Report - uk.codejunkies.com/support_downloads/Action-Replay-DSi-Code-Manager-PC-software.zip

Report Overview

Visited public
2024-12-30 22:34:57
Tags
URL
uk.codejunkies.com/support_downloads/Action-Replay-DSi-Code-Manager-PC-software.zip
Finishing URL
about:privatebrowsing
IP / ASN
81.145.167.170
#2856 British Telecommunications PLC
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
uk.codejunkies.com	unknown	1999-07-01	2013-02-05	2023-07-17	537 B	12 MB	81.145.167.170

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
uk.codejunkies.com/support_downloads/Action-Replay-DSi-Code-Manager-PC-software.zip
IP
81.145.167.170
ASN
#2856 British Telecommunications PLC

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
12 MB (12061525 bytes)
Hash
0b77ecd3d6dc867224ca3833080dd34d
bcd0167f8bb2c23a6d4750b6bfe70f40adc5e637
0afe2029b55f025fb8cd5c72400f92e2bd5ef1bdad9de2390de8eb89a96ef337

Archive (1)

Filename

Md5

File type

ActionReplayDsiCodeManagerSetup-2018.exe

85041ffad6822512ccec8ea4a7f38abd

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Scans presence of the found strings using the in-house brute force method

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	uk.codejunkies.com/support_downloads/Action-Replay-DSi-Code-Manager-PC-software.zip	81.145.167.170	200 OK	12 MB
URL User Request GET HTTP/2 uk.codejunkies.com/support_downloads/Action-Replay-DSi-Code-Manager-PC-software.zip IP 81.145.167.170:443 ASN #2856 British Telecommunications PLC Certificate IssuerLet's Encrypt Subjectuk.codejunkies.com FingerprintF8:26:E8:72:B6:A8:12:D7:21:74:CC:75:F0:F1:26:8B:1C:85:1B:2D ValidityThu, 05 Dec 2024 08:54:03 GMT - Wed, 05 Mar 2025 08:54:02 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 12 MB (12061525 bytes) Hash 0b77ecd3d6dc867224ca3833080dd34d bcd0167f8bb2c23a6d4750b6bfe70f40adc5e637 0afe2029b55f025fb8cd5c72400f92e2bd5ef1bdad9de2390de8eb89a96ef337 HTTP Headers GET /support_downloads/Action-Replay-DSi-Code-Manager-PC-software.zip HTTP/1.1 Host: uk.codejunkies.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK cache-control: public,max-age=864000 content-type: application/x-zip-compressed last-modified: Fri, 24 Feb 2017 11:18:40 GMT accept-ranges: bytes etag: "0282c08f8ed21:0" server: date: Mon, 30 Dec 2024 22:34:30 GMT content-length: 12061525 X-Firefox-Spdy: h2`

uk.codejunkies.com/support_downloads/Action-Replay-DSi-Code-Manager-PC-software.zip

81.145.167.170

200 OK

12 MB

URL User Request GET HTTP/2
uk.codejunkies.com/support_downloads/Action-Replay-DSi-Code-Manager-PC-software.zip
IP
81.145.167.170:443
ASN
#2856 British Telecommunications PLC

Certificate
IssuerLet's Encrypt
Subjectuk.codejunkies.com
FingerprintF8:26:E8:72:B6:A8:12:D7:21:74:CC:75:F0:F1:26:8B:1C:85:1B:2D
ValidityThu, 05 Dec 2024 08:54:03 GMT - Wed, 05 Mar 2025 08:54:02 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
12 MB (12061525 bytes)
Hash
0b77ecd3d6dc867224ca3833080dd34d
bcd0167f8bb2c23a6d4750b6bfe70f40adc5e637
0afe2029b55f025fb8cd5c72400f92e2bd5ef1bdad9de2390de8eb89a96ef337

HTTP Headers

GET /support_downloads/Action-Replay-DSi-Code-Manager-PC-software.zip HTTP/1.1
Host: uk.codejunkies.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public,max-age=864000
content-type: application/x-zip-compressed
last-modified: Fri, 24 Feb 2017 11:18:40 GMT
accept-ranges: bytes
etag: "0282c08f8ed21:0"
server: 
date: Mon, 30 Dec 2024 22:34:30 GMT
content-length: 12061525
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (1)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers