Report - www.autohotkey.com/download/1.1/AutoHotkey

Report Overview

Submitted URL
www.autohotkey.com/download/1.1/AutoHotkey_1.1.29.01-3+ga4de083.zip
IP
172.67.159.204
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-29 06:38:33
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
9

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.autohotkey.com	570448	2003-12-29	2012-05-24	2024-03-28	521 B	2.7 MB	104.21.89.135

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.autohotkey.com/download/1.1/AutoHotkey_1.1.29.01-3+ga4de083.zip
IP
104.21.89.135
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
2.7 MB (2686709 bytes)
Hash
b72824199f8ea1ace862425b77ad4ca5
67e2cb1f4be4029befa4a1545a2a96e0e2e18119
3e90bdd5c0f048154c0725563c73255c1270bbd48a5678de39677f5e3ff05643

Archive (7)

Filename

Md5

File type

AutoHotkeyA32.exe

5b5d0af4bbd0a81f44b39da62372e99c

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

AutoHotkeyU32.exe

7dffb3faf1f9c684116222a47eb387a8

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

AutoHotkeyU64.exe

1f38b22212afffe0fe7afeacc622c808

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

ANSI 32-bit.bin

b3c4810998ae642b51dc8e701fc688c2

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Unicode 32-bit.bin

a29d82866513fbe61c751e5644d55410

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Unicode 64-bit.bin

8dacea1668ee63bfc422c15935b308e2

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

license.txt

e3f2ad7733f3166fe770e4dc00af6c45

ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_stackstrings
YARAhub by abuse.ch	malware	meth_stackstrings
VirusTotal	suspicious	VirusTotal - Scan result 4/58

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

www.autohotkey.com/download/1.1/AutoHotkey_1.1.29.01-3+ga4de083.zip

104.21.89.135

200 OK

2.7 MB

URL User Request GET HTTP/2
www.autohotkey.com/download/1.1/AutoHotkey_1.1.29.01-3+ga4de083.zip
IP
104.21.89.135:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectautohotkey.com
Fingerprint35:79:01:86:31:43:0D:AC:5E:1F:CA:A5:32:B3:02:A6:31:5A:4E:BB
ValiditySat, 16 Mar 2024 09:53:16 GMT - Fri, 14 Jun 2024 09:53:15 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
2.7 MB (2686709 bytes)
Hash
b72824199f8ea1ace862425b77ad4ca5
67e2cb1f4be4029befa4a1545a2a96e0e2e18119
3e90bdd5c0f048154c0725563c73255c1270bbd48a5678de39677f5e3ff05643

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 4/58

HTTP Headers

GET /download/1.1/AutoHotkey_1.1.29.01-3+ga4de083.zip HTTP/1.1
Host: www.autohotkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 06:38:08 GMT
content-type: application/octet-stream
content-length: 2686709
content-description: File Transfer
cache-control: must-revalidate
pragma: public
expires: 0
content-disposition: attachment; filename="AutoHotkey_1.1.29.01-3+ga4de083.zip"
cf-cache-status: MISS
last-modified: Fri, 29 Mar 2024 06:38:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VNyiilQo%2FpCeiQ0sp89PhvRtmGfk42GcEPtbU54%2BjxBFOu694Ylod4ZMSRNKmQqiRBIaGRkr0S6D%2BwbcylMGTPLbaQK%2FKeR5iGF8b0%2FPCQvdekCSkDa85pbSeY7duz4fc%2FjeSl0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bddaef7c3c56ae-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (7)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers