Report Overview
Visitedpublic
2025-05-08 15:16:16
Tags
Submit Tags
URL
github.com/OrzScript/RC7-Executor/raw/refs/heads/main/RC7Blue.zip
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.4
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
github.com | 1423 | 2007-10-09 | 2016-07-13 | 2025-05-07 | 533 B | 7.7 MB | 140.82.121.3 | |
raw.githubusercontent.com 1 alert(s) on this Host | 35802 | 2014-02-06 | 2014-03-01 | 2025-05-07 | 544 B | 7.7 MB |  185.199.109.133 |
Related reports
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
raw.githubusercontent.com/OrzScript/RC7-Executor/refs/heads/main/RC7Blue.zip
IP / ASN
185.199.109.133
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=store
Size7.7 MB (7721639 bytes)
MD52319e2b07a6c7c73c9e6d9b63b4d14b5
SHA1e83f3058517358506bf4215333d62c626d099d4b
Archive (29)
| Filename | MD5 | File type |
|---|---|---|
| Auto_In.bmp | 9f07eb5ac04d49b394bc94104b6acc5a | PC bitmap, Windows 3.x format, 30 x 30 x 32, image size 3600, resolution 2834 x 2834 px/m, cbSize 3654, bits offset 54 |
| libcrypto-3-x64.dll | be0f6d1d60e149cedaca33a04963e05f | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections |
| libssl-3-x64.dll | 733e3b58ee1760a442fec4712848c3ad | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections |
| xxhash.dll | 70c514826d9428f184d27f0c8f397404 | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections |
| zstd.dll | 5b96fb0d4e6453680da278f5b7e51a29 | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections |
| Button_Clicked.bmp | 8759f845318b489aff36165644bf8137 | PC bitmap, Windows 3.x format, 100 x 23 x 24, image size 6900, resolution 2834 x 2834 px/m, cbSize 6954, bits offset 54 |
| Button_Hover.bmp | ed334aedea57b65dca00b5f1ba986bb0 | PC bitmap, Windows 3.x format, 100 x 23 x 24, image size 6900, resolution 2834 x 2834 px/m, cbSize 6954, bits offset 54 |
| Button_Idle.bmp | 3c8984ad92bad20ba68b4f48f69bca6b | PC bitmap, Windows 3.x format, 100 x 23 x 24, image size 6900, resolution 2834 x 2834 px/m, cbSize 6954, bits offset 54 |
| FastColoredTextBox.dll | 896e676b61d15acec71bc4c485671c80 | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
| Google_Drive_In.bmp | 1ae4f60c0a13638d3cfaffe6bc2abc56 | PC bitmap, Windows 3.x format, 30 x 30 x 32, image size 3600, resolution 2834 x 2834 px/m, cbSize 3654, bits offset 54 |
| Hide_Save.bmp | e05249b657dbeefe92757f2fabccc0d2 | PC bitmap, Windows 3.x format, 39 x 328 x 24, image size 39360, resolution 2834 x 2834 px/m, cbSize 39414, bits offset 54 |
| Hide_Side.bmp | e05249b657dbeefe92757f2fabccc0d2 | PC bitmap, Windows 3.x format, 39 x 328 x 24, image size 39360, resolution 2834 x 2834 px/m, cbSize 39414, bits offset 54 |
| Injector.exe | f30930e1e01e44a73ffa6077d48d9fef | PE32+ executable (console) x86-64, for MS Windows, 10 sections |
| Krystal_In.bmp | 6c7ed9d60ffeedaebea4fe2a085b6681 | PC bitmap, Windows 3.x format, 30 x 30 x 32, image size 3600, resolution 2834 x 2834 px/m, cbSize 3654, bits offset 54 |
| MainUI.bmp | 3eaefdfb19287629348295c14cc7c8d2 | PC bitmap, Windows 98/2000 and newer format, 339 x 328 x 32, cbSize 444906, bits offset 138 |
| RC7Executor.deps.json | db0b912e550766e0ff764986d5037f4a | JSON text data |
| RC7Executor.dll | 6cab6f780666097fb44a3eef7e07d619 | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
| RC7Executor.exe | d8d5e7dffabf89ae6601dab2ddca1210 | PE32+ executable (GUI) x86-64, for MS Windows, 6 sections |
| RC7Executor.pdb | 250937a1fcbfabb9b0dfac14d05ae6b0 | Microsoft Roslyn C# debugging symbols version 1.0 |
| RC7Executor.runtimeconfig.json | e0f6f18f9b152bc2d8c710b0214805d6 | JSON text data |
| Save_In.bmp | a41c69985152925a91e105323ce0277c | PC bitmap, Windows 3.x format, 30 x 30 x 32, image size 3600, resolution 2834 x 2834 px/m, cbSize 3654, bits offset 54 |
| S_Button_Click.bmp | ad70b99c9a861ebd16ff54254d20fa3b | PC bitmap, Windows 3.x format, 95 x 25 x 32, image size 9500, resolution 2834 x 2834 px/m, cbSize 9554, bits offset 54 |
| S_Button_Hover.bmp | bdb036cd54ff291e3193edf460587bb5 | PC bitmap, Windows 3.x format, 95 x 25 x 32, image size 9500, resolution 2834 x 2834 px/m, cbSize 9554, bits offset 54 |
| S_Button_Idle.bmp | 85b62f3297228256b13668ca2fb3f1e2 | PC bitmap, Windows 3.x format, 95 x 25 x 32, image size 9500, resolution 2834 x 2834 px/m, cbSize 9554, bits offset 54 |
| TextBox.bmp | 3d9fb26550a36867be46862587faf3b1 | PC bitmap, Windows 3.x format, 156 x 24 x 32, image size 14978, resolution 2834 x 2834 px/m, cbSize 15032, bits offset 54 |
| Vanity.dll | 4d46530581c85171f6a8cafee4114e0f | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections |
| VanityAPI.dll | 0d0915cd4570ca53951491ce93f6ec2d | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
| Wofly_In.bmp | 36633e5febc8075f1af181eb5b3a601b | PC bitmap, Windows 3.x format, 30 x 30 x 32, image size 3600, resolution 2834 x 2834 px/m, cbSize 3654, bits offset 54 |
| WordWrap_In.bmp | e1c9ad4741f1529680e7c226e5723640 | PC bitmap, Windows 3.x format, 30 x 30 x 32, image size 3600, resolution 2834 x 2834 px/m, cbSize 3654, bits offset 54 |
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| VirusTotal | malicious |
JavaScript (0)
No JavaScripts
HTTP Transactions (2)
| URL | IP | Response | Size |
|---|