Report - huggingface.co/PKUWilliamYang/Rerender/resolve/main/models/ebsynth

Report Overview

Submitted URL
huggingface.co/PKUWilliamYang/Rerender/resolve/main/models/ebsynth_cpu.exe?download=true
IP
143.204.55.85
ASN
#16509 AMAZON-02
Submitted
2024-05-09 01:35:50
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
huggingface.co	111951	2016-07-18	2016-09-18	2024-05-08	542 B	4.6 kB	143.204.55.121
cdn-lfs.huggingface.co	unknown	2016-07-18	2023-01-06	2024-05-08	1.6 kB	21 MB	143.204.55.80

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
cdn-lfs.huggingface.co/repos/42/6b/426b0398cf306dcafd536d938cdc6034583b20febc8926bfc98872e9a03f2c4b/2b27431e17f445c399d1ce5b57e3278383bc30c6682872d6f6c68b7e1211bad5?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%27ebsynth_cpu.exe%3B+filename%3D%22ebsynth_cpu.exe%22%3B&response-content-type=application%2Fx-msdos-program&Expires=1715477722&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTQ3NzcyMn19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy5odWdnaW5nZmFjZS5jby9yZXBvcy80Mi82Yi80MjZiMDM5OGNmMzA2ZGNhZmQ1MzZkOTM4Y2RjNjAzNDU4M2IyMGZlYmM4OTI2YmZjOTg4NzJlOWEwM2YyYzRiLzJiMjc0MzFlMTdmNDQ1YzM5OWQxY2U1YjU3ZTMyNzgzODNiYzMwYzY2ODI4NzJkNmY2YzY4YjdlMTIxMWJhZDU%7EcmVzcG9uc2UtY29udGVudC1kaXNwb3NpdGlvbj0qJnJlc3BvbnNlLWNvbnRlbnQtdHlwZT0qIn1dfQ__&Signature=OT9sxogUvAoyETTFD95VyOC2PwQSZB1eCcQ3s6wY-NUosKd9V5lPWfxM7SC6L%7E2KCWYL-v6Tkf1z6Ecb%7E1MARbbYyfck8zXqWZcHPYazRnJSWo%7Ee02lHnnhJaHMK%7EjmevvHzg5fKXG4tucjgZ7gwXTK%7Ei0M2sNAajmediVWLj72C30pQLK2ZD8MJVlJZhhOPKVq-Nz5mW4xlNQGo9rf-SHvNwdB%7EeK1hxsdIGtepFgxMw17IL9-VC4LOvZtvIVYC2eFh8ZPCt4n3jI4BAdaRP0Pa9m%7ELVwz32z5axg1tqT3kqUybjH1JbmVBczAZgd-2tR8jQq2reM9yf11S64H6Tg__&Key-Pair-Id=KVTP0A1DKRTAX
IP
143.204.55.80
ASN
#16509 AMAZON-02

File type
PE32+ executable (console) x86-64, for MS Windows, 10 sections
Size
21 MB (20924928 bytes)
Hash
dea72890d8dab608ab221cddb8b580a7
c6ebbd2c2bb376633fe28265aa926fafd8970a30
2b27431e17f445c399d1ce5b57e3278383bc30c6682872d6f6c68b7e1211bad5

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/72

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

huggingface.co/PKUWilliamYang/Rerender/resolve/main/models/ebsynth_cpu.exe?download=true

143.204.55.121

302 Found

2.5 kB

URL User Request GET HTTP/2
huggingface.co/PKUWilliamYang/Rerender/resolve/main/models/ebsynth_cpu.exe?download=true
IP
143.204.55.121:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjecthuggingface.co
Fingerprint5E:E9:95:38:5E:8D:B5:4C:22:78:A8:D3:68:AD:BC:17:0B:1F:2C:06
ValidityTue, 13 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (2470), with no line terminators
Size
2.5 kB (2470 bytes)
Hash
c454d70f26319723ba60d386b9992dc2
6e9bf845f0f3fe16db9cc72067bca6e0c8c2a6e1
9b90f197f8e226af289281b6d9536b66cf800a20677491ef1b7153919bdc79e1

HTTP Headers

GET /PKUWilliamYang/Rerender/resolve/main/models/ebsynth_cpu.exe?download=true HTTP/1.1
Host: huggingface.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 2470
location: https://cdn-lfs.huggingface.co/repos/42/6b/426b0398cf306dcafd536d938cdc6034583b20febc8926bfc98872e9a03f2c4b/2b27431e17f445c399d1ce5b57e3278383bc30c6682872d6f6c68b7e1211bad5?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%27ebsynth_cpu.exe%3B+filename%3D%22ebsynth_cpu.exe%22%3B&response-content-type=application%2Fx-msdos-program&Expires=1715477722&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTQ3NzcyMn19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy5odWdnaW5nZmFjZS5jby9yZXBvcy80Mi82Yi80MjZiMDM5OGNmMzA2ZGNhZmQ1MzZkOTM4Y2RjNjAzNDU4M2IyMGZlYmM4OTI2YmZjOTg4NzJlOWEwM2YyYzRiLzJiMjc0MzFlMTdmNDQ1YzM5OWQxY2U1YjU3ZTMyNzgzODNiYzMwYzY2ODI4NzJkNmY2YzY4YjdlMTIxMWJhZDU%7EcmVzcG9uc2UtY29udGVudC1kaXNwb3NpdGlvbj0qJnJlc3BvbnNlLWNvbnRlbnQtdHlwZT0qIn1dfQ__&Signature=OT9sxogUvAoyETTFD95VyOC2PwQSZB1eCcQ3s6wY-NUosKd9V5lPWfxM7SC6L%7E2KCWYL-v6Tkf1z6Ecb%7E1MARbbYyfck8zXqWZcHPYazRnJSWo%7Ee02lHnnhJaHMK%7EjmevvHzg5fKXG4tucjgZ7gwXTK%7Ei0M2sNAajmediVWLj72C30pQLK2ZD8MJVlJZhhOPKVq-Nz5mW4xlNQGo9rf-SHvNwdB%7EeK1hxsdIGtepFgxMw17IL9-VC4LOvZtvIVYC2eFh8ZPCt4n3jI4BAdaRP0Pa9m%7ELVwz32z5axg1tqT3kqUybjH1JbmVBczAZgd-2tR8jQq2reM9yf11S64H6Tg__&Key-Pair-Id=KVTP0A1DKRTAX
date: Thu, 09 May 2024 01:35:22 GMT
x-powered-by: huggingface-moon
cross-origin-opener-policy: same-origin
referrer-policy: strict-origin-when-cross-origin
x-request-id: Root=1-663c285a-58e845e6746138a136568062
access-control-allow-origin: https://huggingface.co
vary: Origin, Accept
access-control-expose-headers: X-Repo-Commit,X-Request-Id,X-Error-Code,X-Error-Message,X-Total-Count,ETag,Link,Accept-Ranges,Content-Range
x-repo-commit: 80f07da164361718f99a7c0794a51adb7732d17c
accept-ranges: bytes
x-linked-size: 20924928
x-linked-etag: "2b27431e17f445c399d1ce5b57e3278383bc30c6682872d6f6c68b7e1211bad5"
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5Bri6udQMRRGOz5MSE2LxdYkRfVAFe7YFIRBDXeGo3Y2EwZVSLqm5A==
X-Firefox-Spdy: h2

cdn-lfs.huggingface.co/repos/42/6b/426b0398cf306dcafd536d938cdc6034583b20febc8926bfc98872e9a03f2c4b/2b27431e17f445c399d1ce5b57e3278383bc30c6682872d6f6c68b7e1211bad5?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%27ebsynth_cpu.exe%3B+filename%3D%22ebsynth_cpu.exe%22%3B&response-content-type=application%2Fx-msdos-program&Expires=1715477722&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTQ3NzcyMn19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy5odWdnaW5nZmFjZS5jby9yZXBvcy80Mi82Yi80MjZiMDM5OGNmMzA2ZGNhZmQ1MzZkOTM4Y2RjNjAzNDU4M2IyMGZlYmM4OTI2YmZjOTg4NzJlOWEwM2YyYzRiLzJiMjc0MzFlMTdmNDQ1YzM5OWQxY2U1YjU3ZTMyNzgzODNiYzMwYzY2ODI4NzJkNmY2YzY4YjdlMTIxMWJhZDU%7EcmVzcG9uc2UtY29udGVudC1kaXNwb3NpdGlvbj0qJnJlc3BvbnNlLWNvbnRlbnQtdHlwZT0qIn1dfQ__&Signature=OT9sxogUvAoyETTFD95VyOC2PwQSZB1eCcQ3s6wY-NUosKd9V5lPWfxM7SC6L%7E2KCWYL-v6Tkf1z6Ecb%7E1MARbbYyfck8zXqWZcHPYazRnJSWo%7Ee02lHnnhJaHMK%7EjmevvHzg5fKXG4tucjgZ7gwXTK%7Ei0M2sNAajmediVWLj72C30pQLK2ZD8MJVlJZhhOPKVq-Nz5mW4xlNQGo9rf-SHvNwdB%7EeK1hxsdIGtepFgxMw17IL9-VC4LOvZtvIVYC2eFh8ZPCt4n3jI4BAdaRP0Pa9m%7ELVwz32z5axg1tqT3kqUybjH1JbmVBczAZgd-2tR8jQq2reM9yf11S64H6Tg__&Key-Pair-Id=KVTP0A1DKRTAX

143.204.55.80

200 OK

21 MB

URL User Request GET HTTP/2
cdn-lfs.huggingface.co/repos/42/6b/426b0398cf306dcafd536d938cdc6034583b20febc8926bfc98872e9a03f2c4b/2b27431e17f445c399d1ce5b57e3278383bc30c6682872d6f6c68b7e1211bad5?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%27ebsynth_cpu.exe%3B+filename%3D%22ebsynth_cpu.exe%22%3B&response-content-type=application%2Fx-msdos-program&Expires=1715477722&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTQ3NzcyMn19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy5odWdnaW5nZmFjZS5jby9yZXBvcy80Mi82Yi80MjZiMDM5OGNmMzA2ZGNhZmQ1MzZkOTM4Y2RjNjAzNDU4M2IyMGZlYmM4OTI2YmZjOTg4NzJlOWEwM2YyYzRiLzJiMjc0MzFlMTdmNDQ1YzM5OWQxY2U1YjU3ZTMyNzgzODNiYzMwYzY2ODI4NzJkNmY2YzY4YjdlMTIxMWJhZDU%7EcmVzcG9uc2UtY29udGVudC1kaXNwb3NpdGlvbj0qJnJlc3BvbnNlLWNvbnRlbnQtdHlwZT0qIn1dfQ__&Signature=OT9sxogUvAoyETTFD95VyOC2PwQSZB1eCcQ3s6wY-NUosKd9V5lPWfxM7SC6L%7E2KCWYL-v6Tkf1z6Ecb%7E1MARbbYyfck8zXqWZcHPYazRnJSWo%7Ee02lHnnhJaHMK%7EjmevvHzg5fKXG4tucjgZ7gwXTK%7Ei0M2sNAajmediVWLj72C30pQLK2ZD8MJVlJZhhOPKVq-Nz5mW4xlNQGo9rf-SHvNwdB%7EeK1hxsdIGtepFgxMw17IL9-VC4LOvZtvIVYC2eFh8ZPCt4n3jI4BAdaRP0Pa9m%7ELVwz32z5axg1tqT3kqUybjH1JbmVBczAZgd-2tR8jQq2reM9yf11S64H6Tg__&Key-Pair-Id=KVTP0A1DKRTAX
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjectcdn-lfs.huggingface.co
Fingerprint79:E9:AC:C8:42:EE:86:73:FB:CC:D4:AD:70:06:23:10:88:1C:50:4B
ValidityThu, 27 Jul 2023 00:00:00 GMT - Fri, 23 Aug 2024 23:59:59 GMT

File type
PE32+ executable (console) x86-64, for MS Windows, 10 sections
Size
21 MB (20924928 bytes)
Hash
dea72890d8dab608ab221cddb8b580a7
c6ebbd2c2bb376633fe28265aa926fafd8970a30
2b27431e17f445c399d1ce5b57e3278383bc30c6682872d6f6c68b7e1211bad5

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/72

HTTP Headers

GET /repos/42/6b/426b0398cf306dcafd536d938cdc6034583b20febc8926bfc98872e9a03f2c4b/2b27431e17f445c399d1ce5b57e3278383bc30c6682872d6f6c68b7e1211bad5?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%27ebsynth_cpu.exe%3B+filename%3D%22ebsynth_cpu.exe%22%3B&response-content-type=application%2Fx-msdos-program&Expires=1715477722&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTQ3NzcyMn19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy5odWdnaW5nZmFjZS5jby9yZXBvcy80Mi82Yi80MjZiMDM5OGNmMzA2ZGNhZmQ1MzZkOTM4Y2RjNjAzNDU4M2IyMGZlYmM4OTI2YmZjOTg4NzJlOWEwM2YyYzRiLzJiMjc0MzFlMTdmNDQ1YzM5OWQxY2U1YjU3ZTMyNzgzODNiYzMwYzY2ODI4NzJkNmY2YzY4YjdlMTIxMWJhZDU%7EcmVzcG9uc2UtY29udGVudC1kaXNwb3NpdGlvbj0qJnJlc3BvbnNlLWNvbnRlbnQtdHlwZT0qIn1dfQ__&Signature=OT9sxogUvAoyETTFD95VyOC2PwQSZB1eCcQ3s6wY-NUosKd9V5lPWfxM7SC6L%7E2KCWYL-v6Tkf1z6Ecb%7E1MARbbYyfck8zXqWZcHPYazRnJSWo%7Ee02lHnnhJaHMK%7EjmevvHzg5fKXG4tucjgZ7gwXTK%7Ei0M2sNAajmediVWLj72C30pQLK2ZD8MJVlJZhhOPKVq-Nz5mW4xlNQGo9rf-SHvNwdB%7EeK1hxsdIGtepFgxMw17IL9-VC4LOvZtvIVYC2eFh8ZPCt4n3jI4BAdaRP0Pa9m%7ELVwz32z5axg1tqT3kqUybjH1JbmVBczAZgd-2tR8jQq2reM9yf11S64H6Tg__&Key-Pair-Id=KVTP0A1DKRTAX HTTP/1.1
Host: cdn-lfs.huggingface.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/x-msdos-program
content-length: 20924928
date: Thu, 09 May 2024 01:14:33 GMT
last-modified: Tue, 12 Mar 2024 12:31:08 GMT
etag: "09022e7079f0a290127c118b1b2b0d22-2"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
x-amz-version-id: uAP_0AUX585CLKfRSjde1hgLh8yRkLP5
content-disposition: attachment; filename*=UTF-8''ebsynth_cpu.exe; filename="ebsynth_cpu.exe";
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0WmSBmgrVzKUNVaRJg2lvEhqCTQ9RoG3slCELC-C3UhF56j7GcmHPQ==
age: 1251
cache-control: public, max-age=604800, immutable, s-maxage=604800
vary: Origin
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers