Report Overview

  1. Visited public
    2024-08-17 02:16:03
    Tags
  2. URL

    github.com/solsticegamestudios/GModCEFCodecFix/releases/download/20240715/GModCEFCodecFix-Windows.exe

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    140.82.121.4

    #36459 GITHUB

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
github.com1423
objects.githubusercontent.com134060
r11.o.lencr.orgunknown
r10.o.lencr.orgunknown

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumobjects.githubusercontent.com/github-production-release-asset-2e65be/192249688/46a3d614-0c4d-4fb3-adb1-02896b98646e?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240817%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240817T021537Z&X-Amz-Expires=300&X-Amz-Signature=f0a87762f23a6aed8abeb613f47aa7b0ccca7ef2b81bcae55e76f882cbf65a06&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=192249688&response-content-disposition=attachment%3B%20filename%3DGModCEFCodecFix-Windows.exe&response-content-type=application%2Foctet-streamIdentifies executable converted using PyInstaller.

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    objects.githubusercontent.com/github-production-release-asset-2e65be/192249688/46a3d614-0c4d-4fb3-adb1-02896b98646e?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240817%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240817T021537Z&X-Amz-Expires=300&X-Amz-Signature=f0a87762f23a6aed8abeb613f47aa7b0ccca7ef2b81bcae55e76f882cbf65a06&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=192249688&response-content-disposition=attachment%3B%20filename%3DGModCEFCodecFix-Windows.exe&response-content-type=application%2Foctet-stream

  2. IP

    185.199.109.133

  3. ASN

    #54113 FASTLY

  1. File type

    PE32+ executable (console) x86-64, for MS Windows, 6 sections

    Size

    12 MB (11552099 bytes)

  2. Hash

    8c15b7980387559aa68a16c0e93a08aa

    2f6982519e792505c5b04f501e9996a0165ff8fa

    Detections

    AnalyzerVerdictAlert
    Public InfoSec YARA rulesmalware
    Identifies executable converted using PyInstaller.
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (9)

URLIPResponseSize
r11.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.76.226 504 B
r10.o.lencr.org/
23.36.76.226 504 B
r10.o.lencr.org/
23.36.76.226 504 B
github.com/solsticegamestudios/GModCEFCodecFix/releases/download/20240715/GModCEFCodecFix-Windows.exe
140.82.121.4302 Found0 B
objects.githubusercontent.com/github-production-release-asset-2e65be/192249688/46a3d614-0c4d-4fb3-adb1-02896b98646e?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240817%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240817T021537Z&X-Amz-Expires=300&X-Amz-Signature=f0a87762f23a6aed8abeb613f47aa7b0ccca7ef2b81bcae55e76f882cbf65a06&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=192249688&response-content-disposition=attachment%3B%20filename%3DGModCEFCodecFix-Windows.exe&response-content-type=application%2Foctet-stream
185.199.109.133200 OK12 MB
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B