Report - assarbad.net/stuff/localsystem.zip

Report Overview

Visited public
2025-05-14 20:40:56
Tags
Submit Tags
URL
assarbad.net/stuff/localsystem.zip
Finishing URL
about:privatebrowsing
IP / ASN
51.195.45.8
#16276 OVH SAS
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
assarbad.net	unknown	2002-11-26	2012-10-10	2025-05-14	502 B	79 kB	51.195.45.8

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
assarbad.net/stuff/localsystem.zip
IP
51.195.45.8
ASN
#16276 OVH SAS

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
78 kB (78149 bytes)
Hash
3d986be705a0408bfd68a82ab3808914
76432ae8c480ea314990153e803dd9a0ee0f8b90
bececdd9741daf4995c20f213fb36e721ad37ecc4c6ec56a05a5ab9ec763fef3

Archive (48)

Filename

Md5

File type

cmdassys.exe

1bc19bbe203e6eeabc00a27a79097045

PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections

GetUser.exe

4c3fcaea21a2928e6c034c0e2e6ee4b6

PE32 executable (console) Intel 80386, for MS Windows, UPX compressed, 3 sections

license.txt

9bd6d837837a7458e2818fa94b768b7e

ASCII text, with CRLF line terminators

readme.txt

65d75d58e7364918610053b699e529e3

ASCII text, with CRLF line terminators

RUNasSYS.exe

89bb4322ee4fc3fb201a999cc7ff9c2a

PE32 executable (console) Intel 80386, for MS Windows, UPX compressed, 3 sections

buildall.bat

1745acc24ef6962a49643c836a1ddd2d

DOS batch file, ASCII text, with CRLF line terminators

build.bat

6497595f1383dcdb4a1f8530e2447efc

DOS batch file, ASCII text, with CRLF line terminators

CMDasSYS.dpr

218c1c2e2112f6e5027d7651d9b8531c

Mathematica 3.0 notebook

Compilerswitches.PAS

4a6d568808f70a88731f6608652c84a9

Mathematica 3.0 notebook

FormatString.PAS

c6eaded36f1b96424156eba52e010fd6

Mathematica 3.0 notebook

readme.txt

0ca36dc0f8a9bc505330692090af5642

ASCII text, with CRLF line terminators

resbuild.bat

34572c64c053d5003eba601ff95199c3

DOS batch file, ASCII text

ico.rc

e6d754de9f6d00fb7653149d068d6cfc

ASCII text, with CRLF line terminators

ico.RES

b6a0984f8e0084cd87d430c42de1aa2b

MSVC .res

main.res

2dd8a1224ebdb8d3df212d62741ba538

MSVC .res

resource.h

bb0a69eac710702f07e8b22f78ae2813

C source, ASCII text, with CRLF line terminators

Script1.rc

6c0465d555e0d1ff5a99e35f5afdaf1b

C source, ISO-8859 text, with CRLF line terminators

BUILD

27f14a469b7dd7291d42fd7e28eb5cd4

ASCII text, with CRLF line terminators

buildinc.cmd

20f153082c58071b028ea58312829e73

DOS batch file, ASCII text, with CRLF line terminators

buildnumber.h

748518ec3b36b6cc14b1b8e04dbeb273

ASCII text, with CRLF line terminators

cmd.ico

6f5348c9a8539cfd35149948dc80acdf

MS Windows icon resource - 2 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel

cmdassys.cpp

28b75b5ad739e1780d63dc1be7aea61f

C source, ASCII text, with CRLF line terminators

cmdassys.sln

4b9434ab3423920b03e7bfbbce3e60fa

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

cmdassys.WLH.vcproj

349941e0e3669c8301b53c0d54be666f

XML 1.0 document, ASCII text, with CRLF line terminators

cmdassys.WNET.vcproj

08204ad41db3b9a6f06f4cb4b66100e1

XML 1.0 document, ASCII text, with CRLF line terminators

ddkpostbld.cmd

e8bfba93d505b8bf5320c983f7f34a80

DOS batch file, ASCII text, with CRLF line terminators

ddkprebld.cmd

a89557fc4ba2303661ddd7cd981d70d2

DOS batch file, ASCII text, with CRLF line terminators

execommon.h

6b4abb5f97bf1c6cba42b66d5a0627ea

C source, ASCII text, with CRLF line terminators

exeversion.h

72a79cd9d37cabf348aeec6232623399

C source, ASCII text, with CRLF line terminators

exeversion.rc

432bf361e86395d2f9cbbf5006879206

C source, ASCII text, with CRLF line terminators

makefile

277517b4ea054b293c4ed298ff2c79eb

ASCII text, with CRLF line terminators

sources

f9046c67942730fb56134df33f7eadb8

ASCII text, with CRLF line terminators

build.bat

3a1b1db5c09727fd938cda7eeeb03535

DOS batch file, ASCII text, with CRLF line terminators

GetUser.dpr

836a9b324ac6a2d7b32587ef024e0109

ASCII text, with CRLF line terminators

Compilerswitches.PAS

786b3cdc6836760610401b054dd25414

Mathematica 3.0 notebook

ConsoleHLP.PAS

060945383aaff938c3b1394f353456ee

Mathematica 3.0 notebook

GetUser.PAS

f11900baed1a8a9e27ce59dfc5e2d3ae

Mathematica 3.0 notebook

build.bat

e87b2e996bc4d8e0dac5f6f566a9be76

DOS batch file, ASCII text, with CRLF line terminators

Compilerswitches.PAS

21b84e197ada6ade48a734d3daf72877

Mathematica 3.0 notebook

FormatString.PAS

c6eaded36f1b96424156eba52e010fd6

Mathematica 3.0 notebook

readme.txt

81566656269f89193f44eb2a68161c99

ASCII text, with CRLF line terminators

resbuild.bat

c859a96b990ffba71dbfa411e9eafb34

DOS batch file, ASCII text

ICO.RC

e6d754de9f6d00fb7653149d068d6cfc

ASCII text, with CRLF line terminators

ICO.RES

b6a0984f8e0084cd87d430c42de1aa2b

MSVC .res

MAIN.RES

354eebd3769272ff39b6152358c54ebb

MSVC .res

RESOURCE.H

beb01dd805159334dce756742aab73f8

C source, ASCII text, with CRLF line terminators

Script1.rc

c793768837ed1030ed76aebbbd41d616

C source, ISO-8859 text, with CRLF line terminators

RUNasSYS.DPR

becb3379f8932c7700c32fb5a81a5dde

Mathematica 3.0 notebook

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 34/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET assarbad.net/stuff/localsystem.zip

51.195.45.8

200 OK

78 kB

URL User Request GET
assarbad.net/stuff/localsystem.zip
IP
51.195.45.8:443
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjectassarbad.net
FingerprintB8:D2:7F:F4:F7:B4:F3:B2:5A:C4:9B:AC:44:6D:84:09:91:C9:B8:82
ValiditySun, 16 Mar 2025 05:10:23 GMT - Sat, 14 Jun 2025 05:10:22 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
78 kB (78149 bytes)
Hash
3d986be705a0408bfd68a82ab3808914
76432ae8c480ea314990153e803dd9a0ee0f8b90
bececdd9741daf4995c20f213fb36e721ad37ecc4c6ec56a05a5ab9ec763fef3

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 34/66

HTTP Headers

GET /stuff/localsystem.zip HTTP/1.1
Host: assarbad.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 May 2025 20:40:23 GMT
Content-Type: application/zip
Content-Length: 78149
Last-Modified: Sun, 08 Apr 2007 16:08:37 GMT
Connection: keep-alive
ETag: "46191385-13145"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Accept-Ranges: bytes

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (48)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers