Report Overview

  1. Visited public
    2024-12-17 06:46:05
    Tags
  2. URL

    github.com/zmjack/PortProxyGUI/releases/download/v1.4.2/ppgui-net8-x86-1.4.2.zip

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    140.82.121.4

    #36459 GITHUB

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
objects.githubusercontent.com1340602014-02-062021-11-012024-12-11
github.com14232007-10-092016-07-132024-12-11

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    objects.githubusercontent.com/github-production-release-asset-2e65be/267645766/237f335e-8648-4553-ac85-2796b2ed5bbf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241217%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241217T064539Z&X-Amz-Expires=300&X-Amz-Signature=d80023c289aeebbb5b6a9726be40eb8dd625eda60bec8629605f5611f276295e&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dppgui-net8-x86-1.4.2.zip&response-content-type=application%2Foctet-stream

  2. IP

    185.199.108.133

  3. ASN

    #54113 FASTLY

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    2.0 MB (1965156 bytes)

  2. Hash

    401d6901f9b228a48574418a20a7fa4f

    3ff0fc3394bfa71b3ec1602bfea6f3046fe35c0d

  1. Archive (3)

  2. FilenameMd5File type
    e_sqlite3.dll
    1aa2fb5e420379a7a50cd650232c6a08
    PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections
    PPGUI.exe
    d6791b1653f9e04afa1db5178f51f014
    PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections
    SQLite.Interop.dll
    0792c1d3b4dc27c8a11be191e61f9276
    PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    files - file ~tmp01925d3f.exe
    VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
github.com/zmjack/PortProxyGUI/releases/download/v1.4.2/ppgui-net8-x86-1.4.2.zip
140.82.121.4302 Found0 B
objects.githubusercontent.com/github-production-release-asset-2e65be/267645766/237f335e-8648-4553-ac85-2796b2ed5bbf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241217%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241217T064539Z&X-Amz-Expires=300&X-Amz-Signature=d80023c289aeebbb5b6a9726be40eb8dd625eda60bec8629605f5611f276295e&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dppgui-net8-x86-1.4.2.zip&response-content-type=application%2Foctet-stream
185.199.108.133200 OK2.0 MB