Report - silk.apana.org.au/vorbis/oggvorbis-1.3.3-os2.zip

Report Overview

Submitted URL
silk.apana.org.au/vorbis/oggvorbis-1.3.3-os2.zip
IP
180.150.56.141
ASN
#4764 Aussie Broadband
Submitted
2024-04-16 18:25:41
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
silk.apana.org.au	unknown	unknown	2013-05-25	2024-04-11	502 B	547 kB	180.150.56.141

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
silk.apana.org.au/vorbis/oggvorbis-1.3.3-os2.zip
IP
180.150.56.141
ASN
#4764 Aussie Broadband

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
546 kB (546409 bytes)
Hash
20480478c33ed983b2995170c49fb645
942177d852a74c6a29178ba75f5351f98e3e1f2b
438b065d1b0f008e844e6209d1f480ff0cb9bb5124b83fbd455078dbdd227057

Archive (24)

Filename

Md5

File type

ao_dart.dll

4ff13117f41cf21f1fef4e4d0831afda

MS-DOS executable, LX for OS/2 (DLL) i80386

COPYING_LIBS

ca77c6c3ea4d29cb68dce8ef5ab0d897

ASCII text

COPYING_PROGS

94d55d512a9ba36caa9b7df079bae19f

ASCII text

ogg.dll

41cbdb4957c88ef39c4074631e4cfa97

MS-DOS executable, LX for OS/2 (DLL) i80386

ogg123.exe

371623b81ca63f1dedb8150be0473e56

MS-DOS executable, LX for OS/2 (console) i80386

ogg123.html

b282c6fa699dc417154926beb0ca1d7b

HTML document text HTML document, ASCII text

oggdec.exe

6686af85500bf777105c134d98de69a8

MS-DOS executable, LX for OS/2 (console) i80386

oggdec.html

e4ccb7dd9efbfaf1b4bca540d1529af5

HTML document text HTML document, ASCII text

oggenc.exe

b08456e2edfe734d87185975037a7c6b

MS-DOS executable, LX for OS/2 (console) i80386

oggenc.html

404e9e0a5e578269cf9d64163230d393

HTML document text HTML document, ASCII text

ogginfo.exe

9bfc4bfff4fabc1d3f6a096d4c234885

MS-DOS executable, LX for OS/2 (console) i80386

ogginfo.html

55711229f329dbc727ec4dc0fc8dd452

HTML document text HTML document, ASCII text

OggPlay.dll

48b8f9e08de044b8f220681f8f1be967

MS-DOS executable, LX for OS/2 (DLL) i80386

oggplay.exe

19ba103c1a74d80af5240ee2bd26af2f

MS-DOS executable, LX for OS/2 (console) i80386

Readme.OS2

60f0aacef2431458b9b9592d5d566db9

ASCII text, with CRLF line terminators

vcut.exe

b5338087051203f8805d66b3047d99c2

MS-DOS executable, LX for OS/2 (console) i80386

vcut.html

b7f1cec5588e1466c5d22a6008dec49d

HTML document text HTML document, ASCII text

vorbis.dll

11bb4fee676065264f838f53c62181d0

MS-DOS executable, LX for OS/2 (DLL) i80386

vorbiscomment.exe

c4d57120ce7f77e854f3c7408ce32cb3

MS-DOS executable, LX for OS/2 (console) i80386

vorbiscomment.html

e7e132a6a4160153f4f7e09d05b0bbbf

HTML document text HTML document, ASCII text

vorbis-tools.patch

b483ad03013bdbfa3f3f929b5dbe45f0

unified diff output, ASCII text, with CRLF line terminators

ao.patch

cde14c4905e4fc268e7c8385d936b965

unified diff output, ASCII text, with CRLF line terminators

ogg.patch

5c41ffc13edea30aef5e22cdce6d2689

unified diff output, ASCII text, with CRLF line terminators

vorbis.patch

27025c85c8d63cc1d29fb6869a862d92

unified diff output, ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	silk.apana.org.au/vorbis/oggvorbis-1.3.3-os2.zip	180.150.56.141	200 OK	546 kB
URL User Request GET HTTP/1.1 silk.apana.org.au/vorbis/oggvorbis-1.3.3-os2.zip IP 180.150.56.141:443 ASN #4764 Aussie Broadband Certificate IssuerLet's Encrypt Subjectsilk.apana.org.au FingerprintB7:ED:D7:71:DE:C5:EE:F0:66:EC:C0:D6:25:26:51:75:8F:14:AB:0B ValidityThu, 11 Apr 2024 15:28:12 GMT - Wed, 10 Jul 2024 15:28:11 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 546 kB (546409 bytes) Hash 20480478c33ed983b2995170c49fb645 942177d852a74c6a29178ba75f5351f98e3e1f2b 438b065d1b0f008e844e6209d1f480ff0cb9bb5124b83fbd455078dbdd227057 HTTP Headers `GET /vorbis/oggvorbis-1.3.3-os2.zip HTTP/1.1 Host: silk.apana.org.au User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 18:25:17 GMT Server: Apache/2.4.57 (Debian) Last-Modified: Mon, 13 Feb 2012 23:32:50 GMT ETag: "85669-4b8e0e5892c80" Accept-Ranges: bytes Content-Length: 546409 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/zip`

silk.apana.org.au/vorbis/oggvorbis-1.3.3-os2.zip

180.150.56.141

200 OK

546 kB

URL User Request GET HTTP/1.1
silk.apana.org.au/vorbis/oggvorbis-1.3.3-os2.zip
IP
180.150.56.141:443
ASN
#4764 Aussie Broadband

Certificate
IssuerLet's Encrypt
Subjectsilk.apana.org.au
FingerprintB7:ED:D7:71:DE:C5:EE:F0:66:EC:C0:D6:25:26:51:75:8F:14:AB:0B
ValidityThu, 11 Apr 2024 15:28:12 GMT - Wed, 10 Jul 2024 15:28:11 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
546 kB (546409 bytes)
Hash
20480478c33ed983b2995170c49fb645
942177d852a74c6a29178ba75f5351f98e3e1f2b
438b065d1b0f008e844e6209d1f480ff0cb9bb5124b83fbd455078dbdd227057

HTTP Headers

GET /vorbis/oggvorbis-1.3.3-os2.zip HTTP/1.1
Host: silk.apana.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 18:25:17 GMT
Server: Apache/2.4.57 (Debian)
Last-Modified: Mon, 13 Feb 2012 23:32:50 GMT
ETag: "85669-4b8e0e5892c80"
Accept-Ranges: bytes
Content-Length: 546409
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/zip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (24)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers