Report Overview

  1. Visited public
    2025-02-17 16:47:27
    Tags
  2. URL

    github.com/activescott/lessmsi/releases/download/v1.6.1/lessmsi-v1.6.1.zip

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    140.82.121.4

    #36459 GITHUB

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
github.com14232007-10-092016-07-132025-02-12
objects.githubusercontent.com1340602014-02-062021-11-012025-02-12

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    objects.githubusercontent.com/github-production-release-asset-2e65be/11993845/d64a9b86-1fe1-11e7-8e44-64d196de4e27?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250217%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250217T164656Z&X-Amz-Expires=300&X-Amz-Signature=68f13c2ea26c94ffe3ba0e9836e343aa53c2d0f85cefdc469326b0264562eadd&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dlessmsi-v1.6.1.zip&response-content-type=application%2Foctet-stream

  2. IP

    185.199.108.133

  3. ASN

    #54113 FASTLY

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    510 kB (509557 bytes)

  2. Hash

    edde592263ee86f58cbf0b5526af60be

    233a464ba7a9ff9ed37964b516d9fa017ce442eb

  1. Archive (11)

  2. FilenameMd5File type
    AddWindowsExplorerShortcut.exe
    238b57a0ebb45413300d9738d32096bb
    PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    lessmsi.core.dll
    87650d2627f55f7ed8f775139180378d
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    lessmsi.exe
    d91b583891fb1510da574bd8c47b683a
    PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    lessmsi.exe.config
    6460dd1a8e8038e0ee73f61ecbfb8acc
    XML 1.0 document, ASCII text, with CRLF line terminators
    lessmsi-gui.exe
    534f1d49cac78e0c6ee456a6ed12bc5e
    PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    lessmsi-gui.exe.config
    6769af3604b3ec7b2105e50daa5540d0
    XML 1.0 document, ASCII text, with CRLF line terminators
    libmspackn.dll
    9f502f7fbd43fa36f162ddc24a8cdcbf
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    mspack.dll
    b7c8c422badd1fd8339f01e729c75fd8
    PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
    LessIO.dll
    228a04b681bfbe2218b2d1bebd024d74
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    wix.dll
    767aaa082df2bb8bb05dc2493537efb9
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    wixcab.dll
    28b176df55725f51589138cc1e3b41c3
    PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

    Detections

    AnalyzerVerdictAlert
    VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
github.com/activescott/lessmsi/releases/download/v1.6.1/lessmsi-v1.6.1.zip
140.82.121.4302 Found0 B
objects.githubusercontent.com/github-production-release-asset-2e65be/11993845/d64a9b86-1fe1-11e7-8e44-64d196de4e27?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250217%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250217T164656Z&X-Amz-Expires=300&X-Amz-Signature=68f13c2ea26c94ffe3ba0e9836e343aa53c2d0f85cefdc469326b0264562eadd&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dlessmsi-v1.6.1.zip&response-content-type=application%2Foctet-stream
185.199.108.133200 OK510 kB