Report - www.velleman.be/downloads/files/downloads/k8056_vb

Report Overview

Submitted URL
www.velleman.be/downloads/files/downloads/k8056_vb_demo.zip
IP
5.255.128.135
ASN
#201887 SAVACO NV
Submitted
2024-04-25 13:14:20
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.velleman.be	unknown	unknown	No data	No data	513 B	438 B	5.255.128.135
www.velleman.eu	unknown	unknown	2012-11-06	2023-09-02	513 B	652 B	5.255.128.135
cdn.velleman.eu	unknown	unknown	2020-02-07	2024-04-17	513 B	1.7 MB	54.230.111.12

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
cdn.velleman.eu/downloads/files/downloads/k8056_vb_demo.zip
IP
54.230.111.12
ASN
#16509 AMAZON-02

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.7 MB (1737666 bytes)
Hash
3adb057a3d78a7d532bdd03e0ec55236
a89ca18699b53a5871d96eed83a31f94188a1c63
1ce8ed49e3d5e37d2969b9ab8a0d2617702147ec84a84c853a86ac4e033ffa64

Archive (5)

Filename

Md5

File type

K8056 relay card.pdf

7cbbbb03885ccfa2150c2761025ea4b9

PDF document, version 1.2, 1 pages

K8056.CAB

80abeb6619324d1211dacd9470ad7712

Microsoft Cabinet archive data, many, 1421364 bytes, 15 files, at 0x1830 last modified Sun, Aug 26 2003 10:33:00 +A "K8056.exe" last modified Sun, Nov 08 2000 15:02:46 +A "MSVBVM60.DLL", flags 0x4, ID 15107, number 1, extra bytes 6144 in head, 92 datablocks, 0x1 compression

setup.exe

35561a7acb299a7278e8706fd6e01aa0

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

SETUP.LST

a91e0747516d231e3ed496925411f6ca

Generic INItialization configuration [Bootstrap Files]

K8056 readme.txt

782c66babb9babf77238e3ab455264f6

ASCII text, with CRLF line terminators

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	www.velleman.be/downloads/files/downloads/k8056_vb_demo.zip	5.255.128.135	301 Moved Permanently	162 B
URL User Request GET HTTP/2 www.velleman.be/downloads/files/downloads/k8056_vb_demo.zip IP 5.255.128.135:443 ASN #201887 SAVACO NV Certificate IssuerLet's Encrypt Subjectvelleman.eu FingerprintB2:25:EE:7A:F4:CE:1C:4E:39:2E:A9:BC:7C:77:0C:F7:BB:41:58:CB ValidityFri, 22 Mar 2024 12:11:31 GMT - Thu, 20 Jun 2024 12:11:30 GMT File type HTML document, ASCII text, with CRLF line terminators Size 162 B (162 bytes) Hash 4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a HTTP Headers `GET /downloads/files/downloads/k8056_vb_demo.zip HTTP/1.1 Host: www.velleman.be User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently date: Thu, 25 Apr 2024 13:13:54 GMT content-type: text/html content-length: 162 location: https://www.velleman.eu/downloads/files/downloads/k8056_vb_demo.zip strict-transport-security: max-age=31536000; includeSubDomains X-Firefox-Spdy: h2`

	www.velleman.eu/downloads/files/downloads/k8056_vb_demo.zip	5.255.128.135	301 Moved Permanently	356 B
URL User Request GET HTTP/2 www.velleman.eu/downloads/files/downloads/k8056_vb_demo.zip IP 5.255.128.135:443 ASN #201887 SAVACO NV Certificate IssuerLet's Encrypt Subjectvelleman.eu FingerprintB2:25:EE:7A:F4:CE:1C:4E:39:2E:A9:BC:7C:77:0C:F7:BB:41:58:CB ValidityFri, 22 Mar 2024 12:11:31 GMT - Thu, 20 Jun 2024 12:11:30 GMT File type HTML document, ASCII text Size 356 B (356 bytes) Hash 1292d01e15cf154b581c12b315985b2a 0e31fedfffd221d91a2cc9169a7af00d8ba1ffa4 4e4e53623c49c29921ee4ce2f15734fba412dba7ef1fc850f2e329aefb6c08ae HTTP Headers `GET /downloads/files/downloads/k8056_vb_demo.zip HTTP/1.1 Host: www.velleman.eu User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently date: Thu, 25 Apr 2024 13:13:55 GMT content-type: text/html; charset=iso-8859-1 content-length: 356 location: https://cdn.velleman.eu/downloads/files/downloads/k8056_vb_demo.zip strict-transport-security: max-age=31536000; includeSubDomains X-Firefox-Spdy: h2`

	cdn.velleman.eu/downloads/files/downloads/k8056_vb_demo.zip	54.230.111.12	200 OK	1.7 MB
URL User Request GET HTTP/2 cdn.velleman.eu/downloads/files/downloads/k8056_vb_demo.zip IP 54.230.111.12:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectcdn.velleman.eu Fingerprint17:2A:FA:E6:AE:4B:BC:AF:16:FA:8C:62:CF:C0:E8:A5:7F:7C:CD:A3 ValidityThu, 02 Nov 2023 00:00:00 GMT - Sat, 30 Nov 2024 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 1.7 MB (1737666 bytes) Hash 3adb057a3d78a7d532bdd03e0ec55236 a89ca18699b53a5871d96eed83a31f94188a1c63 1ce8ed49e3d5e37d2969b9ab8a0d2617702147ec84a84c853a86ac4e033ffa64 HTTP Headers `GET /downloads/files/downloads/k8056_vb_demo.zip HTTP/1.1 Host: cdn.velleman.eu User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: application/x-zip-compressed content-length: 1737666 date: Thu, 25 Apr 2024 13:13:56 GMT last-modified: Thu, 01 Jun 2023 08:21:47 GMT etag: "3adb057a3d78a7d532bdd03e0ec55236" x-amz-server-side-encryption: AES256 accept-ranges: bytes server: AmazonS3 x-cache: Miss from cloudfront via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: d00Hanos0SGTEej3Cil-3rmp0X5nXoK2KiOnbtKiXWiYq5xnA8arfQ== X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (5)

JavaScript (0)

HTTP Transactions (3)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers