Report Overview
Visitedpublic
2024-10-30 13:27:06
Tags
Submit Tags
URL
github.com/retracmp/launcher/releases/download/master/Retrac.Launcher_1.0.14_x64_en-US.msi
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.4
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
github.com | 1423 | 2007-10-09 | 2016-07-13 | 2024-10-30 | 544 B | 4.4 kB | 140.82.121.3 | |
objects.githubusercontent.com 1 alert(s) on this Host | 134060 | 2014-02-06 | 2021-11-01 | 2024-10-30 | 979 B | 7.1 MB |  185.199.108.133 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
No alerts detected
Threat Detection Systems
Public InfoSec YARA rules
| Scan Date | Severity | Indicator | Alert |
|---|---|---|---|
| 2024-10-30 | medium | objects.githubusercontent.com/github-production-release-asset-2e65be/821927024/81c21081-2ca7-4a5c-9477-ebda9df23df8?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241030%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241030T132640Z&X-Amz-Expires=300&X-Amz-Signature=3c23a6efcd0ba1c2a5bdfd1a15e6778b7d5cb53857112ff69b3d39237593f045&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DRetrac.Launcher_1.0.14_x64_en-US.msi&response-content-type=application%2Foctet-stream | Detect files is `SliverFox` malware |
OpenPhish
No alerts detected
PhishTank
No alerts detected
Mnemonic Secure DNS
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
objects.githubusercontent.com/github-production-release-asset-2e65be/821927024/81c21081-2ca7-4a5c-9477-ebda9df23df8?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241030%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241030T132640Z&X-Amz-Expires=300&X-Amz-Signature=3c23a6efcd0ba1c2a5bdfd1a15e6778b7d5cb53857112ff69b3d39237593f045&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DRetrac.Launcher_1.0.14_x64_en-US.msi&response-content-type=application%2Foctet-stream
IP / ASN
185.199.108.133
File Overview
File TypeComposite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Retrac Launcher, Author: retrac, Keywords: Installer, Comments: This installer database contains the logic and data required to install Retrac Launcher., Template: x64;0, Revision Number: {4A802B18-EF7D-4D6B-8664-BD8D987F774F}, Create Time/Date: Wed Oct 30 04:22:38 2024, Last Saved Time/Date: Wed Oct 30 04:22:38 2024, Number of Pages: 450, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2
Size7.1 MB (7131136 bytes)
MD5ae30168aa8f32e9a4f00df855a303509
SHA1287b7fba5ff1ba3f5261b8a842da3f6b23e61e02
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware |
JavaScript (0)
No JavaScripts
HTTP Transactions (2)
| URL | IP | Response | Size |
|---|