Report - www.ssuiteoffice.com/downloads/security/SSuiteAgnotSecurity.zip

Report Overview

Submitted URL
www.ssuiteoffice.com/downloads/security/SSuiteAgnotSecurity.zip
IP
172.67.157.246
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-07 09:43:57
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
9

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.ssuiteoffice.com	unknown	2017-09-18	2017-10-03	2024-04-15	517 B	4.9 MB	104.21.57.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.ssuiteoffice.com/downloads/security/SSuiteAgnotSecurity.zip
IP
104.21.57.14
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.9 MB (4894621 bytes)
Hash
14aa70a4ddc4ddd0f2aa463c71ccabe3
ec7f69d61bbfcd2e26b0b15ce1b2243dc04a9fa0
7250a932b415ef14159abdc021d8b090a4d81616d550a569f4e701ae1f193641

Archive (20)

Filename

Md5

File type

AgnotSecurity.exe

6c1251c953edf6f70fe1a9fcb7493657

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

GIFAnimator.exe

2f5ae48370c41a9804f60b46f1966b51

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

GIFFileList.dat

d41d8cd98f00b204e9800998ecf8427e

ImageEditor.exe

16fcef6832f4b3344e397d61b073aa11

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

LPng.dll

2750ceaf24b3d5252ed242b225a82ba2

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

PhotoView.exe

fd527adc40fc28a5674a7432adc57cf7

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

ScreenRuler.exe

c7c545c13f8d1c7867847a3d77438f74

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

athena.bmp

a7e25e35de95413cd3fb6b570a231aa3

PC bitmap, Windows 3.x format, 153 x 139 x 4, cbSize 11238, bits offset 118

BriefCase.exe

5b13b0dab7ecc66027b53695eb43c438

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

BriefCaseOptions.ini

1f3d8d806f9a42f905ed371a3c9988df

ASCII text, with CRLF line terminators

Category.cds

b7b0f4c1d09424a1bf9cd1a428bf0e35

OpenPGP Secret Key

Document.cds

d372cd5b05d42fe0afbfb38ffd7289d6

OpenPGP Secret Key

FileShredder.exe

f2304e0fe7969015d8927c9a9922d4dc

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

FileShredder.ini

5f1e3ccc395c4273762c568449cb7c9a

ASCII text, with CRLF line terminators

LPng.dll

2750ceaf24b3d5252ed242b225a82ba2

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

Picsel.exe

d06e9d7134d47e6192b11087ed45e1ac

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

Read Me.txt

f9e339797ba573ebfc685b7060e7de18

ASCII text, with CRLF line terminators

SSuite_BriefCase_Read_Me.rtf

d78ff7ff34bca2dffc7c19bb05a6c9c3

Rich Text Format data, version 1, ANSI, code page 1252, default language ID 7177

SSuite_Shredder_Read_Me.rtf

8579f2f1b1833dd09f85dbd3a23d3a33

Rich Text Format data, version 1, ANSI, code page 1252, default language ID 7177

SSuite_Agnot_Read_Me.rtf

3d68df538e9983b86de8975cdad6a11e

Rich Text Format data, version 1, ANSI, code page 1252, default language ID 7177

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/65

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

www.ssuiteoffice.com/downloads/security/SSuiteAgnotSecurity.zip

104.21.57.14

200 OK

4.9 MB

URL User Request GET HTTP/2
www.ssuiteoffice.com/downloads/security/SSuiteAgnotSecurity.zip
IP
104.21.57.14:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectssuiteoffice.com
Fingerprint1B:53:E1:A7:99:8A:48:69:FE:25:01:00:F0:96:DE:0D:F2:A8:42:52
ValidityWed, 17 Apr 2024 19:00:12 GMT - Tue, 16 Jul 2024 19:00:11 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.9 MB (4894621 bytes)
Hash
14aa70a4ddc4ddd0f2aa463c71ccabe3
ec7f69d61bbfcd2e26b0b15ce1b2243dc04a9fa0
7250a932b415ef14159abdc021d8b090a4d81616d550a569f4e701ae1f193641

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/65

HTTP Headers

GET /downloads/security/SSuiteAgnotSecurity.zip HTTP/1.1
Host: www.ssuiteoffice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 09:43:29 GMT
content-type: application/zip
content-length: 4894621
last-modified: Sun, 15 Apr 2018 13:05:06 GMT
etag: "4aaf9d-5ad34e02-22e37683b8d1f10;;;"
platform: hostinger
content-security-policy: upgrade-insecure-requests
permissions-policy: interest-cohort=()
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZlWTlxLm2g8PJpoLMCmAfcV2HzeF1DiOAui%2BQfhA%2FWLG22G7fSPjdULiyeOcsb7LjYrZ8ZlpOncydQ53%2BgiU0pp%2Bebcdvsa46IAQhdw09otoZUMZtJI7HGNaD72VKGVzWBQws4X8BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8800441a188356c9-OSL
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (20)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers