Report - moealturej.github.io/moealturej/Website/SecHex-Spoofy%20V1.5.8.zip

Report Overview

Submitted URL
moealturej.github.io/moealturej/Website/SecHex-Spoofy%20V1.5.8.zip
IP
185.199.108.153
ASN
#54113 FASTLY
Submitted
2024-05-09 19:37:18
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
moealturej.github.io	unknown	2013-03-08	2024-04-17	2024-04-17	520 B	2.1 MB	185.199.109.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
moealturej.github.io/moealturej/Website/SecHex-Spoofy%20V1.5.8.zip
IP
185.199.109.153
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
2.1 MB (2125687 bytes)
Hash
5e4cd0586fdded65e8227c768a087fb0
7585d2682d3ab3d9360cf8545ef7ab77e955b9fc
2864750adbdd9e79a043c3f281c2e0d6b7d2d5009ebfd4268f8a7b112745a3d6

Archive (10)

Filename

Md5

File type

System.Diagnostics.EventLog.dll

62c63c04c6083330d020cf855c85002c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Diagnostics.EventLog.Messages.dll

286f0a973cf2332fbded81cf541fff06

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.ServiceProcess.ServiceController.dll

1c710ef8481e54352a4e1f66a8f7ad8c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.WindowsRuntime.dll

0198a79063c865ed21c95b7400ddd9fc

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.WindowsRuntime.UI.Xaml.dll

7141c72e54fe9a7ed39ef89814de67d9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SecHex-GUI.deps.json

64ae126cf65a9096d5730e060b448293

JSON text data

SecHex-GUI.dll

5b65ac01d6babf936451fb1540a680b4

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SecHex-GUI.exe

c252a43b1d357d08308690545c617031

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

SecHex-GUI.pdb

7d0e9a9ae399a11b9b6645cb1577c326

Microsoft Roslyn C# debugging symbols version 1.0

SecHex-GUI.runtimeconfig.json

d720176a229e9d969b40fabeb0baf62e

JSON text data

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 37/65

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

moealturej.github.io/moealturej/Website/SecHex-Spoofy%20V1.5.8.zip

185.199.109.153

200 OK

2.1 MB

URL User Request GET HTTP/2
moealturej.github.io/moealturej/Website/SecHex-Spoofy%20V1.5.8.zip
IP
185.199.109.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
2.1 MB (2125687 bytes)
Hash
5e4cd0586fdded65e8227c768a087fb0
7585d2682d3ab3d9360cf8545ef7ab77e955b9fc
2864750adbdd9e79a043c3f281c2e0d6b7d2d5009ebfd4268f8a7b112745a3d6

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 37/65

HTTP Headers

GET /moealturej/Website/SecHex-Spoofy%20V1.5.8.zip HTTP/1.1
Host: moealturej.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: application/zip
permissions-policy: interest-cohort=()
last-modified: Tue, 07 May 2024 18:44:07 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "663a7677-206f77"
expires: Thu, 09 May 2024 19:46:45 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: CAC6:312E23:136D524:13EC831:663D25CD
accept-ranges: bytes
age: 0
date: Thu, 09 May 2024 19:36:45 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715283405.395571,VS0,VE315
vary: Accept-Encoding
x-fastly-request-id: 756eeb54a81461d45c05a06347f5c132c7e79c69
content-length: 2125687
X-Firefox-Spdy: h2