon.dll

e0e12856ca90be7f5ab8dfc0f0313078

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

vcruntime140.dll

1d4ff3cf64ab08c66ae9a4013c89a3ac

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	gitcode.net/FoxaXu1/fxtoolcds/-/raw/master/Install.zip	123.249.40.22	200 OK	2.7 MB
URL User Request GET HTTP/1.1 gitcode.net/FoxaXu1/fxtoolcds/-/raw/master/Install.zip IP 123.249.40.22:443 ASN #55990 Huawei Cloud Service data center Certificate IssuerDigiCert, Inc. Subject.gitcode.net Fingerprint54:A9:85:93:31:5B:63:A7:30:4E:3C:95:03:D7:7F:98:D3:3B:24:01 ValidityWed, 25 Oct 2023 00:00:00 GMT - Sun, 27 Oct 2024 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 2.7 MB (2722969 bytes) Hash da769e4111c477f0b67c1dae3daf1f7c 86ad2657add692590c04a9da88613c54322f3530 41a8f3d1039914136c7009648e826ba8d7626ff577dda2dbc408e54a60bd851f HTTP Headers `GET /FoxaXu1/fxtoolcds/-/raw/master/Install.zip HTTP/1.1 Host: gitcode.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Tue, 07 May 2024 12:09:01 GMT Content-Type: application/zip Content-Length: 2722969 Connection: keep-alive Cache-Control: max-age=60, public Content-Disposition: attachment Etag: W/"a327ebf57f00918ce52b6bcb1bccf998" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: DENY X-Gitlab-Feature-Category: source_code_management X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01HX9FA2A3RXDFB5Q5VS4F00AA X-Runtime: 0.063772 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Server: elb Set-Cookie: e7ea3a81c16a49a2901ba30047af6c48=WyIyMTAwNjc1NDkyIl0; Expires=Tue, 07-May-24 13:09:01 GMT; Domain=gitcode.net; Path=/; Secure; HttpOnly

gitcode.net/FoxaXu1/fxtoolcds/-/raw/master/Install.zip

123.249.40.22

200 OK

2.7 MB

URL User Request GET HTTP/1.1
gitcode.net/FoxaXu1/fxtoolcds/-/raw/master/Install.zip
IP
123.249.40.22:443
ASN
#55990 Huawei Cloud Service data center

Certificate
IssuerDigiCert, Inc.
Subject*.gitcode.net
Fingerprint54:A9:85:93:31:5B:63:A7:30:4E:3C:95:03:D7:7F:98:D3:3B:24:01
ValidityWed, 25 Oct 2023 00:00:00 GMT - Sun, 27 Oct 2024 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
2.7 MB (2722969 bytes)
Hash
da769e4111c477f0b67c1dae3daf1f7c
86ad2657add692590c04a9da88613c54322f3530
41a8f3d1039914136c7009648e826ba8d7626ff577dda2dbc408e54a60bd851f

HTTP Headers

GET /FoxaXu1/fxtoolcds/-/raw/master/Install.zip HTTP/1.1
Host: gitcode.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:09:01 GMT
Content-Type: application/zip
Content-Length: 2722969
Connection: keep-alive
Cache-Control: max-age=60, public
Content-Disposition: attachment
Etag: W/"a327ebf57f00918ce52b6bcb1bccf998"
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: DENY
X-Gitlab-Feature-Category: source_code_management
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01HX9FA2A3RXDFB5Q5VS4F00AA
X-Runtime: 0.063772
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Server: elb
Set-Cookie: e7ea3a81c16a49a2901ba30047af6c48=WyIyMTAwNjc1NDkyIl0; Expires=Tue, 07-May-24 13:09:01 GMT; Domain=gitcode.net; Path=/; Secure; HttpOnly

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (16)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers