Report - filecache28.gamebanana.com/tools/easyspritemaker

Report Overview

Visitedpublic

2025-03-05 21:05:49

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
filecache28.gamebanana.com	unknown	2010-12-08	2024-06-16	2025-02-26	528 B	3.5 MB	209.222.107.194

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

filecache28.gamebanana.com/tools/easyspritemaker_install.zip

IP / ASN

209.222.107.194

#23470 RELIABLESITE

File Overview

File TypeZip archive data, at least v1.0 to extract, compression method=store

Size3.5 MB (3508329 bytes)

MD558e1674c65673e40e9ca2334cc51583d

SHA18fbc660cfeb41ead314f89cb342499403668348c

SHA25681f1824a97941a20c3c45391ce780324ded50a0d5e40053626a35a07d1617537

Archive (1)

Modified	Filename	Size	MD5	File type
2008-04-11 18:16	easyspritemaker_install.exe	3.5 MB	afae2516063d36c97538c02cc9964312	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files is `SliverFox` malware
VirusTotal	suspicious	VirusTotal - Scan result 1/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET filecache28.gamebanana.com/tools/easyspritemaker_install.zip

209.222.107.194

200 OK

3.5 MB

URL User Request GET HTTPS

filecache28.gamebanana.com/tools/easyspritemaker_install.zip

IP / ASN

209.222.107.194

#23470 RELIABLESITE

Requested byN/A

Resource Info

File typeZip archive data, at least v1.0 to extract, compression method=store

First Seen2025-03-05

Last Seen2025-03-05

Times Seen1

Size3.5 MB (3508329 bytes)

MD558e1674c65673e40e9ca2334cc51583d

SHA18fbc660cfeb41ead314f89cb342499403668348c

SHA25681f1824a97941a20c3c45391ce780324ded50a0d5e40053626a35a07d1617537

Certificate Info

IssuerGlobalSign nv-sa

Subject*.gamebanana.com

Fingerprint0F:6C:36:B9:E8:48:DF:1A:02:ED:8D:D0:8C:FE:CA:69:49:A7:5C:B6

ValidityWed, 02 Oct 2024 06:37:39 GMT - Mon, 03 Nov 2025 06:37:38 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/66

HTTP Headers

GET /tools/easyspritemaker_install.zip HTTP/1.1
Host: filecache28.gamebanana.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Mar 2025 21:05:31 GMT
Content-Type: application/zip
Content-Length: 3508329
Last-Modified: Mon, 06 Jun 2016 23:45:05 GMT
ETag: "57560b01-358869"
X-GBMC: S42
X-GBFCP: filecache28 HIT
Access-Control-Allow-Origin: https://gamebanana.com
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes
X-GBF: S50