Report - 120.116.16.4/tablet/dlearning.zip

Report Overview

Submitted URL
120.116.16.4/tablet/dlearning.zip
IP
120.116.16.4
ASN
#1659 Taiwan Academic Network TANet Information Center
Submitted
2024-04-18 06:31:09
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
72

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
120.116.16.4	unknown	unknown	2023-08-02	2023-08-02	666 B	235 kB	120.116.16.4

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	120.116.16.4	Sinkholed
2024-04-18	medium	120.116.16.4	Sinkholed

ThreatFox

No alerts detected

Files detected

URL
120.116.16.4/tablet/dlearning.zip
IP
120.116.16.4
ASN
#1659 Taiwan Academic Network TANet Information Center

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
234 kB (233735 bytes)
Hash
b9a19331b400333af016deaef74ee097
50b92c6406957424d9f8dc46f314285cf7f7e3d5
64c237978ab3b268960dc5d341f93d379ca627cea0151d74376281f7da87f718

Archive (71)

Filename

Md5

File type

�T��F�j.lnk

adb8694c70742130adf0a4fe40c24a55

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��.lnk

816b1eb408d036be60737a7b89b9cfb0

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�n�@.lnk

91f29badb9b9280a7569ee1b11881976

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�d�a.lnk

4e8715ec2e79e33ec51d295ce476f1e5

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��t.lnk

92af95e3f6c65f708f4060cebf7b543b

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��L.lnk

80ef4e51dec31e4b4d4b13d88abd55c0

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�s��.lnk

23380373acbcab0ee0edccce9d584120

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�Ш|��u�@�Ѩ�.lnk

0c310155fba196ea229df164a24a4d9c

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�Ш|��P�Ш|�귽��X��x.lnk

1f30ca2f63ce24872438f5e1fa1db049

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�Ш|��a�Ш|��.lnk

09bc6ffd87e864571b4c544de846dcdc

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�Ш|��|�p��A��.lnk

149038398f673bc255d223d08ae91d95

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�Ш|��.lnk

bd2e5f4809bd8f946a14e4b61301cda5

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��g�Ш|�귽��.lnk

33471ed21b765c3ef424b70ade0b033e

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�ն��T��O.lnk

cce9a8bd7ee9bcbc980f9fd18e33d5e4

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�෽�Ш|.lnk

93e7e651bb7008acb6315bfa93a6f397

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��ǥ��Ī��ݥθ귽��.lnk

540c5d04da634aa36564bd44eebc497a

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

PaGamO.lnk

6b4049fb8979618899b4dcdf466657bc

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��@.lnk

ce1099df96e3ec81464f3e457c5ad7a7

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�ǲߧa.lnk

ffb1f68e88913ff416ca4cf1a38d9c94

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�Ш|��]��.lnk

12d0b3c9708b8e6e4ce48c4822c40034

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

NCL Reader.lnk

3d86e7a1cf551a3e30fd15c8baa36615

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��Ϩ��A�a.lnk

3f2eafc8eeb65b1d6950fd1d149cffc7

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��ߤ��@��T�Ϯ��].lnk

42403090442d7a6c41ec4fbdd55735d4

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��Ƴ��ൣ��].lnk

618426d3e88b8f18386396b022ad7d4e

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�u�W�G�c.lnk

2a3b3ccb8eef6ea135c4c8cb3974794c

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�s��l�k�Ш|��T��.lnk

dd7e518095a0d8c03202f1ce6753035f

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Thumbs.db

3cfbe8b04984464cc00fd2d76b358360

Composite Document File V2 Document, Cannot read section info

��F�|�Ʀ��ǲߺ��i��׮६1.jpg

7259de54d7add7acd37244c9033d9a44

JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1366x768, components 3

��F�|�Ʀ��ǲߺ��i��׮६2.jpg

80cabd705af8adbc3b2af7ca227ef6c3

JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1366x768, components 3

�Y��.jpg

e885dd978f300dbe61806eadcf44f8f3

JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 429x388, components 3

�F�ǰ�.lnk

6279ca5bbf3186dc4a8dba699dca0566

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�ŽҶ�.lnk

482cc88d09e0b49eeea1125d435abf69

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��j�ǻO�W��y�a�W�q�l��Ʈw.lnk

9e5b8ab966d0a92838adb65c5a71e793

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��j�ǻO�W��y�m��q�l��Ʈw.lnk

c30bac0b7439c20aeb0e6ff75e1b8d0d

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��j�ǻO�W��y�u�W��.lnk

6ef8ed54a04244fe76ab13f433b3aa91

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��߻O�W�Ϯ��]�x��W�D��y�M��-��yø��.lnk

5be82314b89cc823dd689cbaba0cafcd

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�`�Τ��y��.lnk

a84bd31c85d6c08f1a4df59dae8523e6

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Google Meet.lnk

97bab861679773b0f0e3809e85aa8f3f

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Microsoft Teams.lnk

f397a64c35b21c59fb1e371b4ddb984a

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Canva.lnk

ceeb5e8bc82b489f2ffe48487ed9b16b

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Google Classroom.lnk

d6173f85c9e646873dfcd88080f0ffdd

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Jamboard.lnk

3de3d92bc31b2127ec5cdf0e42497773

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

kahoot.lnk

c6479d6ae8b3a065c075706fed8312a2

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Notion.lnk

8ef0e85022ac92642a2d8019448d498b

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Quizlet.lnk

9c38db10ffaa17dbaf67517c52c1d987

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

British Council LearnEnglish.lnk

7ed2d06e5cf2fd44e0108307357b3eac

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

CoolEnglish.lnk

92fd0ac16ddd742f9d9bad0ffae59ba1

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Easy World Of English.lnk

c37df35311ca0979f626e6d8d0ad372e

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Grammarly.lnk

700729a9d53c7d941dc24c519b21ec57

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Storybird.lnk

5f96a21195568fd0dbb29b4192b9120a

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

StoryboardThat.lnk

99204042818206c659f8aff6034608db

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Text-to-Speech.lnk

3ca67be762ba1b4b129daecdce8fb4f5

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Vidtionary - A Video Dictionary.lnk

1dc712a5958c8a6a59dff0fc5d4c0503

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Youglish.lnk

6f5cefc1b28b2d33d5743875819ede9c

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��x�y�x.lnk

f4071d3d9d3efc1b9a76143808dca614

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�x�y��а��|-�x�yø��.lnk

323db83a81b6a683afc5385ae3935008

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�Ш|��ԫn�y�ʵe��.lnk

1d60959ebfa1cb5b328239be9875e798

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��p�� Pink Phang.lnk

8bb5841e10f6f88c12f31da28a93af08

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�O�W�p�G��.lnk

16e4169215aa3dec4832ead31ddfcfdb

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�O�W�ܸ��ƥ��y��.lnk

1487805bf4b21a0603e4de169c16c353

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�ص��x.lnk

33d6c4275cd9f4b4a9984bb85198a420

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�ԫn�y�媽��@�ǼƦ��Ч��X��p��Ū�Z.lnk

8f5fe59f4d87a44ea228db3f1975a01e

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�ԫȻy�g�r�m��ï.lnk

66a5e253e5d313c17ee63a2d808b6cf7

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��ذꤤ�p-1-6�~�ź֦{�y�Ч�(90�~��).lnk

95faf9e7d6e3f1d31c7046f59a567a2f

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��餤�Z�ԪF�y�Ч�.lnk

69ac32eed1cf116f24e208639c1dd2ca

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��j�Z�ԪF�y�Ч�.lnk

8f94b208e70ea652fc24ecf7e0c9bc95

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�峹 �p�פ�.lnk

67552b393f438c31531f479c249a76f1

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

�s�s��p�@�~�űЧ�.lnk

4a09227a482e4ba6f66f4527a4798af5

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��ԪF�y��˴��D60�D.lnk

c1a293501477e791d7ded545c1908bf0

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��ԪF�y��r�˯��t��.lnk

193d6e28d3e791f2a184648a67417930

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

��120�y�f�U��.lnk

32412591c95d87d9dd96d58011d23b68

MS Windows shortcut, Item id list present, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Detections

Analyzer	Verdict	Alert
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies scripting artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies download artefacts in shortcut (LNK) files.

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

120.116.16.4/

120.116.16.4

703 B

URL
120.116.16.4/
IP
120.116.16.4:0
ASN
#1659 Taiwan Academic Network TANet Information Center

File type
HTML document, ASCII text, with CRLF line terminators
Size
703 B (703 bytes)
Hash
242c23ea412530c7d94b77a7a978c176
6e8749068fd6b842992e554b4fea32f9089318ad
557b5e9015b4963a130c7039e077b3ec0306d401b6ee13d631721d5d969d2917

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 120.116.16.4
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Thu, 20 Jan 2022 09:10:56 GMT
Accept-Ranges: bytes
ETag: "e89c7a1dddd81:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2024 06:30:47 GMT
Content-Length: 703

120.116.16.4/tablet/dlearning.zip

120.116.16.4

200 OK

234 kB

URL User Request GET HTTP/1.1
120.116.16.4/tablet/dlearning.zip
IP
120.116.16.4:80
ASN
#1659 Taiwan Academic Network TANet Information Center

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
234 kB (233735 bytes)
Hash
b9a19331b400333af016deaef74ee097
50b92c6406957424d9f8dc46f314285cf7f7e3d5
64c237978ab3b268960dc5d341f93d379ca627cea0151d74376281f7da87f718

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /tablet/dlearning.zip HTTP/1.1
Host: 120.116.16.4
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/x-zip-compressed
Last-Modified: Fri, 25 Nov 2022 19:38:05 GMT
Accept-Ranges: bytes
ETag: "1592927051d91:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2024 06:30:47 GMT
Content-Length: 233735

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (71)

Detections

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers