Report Overview
Visitedpublic
2025-03-25 17:20:50
Tags
Submit Tags
URL
uupdump.net/misc/uup-converter-wimlib.7z
Finishing URL
about:privatebrowsing
IP / ASN
172.67.140.132
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
uupdump.net | 117905 | 2021-01-09 | 2021-01-09 | 2025-03-25 | 508 B | 1.7 MB | 172.67.140.132 |
Related reports
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
uupdump.net/misc/uup-converter-wimlib.7z
IP / ASN
172.67.140.132
File Overview
File Type7-zip archive data, version 0.4
Size1.7 MB (1686920 bytes)
MD5baa2ee10a78d5e9e588e055a333539ba
SHA16203d376c1e87d839e709b45c0cde9c5b833eea1
Archive (34)
| Filename | MD5 | File type |
|---|---|---|
| APAP.txt | 8290f63c28641077804a56feb823dfba | ASCII text, with CRLF line terminators |
| bootmui.txt | a003f367d4f62cf15d4fdcb7edfe4d37 | ASCII text, with CRLF line terminators |
| bootwim.txt | 61eecc514db0594057cb77ac667aea99 | ASCII text, with CRLF line terminators |
| CompDB_App.txt | 01c712a8097b4adfa69836054bcfec20 | ASCII text, with very long lines (306), with CRLF line terminators |
| PSFExtractor.exe.config | ef32e2b99b3ac0aaa4a1ade65a87bead | XML 1.0 document, ASCII text, with CRLF line terminators |
| psfx.txt | deb1aa95db4872d8f9654519ab268d65 | ASCII text, with CRLF line terminators |
| tiTkn.txt | 8b22c9f8809c4c6caa00ba96e5b615a0 | ASCII text, with CRLF line terminators |
| Updates.bat | 964be95db8fc4b0cc11bba08f07da0d2 | DOS batch file, ASCII text, with CRLF line terminators |
| veData.cmd | 9272fe6dccfcb4c25bc0c7f8e614df2b | ASCII text, with very long lines (2568), with CRLF line terminators |
| convert-UUP.cmd | 6b723193f9b6562d2c88d9210ef0a0da | exported SGML document, ASCII text, with CRLF line terminators |
| ConvertConfig.ini | f4898d72d7658a1033c8784787504a70 | Generic INItialization configuration [Store_Apps] |
| create_virtual_editions.cmd | e6bb7ce03143be8e57c9de78b3f5dde2 | exported SGML document, ASCII text, with CRLF line terminators |
| CustomAppsList.txt | 9f223cbd12372e4fdcb863b6d9d1d407 | ASCII text, with CRLF line terminators |
| multi_arch_iso.cmd | 3978a26b0fb93c67ccb10cb90c51ac8d | exported SGML document, ASCII text, with CRLF line terminators |
| ReadMe.html | 0fb89cfbf88e285bf29b1d1259719efb | HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators |
| Remove_Failure_MountDir_TempDir.cmd | 91bd5b3d939aeb8beb083f425d8bcc9d | ASCII text, with CRLF line terminators |
| .README | c013ca3a8da389fbdecb49c6b0a5e913 | Unicode text, UTF-8 (with BOM) text, with CRLF line terminators |
| 7z.dll | 0dce103b0102adec3279797665b7a4ae | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections |
| 7z.exe | 7187ae605f4dce14bb23ea2623956335 | PE32 executable (console) Intel 80386, for MS Windows, 6 sections |
| APAP.exe | 0ae0b18480a3aae780ed7ca6b44b073c | PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
| bcdedit.exe | e48eee77a8a6390b89781ccd1d7bccc5 | PE32 executable (console) Intel 80386, for MS Windows, 6 sections |
| bfi.exe | edbdd5893d753fa68865ec3ad7dfe06d | PE32 executable (console) Intel 80386, for MS Windows, UPX compressed, 3 sections |
| libwim-15.dll | e00fa5e9967055c31a62410fa4a758a2 | PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows, 12 sections |
| wimlib-imagex.exe | c297992a7e8a207508fe30c71bf2691c | PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows, 11 sections |
| cabarc.exe | a02a8702c6c539bd8648ccbb1869a604 | PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| cdimage.exe | faaca366b14a036ff0fdd52654cb0798 | PE32 executable (console) Intel 80386, for MS Windows, 5 sections |
| imagex.exe | a452fd6f47c7f603c2c2034dacc8cac4 | PE32 executable (console) Intel 80386, for MS Windows, 5 sections |
| libwim-15.dll | cb5fce32bb4559e6c078f68257b8cf03 | PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections |
| Microsoft.Dism.dll | 4a1fecccb25d0a97bdf7152d2f5768ef | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
| offlinereg.exe | 6dc5ad65078eb5229fbbd1f06f61cf0b | PE32 executable (console) Intel 80386, for MS Windows, 8 sections |
| offreg.dll | 163db46b803e4c83c444a026ff17d269 | PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections |
| PSFExtractor.exe | cdc246981d3c7d79133ba55f2e8e5cd5 | PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
| SxSExpand.exe | ca13105c6b1a532b8aeec611ec6459ef | PE32 executable (console) Intel 80386, for MS Windows, 8 sections |
| wimlib-imagex.exe | c0605496fa0a86bcc78dbe13bd7aa29c | PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, 9 sections |
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| YARAhub by abuse.ch | malware | Qakbot New Campaign ISO |
JavaScript (0)
No JavaScripts
HTTP Transactions (1)
| URL | IP | Response | Size |
|---|