Report - raw.githubusercontent.com/FlowZino/Image-Grabber/main/Image_Grabber%20Made%20by%20Flow%20$%20Aether.exe

Report Overview

Visitedpublic

2024-02-14 12:29:34

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
raw.githubusercontent.com	35802	2014-02-06	2014-03-01 08:08:08	2024-02-14 05:52:14	557 B	43 kB	185.199.110.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

raw.githubusercontent.com/FlowZino/Image-Grabber/main/Image_Grabber%20Made%20by%20Flow%20$%20Aether.exe

IP / ASN

185.199.110.133

#54113 FASTLY

File Overview

File TypePE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Size42 kB (42496 bytes)

MD5b7482150ea0d0fff484003e887db1f08

SHA178f08d17f637f9b82526b458768ad0eda32fd7a5

SHA2562e21a5dd00a7ddd61d3d930c33b986e88c1bf73451c92bfc4dceb0ebcbd93148

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 49/68

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET raw.githubusercontent.com/FlowZino/Image-Grabber/main/Image_Grabber%20Made%20by%20Flow%20$%20Aether.exe

185.199.110.133

200 OK

42 kB

URL

raw.githubusercontent.com/FlowZino/Image-Grabber/main/Image_Grabber%20Made%20by%20Flow%20$%20Aether.exe

IP / ASN

185.199.110.133

#54113 FASTLY

Requested byN/A

Resource Info

File typePE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

First Seen2024-02-10

Last Seen2024-08-20

Times Seen3

Size42 kB (42496 bytes)

MD5b7482150ea0d0fff484003e887db1f08

SHA178f08d17f637f9b82526b458768ad0eda32fd7a5

SHA2562e21a5dd00a7ddd61d3d930c33b986e88c1bf73451c92bfc4dceb0ebcbd93148

Certificate Info

IssuerDigiCert Inc

Subject*.github.io

FingerprintA1:46:14:C7:2A:1D:52:79:F6:AA:2B:B2:C5:0A:3B:D3:F5:02:06:75

ValidityTue, 21 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 49/68

HTTP Headers

GET /FlowZino/Image-Grabber/main/Image_Grabber%20Made%20by%20Flow%20$%20Aether.exe HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/octet-stream
etag: W/"25a62f1cac4671e509e0d728ffb12f7358dfdfc23650ecc19208ad2cc92384e5"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 90F0:1958AF:1C3787E:1D3B1A6:65CCB215
accept-ranges: bytes
date: Wed, 14 Feb 2024 12:29:09 GMT
via: 1.1 varnish
x-served-by: cache-hel1410025-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1707913750.739947,VS0,VE257
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: 9565030ebf0cd33cb87f263c3b775cdf8ee2005a
expires: Wed, 14 Feb 2024 12:34:09 GMT
source-age: 0
content-length: 42496
X-Firefox-Spdy: h2