Report - www.autohotkey.com/download/ahk.zip

Report Overview

Visited public
2025-02-28 13:11:16
Tags
URL
www.autohotkey.com/download/ahk.zip
Finishing URL
about:privatebrowsing
IP / ASN
104.21.89.135
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.autohotkey.com	570448	2003-12-29	2012-05-24	2025-02-24	501 B	5.3 MB	172.67.159.204

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.autohotkey.com/download/ahk.zip
IP
172.67.159.204
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
5.3 MB (5306010 bytes)
Hash
20a979f8c1f21b304fda42139c5ef2b5
fad2885d3e9a65c0ef89ecb62e277a9c1f4cf652
6f3663f7cdd25063c8c8728f5d9b07813ced8780522fd1f124ba539e2854215f

Archive (12)

Filename

Md5

File type

AutoHotkey.chm

17d5e275dbc8278d888f7da1d681d7e3

MS Windows HtmlHelp Data

AutoHotkeyA32.exe

fd94b77958305a1ac3eeac27ee765256

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

AutoHotkeyU32.exe

b6af97aa32c636c3c4e87bb768a3ceb7

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

AutoHotkeyU64.exe

2d0600fe2b1b3bdc45d833ca32a37fdb

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

Ahk2Exe.exe

78515b1091f74c0f828aed92d3c972b0

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

ANSI 32-bit.bin

31ed560d3edc5f1eea515c4358b90406

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Unicode 32-bit.bin

db213c2dc5d0f542a1e925f09c021e05

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Unicode 64-bit.bin

30da2df436169d6f09732e61d8849a05

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

Installer.ahk

015d8f0a9ba93e41f418b8db8bef6a10

ASCII text, with CRLF, CR, LF line terminators

license.txt

e3f2ad7733f3166fe770e4dc00af6c45

ASCII text, with CRLF line terminators

Template.ahk

a85eeb1dc6f9a33897c407b4240dc20f

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

WindowSpy.ahk

32020e55548b1e9e7ce22899617d5cd2

ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 9/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

www.autohotkey.com/download/ahk.zip

172.67.159.204

200 OK

5.3 MB

URL User Request GET HTTP/2
www.autohotkey.com/download/ahk.zip
IP
172.67.159.204:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectautohotkey.com
FingerprintFE:FD:B3:C6:32:63:A7:D5:66:C4:02:1E:CF:43:C4:28:67:5A:10:C2
ValiditySat, 01 Feb 2025 23:11:46 GMT - Sat, 03 May 2025 00:09:29 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
5.3 MB (5306010 bytes)
Hash
20a979f8c1f21b304fda42139c5ef2b5
fad2885d3e9a65c0ef89ecb62e277a9c1f4cf652
6f3663f7cdd25063c8c8728f5d9b07813ced8780522fd1f124ba539e2854215f

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 9/66

HTTP Headers

GET /download/ahk.zip HTTP/1.1
Host: www.autohotkey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 28 Feb 2025 13:10:45 GMT
content-type: application/octet-stream
content-length: 5306010
content-description: File Transfer
cache-control: must-revalidate
pragma: public
expires: 0
content-disposition: attachment; filename="AutoHotkey_1.1.37.02.zip"
cf-cache-status: DYNAMIC
content-security-policy: upgrade-insecure-requests; block-all-mixed-content
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=()
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 9190a811bc0d0b51-OSL
server-timing: cfCacheStatus;desc="DYNAMIC", cfL4;desc="?proto=TCP&rtt=3358&min_rtt=3121&rtt_var=609&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3570&recv_bytes=1148&delivery_rate=1275396&cwnd=253&unsent_bytes=0&cid=26d3ff12b3345585&ts=466&x=0"
X-Firefox-Spdy: h2