Report - www.cp-lab.com/Files/PwdManagerPro.zip

Report Overview

Submitted URL
www.cp-lab.com/Files/PwdManagerPro.zip
IP
216.155.147.117
ASN
#20473 AS-CHOOPA
Submitted
2024-04-25 11:15:07
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.cp-lab.com	unknown	2003-02-26	2012-05-22	2024-03-05	492 B	4.0 MB	216.155.147.117

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.cp-lab.com/Files/PwdManagerPro.zip
IP
216.155.147.117
ASN
#20473 AS-CHOOPA

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.0 MB (4002923 bytes)
Hash
5b1e6eb3c424c1ae3e2641990c38cc73
7c068b73177333b644eaf472896e07c52dbdbf0f
4809f6f79404038bf0e793a6924f154064ec097ff23b8045cec58e9406958e02

Archive (5)

Filename

Md5

File type

PwdManager-Pro-Setup.exe

eae55898f16eedb8838a3357aa82752e

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

PwdManager-Pro-Setup.bin

944f200998d1509e69dfc01bfdfa45e8

PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

readme.txt

b8ddce64895f8146205e2aad13951d7b

ASCII text, with very long lines (658), with CRLF line terminators

History.txt

db333b5da82e857a0659c3f139545577

ASCII text, with CRLF line terminators

License.txt

22be7d06b22ef7dd629d71715b3ac0c6

ASCII text, with very long lines (784), with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	Detect files is `SliverFox` malware

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	www.cp-lab.com/Files/PwdManagerPro.zip	216.155.147.117	200 OK	4.0 MB
URL User Request GET HTTP/2 www.cp-lab.com/Files/PwdManagerPro.zip IP 216.155.147.117:443 ASN #20473 AS-CHOOPA Certificate IssuerLet's Encrypt Subjectcp-lab.com Fingerprint69:CB:0D:09:FB:2B:95:81:F4:FE:E1:7D:96:45:E4:9A:43:F9:7E:D4 ValidityTue, 05 Mar 2024 04:22:23 GMT - Mon, 03 Jun 2024 04:22:22 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 4.0 MB (4002923 bytes) Hash 5b1e6eb3c424c1ae3e2641990c38cc73 7c068b73177333b644eaf472896e07c52dbdbf0f 4809f6f79404038bf0e793a6924f154064ec097ff23b8045cec58e9406958e02 HTTP Headers `GET /Files/PwdManagerPro.zip HTTP/1.1 Host: www.cp-lab.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Thu, 25 Apr 2024 11:14:41 GMT content-type: application/zip content-length: 4002923 last-modified: Sun, 21 Jan 2024 15:45:31 GMT etag: "65ad3c1b-3d146b" expires: Sat, 25 May 2024 11:14:41 GMT pragma: public cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate accept-ranges: bytes X-Firefox-Spdy: h2`

www.cp-lab.com/Files/PwdManagerPro.zip

216.155.147.117

200 OK

4.0 MB

URL User Request GET HTTP/2
www.cp-lab.com/Files/PwdManagerPro.zip
IP
216.155.147.117:443
ASN
#20473 AS-CHOOPA

Certificate
IssuerLet's Encrypt
Subjectcp-lab.com
Fingerprint69:CB:0D:09:FB:2B:95:81:F4:FE:E1:7D:96:45:E4:9A:43:F9:7E:D4
ValidityTue, 05 Mar 2024 04:22:23 GMT - Mon, 03 Jun 2024 04:22:22 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.0 MB (4002923 bytes)
Hash
5b1e6eb3c424c1ae3e2641990c38cc73
7c068b73177333b644eaf472896e07c52dbdbf0f
4809f6f79404038bf0e793a6924f154064ec097ff23b8045cec58e9406958e02

HTTP Headers

GET /Files/PwdManagerPro.zip HTTP/1.1
Host: www.cp-lab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 11:14:41 GMT
content-type: application/zip
content-length: 4002923
last-modified: Sun, 21 Jan 2024 15:45:31 GMT
etag: "65ad3c1b-3d146b"
expires: Sat, 25 May 2024 11:14:41 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (5)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers