Report - rbrpro.org/updates/updater/RBRProUpdater.zip

Report Overview

Submitted URL
rbrpro.org/updates/updater/RBRProUpdater.zip
IP
31.11.34.94
ASN
#31034 Aruba S.p.A.
Submitted
2024-04-18 07:07:36
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.rbrpro.org	unknown	2020-07-03	2022-06-06	2024-04-09	502 B	444 kB	31.11.34.94
rbrpro.org	unknown	2020-07-03	2020-08-19	2024-03-21	498 B	466 B	31.11.34.94

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.rbrpro.org/updates/updater/RBRProUpdater.zip
IP
31.11.34.94
ASN
#31034 Aruba S.p.A.

File type
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
Size
443 kB (443392 bytes)
Hash
ec78e2ba831e47af1659207c8501ef4b
d6c81668217ec05094af025aa506deee6c75a58f
3b353132c4f83fa50eff84797d05e6eaf76f63b373efd5772ddeaa881b73919b

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 3/64

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

rbrpro.org/updates/updater/RBRProUpdater.zip

31.11.34.94

301 Moved Permanently

179 B

URL User Request GET HTTP/1.1
rbrpro.org/updates/updater/RBRProUpdater.zip
IP
31.11.34.94:443
ASN
#31034 Aruba S.p.A.

Certificate
IssuerActalis S.p.A.
Subject*.rbrpro.org
Fingerprint6B:E6:EA:C9:2B:82:4B:9E:AC:BB:5A:78:BA:5F:D9:21:BD:C4:36:60
ValidityTue, 14 Nov 2023 06:37:24 GMT - Sat, 14 Dec 2024 06:37:23 GMT

File type
HTML document, ASCII text
Size
179 B (179 bytes)
Hash
962fb1ef32e65d9b0ff900f1cdf0a1bc
a6bc7854f4c95e4dc55fe3397460ea7021c8a283
898d40a87c90c9963a0b68a80b4c8bb192f9d6ef53b9afa3296f7f22e1584431

HTTP Headers

GET /updates/updater/RBRProUpdater.zip HTTP/1.1
Host: rbrpro.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.rbrpro.org/updates/updater/RBRProUpdater.zip
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Aruba2-Cache: NA
X-Aruba-Cache: NA
Date: Thu, 18 Apr 2024 07:07:10 GMT
Content-Length: 179

www.rbrpro.org/updates/updater/RBRProUpdater.zip

31.11.34.94

200 OK

443 kB

URL User Request GET HTTP/1.1
www.rbrpro.org/updates/updater/RBRProUpdater.zip
IP
31.11.34.94:443
ASN
#31034 Aruba S.p.A.

Certificate
IssuerActalis S.p.A.
Subject*.rbrpro.org
Fingerprint6B:E6:EA:C9:2B:82:4B:9E:AC:BB:5A:78:BA:5F:D9:21:BD:C4:36:60
ValidityTue, 14 Nov 2023 06:37:24 GMT - Sat, 14 Dec 2024 06:37:23 GMT

File type
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
Size
443 kB (443392 bytes)
Hash
ec78e2ba831e47af1659207c8501ef4b
d6c81668217ec05094af025aa506deee6c75a58f
3b353132c4f83fa50eff84797d05e6eaf76f63b373efd5772ddeaa881b73919b

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 3/64

HTTP Headers

GET /updates/updater/RBRProUpdater.zip HTTP/1.1
Host: www.rbrpro.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/x-zip-compressed
Last-Modified: Tue, 10 Jan 2023 07:14:23 GMT
Accept-Ranges: bytes
ETag: "75a2902ac324d91:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Aruba2-Cache: NA
X-Aruba-Cache: NA
Date: Thu, 18 Apr 2024 07:07:10 GMT
Content-Length: 443392

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers