Report - cdn.discordapp.com/attachments/426068789025570816/1365028302263418890/MetaSkins.exe?ex=680bd12c&is=680a7fac&hm=5ae11d6721bab11f8e902908bbe0d1d9bfdea1e983b91c2a8fb97a47ed9871fb&

Report Overview

Visitedpublic

2025-04-24 18:17:19

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
cdn.discordapp.com	2474	2015-02-26	2015-08-24	2025-04-23	644 B	3.5 MB	162.159.134.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

cdn.discordapp.com/attachments/426068789025570816/1365028302263418890/MetaSkins.exe?ex=680bd12c&is=680a7fac&hm=5ae11d6721bab11f8e902908bbe0d1d9bfdea1e983b91c2a8fb97a47ed9871fb&

IP / ASN

162.159.134.233

#13335 CLOUDFLARENET

File Overview

File TypePE32+ executable (GUI) x86-64, for MS Windows, 7 sections

Size3.5 MB (3502080 bytes)

MD560503419745150aa85ff9382e3674547

SHA10570dfe0bc7c7cdab792e5cc46a348c8eacfe098

SHA25651e0a1413546bbb9c9087f83432b289afc34643daac298eda2e63301f4874f3e

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 43/72

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET cdn.discordapp.com/attachments/426068789025570816/1365028302263418890/MetaSkins.exe?ex=680bd12c&is=680a7fac&hm=5ae11d6721bab11f8e902908bbe0d1d9bfdea1e983b91c2a8fb97a47ed9871fb&

162.159.134.233

200 OK

3.5 MB

URL

cdn.discordapp.com/attachments/426068789025570816/1365028302263418890/MetaSkins.exe?ex=680bd12c&is=680a7fac&hm=5ae11d6721bab11f8e902908bbe0d1d9bfdea1e983b91c2a8fb97a47ed9871fb&

IP / ASN

162.159.134.233

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typePE32+ executable (GUI) x86-64, for MS Windows, 7 sections

First Seen2025-04-12

Last Seen2025-04-24

Times Seen3

Size3.5 MB (3502080 bytes)

MD560503419745150aa85ff9382e3674547

SHA10570dfe0bc7c7cdab792e5cc46a348c8eacfe098

SHA25651e0a1413546bbb9c9087f83432b289afc34643daac298eda2e63301f4874f3e

Certificate Info

IssuerGoogle Trust Services

Subjectdiscordapp.com

Fingerprint2F:5F:0F:47:D0:0D:C1:87:16:29:BB:8D:62:E7:94:21:38:2D:16:5F

ValiditySat, 15 Mar 2025 04:05:12 GMT - Fri, 13 Jun 2025 05:05:09 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 43/72

HTTP Headers

GET /attachments/426068789025570816/1365028302263418890/MetaSkins.exe?ex=680bd12c&is=680a7fac&hm=5ae11d6721bab11f8e902908bbe0d1d9bfdea1e983b91c2a8fb97a47ed9871fb& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 24 Apr 2025 18:16:46 GMT
content-type: application/x-msdos-program
content-length: 3502080
cf-ray: 935797fa581b56b5-OSL
cf-cache-status: HIT
accept-ranges: bytes, bytes
cache-control: public, max-age=31536000
content-disposition: attachment; filename="MetaSkins.exe"
etag: "60503419745150aa85ff9382e3674547"
expires: Fri, 24 Apr 2026 18:16:46 GMT
last-modified: Thu, 24 Apr 2025 18:15:08 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1745518508334582
x-goog-hash: crc32c=rszf2Q==, md5=YFA0GXRRUKqF/5OC42dFRw==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3502080
x-guploader-uploadid: AAO2VwoXMncjfAFOnVk4Z-FVtXjIFSiQjGIWZcVYPzlxbmiWMPAGvvArRAJ6cIdMfrmyED0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HdAQ8YSYEeBZ55SSnD5irrjmlSP5hMaWpoPXkcif74F1KL6UQGPs58KVYsNle2uVtTedNhx4yfzFvbhwWt9VCM5wJDTbDaoOojHPSZZYSyNy%2FCYlQPr7Cip4eZ0l6E8VEFNhPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
set-cookie: __cf_bm=k_S4biR3EffgQ_Uqj58ycYHG5vcFerIB.UyMlmWK3Rw-1745518606-1.0.1.1-BWtMBTY8OejA2WFVvilRxoOkPPX_hA5huhGE60h1FTRuhOM5OkU9zU80HMXiyddu2nddsjbm0bazPTeVDC6wM99USisavc.bFh7Mwb5Rgxw; path=/; expires=Thu, 24-Apr-25 18:46:46 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=gz9w5EhT_yevpSPSeg.h0EokjR6aJDoi1iXrMSGPCFk-1745518606535-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2