Report - gfx.io/downloads/gfxCardStatus-1.8.zip

Report Overview

Visited public
2024-05-15 09:33:44
Tags
URL
gfx.io/downloads/gfxCardStatus-1.8.zip
Finishing URL
about:privatebrowsing
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
gfx.io	unknown	2012-08-09	2013-05-23 08:26:47	2024-03-16 11:35:25	492 B	609 kB	172.67.223.108

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
gfx.io/downloads/gfxCardStatus-1.8.zip
IP
172.67.223.108
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
608 kB (607676 bytes)
Hash
2ecfc3dd44352c8961e5703192d28b66
bf42c10e95ea879e86093d2c23120efd5247ab25
b1d347adc61211dc6ffa812ff7a60bafcc9ca4384e9fe4d92a42c338e7646537

Archive (127)

Filename

Md5

File type

Growl

839f85435492a78bce61f52e84798574

ASCII text, with no line terminators

Headers

86c63de7bd8775780ac77380b5c049c4

ASCII text, with no line terminators

Resources

e58c4cf10cc7c8ef7d7167ccb641aeb4

ASCII text, with no line terminators

Growl

2611238b0ffebce2fdf825e867edf32d

Mach-O universal binary with 3 architectures: [x86_64: - Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - i386: - Mach-O i386 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - ppc: - Mach-O ppc dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>]

Growl.h

145178fb34413783c490b76bc01a2fdd

C source, ASCII text

GrowlApplicationBridge-Carbon.h

f6825ede9b58ee2fb96f14f1d11ea4ef

C source, ASCII text

GrowlApplicationBridge.h

bfca7add70ffc8a1aa3ac0dda693eeaf

Objective-C source, ASCII text, with very long lines (377)

GrowlDefines.h

5720559174a190f9819da1f39d932d58

C source, ASCII text

Info.plist

eb3596ae1cc8738f5426b6c1af8d6255

XML 1.0 document, ASCII text

Current

7fc56270e7a70fa81a5935b72eacbe29

very short file (no magic)

Headers

86c63de7bd8775780ac77380b5c049c4

ASCII text, with no line terminators

Resources

e58c4cf10cc7c8ef7d7167ccb641aeb4

ASCII text, with no line terminators

Sparkle

078cd5564ff6fd5418ddc4d9179fca8c

ASCII text, with no line terminators

Sparkle.h

fab93e9ad6d3f48020f723097f30aa89

Objective-C source, ASCII text

SUAppcast.h

4dd85ce247281308c84ec1ed0d643d21

C source, ASCII text

SUAppcastItem.h

668cf55a2ce01d63e058ab4db00712e0

C source, ASCII text

SUUpdater.h

23fcea620b15de0de055b01ff7693eac

Objective-C source, ASCII text, with very long lines (327)

SUVersionComparisonProtocol.h

d9cde121be87cf7beda2f9a47aaf47d7

C source, ASCII text

Sparkle.strings

11323fc1d8dbbbd73753134baadde7f7

Unicode text, UTF-16, big-endian text

classes.nib

fb99a49b19c34f97f77a81e5eecbb184

XML 1.0 document, ASCII text

info.nib

8bc2cc6e967aab8b40f1626c7868d439

XML 1.0 document, ASCII text

keyedobjects.nib

097ae7513ad9af56036272adb5d8c694

Apple binary property list

classes.nib

c137beae670f04fa9f87968d627d2a23

XML 1.0 document, ASCII text

info.nib

8bc2cc6e967aab8b40f1626c7868d439

XML 1.0 document, ASCII text

keyedobjects.nib

f2cdeb25ac446b9365414b0ea7a837a6

Apple binary property list

classes.nib

b9c3d0c2670efd8f5e1fba7c969ab20f

XML 1.0 document, ASCII text

info.nib

8bc2cc6e967aab8b40f1626c7868d439

XML 1.0 document, ASCII text

keyedobjects.nib

8f5f4684234fc53cf2abffc0a13a66a9

Apple binary property list

Sparkle.strings

c8310a6a61c3da7348afe30fc822121b

Unicode text, UTF-16, big-endian text, with very long lines (368)

classes.nib

fb99a49b19c34f97f77a81e5eecbb184

XML 1.0 document, ASCII text

info.nib

95c17a87b57873d9888a97231d0c18e1

XML 1.0 document, ASCII text

keyedobjects.nib

ee303bb6f990b556dcd84060df93c07f

Apple binary property list

classes.nib

c137beae670f04fa9f87968d627d2a23

XML 1.0 document, ASCII text

info.nib

cd718d7588fcdb442eb2f25edb0ffe6c

XML 1.0 document, ASCII text

keyedobjects.nib

9ec4d1f38e1016863838664f8a537cd6

Apple binary property list

classes.nib

b9c3d0c2670efd8f5e1fba7c969ab20f

XML 1.0 document, ASCII text

info.nib

c43fc1c5b5710ba09288aba30cc91e6f

XML 1.0 document, ASCII text

keyedobjects.nib

f68ea826bf866a9be1f213c4b6e2b520

Apple binary property list

Sparkle.strings

7b3c8f808d4deed9145658782a1d858a

Unicode text, UTF-16, big-endian text, with very long lines (333)

classes.nib

fb99a49b19c34f97f77a81e5eecbb184

XML 1.0 document, ASCII text

info.nib

8bc2cc6e967aab8b40f1626c7868d439

XML 1.0 document, ASCII text

keyedobjects.nib

cfd325795733d11dea071a140deaa2a0

Apple binary property list

classes.nib

c137beae670f04fa9f87968d627d2a23

XML 1.0 document, ASCII text

info.nib

8bc2cc6e967aab8b40f1626c7868d439

XML 1.0 document, ASCII text

keyedobjects.nib

2172087708b20b03e19cfd53be0af99d

Apple binary property list

classes.nib

b9c3d0c2670efd8f5e1fba7c969ab20f

XML 1.0 document, ASCII text

info.nib

287baa4fff98907951246d77665f769e

XML 1.0 document, ASCII text

keyedobjects.nib

1416017ee5589e7f000450addf896898

Apple binary property list

fr.lproj

19d8a783d0afaaa20c0de2d90ec0ee82

ASCII text, with no line terminators

Sparkle.strings

2758a1a7dad1625f0260c8edeaac81ed

Unicode text, UTF-16, big-endian text

classes.nib

fb99a49b19c34f97f77a81e5eecbb184

XML 1.0 document, ASCII text

info.nib

3fc6ff7c1408ca2e6b64183aafe13e54

XML 1.0 document, ASCII text

keyedobjects.nib

699c45b7a82ebea1ab2430e144055737

Apple binary property list

classes.nib

c137beae670f04fa9f87968d627d2a23

XML 1.0 document, ASCII text

info.nib

5f84307d764ddcd250e0f47f7f0ebc0f

XML 1.0 document, ASCII text

keyedobjects.nib

e51f7975610f0716e246041f83944a8c

Apple binary property list

classes.nib

b9c3d0c2670efd8f5e1fba7c969ab20f

XML 1.0 document, ASCII text

info.nib

5f84307d764ddcd250e0f47f7f0ebc0f

XML 1.0 document, ASCII text

keyedobjects.nib

63396ea8521ecd92d82e429a0e633b69

Apple binary property list

fr_CA.lproj

19d8a783d0afaaa20c0de2d90ec0ee82

ASCII text, with no line terminators

Info.plist

13ffb6413a0fbc36342ccb6b6f1bfa40

XML 1.0 document, ASCII text

Sparkle.strings

6a120e9ba7268f50852777e4abd7d92b

Unicode text, UTF-16, big-endian text

classes.nib

fb99a49b19c34f97f77a81e5eecbb184

XML 1.0 document, ASCII text

info.nib

8bc2cc6e967aab8b40f1626c7868d439

XML 1.0 document, ASCII text

keyedobjects.nib

c05044618c143838ded625cd510a10f1

Apple binary property list

classes.nib

c137beae670f04fa9f87968d627d2a23

XML 1.0 document, ASCII text

info.nib

8bc2cc6e967aab8b40f1626c7868d439

XML 1.0 document, ASCII text

keyedobjects.nib

831fcc87598aa2ad32b7082f61b4ce08

Apple binary property list

classes.nib

b9c3d0c2670efd8f5e1fba7c969ab20f

XML 1.0 document, ASCII text

info.nib

3183cd754412072250438c0b7dd65744

XML 1.0 document, ASCII text

keyedobjects.nib

afa1a0c02bc2a5036cf5510019f1ae5b

Apple binary property list

License.txt

29284fe742e0698808c766d3384bf6c1

ASCII text, with very long lines (460)

Sparkle.strings

51a6aac1c72fb8dd56461d6c01f0650b

Unicode text, UTF-16, big-endian text, with very long lines (376)

classes.nib

fb99a49b19c34f97f77a81e5eecbb184

XML 1.0 document, ASCII text

info.nib

597a0c9ef9bc4ac6b51bde163c984787

XML 1.0 document, ASCII text

keyedobjects.nib

37592a585232db89f7d2d6f1bbcc9c03

Apple binary property list

classes.nib

c137beae670f04fa9f87968d627d2a23

XML 1.0 document, ASCII text

info.nib

5f84307d764ddcd250e0f47f7f0ebc0f

XML 1.0 document, ASCII text

keyedobjects.nib

30e821ab036f43784d1b74330c9917a5

Apple binary property list

classes.nib

b9c3d0c2670efd8f5e1fba7c969ab20f

XML 1.0 document, ASCII text

info.nib

5f84307d764ddcd250e0f47f7f0ebc0f

XML 1.0 document, ASCII text

keyedobjects.nib

c32fc14dccead2035afffbe0e16bb2bc

Apple binary property list

relaunch

a667fe69ff3182b7ecead62789869256

Sparkle.strings

79abdbab6dfea63c89ee1e2e79aefc6b

Unicode text, UTF-16, big-endian text, with very long lines (379)

classes.nib

fb99a49b19c34f97f77a81e5eecbb184

XML 1.0 document, ASCII text

info.nib

618a529117019d26a5ffedf9892e103f

XML 1.0 document, ASCII text

keyedobjects.nib

d3bc255d773faad287a0190578727b1c

Apple binary property list

classes.nib

c137beae670f04fa9f87968d627d2a23

XML 1.0 document, ASCII text

info.nib

618a529117019d26a5ffedf9892e103f

XML 1.0 document, ASCII text

keyedobjects.nib

a2a8ef990cb86e5370f330bfd32aeb2d

Apple binary property list

classes.nib

188946c26e73f1c22e43ca5589b78eb4

XML 1.0 document, ASCII text

info.nib

52f1ae9150f55fc75ddb7377e12fbc9d

XML 1.0 document, ASCII text

keyedobjects.nib

a38cb355eb1d7f9161096b7a34a15423

Apple binary property list

SUModelTranslation.plist

f1ea04fe15a18d331dd1cde62aee3953

XML 1.0 document, ASCII text

classes.nib

f549ec7c9d48cf0940b33c63feb55429

XML 1.0 document, ASCII text

info.nib

e36a13c27ce71939ad81e1e0a162618c

XML 1.0 document, ASCII text

keyedobjects.nib

6ceb5d9320a931354362b208b5240536

Apple binary property list

Sparkle.strings

c7ae1d2930896287406fd47a99818391

Unicode text, UTF-16, big-endian text

classes.nib

fb99a49b19c34f97f77a81e5eecbb184

XML 1.0 document, ASCII text

info.nib

c8dbbecd84b3ae1863cb30622e12a4fb

XML 1.0 document, ASCII text

keyedobjects.nib

58c785c9ecf057ba02a5b16022ce29c9

Apple binary property list

classes.nib

5eb2ed529d7b56eb799b417480a5ae2f

ASCII text

info.nib

dd869dd66b77ff58f65210b7e4048377

XML 1.0 document, ASCII text

keyedobjects.nib

4c63ee7f61f87193389cc0c7dc9fc4cc

Apple binary property list

classes.nib

b9c3d0c2670efd8f5e1fba7c969ab20f

XML 1.0 document, ASCII text

info.nib

c8dbbecd84b3ae1863cb30622e12a4fb

XML 1.0 document, ASCII text

keyedobjects.nib

6be8007157bb29592c313a7d1ff1c09c

Apple binary property list

Sparkle

a7c4b47364a1aa01959fdf70303d09f6

Current

7fc56270e7a70fa81a5935b72eacbe29

very short file (no magic)

Info.plist

e5591d6d288fc3157e3009a097d58673

XML 1.0 document, ASCII text

gfxCardStatus

8bbbacee0aa915938568e0bea51b4d50

Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

PkgInfo

23b7d7d024abb0f558420e098800bf27

ASCII text, with no line terminators

dsa_pub.pem

e7bf0f2d444496bbb2148030cee6ac07

ASCII text

InfoPlist.strings

d72878bb656f235c73b049056cd30dba

Unicode text, UTF-16, big-endian text

Localizable.strings

ab15f285e7ee559568ba7d5ca135b256

Unicode text, UTF-16, big-endian text

MainMenu.nib

fa6d4ce96cba8414f58348b8ef67625e

Apple binary property list

Localizable.strings

ea5381c870b1f95c02827be55729eade

Unicode text, UTF-16, big-endian text

Localizable.strings

60f31cce9b04037c906a10a761ccb35e

Unicode text, UTF-16, big-endian text

gfxCardStatus.icns

8c5e350e276fa949fbd39b14dd7e2b36

Mac OS X icon, 43685 bytes, "is32" type

Growl License.txt

ee70c0405e83aaeff41f1bb83d1c0aa8

ASCII text, with very long lines (754)

Growl Registration Ticket.growlRegDict

272d5eab6b70e8c8fd383b8b879c4185

XML 1.0 document, ASCII text

intel-3.png

6a91efe56452499bf814eea7a0c82ed4

PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced

Localizable.strings

232bbf4e7481dec4620260b8f70a8122

Unicode text, UTF-16, big-endian text

nvidia-3.png

776163f02dc3485cb678db0fd77fab71

PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced

README

e8858ad7724ea34573382de8bfa69809

ASCII text

Localizable.strings

c8597f150a10f598638da8a35fdfdf1f

Unicode text, UTF-16, big-endian text

Localizable.strings

73d740b2f310b00c0cd28a6a960da73a

Unicode text, UTF-16, big-endian text

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_get_eip
VirusTotal	suspicious	VirusTotal - Scan result 1/59

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

gfx.io/downloads/gfxCardStatus-1.8.zip

172.67.223.108

200 OK

608 kB

URL User Request GET HTTP/2
gfx.io/downloads/gfxCardStatus-1.8.zip
IP
172.67.223.108:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgfx.io
Fingerprint4E:6B:6D:00:78:F4:A2:33:50:7C:14:46:E6:DB:F9:5D:22:76:3F:52
ValidityThu, 25 Apr 2024 12:25:34 GMT - Wed, 24 Jul 2024 12:25:33 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
608 kB (607676 bytes)
Hash
2ecfc3dd44352c8961e5703192d28b66
bf42c10e95ea879e86093d2c23120efd5247ab25
b1d347adc61211dc6ffa812ff7a60bafcc9ca4384e9fe4d92a42c338e7646537

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/59

HTTP Headers

GET /downloads/gfxCardStatus-1.8.zip HTTP/1.1
Host: gfx.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 15 May 2024 09:33:18 GMT
content-type: application/zip
content-length: 607676
last-modified: Tue, 16 May 2023 05:59:36 GMT
access-control-allow-origin: *
etag: "64631bc8-945bc"
expires: Wed, 15 May 2024 09:43:17 GMT
cache-control: max-age=14400
x-proxy-cache: MISS
x-github-request-id: 3ADC:B77D5:3ED74D2:406AB78:6644815D
via: 1.1 varnish
x-served-by: cache-osl6542-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715765598.860543,VS0,VE172
vary: Accept-Encoding
x-fastly-request-id: bb0bbde73713fc3ddcf47776cda552dc56eba029
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OYUsgtIaGhIj7nEcT07SZjy0B%2F2adZDxZ0%2FqTJQyU9%2FRydxqiPRiNsl%2Fj5PIh%2FB6H0sQQcsSJcyPVDvsVlJEXFMNq5nXB8VFBp0PJVnNKkMTGGVJVtcwL9s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8842202a7d0656cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (127)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers