Report Overview

  1. Visited public
    2024-10-30 03:10:29
    Tags
  2. URL

    github.com/wangzhenjjcn/AdobeGenp/releases/download/AdobeGenp-3.4.2-CGP/AdobeGenp-3.4.2-CGP.zip

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    140.82.121.3

    #36459 GITHUB

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
github.com14232007-10-092016-07-132024-10-30
objects.githubusercontent.com1340602014-02-062021-11-012024-10-30

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Mnemonic Secure DNS

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    objects.githubusercontent.com/github-production-release-asset-2e65be/710966328/4866f88e-2e9c-4369-bb26-6a1cb0760bcf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241030%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241030T031004Z&X-Amz-Expires=300&X-Amz-Signature=f8be8b2fe8b78844a0a8ed9020a439d41c302fa921856f8e4c0cc6270991a69d&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DAdobeGenp-3.4.2-CGP.zip&response-content-type=application%2Foctet-stream

  2. IP

    185.199.110.133

  3. ASN

    #54113 FASTLY

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    652 kB (651731 bytes)

  2. Hash

    79c1e847b153403683ccc89819983489

    20b09b51c11491e0e57638b726e4d0418c116e5b

  1. Archive (1)

  2. FilenameMd5File type
    AdobeGenp-3.4.2-CGP.exe
    6f1a436f28cb5386b19c15fb6de09d42
    PE32+ executable (GUI) x86-64, for MS Windows, 6 sections

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    pe_detect_tls_callbacks
    Public InfoSec YARA rulesmalware
    Identifies compiled AutoIT script (as EXE).
    VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
github.com/wangzhenjjcn/AdobeGenp/releases/download/AdobeGenp-3.4.2-CGP/AdobeGenp-3.4.2-CGP.zip
140.82.121.4302 Found0 B
objects.githubusercontent.com/github-production-release-asset-2e65be/710966328/4866f88e-2e9c-4369-bb26-6a1cb0760bcf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241030%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241030T031004Z&X-Amz-Expires=300&X-Amz-Signature=f8be8b2fe8b78844a0a8ed9020a439d41c302fa921856f8e4c0cc6270991a69d&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DAdobeGenp-3.4.2-CGP.zip&response-content-type=application%2Foctet-stream
185.199.110.133200 OK652 kB