Report - files.multimc.org/downloads/mmc-stable-windows.zip

Report Overview

Submitted URL
files.multimc.org/downloads/mmc-stable-windows.zip
IP
104.21.5.18
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-16 19:38:33
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
files.multimc.org	690413	2013-09-08	2013-11-05	2024-03-28	504 B	14 MB	172.67.132.190

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
files.multimc.org/downloads/mmc-stable-windows.zip
IP
172.67.132.190
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
14 MB (14103286 bytes)
Hash
7de2526995b759048d5bdbbd5f9c410d
8c8a165aec719315c5c5779a438f7fa2e3d55295
c8e022f747d632021de78b845a0cd8979876cc1d4ffcf06e767f30b8ae10deb7

Archive (30)

Filename

Md5

File type

Qt5Core.dll

9c31c47941edd8aed4bb51a3be9c6ea2

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

qwindows.dll

56954e18add3156caba4489616e892dd

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 12 sections

JavaCheck.jar

ef68b41b7e6e57c21c667bb3eab148c3

Java archive data (JAR)

NewLaunch.jar

c5755e429b10df7873554c06f138f0be

Java archive data (JAR)

Qt5Widgets.dll

501d23a2e5e2f8bb1564ac627f674bc0

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

libLauncher_nbt++.dll

a8fd1d3ca86576af970775e814578dc0

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 15 sections

libssp-0.dll

d6859975aaf6d3aa92f2d50f6e9876a0

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections

Qt5Svg.dll

96934c8f93716fb4c5ab7433c3fcf660

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

libLauncher_nbt++.dll.a

6a668c5bcfbc6cceec34ae3fb58175ff

current ar archive

Qt5Network.dll

a72dfd36b9b8c51de93f3c7cca5945ce

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

MultiMC.exe

f9c52a670ab324a900065414282038ee

PE32 executable (GUI) Intel 80386, for MS Windows, 14 sections

qsvgicon.dll

cbb708acdbcfd89e1de38e2c4aa9192a

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 12 sections

libLauncher_rainbow.dll

7d5bf320ae94e523f42e7970a8da3cc7

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 15 sections

libwinpthread-1.dll

d128ae39a79e5d196fc001907b5ec3d1

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections

libLauncher_quazip.dll

05fc5375475fdc61a720e1ad45b7f3a0

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 15 sections

libLauncher_iconfix.dll

84acb289049b167366875f61b5596752

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 15 sections

zlib1.dll

c7d4d685a0af2a09cbc21cb474358595

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 7 sections

Qt5Xml.dll

f09bf12746b7821c7ab1e16ce41e9119

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

libstdc++-6.dll

c283d446b34e75019b81d0981cb11f0d

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections

libeay32.dll

cbf108307adf8bd4bab6b128d07b9dfd

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

qico.dll

2c32188d9388b06ec91170e4461913ab

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 12 sections

qsvg.dll

7eb5b428de2fd5ce7f361bbf3d6aada4

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 12 sections

qjpeg.dll

c228c1486e203d48d9c7d84d0b631e15

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 12 sections

qicns.dll

3b48f732f811ea6ea4fcc18808a7df1e

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 12 sections

qgif.dll

67598fc68a992f106bfad56b22cac886

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 12 sections

qwbmp.dll

8e1eb9386572d0c7e62e0230a67ff987

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 12 sections

qt.conf

7215ee9c7d9dc229d2921a40e899ec5f

very short file (no magic)

Qt5Gui.dll

03e5f50d7848d9cc2d8d00127ea6e706

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

ssleay32.dll

2a9639d9287113b49a9bddb878c2938e

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

libgcc_s_dw2-1.dll

fadde43c97607e4445a6f924d851f04e

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	files.multimc.org/downloads/mmc-stable-windows.zip	172.67.132.190	200 OK	14 MB
URL User Request GET HTTP/2 files.multimc.org/downloads/mmc-stable-windows.zip IP 172.67.132.190:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjectmultimc.org Fingerprint69:5E:8E:78:53:41:F9:F6:52:EA:D4:59:FD:11:06:E0:4F:DC:F3:9B ValidityWed, 27 Mar 2024 19:50:13 GMT - Tue, 25 Jun 2024 19:50:12 GMT File type Zip archive data, at least v1.0 to extract, compression method=store Size 14 MB (14103286 bytes) Hash 7de2526995b759048d5bdbbd5f9c410d 8c8a165aec719315c5c5779a438f7fa2e3d55295 c8e022f747d632021de78b845a0cd8979876cc1d4ffcf06e767f30b8ae10deb7 HTTP Headers `GET /downloads/mmc-stable-windows.zip HTTP/1.1 Host: files.multimc.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 16 Apr 2024 19:37:59 GMT content-type: application/zip content-length: 14103286 last-modified: Sat, 04 Feb 2023 00:01:27 GMT etag: "63dda057-d732f6" cache-control: max-age=14400 cf-cache-status: MISS accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5jRkN5Z9UBi5q0nsLg8DSrH5V1nBWD9e3L%2FxLOwVczyRlMWcrcQLFA6NlH25V%2BDXUebC4QygsynEDJ%2FHT84V7IwbyRK86jIJRPmsnXQh%2BBX2oyt7RP24MAYwKlmhYXeSw3UzQQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8756a2139cbb0afe-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

files.multimc.org/downloads/mmc-stable-windows.zip

172.67.132.190

200 OK

14 MB

URL User Request GET HTTP/2
files.multimc.org/downloads/mmc-stable-windows.zip
IP
172.67.132.190:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmultimc.org
Fingerprint69:5E:8E:78:53:41:F9:F6:52:EA:D4:59:FD:11:06:E0:4F:DC:F3:9B
ValidityWed, 27 Mar 2024 19:50:13 GMT - Tue, 25 Jun 2024 19:50:12 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
14 MB (14103286 bytes)
Hash
7de2526995b759048d5bdbbd5f9c410d
8c8a165aec719315c5c5779a438f7fa2e3d55295
c8e022f747d632021de78b845a0cd8979876cc1d4ffcf06e767f30b8ae10deb7

HTTP Headers

GET /downloads/mmc-stable-windows.zip HTTP/1.1
Host: files.multimc.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 19:37:59 GMT
content-type: application/zip
content-length: 14103286
last-modified: Sat, 04 Feb 2023 00:01:27 GMT
etag: "63dda057-d732f6"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5jRkN5Z9UBi5q0nsLg8DSrH5V1nBWD9e3L%2FxLOwVczyRlMWcrcQLFA6NlH25V%2BDXUebC4QygsynEDJ%2FHT84V7IwbyRK86jIJRPmsnXQh%2BBX2oyt7RP24MAYwKlmhYXeSw3UzQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8756a2139cbb0afe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (30)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers