Report - victoriaos-iley-ru.pages.dev/releases/0.03.1/victoriaos-0.03.1.zip

Report Overview

Submitted URL
victoriaos-iley-ru.pages.dev/releases/0.03.1/victoriaos-0.03.1.zip
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-10 18:25:50
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
13

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
victoriaos-iley-ru.pages.dev	unknown	2020-09-02	2023-09-16	2024-03-21	520 B	2.0 MB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
victoriaos-iley-ru.pages.dev/releases/0.03.1/victoriaos-0.03.1.zip
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
2.0 MB (1991537 bytes)
Hash
c4c044a1dc87ba2b56f64bfb940535de
d6c4ff610fd09c5b61abd51f9d94fe022eccc33e
1815713d61864b6e2e19f39778958c77b58d9c6bac82ce3e78bb59e67c99958e

Archive (141)

Filename

Md5

File type

fs.inc

be8f3e0ed88951631d293720155a7aa7

C source, ISO-8859 text, with CRLF line terminators

clear.asm

20320bb7627444c22f4a0b52aeb1305c

ASCII text, with CRLF line terminators

rm.asm

6c29f10022bd2b67077521248957577b

ASCII text, with CRLF line terminators

cp.asm

4b60aa0db1fcb77537f10c6bae85593d

ASCII text, with CRLF line terminators

ls.asm

a162487e18888ac721c457469b2f9515

Generic INItialization configuration [std_text_attr]

ve.asm

3f8446e8ad75bdc98b4d68c9446f952c

Generic INItialization configuration [line_count]

mv.asm

687dc58c3cf3e96708e5ed1082237f47

ASCII text, with CRLF line terminators

clock.asm

926c8dee4f8de74112ae86df111e16cd

Generic INItialization configuration [ticks]

mandel.asm

2771655e48ce027022f34d5c2803cb79

Generic INItialization configuration [x]

hello.asm

b077476dca753f5959f294720fd5d2e1

Generic INItialization configuration [attr]

jolia.asm

0bbf7c927670cc56d9e284620cb73f7f

Non-ISO extended-ASCII text, with CRLF line terminators

victoria.inc

c668c0ae7bb8b83187ccefd6e876338f

ASCII text, with CRLF line terminators

ver.asm

210f9cc371a5292f2a97e891862837ed

ASCII text, with CRLF line terminators

touch.asm

4829cf19536d6de06da6c11e02263b29

ASCII text, with CRLF line terminators

chmod.asm

6676eadf1f8557125b4b464424bbdcc5

ASCII text, with CRLF line terminators

type.asm

eafc804a69e600198d31760aefb4030f

ASCII text, with CRLF line terminators

make.exe

27992663f9f9d92293f909b7eb3853a8

PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed, 3 sections

README-rus-win.txt

079935a5d1068849c4f47b8def98b058

ISO-8859 text, with CRLF line terminators

memset.inc

4e14e8f4cd2810587f02558b9e527510

ASCII text, with CRLF line terminators

binpos.inc

5fc61e5bf6926d669697a803d45bff8c

ASCII text

strupr.inc

0bdd7429d8f936a9c08c035289b97278

ASCII text

strcpy.inc

3cab4f13354ac8cd4fc42b1fb2932678

ASCII text, with CRLF line terminators

strlen.inc

34ecbfc0296e82a9df1345d259ce403a

ASCII text, with CRLF line terminators

strchr.inc

5defd0fb7d16930f38023f2902f331ae

ASCII text, with CRLF line terminators

strtok.inc

3569dfb10b6cc36c8fc059b422b7ccb5

Generic INItialization configuration [strtok_pword]

strcmp.inc

ca53f3c477b384d45e1aadae00e525be

ASCII text, with CRLF line terminators

strstr.inc

50f788d370f5551549edd2355e9364d5

ASCII text, with CRLF line terminators

strlwr.inc

628501ca38765f9d6279f568b6ec77d3

ASCII text

string.inc

74de30378144b1ddca1412652d726bbf

ASCII text, with CRLF line terminators

atoi.inc

426fff14a6f8ac19490aba7256b65b36

ASCII text

.loader.asm.swp

2387555fe4d13a24c701835ea83c7d0f

Vim swap file, version 7.1, pid 3070, user iley, host iley, file ~iley/prog/victoria/0.03/loader.asm

struct.inc

4a0d01ef435d28a6c13338cd98865eb6

C++ source, ASCII text, with CRLF line terminators

if.inc

24429189a357418f145e81b26a3f7a77

Generic INItialization configuration [arg]

kernel.asm

7c77de909292f765bfa713286d13a2d8

ASCII text, with CRLF line terminators

loader.asm

de492a1479093a5da0b347e9f5f98a3e

ASCII text, with CRLF line terminators

GPL.txt

18cbf90d9c5f1038083b9f0044e93d04

ASCII text, with CRLF line terminators

shell.asm

d820cef803752b102896c01a8f93994e

ASCII text, with CRLF line terminators

imgwrite

4d1f6c38890673ed6d3ef82ffb9ee8b1

ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV)

fs.inc

be8f3e0ed88951631d293720155a7aa7

C source, ISO-8859 text, with CRLF line terminators

clear.asm

20320bb7627444c22f4a0b52aeb1305c

ASCII text, with CRLF line terminators

type.1.0.16.bin

64775ad1c8c45a2e7e473f7b97406e4b

DOS executable (COM), start instruction 0xeb334552 524f523a

rm.asm

6c29f10022bd2b67077521248957577b

ASCII text, with CRLF line terminators

cp.asm

4b60aa0db1fcb77537f10c6bae85593d

ASCII text, with CRLF line terminators

cp.1.0.17.bin

b8fbb440140a09e5ef8bd2945a21484d

DOS executable (COM), start instruction 0xeb604552 524f523a

ls.asm

a162487e18888ac721c457469b2f9515

Generic INItialization configuration [std_text_attr]

chmod.1.1.5.bin

6183d081befc65138e234dbb5d44ddc8

DOS executable (COM), start instruction 0xeb4d4552 524f523a

ve.asm

3f8446e8ad75bdc98b4d68c9446f952c

Generic INItialization configuration [line_count]

ve.0.1.15.bin

6dbd5f2c25cb51c6a36ed60920383caa

DOS executable (COM), start instruction 0xe9100200 00000000

touch.0.1.13.bin

01385dc394e14849a18e39dca8cc4ee9

DOS executable (COM), start instruction 0xeb334552 524f523a

mv.asm

687dc58c3cf3e96708e5ed1082237f47

ASCII text, with CRLF line terminators

hello.1.0.14.bin

31a41e9c380d956b564c0c3e08d8b2a0

data

clock.asm

926c8dee4f8de74112ae86df111e16cd

Generic INItialization configuration [ticks]

mandel.asm

2771655e48ce027022f34d5c2803cb79

Generic INItialization configuration [x]

mandel.0.1.3.bin

d7bc05dd3d1adca6d53e14ae44f35b51

DOS executable (COM), start instruction 0xe92e0290 00000000

hello.asm

b077476dca753f5959f294720fd5d2e1

Generic INItialization configuration [attr]

jolia.asm

0bbf7c927670cc56d9e284620cb73f7f

Non-ISO extended-ASCII text, with CRLF line terminators

victoria.inc

c668c0ae7bb8b83187ccefd6e876338f

ASCII text, with CRLF line terminators

ls.1.0.15.bin

f11fac8c3d57206d838f6806bded0557

DOS executable (COM), start instruction 0xeb2a0020 20202020

clock.0.1.14.bin

2a25c8647c8a40aae31962ddbbade446

DOS executable (COM), start instruction 0xeb785453 5220636c

rm.0.1.1.bin

dedd95a9c527d2b2602a8ef32b59e13b

DOS executable (COM), start instruction 0xeb334552 524f523a

ver.0.1.7.bin

bf6bf9cdd8748b59dfd0d0014714522d

data

ver.asm

210f9cc371a5292f2a97e891862837ed

ASCII text, with CRLF line terminators

mv.0.1.2.bin

17109c71f1ebb46fe99db0721c9e70a8

DOS executable (COM), start instruction 0xeb5e4552 524f523a

jolia.0.1.8.bin

b6616de7780cc6a0e5968dfe3ee40567

DOS executable (COM), start instruction 0xe9d20190 90909090

clear.0.1.6.bin

6815299d78cacc4f481a3a60f220f1a4

data

touch.asm

4829cf19536d6de06da6c11e02263b29

ASCII text, with CRLF line terminators

chmod.asm

6676eadf1f8557125b4b464424bbdcc5

ASCII text, with CRLF line terminators

type.asm

eafc804a69e600198d31760aefb4030f

ASCII text, with CRLF line terminators

make.exe

27992663f9f9d92293f909b7eb3853a8

PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed, 3 sections

README-rus-win.txt

5d25303664a7583dd87521580601dde2

ISO-8859 text, with CRLF line terminators

memset.inc

4e14e8f4cd2810587f02558b9e527510

ASCII text, with CRLF line terminators

binpos.inc

5fc61e5bf6926d669697a803d45bff8c

ASCII text

strupr.inc

0bdd7429d8f936a9c08c035289b97278

ASCII text

strcpy.inc

3cab4f13354ac8cd4fc42b1fb2932678

ASCII text, with CRLF line terminators

strlen.inc

34ecbfc0296e82a9df1345d259ce403a

ASCII text, with CRLF line terminators

strchr.inc

5defd0fb7d16930f38023f2902f331ae

ASCII text, with CRLF line terminators

strtok.inc

3569dfb10b6cc36c8fc059b422b7ccb5

Generic INItialization configuration [strtok_pword]

strcmp.inc

ca53f3c477b384d45e1aadae00e525be

ASCII text, with CRLF line terminators

strstr.inc

50f788d370f5551549edd2355e9364d5

ASCII text, with CRLF line terminators

strlwr.inc

628501ca38765f9d6279f568b6ec77d3

ASCII text

string.inc

74de30378144b1ddca1412652d726bbf

ASCII text, with CRLF line terminators

atoi.inc

426fff14a6f8ac19490aba7256b65b36

ASCII text

.loader.asm.swp

2387555fe4d13a24c701835ea83c7d0f

Vim swap file, version 7.1, pid 3070, user iley, host iley, file ~iley/prog/victoria/0.03/loader.asm

struct.inc

4a0d01ef435d28a6c13338cd98865eb6

C++ source, ASCII text, with CRLF line terminators

if.inc

24429189a357418f145e81b26a3f7a77

Generic INItialization configuration [arg]

kernel.asm

7c77de909292f765bfa713286d13a2d8

ASCII text, with CRLF line terminators

loader.asm

de492a1479093a5da0b347e9f5f98a3e

ASCII text, with CRLF line terminators

GPL.txt

18cbf90d9c5f1038083b9f0044e93d04

ASCII text, with CRLF line terminators

shell.asm

d820cef803752b102896c01a8f93994e

ASCII text, with CRLF line terminators

imgwrite

4d1f6c38890673ed6d3ef82ffb9ee8b1

ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV)

logo.0.1.11.bin

8808b1a89b0c0541029710fd3a2a4155

ISO-8859 text, with very long lines (639), with CR line terminators

errors.inc

836b01982aeb9f0cfcc0fa846fb75c4f

ASCII text, with CRLF line terminators

Makefile

dabe3e81d2d1a33224fbd030fc8747da

ASCII text, with CRLF line terminators

autoexec.1.1.4.bin

aa5af5fd4a52743aaeb98e7c8353c740

data

exec.inc

51ecff7b0a5948d1cea89dce2a629016

ASCII text, with CRLF line terminators

kernel.1.0.3.bin

0aa2e75604821de2f168b3cd3ad1233f

DOS executable (COM), start instruction 0xe98f10f6 901f92c5

fasm

1a54c29af303a2430e472e4f57842f96

ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV)

fasm.exe

461c52fd045df98376de83bd247d85ec

PE32 executable (console) Intel 80386, for MS Windows, 3 sections

imgwrite.c

14806675060c8c54c011deba0c6bb607

C source, ASCII text

shell.1.0.13.bin

3b0e227c6009ef59a75a5fd8bc4c7f65

DOS executable (COM), start instruction 0xeb535056 fc31c9ac

.tmp.swp

b3e24cb5e1e1e8efbef6aabe2fb91153

Vim swap file, version 7.1, pid 4023, user iley, host iley, file ~iley/prog/victoria/0.02/tmp, modified

proc_table.inc

02a343b935d9c0ea490af9e42ac2d272

ASCII text, with CRLF line terminators

rm.exe

414dc024d7fd437d5efc06663e4b184b

PE32 executable (console) Intel 80386, for MS Windows, 3 sections

imgwrite.exe

41be02939acfe54ad14e636c709369dd

PE32 executable (console) Intel 80386, for MS Windows, 4 sections

int.inc

cb5fd10b01a70ab1033711544f4dd2c0

ASCII text, with CRLF line terminators

dir.0.0.14.bin

b7587f5e0e9a3de729f56c6815a7cc7b

data

const.inc

54b60b4ef882700b1d58f7e06661d44d

ASCII text, with CRLF line terminators

victoria.inc

c668c0ae7bb8b83187ccefd6e876338f

ASCII text, with CRLF line terminators

README-rus-utf8.txt

6413865e316eb4b2218c5f22c5857794

Unicode text, UTF-8 text, with CRLF line terminators

loader.0.0.1.bin

d6263903926ffa2d8eeaa72330d6e599

DOS/MBR boot sector

string.inc

a18a7955c9d3fc1303fa4a366555b822

ASCII text, with CRLF line terminators

arrays.inc

48e8a7c9a14ad867d853d4056ee41022

ASCII text, with CRLF line terminators

disk.img

fea32804824d217af8838b6231d9a9ee

DOS/MBR boot sector

true.exe

982620af5e213a4766615a57894524cc

PE32 executable (console) Intel 80386, for MS Windows, 4 sections

memory.inc

6122df4dec3f5aa69c8395f357bab2d8

ASCII text, with CRLF line terminators

fat.0.0.2.bin

8416fe63550fe4ac23f17b0189a78412

data

logo.0.1.11.bin

8808b1a89b0c0541029710fd3a2a4155

ISO-8859 text, with very long lines (639), with CR line terminators

errors.inc

836b01982aeb9f0cfcc0fa846fb75c4f

ASCII text, with CRLF line terminators

Makefile

dabe3e81d2d1a33224fbd030fc8747da

ASCII text, with CRLF line terminators

autoexec.1.1.4.bin

aa5af5fd4a52743aaeb98e7c8353c740

data

exec.inc

51ecff7b0a5948d1cea89dce2a629016

ASCII text, with CRLF line terminators

README-eng.txt

47c08194b720398058897c40470d80fb

ASCII text, with CRLF line terminators

HANDBOOK-rus-win.txt

e0a62e98760a6a7ab5f67fb0ee195fb0

ISO-8859 text, with very long lines (737), with CRLF line terminators

fasm

1a54c29af303a2430e472e4f57842f96

ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV)

fasm.exe

461c52fd045df98376de83bd247d85ec

PE32 executable (console) Intel 80386, for MS Windows, 3 sections

imgwrite.c

14806675060c8c54c011deba0c6bb607

C source, ASCII text

.tmp.swp

b3e24cb5e1e1e8efbef6aabe2fb91153

Vim swap file, version 7.1, pid 4023, user iley, host iley, file ~iley/prog/victoria/0.02/tmp, modified

proc_table.inc

02a343b935d9c0ea490af9e42ac2d272

ASCII text, with CRLF line terminators

rm.exe

414dc024d7fd437d5efc06663e4b184b

PE32 executable (console) Intel 80386, for MS Windows, 3 sections

imgwrite.exe

41be02939acfe54ad14e636c709369dd

PE32 executable (console) Intel 80386, for MS Windows, 4 sections

int.inc

cb5fd10b01a70ab1033711544f4dd2c0

ASCII text, with CRLF line terminators

dir.0.0.14.bin

b7587f5e0e9a3de729f56c6815a7cc7b

data

const.inc

54b60b4ef882700b1d58f7e06661d44d

ASCII text, with CRLF line terminators

victoria.inc

c668c0ae7bb8b83187ccefd6e876338f

ASCII text, with CRLF line terminators

README-rus-utf8.txt

1541abaa0ef9618d548c5f70249b83b6

Unicode text, UTF-8 text, with CRLF line terminators

string.inc

a18a7955c9d3fc1303fa4a366555b822

ASCII text, with CRLF line terminators

arrays.inc

48e8a7c9a14ad867d853d4056ee41022

ASCII text, with CRLF line terminators

true.exe

982620af5e213a4766615a57894524cc

PE32 executable (console) Intel 80386, for MS Windows, 4 sections

memory.inc

38d494abef9d98271ee146604439bba9

ASCII text, with CRLF line terminators

fat.0.0.2.bin

8416fe63550fe4ac23f17b0189a78412

data

HANDBOOK-rus-utf8.txt

533c626eb3f959cd4072c1190ad17b5d

Unicode text, UTF-8 text, with very long lines (737), with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_get_eip
VirusTotal	malicious	VirusTotal - Scan result 26/70

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

victoriaos-iley-ru.pages.dev/releases/0.03.1/victoriaos-0.03.1.zip

188.114.97.1

200 OK

2.0 MB

URL User Request GET HTTP/2
victoriaos-iley-ru.pages.dev/releases/0.03.1/victoriaos-0.03.1.zip
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectvictoriaos-iley-ru.pages.dev
Fingerprint7A:E5:69:5D:D9:B9:69:81:14:B7:BA:DF:53:FC:51:18:F8:8C:20:9B
ValidityThu, 09 May 2024 12:47:26 GMT - Wed, 07 Aug 2024 12:47:25 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
2.0 MB (1991537 bytes)
Hash
c4c044a1dc87ba2b56f64bfb940535de
d6c4ff610fd09c5b61abd51f9d94fe022eccc33e
1815713d61864b6e2e19f39778958c77b58d9c6bac82ce3e78bb59e67c99958e

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 26/70

HTTP Headers

GET /releases/0.03.1/victoriaos-0.03.1.zip HTTP/1.1
Host: victoriaos-iley-ru.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 18:25:24 GMT
content-type: application/zip
content-length: 1991537
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "013decd682b3f0322cf47c82ca8c206c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JESVvjWxh4ZEhZXySSxZKE47iTGJaP8MXgz10fApBdBdaI0x333EaWyNAHH4mSVXeH9cAGFvmBeKx1WKC6hawc%2B7%2F0X6NdY%2BPyE3FQ6h60pYtECevAasBN6dKygBUVU6BBXAPM7M%2FS3GGf%2FFg%2Boz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf8b68b2956c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (141)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers