Report - www.vgmpf.com/Wiki/images/8/87/Highly_Advanced_(Winamp)

Report Overview

Submitted URL
www.vgmpf.com/Wiki/images/8/87/Highly_Advanced_(Winamp)_v0.11.zip
IP
192.96.210.11
ASN
#12129 123NET
Submitted
2024-04-18 05:35:37
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.vgmpf.com	unknown	2009-03-13	2014-03-14	2024-03-18	519 B	656 kB	192.96.210.11

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.vgmpf.com/Wiki/images/8/87/Highly_Advanced_(Winamp)_v0.11.zip
IP
192.96.210.11
ASN
#12129 123NET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
655 kB (655199 bytes)
Hash
96796725ca48c97b0e6a65c7b8fe632d
4b2cff61194ceea6086e36dc90b8e51772633155
bcc00b4976f7e3b5521b4c3f07c4a6c6eaa7e4ad8c95a605156fd71257dc0eaf

Archive (60)

Filename

Md5

File type

Highly Advanced (Winamp) v0.11.exe

ce940fd678e6099f571de26058bc169b

PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

bigkitty.jpg

016a679a38495fef6feaac49bc417058

JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 132x135, components 3

bigkitty_orig.bmp

1451d70e025c5c2d0573d811cde5a019

PC bitmap, Windows 3.x format, 233 x 135 x 24, image size 94500, cbSize 94554, bits offset 54

gsf.cpp

5defae5b73eba424c0312c12823c6998

C source, ASCII text, with CRLF, LF line terminators

gsf.h

ea19e120b0f5845754ee3afa6612ee85

C source, ASCII text, with CRLF line terminators

HA version history.txt

89a77efe4a44b83260cd12c1a585e375

ASCII text, with very long lines (365), with CRLF line terminators

HA_install.nsi

d427d2af3ec00a23e0b66db5c7d27fc7

ASCII text, with CRLF line terminators

HA_install_ni.nsi

bc26c98df7673e5a7641d8f24fe975da

ASCII text, with CRLF line terminators

in2.h

91bb01a14801468f1ad61d41cb284e6f

C source, ASCII text, with CRLF line terminators

in_gsf.aps

c2190bfe9fc1ee6d9a1f51f99679fa16

MSVC .res

in_gsf.rc

60772bb80826bc1902ecd96f62cd9023

C source, ASCII text, with CRLF line terminators

IN_GSF.sln

8385bf95f602ad6960d6ab74075f28ef

ASCII text, with CRLF line terminators

in_gsf.vcproj

cc9355918451f8f3bab186be857bafaf

XML 1.0 document, ASCII text, with CRLF line terminators

libresample.h

f9471aeed3b3583a2be4902318d8dec2

C source, ASCII text

libresample.lib

68970a75fc6e706b5a3c93a4cac5e044

current ar archive

loadpic.cpp

ffff4a2ad3c9899916a4f5cf51c68988

C source, ASCII text, with CRLF line terminators

loadpic.h

5de9d0e2cb9eb420920173f350676232

C source, ASCII text, with CRLF line terminators

logo.bmp

594f05ae7c702c0ef59fec4f98a2a28a

PC bitmap, Windows 3.x format, 233 x 135 x 8, 1 compression, image size 4584, cbSize 5662, bits offset 1078

logo_orig.bmp

d8c40de7618bbc309f86669dc68d17ce

PC bitmap, Windows 3.x format, 233 x 135 x 24, image size 94500, cbSize 94554, bits offset 54

main.c

eb86865ba5a41c01da4c2a3e05514e72

C source, ASCII text, with CRLF line terminators

main.c.bak.c

99913a89772cfc7c55bfcc38ca0746ea

C source, ASCII text, with CRLF, LF line terminators

mainBackup.c

81a4dbbf72f1c6dbfea350b633d5634b

C source, ASCII text, with CRLF, LF line terminators

out.h

e605f885fba317cca5c1d8ab2ee54fb4

ASCII text, with CRLF line terminators

pepper.jpg

7f8c9fb819553c7fcc9a013d5f652c33

JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 180x135, components 3

pepper_orig.bmp

90b5f5be8fd5793faedee815b8b8c839

PC bitmap, Windows 3.x format, 233 x 135 x 24, image size 94500, cbSize 94554, bits offset 54

pimpbot.jpg

a3da08c24a6a2314d2713074056625b4

JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 109x135, components 3

pimpbot_orig.bmp

6fffe0a208cccb9a725068f7bcfc9413

PC bitmap, Windows 3.x format, 233 x 135 x 24, image size 94500, cbSize 94554, bits offset 54

resource.h

549fe7f7f60aa0dd6be5ca50a1645836

C source, ASCII text, with CRLF line terminators

scrotum.wav

ac004c9fa664504706fe1378a224e6a8

RIFF (little-endian) data, WAVE audio, Microsoft ADPCM, mono 8000 Hz

tuneupsmall.wav

8a91933018988f2be0b9803ff570103a

RIFF (little-endian) data, WAVE audio, Microsoft ADPCM, mono 8000 Hz

arm-new.h

7367d3ca3f1f290af775f5f81bc4e0be

C source, ASCII text

bios.cpp

91361ba4dd1d3f823da40a126bfc6049

C source, ASCII text

bios.h

920046813a1f913ec9bf244032a9b79a

C source, ASCII text

GBA.cpp

26181adfe631e019598b3fe59d398a06

C source, ASCII text

GBA.h

55725cb192f4662abb28bafb6d189d15

C source, ASCII text

GBAinline.h

bcb1f478eaa30fc79049a9c66d88afc7

C source, ASCII text

getopt1.c

5fd11388f488b53ec69eeb3e71161636

C source, ASCII text

Globals.cpp

9a5bc244217454df7de95c04d682703c

C source, ASCII text

Globals.h

cfd187e113bd56a23247ad551585820b

C source, ASCII text

interp.h

6285f5aad504ac72ee6ec32c078fd314

C source, ASCII text

memgzio.c

bdddd4887c34e78a2e1fb31590b32de7

C source, ASCII text

memgzio.h

b8908d8e31c41b59f8fa59421e8caa27

C source, ASCII text

NLS.h

5829fbbfc8d81fd3db775d58e866d203

ASCII text

Port.h

36bbdb12bf9d49a441f9ed3277b8f839

C source, ASCII text

psftag.c

eb9e2be55b1c3ada5d021c00d2e16bca

C source, ASCII text, with CRLF line terminators

psftag.h

7acde7191ad284fbd79d67373ca8528b

C source, ASCII text, with CRLF line terminators

snd_interp.cpp

d687ee48f5d9e16a47b5945b8d611c29

C++ source, ASCII text, with CRLF line terminators

snd_interp.h

3d6e5b572431a607ffa5c4460076333c

C++ source, ASCII text, with CRLF line terminators

Sound.cpp

9be18fc019d7fc4511bb420aae2a5c26

C source, ASCII text, with CRLF line terminators

Sound.h

c0097eb628ba71e1b7d1d14b50913e36

C source, ASCII text, with CRLF line terminators

System.h

e56174bde95fa402bb500c269ff0ae2b

C source, ASCII text

thumb.h

9e62b180cf2d3eceb43938e03afe5e03

C source, ASCII text

unzip.cpp

5cdc276c87b72a7a0ee40b652d2191f9

C source, ASCII text

unzip.h

a99c5937efeea772f4dc74289b74a700

C source, ASCII text

Util.cpp

81382cf0304757ef80823f018a2bec71

C source, ASCII text, with CRLF, LF line terminators

Util.h

97b712b669ff01605a80bf440e10e9b8

C source, ASCII text

zconf.h

c5d11fccc8b67f07688accb6aabd8129

C source, ASCII text

zlib.h

89c025805778dae7e14b326ff57a2f3d

C source, ASCII text

zlibMD.lib

ddea7af8e7203df24246d890e08b504a

current ar archive

zutil.h

0518efd48444fe813cd3106795231862

C source, ASCII text

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	www.vgmpf.com/Wiki/images/8/87/Highly_Advanced_(Winamp)_v0.11.zip	192.96.210.11	200 OK	655 kB
URL User Request GET HTTP/2 www.vgmpf.com/Wiki/images/8/87/Highly_Advanced_(Winamp)_v0.11.zip IP 192.96.210.11:443 ASN #12129 123NET Certificate IssuerLet's Encrypt Subjectvgmpf.com FingerprintBD:CC:9B:6B:CB:17:F9:F2:77:47:04:F7:97:35:E6:E2:5D:67:B6:F6 ValidityMon, 15 Apr 2024 05:01:18 GMT - Sun, 14 Jul 2024 05:01:17 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 655 kB (655199 bytes) Hash 96796725ca48c97b0e6a65c7b8fe632d 4b2cff61194ceea6086e36dc90b8e51772633155 bcc00b4976f7e3b5521b4c3f07c4a6c6eaa7e4ad8c95a605156fd71257dc0eaf HTTP Headers GET /Wiki/images/8/87/Highly_Advanced_(Winamp)_v0.11.zip HTTP/1.1 Host: www.vgmpf.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK date: Thu, 18 Apr 2024 05:35:12 GMT server: Apache last-modified: Tue, 15 Nov 2016 21:24:19 GMT etag: "9ff5f-5415d944706c0" accept-ranges: bytes content-length: 655199 vary: User-Agent x-frame-options: SAMEORIGIN content-type: application/zip X-Firefox-Spdy: h2`

www.vgmpf.com/Wiki/images/8/87/Highly_Advanced_(Winamp)_v0.11.zip

192.96.210.11

200 OK

655 kB

URL User Request GET HTTP/2
www.vgmpf.com/Wiki/images/8/87/Highly_Advanced_(Winamp)_v0.11.zip
IP
192.96.210.11:443
ASN
#12129 123NET

Certificate
IssuerLet's Encrypt
Subjectvgmpf.com
FingerprintBD:CC:9B:6B:CB:17:F9:F2:77:47:04:F7:97:35:E6:E2:5D:67:B6:F6
ValidityMon, 15 Apr 2024 05:01:18 GMT - Sun, 14 Jul 2024 05:01:17 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
655 kB (655199 bytes)
Hash
96796725ca48c97b0e6a65c7b8fe632d
4b2cff61194ceea6086e36dc90b8e51772633155
bcc00b4976f7e3b5521b4c3f07c4a6c6eaa7e4ad8c95a605156fd71257dc0eaf

HTTP Headers

GET /Wiki/images/8/87/Highly_Advanced_(Winamp)_v0.11.zip HTTP/1.1
Host: www.vgmpf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:35:12 GMT
server: Apache
last-modified: Tue, 15 Nov 2016 21:24:19 GMT
etag: "9ff5f-5415d944706c0"
accept-ranges: bytes
content-length: 655199
vary: User-Agent
x-frame-options: SAMEORIGIN
content-type: application/zip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (60)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers