Report Overview

  1. Visited public
    2025-01-20 07:26:07
    Tags
    Submit Tags
  2. URL

    github.com/koho/frpmgr/releases/download/v1.7.1/frpmgr-1.7.1-Setup.exe

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    140.82.121.3

    #36459 GITHUB

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
objects.githubusercontent.com1340602014-02-062021-11-012025-01-15
github.com14232007-10-092016-07-132025-01-15

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumobjects.githubusercontent.com/github-production-release-asset-2e65be/252365129/e666903d-9dfc-4106-943f-c11ff955c6e3?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250120%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250120T072540Z&X-Amz-Expires=300&X-Amz-Signature=8b5cf288242c3deeaa409fcbb78049e3b5bb4e1152e733a324643f6081d68e2b&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dfrpmgr-1.7.1-Setup.exe&response-content-type=application%2Foctet-streamDetect files is `SliverFox` malware

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    objects.githubusercontent.com/github-production-release-asset-2e65be/252365129/e666903d-9dfc-4106-943f-c11ff955c6e3?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250120%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250120T072540Z&X-Amz-Expires=300&X-Amz-Signature=8b5cf288242c3deeaa409fcbb78049e3b5bb4e1152e733a324643f6081d68e2b&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dfrpmgr-1.7.1-Setup.exe&response-content-type=application%2Foctet-stream

  2. IP

    185.199.109.133

  3. ASN

    #54113 FASTLY

  1. File type

    PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

    Size

    13 MB (12847616 bytes)

  2. Hash

    15ba13a7412ccc4f2cecdfe570800bb0

    c171be574ea10d0249229fb72034e173cba0655f

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    Detect files is `SliverFox` malware
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
GET github.com/koho/frpmgr/releases/download/v1.7.1/frpmgr-1.7.1-Setup.exe
140.82.121.4302 Found0 B
GET objects.githubusercontent.com/github-production-release-asset-2e65be/252365129/e666903d-9dfc-4106-943f-c11ff955c6e3?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250120%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250120T072540Z&X-Amz-Expires=300&X-Amz-Signature=8b5cf288242c3deeaa409fcbb78049e3b5bb4e1152e733a324643f6081d68e2b&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dfrpmgr-1.7.1-Setup.exe&response-content-type=application%2Foctet-stream
185.199.109.133200 OK13 MB