Report Overview
Visitedpublic
2024-10-30 03:09:51
Tags
Submit Tags
URL
github.com/wangzhenjjcn/AdobeGenp/releases/download/AdobeGenp-3.4.2-CGP/AdobeGenp-3.4.2-CGP.exe
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.4
#36459 GITHUB
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
5

Host Summary

HostRankRegisteredFirst SeenLast Seen
github.com
14232007-10-092016-07-132024-10-30
objects.githubusercontent.com
1340602014-02-062021-11-012024-10-30

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumobjects.githubusercontent.com/github-production-release-asset-2e65be/710966328/210b13c1-684a-453f-8097-b78bbee43f70?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241030%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241030T030926Z&X-Amz-Expires=300&X-Amz-Signature=a7bfa3cc2fe9080bc75a53f594f9d17689171e181245d56ac821c8cda0caad5b&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DAdobeGenp-3.4.2-CGP.exe&response-content-type=application%2Foctet-streampe_detect_tls_callbacks
mediumobjects.githubusercontent.com/github-production-release-asset-2e65be/710966328/210b13c1-684a-453f-8097-b78bbee43f70?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241030%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241030T030926Z&X-Amz-Expires=300&X-Amz-Signature=a7bfa3cc2fe9080bc75a53f594f9d17689171e181245d56ac821c8cda0caad5b&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DAdobeGenp-3.4.2-CGP.exe&response-content-type=application%2Foctet-streamIdentifies compiled AutoIT script (as EXE).

OpenPhish

No alerts detected


PhishTank

No alerts detected


Mnemonic Secure DNS

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
objects.githubusercontent.com/github-production-release-asset-2e65be/710966328/210b13c1-684a-453f-8097-b78bbee43f70?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241030%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241030T030926Z&X-Amz-Expires=300&X-Amz-Signature=a7bfa3cc2fe9080bc75a53f594f9d17689171e181245d56ac821c8cda0caad5b&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DAdobeGenp-3.4.2-CGP.exe&response-content-type=application%2Foctet-stream
IP / ASN
185.199.111.133
#54113 FASTLY
File Overview
File TypePE32+ executable (GUI) x86-64, for MS Windows, 6 sections
Size1.3 MB (1287168 bytes)
MD56f1a436f28cb5386b19c15fb6de09d42
SHA153e90f98fddbe728f1e10dbe60e2871804b76c6e

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
pe_detect_tls_callbacks
Public InfoSec YARA rulesmalware
Identifies compiled AutoIT script (as EXE).
VirusTotalmalicious

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
GET github.com/wangzhenjjcn/AdobeGenp/releases/download/AdobeGenp-3.4.2-CGP/AdobeGenp-3.4.2-CGP.exe
140.82.121.4302 Found0 B
GET objects.githubusercontent.com/github-production-release-asset-2e65be/710966328/210b13c1-684a-453f-8097-b78bbee43f70?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241030%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241030T030926Z&X-Amz-Expires=300&X-Amz-Signature=a7bfa3cc2fe9080bc75a53f594f9d17689171e181245d56ac821c8cda0caad5b&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DAdobeGenp-3.4.2-CGP.exe&response-content-type=application%2Foctet-stream
185.199.111.133200 OK1.3 MB