Report - 6f.sharemods.com/cgi-bin/dl.cgi/x2j3rszexrhawgjtpvtlel5ddlua62k3cn4i7qgdar2s5ypzmusalvq/Project

Report Overview

Submitted URL
6f.sharemods.com/cgi-bin/dl.cgi/x2j3rszexrhawgjtpvtlel5ddlua62k3cn4i7qgdar2s5ypzmusalvq/Project_Props.7z
IP
49.12.84.254
ASN
#24940 Hetzner Online GmbH
Submitted
2024-03-29 09:47:32
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
6f.sharemods.com	unknown	2013-01-31	2021-09-01	2024-03-23	558 B	15 MB	49.12.84.254

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
6f.sharemods.com/cgi-bin/dl.cgi/x2j3rszexrhawgjtpvtlel5ddlua62k3cn4i7qgdar2s5ypzmusalvq/Project_Props.7z
IP
49.12.84.254
ASN
#24940 Hetzner Online GmbH

File type
7-zip archive data, version 0.4
Size
15 MB (15292643 bytes)
Hash
0b159fbaacf625f5724e0f539f89dc6a
cc5fa8abe3e1e34492a635f29d22441341d4353c
c9a0a24050fdc33b60c4e3b53ef74a64eab70ded4ba1590e1e86a8548267d57a

Archive (18)

Filename

Md5

File type

III.VC.SA.LimitAdjuster.ini

37c2335a51aa5fb7b044f580b2071dac

Generic INItialization configuration [VCLIMITS]

procobj.dat

0d369e8cd27696626877ae4e065226ef

ASCII text, with CRLF line terminators

surfinfo.dat

6d2d9db0fa3f159333617f24e138bbbc

ASCII text, with CRLF line terminators

Leiame (ou morra).txt

ee4f2f43622aec8a65324736372f00ea

ISO-8859 text, with CRLF line terminators

CSprops.ipl

4cfc4c4e1632de43d3f23163ab93345c

ASCII text

LSprops.ipl

e3684c3e28cebde61ec442088dce7f4a

ASCII text

LVprops.ipl

43e8304822de54b769c37f284a56ba14

ASCII text

ppGTAMixed.ipl

d4e5ac0ee1919b768281508efe9462bd

ASCII text, with CRLF line terminators

projectprops.col

63e81a05343445eb6b1acbec9866bdbf

RenderWare collision data (COL), version 2, used in GTA SA

ProjectProps.ide

55af6af766a4ed3399f78ff3888b43ab

ASCII text

projectprops.img

816ac270352c68e28c9e9a6476026fe6

GTA archive (IMG), version 2, used in GTA SA, 263 items

SFprops.ipl

b2a9d449a5a46f58140ca586bb0d1e8e

ASCII text

weeds.ipl

3361b51b14ff414be53008878c0aa3d7

ASCII text

object.dat

2dc827242bf613da4613bf69282f40b5

Generic INItialization configuration [kilograms 1 to 50000]

gtadat.txt

7fcf2ba5e8478a54baf06b8076aaee21

RenderWare collision data (COL),

ProjectProps.asi

55432e805d25cb46f0d1790ec6e4e8c3

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

ProjectProps.ini

acba826af7105a13cfbb7d82d186213f

ASCII text

Readme (or die).txt

8cb6f06a31d8a8ca3e8baa4965d46bc7

ASCII text, with CRLF line terminators

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	6f.sharemods.com/cgi-bin/dl.cgi/x2j3rszexrhawgjtpvtlel5ddlua62k3cn4i7qgdar2s5ypzmusalvq/Project_Props.7z	49.12.84.254	200 OK	15 MB
URL User Request GET HTTP/1.1 6f.sharemods.com/cgi-bin/dl.cgi/x2j3rszexrhawgjtpvtlel5ddlua62k3cn4i7qgdar2s5ypzmusalvq/Project_Props.7z IP 49.12.84.254:443 ASN #24940 Hetzner Online GmbH Certificate IssuerLet's Encrypt Subject6f.sharemods.com FingerprintF6:C7:0C:E9:16:8E:E6:41:F0:6A:FF:59:D6:BD:9D:48:FB:DB:38:62 ValiditySat, 23 Mar 2024 05:34:30 GMT - Fri, 21 Jun 2024 05:34:29 GMT File type 7-zip archive data, version 0.4 Size 15 MB (15292643 bytes) Hash 0b159fbaacf625f5724e0f539f89dc6a cc5fa8abe3e1e34492a635f29d22441341d4353c c9a0a24050fdc33b60c4e3b53ef74a64eab70ded4ba1590e1e86a8548267d57a HTTP Headers GET /cgi-bin/dl.cgi/x2j3rszexrhawgjtpvtlel5ddlua62k3cn4i7qgdar2s5ypzmusalvq/Project_Props.7z HTTP/1.1 Host: 6f.sharemods.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 09:46:58 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/8.1.27 Access-Control-Allow-Origin: * Content-Disposition: attachment Content-Transfer-Encoding: binary Content-length: 15292643 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/octet-stream`

6f.sharemods.com/cgi-bin/dl.cgi/x2j3rszexrhawgjtpvtlel5ddlua62k3cn4i7qgdar2s5ypzmusalvq/Project_Props.7z

49.12.84.254

200 OK

15 MB

URL User Request GET HTTP/1.1
6f.sharemods.com/cgi-bin/dl.cgi/x2j3rszexrhawgjtpvtlel5ddlua62k3cn4i7qgdar2s5ypzmusalvq/Project_Props.7z
IP
49.12.84.254:443
ASN
#24940 Hetzner Online GmbH

Certificate
IssuerLet's Encrypt
Subject6f.sharemods.com
FingerprintF6:C7:0C:E9:16:8E:E6:41:F0:6A:FF:59:D6:BD:9D:48:FB:DB:38:62
ValiditySat, 23 Mar 2024 05:34:30 GMT - Fri, 21 Jun 2024 05:34:29 GMT

File type
7-zip archive data, version 0.4
Size
15 MB (15292643 bytes)
Hash
0b159fbaacf625f5724e0f539f89dc6a
cc5fa8abe3e1e34492a635f29d22441341d4353c
c9a0a24050fdc33b60c4e3b53ef74a64eab70ded4ba1590e1e86a8548267d57a

HTTP Headers

GET /cgi-bin/dl.cgi/x2j3rszexrhawgjtpvtlel5ddlua62k3cn4i7qgdar2s5ypzmusalvq/Project_Props.7z HTTP/1.1
Host: 6f.sharemods.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 09:46:58 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/8.1.27
Access-Control-Allow-Origin: *
Content-Disposition: attachment
Content-Transfer-Encoding: binary
Content-length: 15292643
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/octet-stream

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (18)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers