Report - arkservermanager.s3.amazonaws.com/release/latest.zip

Report Overview

Visited public
2025-01-03 11:16:25
Tags
URL
arkservermanager.s3.amazonaws.com/release/latest.zip
Finishing URL
about:privatebrowsing
IP / ASN
52.92.195.121
#16509 AMAZON-02
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
arkservermanager.s3.amazonaws.com	unknown	2005-08-18	2015-07-10	2024-12-24	506 B	3.8 MB	52.92.226.73

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
arkservermanager.s3.amazonaws.com/release/latest.zip
IP
52.92.226.73
ASN
#16509 AMAZON-02

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.8 MB (3824101 bytes)
Hash
2cfb83d6df64281a7a2d63b17e5d5db3
2c28070aa880e86f87e7931640cc878aad3756e4
20d2b5e9b34b8c4287cf0a9d678bb9cfc3d29731bdd2ab5d507b982c00b2d6e5

Archive (46)

Filename

Md5

File type

ARK Server Manager.exe

aa93f76751f75d495955cef93c6daebf

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ARK Server Manager.exe.config

55720cd87bf5d69e56be45d48cb18312

XML 1.0 document, ASCII text, with CRLF line terminators

ARK Server Manager.exe.manifest

c89386d726441e9dc4637eb8e48b7929

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (504), with CRLF, LF line terminators

ArkData.dll

b99ac067c633baea8b8365bb6ae4dd5f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DotNetZip.dll

60caabbd43235889d64f230617c0e24e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

EO.Wpf.dll

de87c8d36795f1f6652b5a855cd4b04b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Win32.TaskScheduler.dll

55c198cc728aa64ca627a017c40b3aa1

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.WindowsAPICodePack.dll

0d661949ebc172dfb3c3b98566bdf0fe

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.WindowsAPICodePack.Shell.dll

54fe9a2748c4a0f282d4ec91e3cadc16

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Newtonsoft.Json.dll

6815034209687816d8cf401877ec8133

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

NeXt.Vdf.dll

ba80fcbed911f0eba37b9e9f14b649d0

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

NLog.dll

2dd3a800e8c71831a107aae5a20c32c9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

QueryMaster.dll

4e744172411c71e7cab88bf02a547188

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ServerManager.Common.dll

009bddbe488738e1ca82631c78b28075

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ServerManager.Plugin.Common.dll

fd3aab2542fc3e5d32c24f46fec947b6

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ServerManagerUpdater.exe

118e0d18cdf684acccdc9d96c0d659a7

PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Threading.Tasks.Dataflow.dll

b2dac916651bc40094d96bc68bec5434

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Windows.Interactivity.dll

580244bc805220253a87196913eb3e5e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

TinyCsvParser.dll

8727bbb3db7cdd78c3eb3bcf9b6146c6

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

WPFSharp.Globalizer.dll

6a93575956668c254046a939f190dbe6

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Art\favicon.ico

693b5a5a4fd9b9fa0f68aed58419d59a

MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel

de\Microsoft.Win32.TaskScheduler.resources.dll

2764dfe4f9b33c09dfc5f6ce314c3517

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

es\Microsoft.Win32.TaskScheduler.resources.dll

4a2f667d5d551329f991e824e81f668a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

fr\Microsoft.Win32.TaskScheduler.resources.dll

eeb61cb7117f0cd8e5e6185f948765e7

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

GameData\Aberration.gamedata

ba8eff1565aee25721fa248b389a19f4

JSON text data

GameData\Extinction.gamedata

9aa88187bc300a7fd48a5a9e73a1e5a4

JSON text data

GameData\Genesis.gamedata

4e2b8c83a346a947cbc54c9759022497

JSON text data

GameData\PGM.gamedata

3c1d49f6428e17a368955b0549b66e54

JSON text data

GameData\PrimitivePlus.gamedata

18fb38b32c18cc22fa99dbe53ee275ec

JSON text data

GameData\Ragnarok.gamedata

a3b8c046aafc6aaf561e82a05a9c2a92

JSON text data

GameData\ScorchedEarth.gamedata

0bfeef37527262853448ebc4264ac1b5

JSON text data

GameData\SurvivalEvolved.gamedata

f3e2d82df127a51a4e78c1d4e34d9ac8

JSON text data

GameData\TheCenter.gamedata

0130d134a9f47b8178eba5d2a3fcdbc6

JSON text data

GameData\Valguero.gamedata

da1e0ab6e96fc1ad79212c38df824e0d

JSON text data

Globalization\de-DE\de-DE.xaml

f719684730403380f3670e72a55f91b2

exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Globalization\en-US\en-US.xaml

8bfc1915a386c9d3662a6e43e55ab3cd

exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (434), with CRLF line terminators

Globalization\es-ES\es-ES.xaml

cf41b89323fdeb6149d4aaf3a6c51dbd

exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (400), with CRLF line terminators

Globalization\fr-FR\fr-FR.xaml

ed877dfb20cc2456b8a309ba45d40bfc

exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (511), with CRLF line terminators

Globalization\pt-BR\pt-BR.xaml

754b1a534bca2db0702f2af5281021ef

exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (461), with CRLF line terminators

Globalization\ru-RU\ru-RU.xaml

eb34c94407531b0d7599a0670053e73c

exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (430), with CRLF line terminators

Globalization\zh-CN\zh-CN.xaml

33e169d5edf702a508fbe52748f1f1ce

exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

it\Microsoft.Win32.TaskScheduler.resources.dll

06d5cca61fb8727918ac42eb9b9ab41e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

pl\Microsoft.Win32.TaskScheduler.resources.dll

70db1b960667597da468de3494afdcd6

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ru\Microsoft.Win32.TaskScheduler.resources.dll

c22bce747693a69f6d921628e5e5bc8f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Styles\Default.xaml

a1241aecbeb0dc4bf2061ff74be4904a

HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

zh-CN\Microsoft.Win32.TaskScheduler.resources.dll

bfd8617c58518cae016e00b182d8eff2

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/68

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

arkservermanager.s3.amazonaws.com/release/latest.zip

52.92.226.73

200 OK

3.8 MB

URL User Request GET HTTP/1.1
arkservermanager.s3.amazonaws.com/release/latest.zip
IP
52.92.226.73:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subject*.s3.amazonaws.com
Fingerprint57:FE:C9:73:13:31:CA:2C:91:7F:05:C3:3B:16:FF:3F:1B:D8:7D:E2
ValidityMon, 22 Apr 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.8 MB (3824101 bytes)
Hash
2cfb83d6df64281a7a2d63b17e5d5db3
2c28070aa880e86f87e7931640cc878aad3756e4
20d2b5e9b34b8c4287cf0a9d678bb9cfc3d29731bdd2ab5d507b982c00b2d6e5

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/68

HTTP Headers

GET /release/latest.zip HTTP/1.1
Host: arkservermanager.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: bEHYmHg9kwldVTg2oqv0ic9roL30oM/vKthzz/zkxiMO9ZOR4J5dZZfjK/2FNYwWNOPNmFmDCfU=
x-amz-request-id: PY3FEBTN98BADN5N
Date: Fri, 03 Jan 2025 11:15:59 GMT
Last-Modified: Thu, 02 Apr 2020 07:54:32 GMT
ETag: "2cfb83d6df64281a7a2d63b17e5d5db3"
Accept-Ranges: bytes
Content-Type: application/x-zip-compressed
Content-Length: 3824101
Server: AmazonS3

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (46)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers