Report - codecrafters.cyou/q9t73yb54vh/23454253.zip

Report Overview

Visited public
2025-01-20 10:28:34
Tags
URL
codecrafters.cyou/q9t73yb54vh/23454253.zip
Finishing URL
about:privatebrowsing
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
codecrafters.cyou	unknown	2025-01-19	2025-01-20	2025-01-20	496 B	3.1 MB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
codecrafters.cyou/q9t73yb54vh/23454253.zip
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.1 MB (3051475 bytes)
Hash
5c6b9a9b866fc75ce5a221fe2dcd3ef2
4bf9b71414d8b06a02687ebe4caf61ad558bb9c2
2eff79815d05041ea23389359a0f6d6249fe0a190cb794209503a2ad81dca21e

Archive (13)

Filename

Md5

File type

coolcore49.dll

4f27d1bacaf09d1919484355b341c868

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

detinue.yaml

9495cf28d734355024ebba233a89685f

data

ICQ.exe

aef6452711538d9021f929a2a5f633cf

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

MCoreLib.dll

815b07c37c83b13457d37ca8c6a7a561

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

MDb.dll

be1262b27ff4a4349b337cc95b7746e7

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

MKernel.dll

98a71909605b7d088f82d66abc64d4c2

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

msvcp71.dll

561fa2abb31dfa8fab762145f81667c2

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

msvcr71.dll

86f1895ae8c5e8b17d99ece768a70732

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

MUICoreLib.dll

60a5383ba17d8f519cb4356e28873a14

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

MUIUtils.dll

97d6efb8b8e0b0f03701a7bafc398545

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

MUtils.dll

8dceb54ae151d30506a21ded64f220a7

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

requiescat.iso

0159f93e501344a1c39b850c0f5889a3

data

xprt6.dll

d145903e217ddde20ce32ed9e5074e16

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 5/65

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

codecrafters.cyou/q9t73yb54vh/23454253.zip

188.114.96.1

200 OK

3.1 MB

URL User Request GET HTTP/2
codecrafters.cyou/q9t73yb54vh/23454253.zip
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectcodecrafters.cyou
Fingerprint67:60:63:78:24:F2:DD:57:1F:F2:D4:6C:AE:0D:AA:BF:24:80:22:91
ValiditySun, 19 Jan 2025 10:58:09 GMT - Sat, 19 Apr 2025 11:56:42 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.1 MB (3051475 bytes)
Hash
5c6b9a9b866fc75ce5a221fe2dcd3ef2
4bf9b71414d8b06a02687ebe4caf61ad558bb9c2
2eff79815d05041ea23389359a0f6d6249fe0a190cb794209503a2ad81dca21e

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 5/65

HTTP Headers

GET /q9t73yb54vh/23454253.zip HTTP/1.1
Host: codecrafters.cyou
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 20 Jan 2025 10:28:08 GMT
content-type: application/zip
content-length: 3051475
last-modified: Sun, 19 Jan 2025 22:46:45 GMT
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2FVThFHeYGgnt8niyxtgIynACOpzBlLR7PiPmZfyuQrFt8HOdP4dcL6qs33X2PRfpyuVvkucozLbsRB4UmkdmDoikSn3AQZrFinTfIkW26t1WiIhCsPnxOQXYLrQqANTP4%2B6Ww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 904e603e1f76712a-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6361&min_rtt=489&rtt_var=11730&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3217&recv_bytes=1136&delivery_rate=6755832&cwnd=254&unsent_bytes=0&cid=a5a2dea8d1a3d66c&ts=285&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (13)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers