Report - huggingface.co/spaces/lozanogamer/lozanogamers/resolve/main/2Play%20Boxhead.exe?download=true

Report Overview

Submitted URL
huggingface.co/spaces/lozanogamer/lozanogamers/resolve/main/2Play%20Boxhead.exe?download=true
IP
143.204.55.121
ASN
#16509 AMAZON-02
Submitted
2024-05-05 00:24:21
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
huggingface.co	111951	2016-07-18	2016-09-18	2024-05-02	547 B	4.6 kB	143.204.55.124
cdn-lfs-us-1.huggingface.co	unknown	2016-07-18	2023-10-24	2024-05-02	1.7 kB	3.4 MB	143.204.55.117

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
cdn-lfs-us-1.huggingface.co/repos/81/ce/81ceb132a26e063686304c05d6685c46f92a38e7d72e5f9d211c47cbdafd1a61/54c6c2a3fa306f9ea7a1899e7643e67f1138ac2d3ba53a9cdaf6141d142630a6?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%272Play%2520Boxhead.exe%3B+filename%3D%222Play+Boxhead.exe%22%3B&response-content-type=application%2Fx-msdos-program&Expires=1715127835&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTEyNzgzNX19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy11cy0xLmh1Z2dpbmdmYWNlLmNvL3JlcG9zLzgxL2NlLzgxY2ViMTMyYTI2ZTA2MzY4NjMwNGMwNWQ2Njg1YzQ2ZjkyYTM4ZTdkNzJlNWY5ZDIxMWM0N2NiZGFmZDFhNjEvNTRjNmMyYTNmYTMwNmY5ZWE3YTE4OTllNzY0M2U2N2YxMTM4YWMyZDNiYTUzYTljZGFmNjE0MWQxNDI2MzBhNj9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPSomcmVzcG9uc2UtY29udGVudC10eXBlPSoifV19&Signature=TdGC1VZYNMG028C381TsGdzBuIWtugd4raEa8FMPslK9II2-iY7nVDXxzxD5HAzYIyGdrRl0CuJe070kTTpV%7EhQlPBv2EaVHxRb57e0-sZnQiRCDpPaIPipu7AbCIaalDia-f8DKdp0GfyhKd4QcSv3gzn3Gp0R1v20d5-htzaqsUPpHohK8w6SakRg33ymHInBOtlooNYr7GtV%7Ehdx9S9XFYcJRujVzz2ZU3jsEhPkGlvdsNdqfMvdf8FtLLsFp4Ya%7EcsLzyXOfFcQJomoY-NyFtHyNNKzmAx9iO2quYy-edG1c5sTq9oG7b2A0P%7EaClghAhFuO72mwhCyw%7EGS9Qw__&Key-Pair-Id=KCD77M1F0VK2B
IP
143.204.55.117
ASN
#16509 AMAZON-02

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections
Size
3.4 MB (3425821 bytes)
Hash
599e591e19aa52ce6df967d7e721bec5
8a1796f51bbe2a9e0c2cbb61b3d6161f19f9ce8c
54c6c2a3fa306f9ea7a1899e7643e67f1138ac2d3ba53a9cdaf6141d142630a6

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 3/71

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

huggingface.co/spaces/lozanogamer/lozanogamers/resolve/main/2Play%20Boxhead.exe?download=true

143.204.55.124

302 Found

2.5 kB

URL User Request GET HTTP/2
huggingface.co/spaces/lozanogamer/lozanogamers/resolve/main/2Play%20Boxhead.exe?download=true
IP
143.204.55.124:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjecthuggingface.co
Fingerprint5E:E9:95:38:5E:8D:B5:4C:22:78:A8:D3:68:AD:BC:17:0B:1F:2C:06
ValidityTue, 13 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (2492), with no line terminators
Size
2.5 kB (2492 bytes)
Hash
7186e0ae649a5e7ecf837128bbe5e3cf
1f7ea1eb27529425b56e1657bc74ecb23e525670
3aabea63d787dbfc984c38e3b2e9cebf72e1487b6cf7d20fd753b32c9ae73069

HTTP Headers

GET /spaces/lozanogamer/lozanogamers/resolve/main/2Play%20Boxhead.exe?download=true HTTP/1.1
Host: huggingface.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 2492
location: https://cdn-lfs-us-1.huggingface.co/repos/81/ce/81ceb132a26e063686304c05d6685c46f92a38e7d72e5f9d211c47cbdafd1a61/54c6c2a3fa306f9ea7a1899e7643e67f1138ac2d3ba53a9cdaf6141d142630a6?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%272Play%2520Boxhead.exe%3B+filename%3D%222Play+Boxhead.exe%22%3B&response-content-type=application%2Fx-msdos-program&Expires=1715127835&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTEyNzgzNX19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy11cy0xLmh1Z2dpbmdmYWNlLmNvL3JlcG9zLzgxL2NlLzgxY2ViMTMyYTI2ZTA2MzY4NjMwNGMwNWQ2Njg1YzQ2ZjkyYTM4ZTdkNzJlNWY5ZDIxMWM0N2NiZGFmZDFhNjEvNTRjNmMyYTNmYTMwNmY5ZWE3YTE4OTllNzY0M2U2N2YxMTM4YWMyZDNiYTUzYTljZGFmNjE0MWQxNDI2MzBhNj9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPSomcmVzcG9uc2UtY29udGVudC10eXBlPSoifV19&Signature=TdGC1VZYNMG028C381TsGdzBuIWtugd4raEa8FMPslK9II2-iY7nVDXxzxD5HAzYIyGdrRl0CuJe070kTTpV%7EhQlPBv2EaVHxRb57e0-sZnQiRCDpPaIPipu7AbCIaalDia-f8DKdp0GfyhKd4QcSv3gzn3Gp0R1v20d5-htzaqsUPpHohK8w6SakRg33ymHInBOtlooNYr7GtV%7Ehdx9S9XFYcJRujVzz2ZU3jsEhPkGlvdsNdqfMvdf8FtLLsFp4Ya%7EcsLzyXOfFcQJomoY-NyFtHyNNKzmAx9iO2quYy-edG1c5sTq9oG7b2A0P%7EaClghAhFuO72mwhCyw%7EGS9Qw__&Key-Pair-Id=KCD77M1F0VK2B
date: Sun, 05 May 2024 00:23:55 GMT
x-powered-by: huggingface-moon
cross-origin-opener-policy: same-origin
referrer-policy: strict-origin-when-cross-origin
x-request-id: Root=1-6636d19b-5f9793217a050d25566b34cc
access-control-allow-origin: https://huggingface.co
vary: Origin, Accept
access-control-expose-headers: X-Repo-Commit,X-Request-Id,X-Error-Code,X-Error-Message,ETag,Link,Accept-Ranges,Content-Range
x-repo-commit: 576fd1e45355b0db6cd9468e9861253289aa77a1
accept-ranges: bytes
x-linked-size: 3425821
x-linked-etag: "54c6c2a3fa306f9ea7a1899e7643e67f1138ac2d3ba53a9cdaf6141d142630a6"
x-cache: Miss from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CC7_MZw1148_3Lq4q3D0tx1hhe6vAq7mxm3lqnDxjDyNNiwSck3W8g==
X-Firefox-Spdy: h2

cdn-lfs-us-1.huggingface.co/repos/81/ce/81ceb132a26e063686304c05d6685c46f92a38e7d72e5f9d211c47cbdafd1a61/54c6c2a3fa306f9ea7a1899e7643e67f1138ac2d3ba53a9cdaf6141d142630a6?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%272Play%2520Boxhead.exe%3B+filename%3D%222Play+Boxhead.exe%22%3B&response-content-type=application%2Fx-msdos-program&Expires=1715127835&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTEyNzgzNX19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy11cy0xLmh1Z2dpbmdmYWNlLmNvL3JlcG9zLzgxL2NlLzgxY2ViMTMyYTI2ZTA2MzY4NjMwNGMwNWQ2Njg1YzQ2ZjkyYTM4ZTdkNzJlNWY5ZDIxMWM0N2NiZGFmZDFhNjEvNTRjNmMyYTNmYTMwNmY5ZWE3YTE4OTllNzY0M2U2N2YxMTM4YWMyZDNiYTUzYTljZGFmNjE0MWQxNDI2MzBhNj9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPSomcmVzcG9uc2UtY29udGVudC10eXBlPSoifV19&Signature=TdGC1VZYNMG028C381TsGdzBuIWtugd4raEa8FMPslK9II2-iY7nVDXxzxD5HAzYIyGdrRl0CuJe070kTTpV%7EhQlPBv2EaVHxRb57e0-sZnQiRCDpPaIPipu7AbCIaalDia-f8DKdp0GfyhKd4QcSv3gzn3Gp0R1v20d5-htzaqsUPpHohK8w6SakRg33ymHInBOtlooNYr7GtV%7Ehdx9S9XFYcJRujVzz2ZU3jsEhPkGlvdsNdqfMvdf8FtLLsFp4Ya%7EcsLzyXOfFcQJomoY-NyFtHyNNKzmAx9iO2quYy-edG1c5sTq9oG7b2A0P%7EaClghAhFuO72mwhCyw%7EGS9Qw__&Key-Pair-Id=KCD77M1F0VK2B

143.204.55.117

200 OK

3.4 MB

URL User Request GET HTTP/2
cdn-lfs-us-1.huggingface.co/repos/81/ce/81ceb132a26e063686304c05d6685c46f92a38e7d72e5f9d211c47cbdafd1a61/54c6c2a3fa306f9ea7a1899e7643e67f1138ac2d3ba53a9cdaf6141d142630a6?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%272Play%2520Boxhead.exe%3B+filename%3D%222Play+Boxhead.exe%22%3B&response-content-type=application%2Fx-msdos-program&Expires=1715127835&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTEyNzgzNX19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy11cy0xLmh1Z2dpbmdmYWNlLmNvL3JlcG9zLzgxL2NlLzgxY2ViMTMyYTI2ZTA2MzY4NjMwNGMwNWQ2Njg1YzQ2ZjkyYTM4ZTdkNzJlNWY5ZDIxMWM0N2NiZGFmZDFhNjEvNTRjNmMyYTNmYTMwNmY5ZWE3YTE4OTllNzY0M2U2N2YxMTM4YWMyZDNiYTUzYTljZGFmNjE0MWQxNDI2MzBhNj9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPSomcmVzcG9uc2UtY29udGVudC10eXBlPSoifV19&Signature=TdGC1VZYNMG028C381TsGdzBuIWtugd4raEa8FMPslK9II2-iY7nVDXxzxD5HAzYIyGdrRl0CuJe070kTTpV%7EhQlPBv2EaVHxRb57e0-sZnQiRCDpPaIPipu7AbCIaalDia-f8DKdp0GfyhKd4QcSv3gzn3Gp0R1v20d5-htzaqsUPpHohK8w6SakRg33ymHInBOtlooNYr7GtV%7Ehdx9S9XFYcJRujVzz2ZU3jsEhPkGlvdsNdqfMvdf8FtLLsFp4Ya%7EcsLzyXOfFcQJomoY-NyFtHyNNKzmAx9iO2quYy-edG1c5sTq9oG7b2A0P%7EaClghAhFuO72mwhCyw%7EGS9Qw__&Key-Pair-Id=KCD77M1F0VK2B
IP
143.204.55.117:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjecthuggingface.co
Fingerprint5E:E9:95:38:5E:8D:B5:4C:22:78:A8:D3:68:AD:BC:17:0B:1F:2C:06
ValidityTue, 13 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections
Size
3.4 MB (3425821 bytes)
Hash
599e591e19aa52ce6df967d7e721bec5
8a1796f51bbe2a9e0c2cbb61b3d6161f19f9ce8c
54c6c2a3fa306f9ea7a1899e7643e67f1138ac2d3ba53a9cdaf6141d142630a6

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 3/71

HTTP Headers

GET /repos/81/ce/81ceb132a26e063686304c05d6685c46f92a38e7d72e5f9d211c47cbdafd1a61/54c6c2a3fa306f9ea7a1899e7643e67f1138ac2d3ba53a9cdaf6141d142630a6?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%272Play%2520Boxhead.exe%3B+filename%3D%222Play+Boxhead.exe%22%3B&response-content-type=application%2Fx-msdos-program&Expires=1715127835&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTEyNzgzNX19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy11cy0xLmh1Z2dpbmdmYWNlLmNvL3JlcG9zLzgxL2NlLzgxY2ViMTMyYTI2ZTA2MzY4NjMwNGMwNWQ2Njg1YzQ2ZjkyYTM4ZTdkNzJlNWY5ZDIxMWM0N2NiZGFmZDFhNjEvNTRjNmMyYTNmYTMwNmY5ZWE3YTE4OTllNzY0M2U2N2YxMTM4YWMyZDNiYTUzYTljZGFmNjE0MWQxNDI2MzBhNj9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPSomcmVzcG9uc2UtY29udGVudC10eXBlPSoifV19&Signature=TdGC1VZYNMG028C381TsGdzBuIWtugd4raEa8FMPslK9II2-iY7nVDXxzxD5HAzYIyGdrRl0CuJe070kTTpV%7EhQlPBv2EaVHxRb57e0-sZnQiRCDpPaIPipu7AbCIaalDia-f8DKdp0GfyhKd4QcSv3gzn3Gp0R1v20d5-htzaqsUPpHohK8w6SakRg33ymHInBOtlooNYr7GtV%7Ehdx9S9XFYcJRujVzz2ZU3jsEhPkGlvdsNdqfMvdf8FtLLsFp4Ya%7EcsLzyXOfFcQJomoY-NyFtHyNNKzmAx9iO2quYy-edG1c5sTq9oG7b2A0P%7EaClghAhFuO72mwhCyw%7EGS9Qw__&Key-Pair-Id=KCD77M1F0VK2B HTTP/1.1
Host: cdn-lfs-us-1.huggingface.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/x-msdos-program
content-length: 3425821
date: Sun, 05 May 2024 00:22:19 GMT
last-modified: Sat, 20 Apr 2024 02:15:08 GMT
etag: "599e591e19aa52ce6df967d7e721bec5"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
content-disposition: attachment; filename*=UTF-8''2Play%20Boxhead.exe; filename="2Play Boxhead.exe";
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1VK09ACEAvyaypZtWM-5wkfaTpz4lzil_2Xu141KEq8TseB0LCMt3A==
age: 98
vary: Origin
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers