Report - github.com/Interact-Labs/TACT-SW/releases/download/v4.0.2/TACT-Portable-4.0.2-win-x64.exe

Report Overview

Visited public
2024-10-08 08:42:28
Tags
URL
github.com/Interact-Labs/TACT-SW/releases/download/v4.0.2/TACT-Portable-4.0.2-win-x64.exe
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.3
#36459 GITHUB
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
objects.githubusercontent.com	134060	2014-02-06	2021-11-01 22:34:29	2024-10-07 11:58:17	974 B	59 MB	185.199.109.133
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-10-07 11:57:05	1.3 kB	3.5 kB	23.36.76.226
github.com	1423	2007-10-09	2016-07-13 12:28:22	2024-09-30 08:19:04	543 B	4.4 kB	140.82.121.3
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-10-07 11:57:09	1.6 kB	4.4 kB	23.36.77.32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
objects.githubusercontent.com/github-production-release-asset-2e65be/416378921/6dd6bd6e-a79e-4961-b9fb-3fabed36eb0c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T084203Z&X-Amz-Expires=300&X-Amz-Signature=54db166bd9e7e40ccbb2e16d1c952ee8f42ffecb611d91606b6efba87e73f3ba&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DTACT-Portable-4.0.2-win-x64.exe&response-content-type=application%2Foctet-stream
IP
185.199.109.133
ASN
#54113 FASTLY

File type
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections
Size
59 MB (59142288 bytes)
Hash
e12198cdb796f3633298955038452486
c9aeb50dc349cb9dd6d14b4efa4de04a2be207bd
e308538151043608acf6bb3e194686b3b584b1ee7cc5746e2e1f56665d545e95

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/67

JavaScript (0)

HTTP Transactions (11)

URL IP Response Size

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
36b6fb12080d87eb51a112fe7611f798
21f5326b815ed7d252a0d6335d9645e55da6b773
eea1930b4e05fa9d735e3024fab15c5641019a78f5a5b849554a13a9c7601b06

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EEA1930B4E05FA9D735E3024FAB15C5641019A78F5A5B849554A13A9C7601B06"
Last-Modified: Mon, 07 Oct 2024 18:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2757
Expires: Tue, 08 Oct 2024 09:27:59 GMT
Date: Tue, 08 Oct 2024 08:42:02 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
6f3fc0c69061d841f2742dff21f0c7b5
a251dba2672bec148f8ac46c94a93c1ffb205472
e63452597f08338a295bad85e9c1649be79723d663b45fcd3b676f62ad813c25

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E63452597F08338A295BAD85E9C1649BE79723D663B45FCD3B676F62AD813C25"
Last-Modified: Tue, 08 Oct 2024 02:42:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2654
Expires: Tue, 08 Oct 2024 09:26:16 GMT
Date: Tue, 08 Oct 2024 08:42:02 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
92cd7893843bf7005d9d4281f7ddeb25
1d1762ecf80a622168eb8734901fc27382da2b2a
7e1c229fca475d3a4760d7950e2ccd0b8bb27f4c4bc5fd43e96260bfa32388b7

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "7E1C229FCA475D3A4760D7950E2CCD0B8BB27F4C4BC5FD43E96260BFA32388B7"
Last-Modified: Sat, 05 Oct 2024 16:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4002
Expires: Tue, 08 Oct 2024 09:48:44 GMT
Date: Tue, 08 Oct 2024 08:42:02 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
fee997636032a2728290f81fe5762c02
42f258475ee260c5ddf269d0a5bed8452532ef98
ceadfd7d2e7057455015852121e0b3f9cb0ce53115d661eb6037852496837313

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CEADFD7D2E7057455015852121E0B3F9CB0CE53115D661EB6037852496837313"
Last-Modified: Tue, 08 Oct 2024 05:35:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14581
Expires: Tue, 08 Oct 2024 12:45:03 GMT
Date: Tue, 08 Oct 2024 08:42:02 GMT
Connection: keep-alive

github.com/Interact-Labs/TACT-SW/releases/download/v4.0.2/TACT-Portable-4.0.2-win-x64.exe

140.82.121.3

302 Found

0 B

URL User Request GET HTTP/2
github.com/Interact-Labs/TACT-SW/releases/download/v4.0.2/TACT-Portable-4.0.2-win-x64.exe
IP
140.82.121.3:443
ASN
#36459 GITHUB

Certificate
IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /Interact-Labs/TACT-SW/releases/download/v4.0.2/TACT-Portable-4.0.2-win-x64.exe HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: GitHub.com
date: Tue, 08 Oct 2024 08:42:03 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/416378921/6dd6bd6e-a79e-4961-b9fb-3fabed36eb0c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T084203Z&X-Amz-Expires=300&X-Amz-Signature=54db166bd9e7e40ccbb2e16d1c952ee8f42ffecb611d91606b6efba87e73f3ba&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DTACT-Portable-4.0.2-win-x64.exe&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: FC19:1DC530:4353914:449FEB9:6704F05A
X-Firefox-Spdy: h2

r11.o.lencr.org/

23.36.77.32

504 B

URL
r11.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
ec38109366c8ddbcbba2e2a0b6374e18
63bbdf46e2fcd0859e2eccd9c3f0df6843f4b388
e8d846823abe2f8801df99aa76c339fb20cc7b9907e5384b5c6e931d8ce7c11b

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E8D846823ABE2F8801DF99AA76C339FB20CC7B9907E5384B5C6E931D8CE7C11B"
Last-Modified: Mon, 07 Oct 2024 17:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2632
Expires: Tue, 08 Oct 2024 09:25:56 GMT
Date: Tue, 08 Oct 2024 08:42:04 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.77.32

504 B

URL
r11.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
ec38109366c8ddbcbba2e2a0b6374e18
63bbdf46e2fcd0859e2eccd9c3f0df6843f4b388
e8d846823abe2f8801df99aa76c339fb20cc7b9907e5384b5c6e931d8ce7c11b

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E8D846823ABE2F8801DF99AA76C339FB20CC7B9907E5384B5C6E931D8CE7C11B"
Last-Modified: Mon, 07 Oct 2024 17:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2632
Expires: Tue, 08 Oct 2024 09:25:56 GMT
Date: Tue, 08 Oct 2024 08:42:04 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.77.32

504 B

URL
r11.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
ec38109366c8ddbcbba2e2a0b6374e18
63bbdf46e2fcd0859e2eccd9c3f0df6843f4b388
e8d846823abe2f8801df99aa76c339fb20cc7b9907e5384b5c6e931d8ce7c11b

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E8D846823ABE2F8801DF99AA76C339FB20CC7B9907E5384B5C6E931D8CE7C11B"
Last-Modified: Mon, 07 Oct 2024 17:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2632
Expires: Tue, 08 Oct 2024 09:25:56 GMT
Date: Tue, 08 Oct 2024 08:42:04 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.77.32

504 B

URL
r11.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
ec38109366c8ddbcbba2e2a0b6374e18
63bbdf46e2fcd0859e2eccd9c3f0df6843f4b388
e8d846823abe2f8801df99aa76c339fb20cc7b9907e5384b5c6e931d8ce7c11b

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E8D846823ABE2F8801DF99AA76C339FB20CC7B9907E5384B5C6E931D8CE7C11B"
Last-Modified: Mon, 07 Oct 2024 17:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2632
Expires: Tue, 08 Oct 2024 09:25:56 GMT
Date: Tue, 08 Oct 2024 08:42:04 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.77.32

504 B

URL
r11.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
ec38109366c8ddbcbba2e2a0b6374e18
63bbdf46e2fcd0859e2eccd9c3f0df6843f4b388
e8d846823abe2f8801df99aa76c339fb20cc7b9907e5384b5c6e931d8ce7c11b

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E8D846823ABE2F8801DF99AA76C339FB20CC7B9907E5384B5C6E931D8CE7C11B"
Last-Modified: Mon, 07 Oct 2024 17:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2632
Expires: Tue, 08 Oct 2024 09:25:56 GMT
Date: Tue, 08 Oct 2024 08:42:04 GMT
Connection: keep-alive

objects.githubusercontent.com/github-production-release-asset-2e65be/416378921/6dd6bd6e-a79e-4961-b9fb-3fabed36eb0c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T084203Z&X-Amz-Expires=300&X-Amz-Signature=54db166bd9e7e40ccbb2e16d1c952ee8f42ffecb611d91606b6efba87e73f3ba&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DTACT-Portable-4.0.2-win-x64.exe&response-content-type=application%2Foctet-stream

185.199.109.133

200 OK

59 MB

URL User Request GET HTTP/2
objects.githubusercontent.com/github-production-release-asset-2e65be/416378921/6dd6bd6e-a79e-4961-b9fb-3fabed36eb0c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T084203Z&X-Amz-Expires=300&X-Amz-Signature=54db166bd9e7e40ccbb2e16d1c952ee8f42ffecb611d91606b6efba87e73f3ba&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DTACT-Portable-4.0.2-win-x64.exe&response-content-type=application%2Foctet-stream
IP
185.199.109.133:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections
Size
59 MB (59142288 bytes)
Hash
e12198cdb796f3633298955038452486
c9aeb50dc349cb9dd6d14b4efa4de04a2be207bd
e308538151043608acf6bb3e194686b3b584b1ee7cc5746e2e1f56665d545e95

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/67

HTTP Headers

GET /github-production-release-asset-2e65be/416378921/6dd6bd6e-a79e-4961-b9fb-3fabed36eb0c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T084203Z&X-Amz-Expires=300&X-Amz-Signature=54db166bd9e7e40ccbb2e16d1c952ee8f42ffecb611d91606b6efba87e73f3ba&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DTACT-Portable-4.0.2-win-x64.exe&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Mon, 20 Feb 2023 15:51:27 GMT
etag: "0x8DB135A53774EEF"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 92756260-a01e-0041-595d-19b9b1000000
x-ms-version: 2024-08-04
x-ms-creation-time: Mon, 20 Feb 2023 15:51:27 GMT
x-ms-blob-content-md5: 4SGYzbeW82MymJVQOEUkhg==
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=TACT-Portable-4.0.2-win-x64.exe
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
age: 0
date: Tue, 08 Oct 2024 08:42:03 GMT
x-served-by: cache-iad-kiad7000176-IAD, cache-hel1410028-HEL
x-cache: HIT, MISS
x-cache-hits: 3, 0
x-timer: S1728376923.218722,VS0,VE124
content-length: 59142288
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (11)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL