Report - mirrors.tuna.tsinghua.edu.cn/github-release/ventoy/Ventoy/LatestRelease/ventoy-1.1.05-windows.zip

Report Overview

Visited public
2025-04-28 01:31:18
Tags
Submit Tags
URL
mirrors.tuna.tsinghua.edu.cn/github-release/ventoy/Ventoy/LatestRelease/ventoy-1.1.05-windows.zip
Finishing URL
about:privatebrowsing
IP / ASN
101.6.15.130
#4538 China Education and Research Network Center
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mirrors.tuna.tsinghua.edu.cn	204500	unknown	2012-10-10	2025-03-25	565 B	17 MB	101.6.15.130

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
mirrors.tuna.tsinghua.edu.cn/github-release/ventoy/Ventoy/LatestRelease/ventoy-1.1.05-windows.zip
IP
101.6.15.130
ASN
#4538 China Education and Research Network Center

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
17 MB (16697595 bytes)
Hash
7b9c291d141a9895e285ccd8bb2a6889
be68f08ce7cc75d34656db263b3f08ec024bfa4b
3dc1f0a5209c6fa260af9f08951bc4421127b56d4efa3edd2c979af74b1941e5

Archive (45)

Filename

Md5

File type

FOR_X64_ARM.txt

94998e1249f884640f91dbdf91fe45c9

Unicode text, UTF-8 text

Ventoy2Disk_ARM.exe

3ef7a218a214a3c082fd1eec85607a26

PE32 executable (GUI) ARMv7 Thumb, for MS Windows, 6 sections

Ventoy2Disk_X64.exe

6767aaf12c74283d4dcd853f0ce2c4a4

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

VentoyPlugson_X64.exe

b12066183b66c7238a5cdf916dcbf58e

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

Ventoy2Disk_ARM64.exe

a04080599309cfa6d95543d184716c95

PE32+ executable (GUI) Aarch64, for MS Windows, 6 sections

VentoyPlugson.exe

38f18ebb5b81b4481b732f68d2b9fe90

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

VentoyVlnk.exe

8e84aa749ac62d5dceb600cec8d86c96

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

core.img.xz

30c17978ea9a85751287b1452d93e84f

XZ compressed data, checksum CRC32

boot.img

fec7621ce99723b7e4ace18eb88463ee

DOS/MBR boot sector

ventoy.disk.img.xz

b920e82d01a762297905cb8a941d3738

XZ compressed data, checksum CRC32

plugson.tar.xz

29b6b79d41c34654e2f57857831eb6b0

XZ compressed data, checksum CRC32

languages.json

50b0c382465a4454aec97cb28d2300a3

JSON text data

version

6b3b68b9541128e390bd25110e7ebbd1

ASCII text

ventoy_4k.disk.img.xz

ca52908ce1953c8b65cfb01d81249e01

XZ compressed data, checksum CRC32

terminal_box_s.png

e9d31235fc9a340e011504aa0089e45c

PNG image data, 64 x 16, 8-bit/color RGBA, non-interlaced

terminal_box_sw.png

d3ea83db1f97b7c2925ac1f71fe9d005

PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced

vtoyiso.png

a59484cd7ac471f710c1516dbde0a069

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

red-hat.png

43bfedc2ba25a0b88afc593f77f9a2cb

PNG image data, 42 x 32, 8-bit/color RGBA, non-interlaced

ubuntu.png

06254c11cd10717004d7e2e11231ba95

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

deepin.png

a3dd1806a6cbf073a8b2b69a7e79264e

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

background.png

8b34b7f3f638f41b371b64bebe1eab12

PNG image data, 1024 x 768, 8-bit/color RGBA, non-interlaced

menu_n.png

30b99aad83160bd8dd454a77d7dce320

PNG image data, 4 x 30, 8-bit/color RGBA, non-interlaced

terminal_box_nw.png

59f35a9c57ae1e07da9c5ed5b4f1541f

PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced

theme.txt

105fcdf7662f30a65f0b80a0d295c764

ASCII text

slider_s.png

331a0ff0e59b6c07f4c8cce6fe40a4eb

PNG image data, 20 x 8, 8-bit/color RGBA, non-interlaced

slider_c.png

78f3cf1f0a89c23ce77f88bd5766ef8b

PNG image data, 20 x 4, 8-bit/color RGBA, non-interlaced

menu_sw.png

b006d2411337a639cbeac256aa57c946

PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced

menu_e.png

60fd48b0d579f8cb33ce546a1369a3ab

PNG image data, 30 x 4, 8-bit/color RGBA, non-interlaced

terminal_box_c.png

3d8e1449a7635dea68854f0446d5dcbd

PNG image data, 64 x 34, 8-bit/color RGBA, non-interlaced

menu_s.png

2b7e4741bc7acf18181a6ec03a1d8a5f

PNG image data, 4 x 30, 8-bit/color RGBA, non-interlaced

terminal_box_ne.png

89ccc6f15794df7ea4e7fb33e307cd3e

PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced

menu_se.png

b006d2411337a639cbeac256aa57c946

PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced

terminal_box_e.png

973d079cb276bf0186ad944b1cc49832

PNG image data, 16 x 34, 8-bit/color RGBA, non-interlaced

select_c.png

ccf38080aa59a45a428b87fa118517f2

PNG image data, 638 x 36, 8-bit/color RGBA, non-interlaced

slider_n.png

4c866b14c5797eb57d95979369769324

PNG image data, 20 x 8, 8-bit/color RGBA, non-interlaced

terminal_box_n.png

20df2580f580222fd599f0c0b239c4de

PNG image data, 64 x 16, 8-bit/color RGBA, non-interlaced

menu_nw.png

5f986d2a559c125c7f5ad53cb8ae1ffb

PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced

terminal_box_w.png

949a1c2efa81f796c06980aa5fe57eed

PNG image data, 16 x 34, 8-bit/color RGBA, non-interlaced

terminal_box_se.png

f8ecc6c3f34b5bfd4dcd033e20d11f8a

PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced

menu_ne.png

5f986d2a559c125c7f5ad53cb8ae1ffb

PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced

menu_c.png

254f25b6899730c5e538de43e095073f

PNG image data, 4 x 4, 8-bit/color RGBA, non-interlaced

menu_w.png

60fd48b0d579f8cb33ce546a1369a3ab

PNG image data, 30 x 4, 8-bit/color RGBA, non-interlaced

ventoy_grub.cfg

bec7c7b9bb1e31b7d7d0b43de4dc77b1

ASCII text, with CRLF line terminators

ventoy.json

3484f707a36c7927f0671eb213580ac0

JSON text data

Ventoy2Disk.exe

5a464d46ed6fa972f06fccde50b835cf

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 1/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET mirrors.tuna.tsinghua.edu.cn/github-release/ventoy/Ventoy/LatestRelease/ventoy-1.1.05-windows.zip

101.6.15.130

200 OK

17 MB

URL User Request GET
mirrors.tuna.tsinghua.edu.cn/github-release/ventoy/Ventoy/LatestRelease/ventoy-1.1.05-windows.zip
IP
101.6.15.130:443
ASN
#4538 China Education and Research Network Center

Certificate
IssuerLet's Encrypt
Subjecttuna.tsinghua.edu.cn
Fingerprint90:A7:C6:A7:80:B8:F5:71:23:9A:25:15:FA:70:77:34:6E:27:5F:A2
ValidityMon, 17 Feb 2025 09:03:31 GMT - Sun, 18 May 2025 09:03:30 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
17 MB (16697595 bytes)
Hash
7b9c291d141a9895e285ccd8bb2a6889
be68f08ce7cc75d34656db263b3f08ec024bfa4b
3dc1f0a5209c6fa260af9f08951bc4421127b56d4efa3edd2c979af74b1941e5

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/66

HTTP Headers

GET /github-release/ventoy/Ventoy/LatestRelease/ventoy-1.1.05-windows.zip HTTP/1.1
Host: mirrors.tuna.tsinghua.edu.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.22.1
date: Mon, 28 Apr 2025 01:30:43 GMT
content-type: application/zip
content-length: 16697595
last-modified: Mon, 24 Feb 2025 11:36:42 GMT
etag: "67bc59ca-fec8fb"
strict-transport-security: max-age=31536000
x-tuna-mirror-id: nanomirrors
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (45)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers