Report - down.codeberg.page/zip3/eInstaller.zip

Report Overview

Visited public
2025-05-08 11:35:15
Tags
URL
down.codeberg.page/zip3/eInstaller.zip
Finishing URL
about:privatebrowsing
IP / ASN
217.197.84.141
#29670 Individual Network Berlin (IN-Berlin) e.V.
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
down.codeberg.page	unknown	2020-10-07	2024-11-22	2025-04-25	506 B	18 MB	217.197.84.141

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
down.codeberg.page/zip3/eInstaller.zip
IP
217.197.84.141
ASN
#29670 Individual Network Berlin (IN-Berlin) e.V.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
18 MB (18037862 bytes)
Hash
84458ae469600265d430a7e0f91e9cca
ea0cbb7d3b9fdd453af64673d6779a710e2ea754
1eb7ba705ee824efc1d3562200843c59819d02dcb9962634fdb0a9ee25fd9619

Archive (1)

Filename

Md5

File type

eInstaller.exe

1826a63c59b62d58b211dac18e291746

PE32 executable (GUI) Intel 80386, for MS Windows, 11 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 4/68

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

down.codeberg.page/zip3/eInstaller.zip

217.197.84.141

200 OK

18 MB

URL User Request GET
down.codeberg.page/zip3/eInstaller.zip
IP
217.197.84.141:443
ASN
#29670 Individual Network Berlin (IN-Berlin) e.V.

Certificate
IssuerLet's Encrypt
Subject*.codeberg.page
FingerprintA6:2B:C3:05:FB:84:C1:E8:69:E0:45:93:AE:87:89:7E:9F:E8:97:AD
ValidityWed, 12 Mar 2025 14:03:32 GMT - Tue, 10 Jun 2025 14:03:31 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
18 MB (18037862 bytes)
Hash
84458ae469600265d430a7e0f91e9cca
ea0cbb7d3b9fdd453af64673d6779a710e2ea754
1eb7ba705ee824efc1d3562200843c59819d02dcb9962634fdb0a9ee25fd9619

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 4/68

HTTP Headers

GET /zip3/eInstaller.zip HTTP/1.1
Host: down.codeberg.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
allow: GET, HEAD, OPTIONS
cache-control: public, max-age=600
content-type: application/zip
etag: "35290e319cc29e6d5f90894b1eaff7ff72ef8d55"
last-modified: Sat, 26 Apr 2025 18:39:01 GMT
referrer-policy: strict-origin-when-cross-origin
server: pages-server
strict-transport-security: max-age=63072000; includeSubdomains; preload
content-length: 18037862
date: Thu, 08 May 2025 11:34:40 GMT
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (1)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers