Report Overview

  1. Submitted URL

    github.com/npp-plugins/pork2sausage/releases/download/v2.5/pork2sausage.2.5.bin.x64.zip

  2. IP

    140.82.121.4

    ASN

    #36459 GITHUB

  3. Submitted

    2024-04-26 09:58:14

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
objects.githubusercontent.com1340602014-02-062021-11-012024-04-26
github.com14232007-10-092016-07-132024-03-24

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    objects.githubusercontent.com/github-production-release-asset-2e65be/32898799/4c6ec6bb-cd50-4639-b997-86c237bd564b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240426%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240426T095749Z&X-Amz-Expires=300&X-Amz-Signature=efd930d24dd4cd29a141be1d92823e676fa5a68058328df99397dafffa70bd53&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=32898799&response-content-disposition=attachment%3B%20filename%3Dpork2sausage.2.5.bin.x64.zip&response-content-type=application%2Foctet-stream

  2. IP

    185.199.110.133

  3. ASN

    #54113 FASTLY

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    205 kB (204560 bytes)

  2. Hash

    62033763d26f63b2be8bdd25579a231c

    bbb3364a117ceaffd4614d8ce58a0d564a94decd

  1. Archive (8)

  2. FilenameMd5File type
    pork2Sausage.ini
    0e76e90c45b7990e1b27d215f98f8b6c
    ASCII text, with very long lines (331), with CRLF line terminators
    commons-codec-1.4.jar
    82b899580da472be37055da949b731fa
    Zip archive data, at least v1.0 to extract, compression method=store
    readme.txt
    8018fa2d978dfbacb0a7b93a31baf236
    ASCII text, with CRLF line terminators
    zipB64.class
    e2065bd0255f510cdf37db25493e8a9e
    compiled Java class data, version 50.0 (Java 1.6)
    zipB64.java
    09fa9ddf6841224a87345f4a89526812
    ASCII text, with CRLF line terminators
    license.txt
    4d62ac8b7deae276fc253abc90bf564b
    ASCII text, with very long lines (804), with CRLF line terminators
    pork2sausage.dll
    35a60a0baef05022c582f6333fcf7d4c
    PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections
    readme.txt
    4f84439875e737c4ebb44943ff1ac189
    ASCII text, with very long lines (361), with CRLF line terminators

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
github.com/npp-plugins/pork2sausage/releases/download/v2.5/pork2sausage.2.5.bin.x64.zip
140.82.121.4302 Found0 B
objects.githubusercontent.com/github-production-release-asset-2e65be/32898799/4c6ec6bb-cd50-4639-b997-86c237bd564b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240426%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240426T095749Z&X-Amz-Expires=300&X-Amz-Signature=efd930d24dd4cd29a141be1d92823e676fa5a68058328df99397dafffa70bd53&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=32898799&response-content-disposition=attachment%3B%20filename%3Dpork2sausage.2.5.bin.x64.zip&response-content-type=application%2Foctet-stream
185.199.110.133200 OK205 kB