Report - cdn.tabulareditor.com/files/TabularEditor.2.24.1.zip

Report Overview

Submitted URL
cdn.tabulareditor.com/files/TabularEditor.2.24.1.zip
IP
20.50.2.9
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2024-04-24 12:26:07
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.tabulareditor.com	unknown	2020-03-10	2021-03-09	2024-03-20	506 B	4.2 MB	20.50.2.9

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
cdn.tabulareditor.com/files/TabularEditor.2.24.1.zip
IP
20.50.2.9
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.2 MB (4205938 bytes)
Hash
375c41a1f809754f617865193476ee48
5428b8f2c204b8e647ca5b333159f6e7e6e0404c
6a69897803986e74fd956346b585aaa1ce5fbe62c2bf5409882f9f5d178de074

Archive (17)

Filename

Md5

File type

license-FastWildcardMatching.txt

46e7daa85ef8bb7c2aa935bff25bc0f0

ASCII text, with very long lines (460), with CRLF line terminators

license-TabularEditor.txt

041109654979f20c177eb02f0f58befd

ASCII text, with CRLF line terminators

license-TreeViewAdv.txt

53145715a1ae9af565ddba876dc7f304

ASCII text, with CRLF line terminators

Microsoft.AnalysisServices.Core.dll

50ff5eee21ba18b512cd6c70b8566a42

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.AnalysisServices.SPClient.Interfaces.dll

a9e921c2367ae73bf8926a4d3db364e5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.AnalysisServices.Tabular.dll

3d6f8dfec2de00a4ed9084019e500b8c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.AnalysisServices.Tabular.Json.dll

907fc837216a84682b7443e5340e7bb3

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Identity.Client.dll

98f0245a44cc043dc9a55a265479fb2d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.IdentityModel.Abstractions.dll

bd98a575eaa11a85e4c2029b55f9cae9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Buffers.dll

ecdfe8ede869d2ccc6bf99981ea96400

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.DiagnosticSource.dll

eca216927ed487613b7a042fc643bd8f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Memory.dll

f09441a1ee47fb3e6571a3a448e05baf

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Numerics.Vectors.dll

aaa2cbf14e06e9d3586d8a4ed455db33

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.CompilerServices.Unsafe.dll

c610e828b54001574d86dd2ed730e392

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

TabularEditor-license.rtf

29cb2ccd6fb1558d6e6284cfb8edeb98

Rich Text Format data, version 1, ANSI, default middle east language ID 1025

TabularEditor.exe

a14bb767677f24a43cdeb69de8f249cf

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

TabularEditor.exe.config

dc6031eb779f16d6ff5149ec2115a27e

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

cdn.tabulareditor.com/files/TabularEditor.2.24.1.zip

20.50.2.9

200 OK

4.2 MB

URL User Request GET HTTP/1.1
cdn.tabulareditor.com/files/TabularEditor.2.24.1.zip
IP
20.50.2.9:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerDigiCert, Inc.
Subjectcdn.tabulareditor.com
FingerprintA9:69:B1:DC:A5:D9:94:43:BA:37:99:67:E3:76:96:28:4A:00:F9:47
ValidityTue, 19 Mar 2024 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.2 MB (4205938 bytes)
Hash
375c41a1f809754f617865193476ee48
5428b8f2c204b8e647ca5b333159f6e7e6e0404c
6a69897803986e74fd956346b585aaa1ce5fbe62c2bf5409882f9f5d178de074

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/66

HTTP Headers

GET /files/TabularEditor.2.24.1.zip HTTP/1.1
Host: cdn.tabulareditor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 4205938
Content-Type: application/octet-stream
Date: Wed, 24 Apr 2024 12:25:39 GMT
Request-Context: appId=cid-v1:edec597f-53e5-45ae-bf82-5550d2262a80