Report - steamdesktopauthenticator.io/SDA-1.0.15.zip

Report Overview

Submitted URL
steamdesktopauthenticator.io/SDA-1.0.15.zip
IP
104.21.21.107
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-16 23:36:36
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
steamdesktopauthenticator.io	unknown	2024-01-20	2024-01-20	2024-03-19	497 B	3.6 MB	172.67.197.245

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
steamdesktopauthenticator.io/SDA-1.0.15.zip
IP
172.67.197.245
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.6 MB (3599957 bytes)
Hash
6d6a22c7fe510efd751beafe3ca9e203
1636d2c13bf7f11643d8a2d87f2205a65d85d475
6822b335763446f4dab69e9c50bfc450fdec6c8cb35a85f42af839d4eec03f78

Archive (18)

Filename

Md5

File type

Microsoft.Win32.Registry.dll

59c48aacb1c413c108161afe13fdbed9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Newtonsoft.Json.dll

195ffb7167db3219b217c4fd439eedd6

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

protobuf-net.Core.dll

22f7136e247426958accb8fbcaa61aa5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

protobuf-net.dll

6ee917ad44e9cacd96560762c1858b41

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Steam Desktop Authenticator.exe

7d7a7a2681125cbebe5f259b3c05688c

PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Steam Desktop Authenticator.exe.config

2b795cb787094ef2881a8728749ee655

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

SteamAuth.dll

0b9a811de54fecc13354f31b1b56cc67

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SteamAuth.pdb

4fe07735ba7b158a34fd5d33269a4290

MSVC program database ver 7.00, 512*251 bytes

SteamKit2.dll

b49bc02f09ee24dbc4e41d28cbf0532a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SteamKit2.pdb

fbf5d311decddd40c30fed7e24b41045

Microsoft Roslyn C# debugging symbols version 1.0

System.Buffers.dll

ecdfe8ede869d2ccc6bf99981ea96400

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Collections.Immutable.dll

7b2a749a73990140bb21395e2c786f0c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Memory.dll

f09441a1ee47fb3e6571a3a448e05baf

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Numerics.Vectors.dll

aaa2cbf14e06e9d3586d8a4ed455db33

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.CompilerServices.Unsafe.dll

c610e828b54001574d86dd2ed730e392

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.AccessControl.dll

996aab294e1d369b148d732e5ec0dfdc

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.Principal.Windows.dll

be2962225b441cc23575456f32a9cf6a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

CommandLine.dll

ec0e2dd54144d6f6a317b7daa715d418

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	steamdesktopauthenticator.io/SDA-1.0.15.zip	172.67.197.245	200 OK	3.6 MB
URL User Request GET HTTP/2 steamdesktopauthenticator.io/SDA-1.0.15.zip IP 172.67.197.245:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjectsteamdesktopauthenticator.io FingerprintFF:64:49:21:5E:99:02:06:F7:FC:E9:29:C9:40:C0:34:5D:CA:53:61 ValidityTue, 19 Mar 2024 05:01:35 GMT - Mon, 17 Jun 2024 05:01:34 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 3.6 MB (3599957 bytes) Hash 6d6a22c7fe510efd751beafe3ca9e203 1636d2c13bf7f11643d8a2d87f2205a65d85d475 6822b335763446f4dab69e9c50bfc450fdec6c8cb35a85f42af839d4eec03f78 HTTP Headers `GET /SDA-1.0.15.zip HTTP/1.1 Host: steamdesktopauthenticator.io User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 16 Apr 2024 23:36:08 GMT content-type: application/zip content-length: 3599957 last-modified: Fri, 29 Mar 2024 15:27:25 GMT etag: "36ee55-614ce46e05958" cache-control: max-age=14400 cf-cache-status: MISS accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=de%2F69u0PWOq1sZ23koh9zYTCffUijbgNSXNCxDDqNyNYrAm%2F9JzvCizb86Wt00tqOG46d5phwT4ag1GVgPQVA7jQpRjZ%2FzHl45Intoh3tUCMavjK6WF0%2FhxdDl5ZrXBCswPZwyCQQzIu%2BwzOoUDP"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8757feedac7e7130-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

steamdesktopauthenticator.io/SDA-1.0.15.zip

172.67.197.245

200 OK

3.6 MB

URL User Request GET HTTP/2
steamdesktopauthenticator.io/SDA-1.0.15.zip
IP
172.67.197.245:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectsteamdesktopauthenticator.io
FingerprintFF:64:49:21:5E:99:02:06:F7:FC:E9:29:C9:40:C0:34:5D:CA:53:61
ValidityTue, 19 Mar 2024 05:01:35 GMT - Mon, 17 Jun 2024 05:01:34 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.6 MB (3599957 bytes)
Hash
6d6a22c7fe510efd751beafe3ca9e203
1636d2c13bf7f11643d8a2d87f2205a65d85d475
6822b335763446f4dab69e9c50bfc450fdec6c8cb35a85f42af839d4eec03f78

HTTP Headers

GET /SDA-1.0.15.zip HTTP/1.1
Host: steamdesktopauthenticator.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 23:36:08 GMT
content-type: application/zip
content-length: 3599957
last-modified: Fri, 29 Mar 2024 15:27:25 GMT
etag: "36ee55-614ce46e05958"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=de%2F69u0PWOq1sZ23koh9zYTCffUijbgNSXNCxDDqNyNYrAm%2F9JzvCizb86Wt00tqOG46d5phwT4ag1GVgPQVA7jQpRjZ%2FzHl45Intoh3tUCMavjK6WF0%2FhxdDl5ZrXBCswPZwyCQQzIu%2BwzOoUDP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8757feedac7e7130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (18)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers