Report - update.arcgames.com/arc3/Arc3Update_202412161845

Report Overview

Visited public
2025-04-20 21:07:48
Tags
URL
update.arcgames.com/arc3/Arc3Update_202412161845_b.zip
Finishing URL
about:privatebrowsing
IP / ASN
95.101.10.34
#20940 Akamai International B.V.
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
update.arcgames.com	unknown	2006-07-16	2020-02-29	2025-04-20	522 B	14 MB	23.36.76.147

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
update.arcgames.com/arc3/Arc3Update_202412161845_b.zip
IP
23.36.76.147
ASN
#20940 Akamai International B.V.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
14 MB (13750025 bytes)
Hash
a0f422616c94cd6513b98d00cd823943
eb6ef171c77e235efeeed1d6b782c80e47578eeb
8bed1ac27b22812aa09c39d19cd39f5d59962805ec36ca2da6deda1c9081d420

Archive (21)

Filename

Md5

File type

Arc.exe

6aefd316b38c613b7fde01832e324123

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

ArcChat.exe

9c2eeeb794d3676feabbc3e9ce15d328

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

ArcCore.dll

ef054577e62ceabb3c06da3a7bc8f9c3

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections

ArcCrashpad.dll

159de067dec44311de3fe1e20e97999c

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections

ArcDepends.exe

33beca07fbc8025905f0da7cb72a6e32

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

ArcGUI.dll

9e80c955ea5258ab29f56bcfdbb73fe7

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections

ArcLauncher.exe

e4852f5f8d13e9f90530f140ed457880

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

ArcLogTrace.dll

8a22e7695e941251bf9a152a18b3220c

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections

ArcOverlay.exe

ffbaaef6136961893211b065b8306d86

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

ArcOverlayStub.dll

20db8557052879b198c94b468a0d0b06

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

ArcOverlayStub_64.dll

63d130e5a9c2f95b136d3104e6e7b028

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

ArcRepair.exe

56fae63b71dca3190c8d8aca97e58eaa

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

ArcService.exe

34df180d443cb5f681e4e419988763b5

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

ArcUpdate.exe

d95bfbafbf195f28cfa7192794f64c04

PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

ArcWebviewLibrary.dll

c2eeef50bfb99f8805bd725f49b8a649

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections

ArcWebviewRender.exe

76ade04703d2f9c40cf3f5f60c52b868

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

CfgFileList.xml

743079ebdb226fcd150935e6502c454f

XML 1.0 document, ASCII text

GamePatchingSystem.dll

ff3efb4c013b4bd79791649c83c205e1

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections

version.ini

bfe78536274ae3d79d48116f3c42d88d

ASCII text, with CRLF line terminators

arc_es.qm

8bc959d3d40072a6915a2cbf553a7ac7

Qt Translation file

arc_ru.qm

7778aab48b5ccad1012b9fcff22127af

Qt Translation file

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 1/65

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

update.arcgames.com/arc3/Arc3Update_202412161845_b.zip

23.36.76.147

200 OK

14 MB

URL User Request GET
update.arcgames.com/arc3/Arc3Update_202412161845_b.zip
IP
23.36.76.147:443
ASN
#20940 Akamai International B.V.

Certificate
IssuerDigiCert Inc
Subject*.arcgames.com
Fingerprint36:D6:BC:C6:B8:C8:59:79:E0:EB:80:DB:44:90:4B:CB:99:10:86:75
ValidityWed, 26 Mar 2025 00:00:00 GMT - Thu, 26 Mar 2026 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
14 MB (13750025 bytes)
Hash
a0f422616c94cd6513b98d00cd823943
eb6ef171c77e235efeeed1d6b782c80e47578eeb
8bed1ac27b22812aa09c39d19cd39f5d59962805ec36ca2da6deda1c9081d420

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/65

HTTP Headers

GET /arc3/Arc3Update_202412161845_b.zip HTTP/1.1
Host: update.arcgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
content-type: application/zip
x-serverid: scstaticweb01v.pwedc.local
last-modified: Tue, 17 Dec 2024 03:11:41 GMT
etag: "6760ebed-d1cf09"
content-length: 13750025
date: Sun, 20 Apr 2025 21:07:20 GMT
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (21)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers