Report - github.com/emac3399son/Vulcan/releases/download/Executor/VulcanV1.6.zip

Report Overview

Submitted URL
github.com/emac3399son/Vulcan/releases/download/Executor/VulcanV1.6.zip
IP
140.82.121.4
ASN
#36459 GITHUB
Submitted
2024-05-04 16:15:35
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
github.com	1423	2007-10-09	2016-07-13	2024-03-24	525 B	3.9 kB	140.82.121.4
objects.githubusercontent.com	134060	2014-02-06	2021-11-01	2024-05-04	993 B	13 MB	185.199.108.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
objects.githubusercontent.com/github-production-release-asset-2e65be/795917091/07953444-eb9d-418f-a74d-c896137d289c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240504%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240504T161459Z&X-Amz-Expires=300&X-Amz-Signature=25194ff84021ebbc11352ca96b3d85163e63643381288febdecb8b7ae00f366c&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=795917091&response-content-disposition=attachment%3B%20filename%3DVulcanV1.6.zip&response-content-type=application%2Foctet-stream
IP
185.199.108.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
13 MB (13074889 bytes)
Hash
d16829d98ee699ca393eb5c94bbb589e
fbfe9dc3f82c2984ac9a33ab359d8dc772c0c5e1
833d3ccd8c0e93c02a72e63335b1f374d7b2786877ae184317b8592eadba9f84

Archive (268)

Filename

Md5

File type

AddToNewGroup.LUA

83bdbb1ba0dd3c8c5a18f125951c9325

ASCII text

affinity.lua

736a8bbd0d34eefd4c1eb6d02b2f35e2

ASCII text, with CRLF line terminators

andtools.lua

dbea35855b986c3e529d5f6dedbe5ef6

JavaScript source, ASCII text, with very long lines (310)

files that should be here.txt

b49879487a12d62b4f3b03ed1909d9f7

ASCII text

autosave.LUA

005a675ddbdf7e8359aab9af19dd7000

JavaScript source, ASCII text

babyce.lua

2752eb057b40d4490c866315c6f50055

ASCII text, with CRLF line terminators

bigendian.lua

4b2ee1e7fcff5281b4f39698d8ca5a16

ASCII text

bypass.lua

2485e0ae8e8b36a52ffadbbd3c5a6b14

ASCII text, with CRLF line terminators

celib.lua

71d6e0185b6841b5c47600a2fd4700a1

C source, ASCII text

ceshare.lua

b58b18c87bde2a935dcd06ded31b3c77

ASCII text, with CRLF line terminators

ceshare_account.lua

fb24f06295b3181d16c2097ed6dd1747

ASCII text

ceshare_comments.lua

43c3d935e0ad2cb1df42b20f43a56ad0

ASCII text

ceshare_fulltablelist.lua

725139185a5ca226abee128b3e04295e

ASCII text

ceshare_permissions.lua

d2bc857c62a33e4bf7398e07cd3cb5bc

ASCII text

ceshare_processlistextention.lua

266e292c27213bbbc1b23fd7109c46b8

JavaScript source, ASCII text

ceshare_publish.lua

97f88eb067b9b902079f6a432133f365

ASCII text

ceshare_querycheats.lua

dfe5c77e0d743c7ffb02065bd3f7e085

ASCII text

ceshare_requests.lua

47b43f823355983ba06923b31c01f1ee

ASCII text

BrowseCheats.FRM

e5c6e0a2cb06d7d88b12b9743b2a839a

XML 1.0 document, ASCII text, with very long lines (8956)

CommentsOrRequests.FRM

46df3fc19fcecbef339babbe6ac1ab2d

XML 1.0 document, ASCII text, with very long lines (1145)

InitialSetup.FRM

3e2d9eccfaf4af4892657cc78b608c08

XML 1.0 document, ASCII text, with very long lines (1222)

Permissions.FRM

741c160390d89d28d9f4ea77660de5a7

XML 1.0 document, ASCII text, with very long lines (1189)

PublishCheat.FRM

2605d731d9f06cfe9291e5e4add3c563

XML 1.0 document, ASCII text, with very long lines (2354)

UpdateOrNew.FRM

442340b1ce1a2e210ac26fee6410c0f8

XML 1.0 document, ASCII text, with very long lines (869)

link.png

0212208fd406500388f08bc4189cc57e

PNG image data, 128 x 40, 8-bit/color RGBA, non-interlaced

server.txt

d41d8cd98f00b204e9800998ecf8427e

console.lua

d41d8cd98f00b204e9800998ecf8427e

copytoclipboardastext.lua

f83c9de409b7a119a56462385ff846a5

ASCII text, with CRLF line terminators

cpuid.lua

fa2ef4f82b9bdb07a9e719ce4d8b094d

ASCII text, with CRLF line terminators

Lua files in this folder get executed automatically as well.txt

1dca89c3bdc766f7c64cf6d45518810f

ASCII text, with no line terminators

CEJVMTI.dll

b02fa5c8eefbcd010aaac97a94ff62bb

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

CEJVMTI.dll

cefc5c56720ca850ccb20faf47733bd2

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

dotnetinfo.lua

61388dba068c03a20a0f8de472268349

ASCII text, with very long lines (338)

DotNetInject.lua

019537c21e839ed2dcf6372d4ee5437d

ASCII text

DotNetInterface.lua

1dce4c5122636604f6ef299e5e6d8211

ASCII text

dotnetpatch.lua

01105e6712c4a3bc94dfafd16b17e174

JavaScript source, ASCII text

dotnetsearch.lua

60543df7087b2882acaac2adf386721b

JavaScript source, ASCII text

emurpm.frm

fa01b87f59a9a20a794004e1421fde53

XML 1.0 document, ASCII text, with very long lines (1258), with CRLF line terminators

emurpm.lua

d480b6929eb8a674ceb6c8b33c75d446

ASCII text, with CRLF line terminators

DotNetInfo.frm

acaeb5f6491a070dbaac25e45f921871

XML 1.0 document, ASCII text, with very long lines (2032)

DotNetSearch.frm

27296ba069a8d9c9d50c0ba6ad506f14

XML 1.0 document, ASCII text, with very long lines (929)

frmUltimap2.FRM

4e5b77ebb18e7e86a7d9785ecffa701f

XML 1.0 document, ASCII text, with very long lines (729), with CRLF line terminators

JavaInfo.frm

f8f8e496d28baa5f02d2728333076f33

XML 1.0 document, ASCII text, with very long lines (2304)

JavaSearch.frm

60d446f50d2e3f8650f9d59c83975f34

XML 1.0 document, ASCII text, with very long lines (1172)

MonoDataCollector.frm

03d4dd46084bcbe16a39d72ba22e5446

XML 1.0 document, ASCII text, with very long lines (1475), with CRLF line terminators

export128x128.png

a9bcd80603fbcf041bc462918ca48a64

PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced

import128x128.png

660d8acf876ead3b985f9df515160838

PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced

java.lua

8348b162a9493ed769c43cf665789332

ASCII text, with CRLF line terminators

androidloadagent.CEA

74bd3a88dc4f9c40b499466592d232bf

C source, ASCII text

cejvmtiagent.c

66ae7944e718b2b5f9f213c1cd24a64e

C source, ASCII text

jvarscan.c

8d47d0a7c88fb132e6cdf95faa47a946

C source, ASCII text

javaclass.lua

e4fa493cbf4f5e932dce648a78800616

ASCII text, with CRLF line terminators

javaClassEditor.lua

96a64006f752ecd75faed81f86212f93

ASCII text, with very long lines (332), with CRLF line terminators

JavaInfo.lua

1bd760ada69fca61957f15955faa5909

ASCII text

JavaSearch.lua

673fc378a0e09bf887e95ffa87d1ada7

ASCII text

Lua files in this folder get executed automatically.txt

d41d8cd98f00b204e9800998ecf8427e

luahook.lua

08a55bfd1dcf6702c39bd107d350d2c9

ASCII text

luasymbols.lua

df4d243ab0407a1f03ccf448232fcf62

JavaScript source, ASCII text, with CRLF line terminators

MethodInvokeDialog.lua

196b14ebdf8de3baf14bca42505990c6

ASCII text

modulelistscan.lua

ca347def8a682d2adf951c4ecbabd948

JavaScript source, ASCII text, with CRLF line terminators

monoscript.lua

29456abe3b83342a896cd579e013c646

ASCII text, with CRLF line terminators

patchscan.lua

f2896031568f43a7e4a7529a16f4ea12

ASCII text, with CRLF line terminators

pseudocode.lua

2be703bf1ff1ea4dd6d1eff673367e48

ASCII text, with CRLF line terminators

pseudocodediagram.lua

49c105dc0f4e732802284180722747c2

ASCII text, with very long lines (301), with CRLF line terminators

randomize.lua

d41d8cd98f00b204e9800998ecf8427e

roblox.lua

0e6d241dbec16174252901001b45d166

ASCII text

rtit_parser.lua

d41d8cd98f00b204e9800998ecf8427e

savesession.lua

18d66678d7078c907fddb5cc4e16e94e

JavaScript source, ASCII text, with CRLF line terminators

SpeedhackV3.lua

fe317f2c28b378c0aa1211552a36e445

JavaScript source, ASCII text

splitscanintonewtab.lua

16070ac8ae7c9e1a5dfdf5353de647bd

ASCII text

threadsafegui.lua

52dfb7bdbadd7775d0479bf916cffcea

ASCII text, with no line terminators

ultimap2.lua

0343d5d130e8522727b70aeebbedd02e

ASCII text, with CRLF line terminators

versioncheck.lua

d609ea53ad996e63300e703ed98eab08

JavaScript source, ASCII text, with CRLF line terminators

xmlSimple.lua

274946677cb1fb1c63a04aeb641e21d0

ASCII text, with CRLF line terminators

buildsigs.bat

dc3119b4e011d09c240fc78b18b2dd52

ASCII text, with CRLF line terminators

CED3D10Hook.dll

43dac1f3ca6b48263029b348111e3255

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

CED3D10Hook64.dll

0daf9f07847cceb0f0760bf5d770b8c1

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

CED3D11Hook.dll

42e2bf4210f8126e3d655218bd2af2e4

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

CED3D11Hook64.dll

0eaac872aadc457c87ee995bbf45a9c1

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

ced3d9hook.dll

5f1a333671bf167730ed5f70c2c18008

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

ced3d9hook64.dll

61ba5199c4e601fa6340e46bef0dff2d

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

cedebug.txt

7fa3f05149a680ee999f67231791529a

ASCII text, with CRLF line terminators

celua.txt

fb7dfcb1f1d64e78f806e7b0719ddef6

ASCII text, with very long lines (520), with CRLF line terminators

class.lua

7b7602c12d5ab2a671d1124504e021f5

ASCII text, with CRLF line terminators

classwrapper.lua

fd75ef1a1fccdfdfceb3e8f2e7ee27aa

JavaScript source, ASCII text, with CRLF line terminators

lfs.dll

5e8ad34ff069b6a2e1ae00bdfe96b612

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

commonmodulelist.txt

cc0f8b66bfedc67da8dbb2a7df2aa006

ASCII text, with CRLF line terminators

d3dhook.dll

2a2ebe526ace7eea5d58e416783d9087

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

d3dhook64.dll

2af7afe35ab4825e58f43434f5ae9a0f

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

defines.lua

62e1fa241d417668f7c5da6e4009a5a6

ASCII text, with CRLF line terminators

donottrace.txt

a2e60a2f01f69d0da415c58f25c37e5b

ASCII text, with CRLF line terminators

FPS Fixer.exe

2a60dfd1e0f85fbaeeeedfa3c4ff7082

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

_mingw.h

dc2829239704cdd5a5109699666fa573

C source, ASCII text

assert.h

9c022d741996db6d32411bfef4eadb41

C source, ASCII text

celib.h

93d9c4c3574ff773c0a23108b6403a9f

C source, ASCII text

celog.h

586234beef9ce422e746c7a68bcea327

C source, ASCII text

cepipelib.c

dcb6ba3df687ff6dc36bfc0b5ccbf907

C source, ASCII text

cesocket.h

822b21586749c29cee674d20acb50ad9

C source, ASCII text

conio.h

6a61e54ad2614ba528414c7b69147caf

C source, ASCII text

ctype.h

22e5a00491e32d15b40b196397ad01c1

C source, ASCII text

dir.h

ef5c7267df270272bfa8f8ebd1b516f2

C source, ASCII text

direct.h

83679da78aaf8f8352acb1883b9ef868

C source, ASCII text

dirent.h

afbe32ee6ded8cbad33d6fe3fbbf077d

C source, ASCII text

dos.h

3b6fbc94238df0fd001b04d55bc899db

C source, ASCII text

errno.h

b81e5a965abd076fb52de6dfa22a78c4

C source, ASCII text

excpt.h

d236372cba09e14c37b4e48f81baef83

C source, ASCII text

fcntl.h

478add63d2c741d03a60a11bdc4fc0d3

C source, ASCII text

fenv.h

deec7c35f77ec8e22074667641ca8851

C source, ASCII text

float.h

3b2e4b0c01e5b0b790f4f6751e977cc9

C source, ASCII text

inttypes.h

6bb72461c8c72cc3b96f78c73fa803ba

C source, ASCII text

io.h

4ac0744ef16453febed8de4242997946

C source, ASCII text

jni.h

3d23d9fa1429eda9be383d8b1a8b02c1

C++ source, ASCII text

limits.h

21ce377183014c3535643c9050306a33

C source, ASCII text

locale.h

5f6a3e42f8eb297b888b498d93437c3c

C source, ASCII text

malloc.h

537bc027e86f7252d88b6bf2fe5b2f35

C source, ASCII text

math.h

631f16c4a65cf2f47fa49c9220d9c500

C source, ASCII text

mem.h

534517144e5b9ed662526771bb5d7e13

C source, ASCII text

memory.h

29f62b1add26dc1aed3faad03fac030d

C source, ASCII text

process.h

f06edaf6ab750607c33c37bfe50b2eb2

C source, ASCII text

conio_s.h

5bc78aa26af6ce836f322cd5a432e368

C source, ASCII text

crtdbg_s.h

f0c359a5aa08a907a23d2c0c5aa68e5c

C source, ASCII text

io_s.h

aaf6330564dc2b4b413908ef435956af

C source, ASCII text

mbstring_s.h

ededeec78fa33c84025495013a88bf1a

C source, ASCII text

search_s.h

e0c3256d4be1ad2a506755eb847c2d39

C source, ASCII text

stdio_s.h

3c28755c2186dabae016938e1308b77f

C source, ASCII text

stdlib_s.h

ae13bd6218c4840eacac71f31c45b2bc

C source, ASCII text

stralign_s.h

c46db571cfdb29ea8f977222b4bda152

C source, ASCII text

string_s.h

544899f39ca616ae07d97a2fee8de3d4

C source, ASCII text

timeb_s.h

001fd701688e91d3781d43714b993275

C source, ASCII text

tchar_s.h

1c3243d5951ccf4c4007e89fd366631d

C source, ASCII text

time_s.h

edc9cc4a2a0b921d3167f19d2d162f0b

C source, ASCII text

wchar_s.h

37c52897cbb44a15bd22203cf8882566

C source, ASCII text

setjmp.h

8bf97dc43b347cbcf622768ef43090ef

C source, ASCII text

share.h

540ef403878ddbe2d4682540da20095f

C source, ASCII text

signal.h

a106c85866bf88a68510029349149b52

C source, ASCII text

stdarg.h

e196af7b3187bbb24d051785afe81953

C source, ASCII text

stdbool.h

7d294f4ec2c9640974803a61153ef3dd

C source, ASCII text

stddef.h

8b03f5da84f6175fb1213c1208bb0944

C source, ASCII text

stdint.h

90c1945afa014fc0f8d17078c51502ca

C source, ASCII text

stdio.h

f4948adea7d9f60748de8b427ab85684

C source, ASCII text

stdlib.h

53d74bf044942015fec4afd293d2f9a8

C source, ASCII text

string.h

7e3ac3220bf883da2db8cdc7b8100d0b

C source, ASCII text

fcntl.h

26dac89b148799164d02ac701aa67e91

C source, ASCII text

file.h

da489932c3143982e94284f464f835cd

C source, ASCII text

locking.h

28bd6385b1c6af18f7b2b2fa7f66827a

C source, ASCII text

stat.h

c03d618d6697b5e3992feea86a9c4cb8

C source, ASCII text

time.h

d8bdddb8a0b2e59371ce79ef056873c5

C source, ASCII text

timeb.h

19e8a20458a7627517ad83c0be798773

C source, ASCII text

types.h

c8f3b2f1fcf386398b5f130f0599a72e

C source, ASCII text

unistd.h

244c135562d0b700d037299e0052a855

C source, ASCII text

utime.h

0fd455848e3b07648883ff0c890ba3b6

C source, ASCII text

tccdefs.h

42a6d0370be3b3ec3af6cca44a19085f

C source, ASCII text

tchar.h

e237270733edc1cb97b10870a3d50a69

C source, ASCII text

time.h

698ea0c0196ba07e9b949406dbb9ffd7

C source, ASCII text

vadefs.h

dda4463da15121ed7ad4f091fbf61dff

C source, ASCII text

values.h

621045ae9ca57fe30c8a99dd52ac5703

ASCII text

varargs.h

8c659fcb5ba111c2a40716a84a2540d8

C source, ASCII text

wchar.h

d6b25f8e3068967751493431b36c4248

C source, ASCII text

wctype.h

c238cfa11a44926becd364ab35bfc821

C source, ASCII text

basetsd.h

4bf8483ca6a55237b88b3fb04917c9b4

C source, ASCII text

basetyps.h

09dfc50c697476fdc240969717c514ce

C source, ASCII text

guiddef.h

d65fffb282c1f60ccbfc4dcf1410be1f

C source, ASCII text

poppack.h

584ebd620b89c671805eb5917278c46f

C source, ASCII text

pshpack1.h

f7ce406b57af97c8ba95eeb9d7840c1d

C source, ASCII text

pshpack2.h

5f9ba2a3122f6963219bdd95eff0d63b

C source, ASCII text

pshpack4.h

9e2e16a461b193bae9e69c59c9a3e040

C source, ASCII text

pshpack8.h

4fa6301a9105c4442fcd8181b17bf100

C source, ASCII text

winbase.h

18908ace3445091e5966cc99f9d4b5b9

C source, ASCII text

wincon.h

a7eac92053e54e029dc3b8356a49df4a

C source, ASCII text

windef.h

4149cf07a0fcb5fafab7f58bcc951d8c

C source, ASCII text

windows.h

437b745f448ba343620fef2015b72e78

C source, ASCII text

winerror.h

8a51f06df0cb380eb7e944203bfede79

C source, ASCII text

wingdi.h

fd80383f6f92379e074379ba54d68bdc

C source, ASCII text

winnt.h

39ab9e1d4a6b6871fc59d837a1910566

C source, ASCII text

winreg.h

0f0e5cb60e379839ac67467a6fd5280f

C source, ASCII text, with very long lines (302)

winuser.h

3243b7c1189cc2c02075c2b175592ea9

C source, ASCII text

winver.h

f0ef1b8ee3a22c3fa3ca4dd26012e309

C source, ASCII text

windowslite.h

224cc44e19c82adda32c4517bd2244a2

C source, ASCII text

CeShare.po

f712b9cbbdc01af1c84eab72ff35945d

GNU gettext message catalogue, ASCII text, with very long lines (333)

cheatengine-x86_64.pot

8319dc1e7c2c2b5b66adf2a088dc8f1c

GNU gettext message catalogue, ASCII text, with very long lines (332), with CRLF line terminators

cheatengine-x86_64.mo

418d25971cf08b7cb32222276ecf309a

GNU message catalog (little endian), revision 0.0, 286 messages, Project-Id-Version: 'OK'

cheatengine-x86_64.po

8888ef721b979f6c51f43f28805ec2c8

GNU gettext message catalogue, Unicode text, UTF-8 text, with very long lines (950)

lclstrconsts.mo

23b2b28677b8cf7ce5696bb492cfb97e

GNU message catalog (little endian), revision 0.0, 348 messages, MIME-Version: 1.0 ' modifié'

lclstrconsts.po

28a30b419a8f53132b8142c9f8cea001

GNU gettext message catalogue, Unicode text, UTF-8 text, with very long lines (532), with CRLF line terminators

LisezMoi.md

e54ab571faa01e329df1e3d56ec7f357

Unicode text, UTF-8 text

tutorial-x86_64.mo

8712ee7b6e8363f302dcfc8d2fcad9e2

GNU message catalog (little endian), revision 0.0, 127 messages, Content-Type: text/plain; charset=UTF-8 'La valeur diminue de '

tutorial-x86_64.po

7c44a9a6cf6c34969513e358a5f0f0d8

GNU gettext message catalogue, Unicode text, UTF-8 text, with very long lines (516), with CRLF line terminators

How to add languages.txt

05e8f84a134363796895e8ab8089619a

GNU gettext message catalogue, ASCII text, with CRLF line terminators

Java.po

fb45f5fda48f17ad205d774c17c4eb7e

GNU gettext message catalogue, ASCII text, with CRLF line terminators

lclstrconsts.po

a834dbcc0942163fcb23f54a60ca4b9e

GNU gettext message catalogue, ASCII text, with very long lines (407), with CRLF line terminators

LICENSE.MD

5c97b34fc0cc94fcbbf1b512bce8615c

Unicode text, UTF-8 text

monoscript.po

88aa70920ca5ac069cd30d17e13348d2

GNU gettext message catalogue, Unicode text, UTF-8 text, with CRLF line terminators

name.txt

7bf34ebe7ef8552f8c1acc75d47c33c7

ASCII text, with no line terminators

SaveSessions.po

323d1f71909174694a300e97b2dfd585

GNU gettext message catalogue, ASCII text, with CRLF line terminators

VersionCheck.po

1a0f7c0fca4d9d404d9e2032bef11227

GNU gettext message catalogue, Unicode text, UTF-8 text, with CRLF line terminators

Java.po

fc3504dd7281f478fa29530b4bdbc3d8

GNU gettext message catalogue, ASCII text, with CRLF line terminators

language.ini

af5ed8f4fe5370516403ae39200f5a4f

ASCII text, with CRLF line terminators

lclstrconsts.po

b16c41734ccb91d59d6efd720b8cc5c2

GNU gettext message catalogue, ASCII text, with very long lines (407), with CRLF line terminators

monoscript.po

5194e6aac00716ceb7498a8263abdb03

GNU gettext message catalogue, ASCII text, with CRLF line terminators

patchscan.po

9924b578270ab864e800bf38b2fa65be

GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

pseudocodediagram.po

5d6d7a6a5adc10bb638b085fa47a5a00

GNU gettext message catalogue, ASCII text, with CRLF line terminators

CeShare.po

291031ed68fbadb700fd1b49558b1736

GNU gettext message catalogue, Unicode text, UTF-8 text

cheatengine-x86_64.po

2e8359ebee38507ba4e3156765e283c7

GNU gettext message catalogue, Unicode text, UTF-8 text, with very long lines (541)

Java.po

d4972617ed3b5e0b39e98eb5ef84a99f

GNU gettext message catalogue, Unicode text, UTF-8 text

lclstrconsts.po

ba0200e53e6df38c159f927fbf7cf461

GNU gettext message catalogue, Unicode text, UTF-8 text, with very long lines (407)

monoscript.po

d274a828683ef41f6dee6cf9869fa1ac

GNU gettext message catalogue, Unicode text, UTF-8 text

name.txt

deba6920e70615401385fe1fb5a379ec

ASCII text, with no line terminators

patchscan.po

ec74f1d5ca7532c839de714088532d39

GNU gettext message catalogue, Unicode text, UTF-8 text

pseudocodediagram.po

e737bec03cd08471f85f00b014cb198a

GNU gettext message catalogue, Unicode text, UTF-8 text

SaveSessions.po

823f764d18b0badc1501ddc26d8f5894

GNU gettext message catalogue, Unicode text, UTF-8 text

tutorial-x86_64.po

5945d4ea925111074dcb3d127f0779c9

GNU gettext message catalogue, Unicode text, UTF-8 text

VersionCheck.po

41ddaf8e3914b83e2775b94509058b37

GNU gettext message catalogue, Unicode text, UTF-8 text

SaveSessions.po

684c9b4a3ee100b044c2bfb0edd64919

GNU gettext message catalogue, ASCII text, with CRLF line terminators

VersionCheck.po

f67f26aecac8f570a9eb02f0929abac5

GNU gettext message catalogue, ASCII text, with CRLF line terminators

CeShare.po

f0351ee34762307223881130e9238ecc

GNU gettext message catalogue, Unicode text, UTF-8 text, with very long lines (333)

cheatengine.po

b457286be90ac2ab656655beae98519b

GNU gettext message catalogue, Unicode text, UTF-8 text

cheatengine-x86_64.po

03efe5b34dea4db3a1886740ff1ed1ce

Unicode text, UTF-8 text, with very long lines (4498)

java.po

dc2d145a5eff9193b420427711e76749

GNU gettext message catalogue, Unicode text, UTF-8 text

lclstrconsts.po

28153d71c98335c83400dd373c31a696

GNU gettext message catalogue, Unicode text, UTF-8 text, with very long lines (407)

monoscript.po

d0a354e039ade932fb3f319b7c0ae3d0

GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text

patchscan.po

5430be56b886b9f46aa43a62b69a6c5c

GNU gettext message catalogue, Unicode text, UTF-8 text

pseudocodediagram.po

159bacad112d63a27f38470ea7b14414

GNU gettext message catalogue, Unicode text, UTF-8 text

SaveSessions.po

a1af391e6bf1a3832aa2089d4aa5421e

GNU gettext message catalogue, Unicode text, UTF-8 text

tutorial-x86_64.po

f08829d4862126d571858222924b3f16

GNU gettext message catalogue, Unicode text, UTF-8 text, with very long lines (516)

VersionCheck.po

c31e6d3826b048523ff5d1443a6fd3f4

GNU gettext message catalogue, Unicode text, UTF-8 text

cheatengine-x86_64.po

593d9c32ce7fa0b2c3768e9fcb6c2f4d

Unicode text, UTF-8 text, with very long lines (4498), with CRLF line terminators

Java.po

8544d544a02ce4d4cfd70f8507c782f0

GNU gettext message catalogue, Unicode text, UTF-8 text

lclstrconsts.po

b75bac6436311c4e973437fe7595df0f

GNU gettext message catalogue, Unicode text, UTF-8 text, with very long lines (407), with CRLF line terminators

monoscript.po

ff7e43456cb15162dd5bc46a4c8fad6c

GNU gettext message catalogue, Unicode text, UTF-8 text, with CRLF line terminators

patchscan.po

9aebdbad6495d6bb49f5beb90a14a2e6

GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

pseudocodediagram.po

c450f2e0121d1467fa95cfe66418ef4a

GNU gettext message catalogue, Unicode text, UTF-8 text, with CRLF line terminators

SaveSessions.po

50cce0ae4c4da485e79952508d45f931

GNU gettext message catalogue, Unicode text, UTF-8 text, with CRLF line terminators

tutorial-x86_64.po

c25ae66a8a5d793235ef294477c1fee4

GNU gettext message catalogue, Unicode text, UTF-8 text, with very long lines (516), with CRLF line terminators

VersionCheck.po

099b08f773acd9543a090da739a525c5

GNU gettext message catalogue, Unicode text, UTF-8 text, with CRLF line terminators

libipt-32.dll

df443813546abcef7f33dd9fc0c6070a

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

libipt-64.dll

4a3b7c52ef32d936e3167efc1e920ae6

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

libmikmod32.dll

462322cc93e55016d5ea78b2b9823657

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections

libmikmod64.dll

a358dae60f1c0f6a633f98b1e4d3e850

PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections

lauxlib.pas

0bd62a0ecf9992908911c6c979310f90

Mathematica 3.0 notebook

lua.pas

f9bd1c950aa2da4529990e82170d3194

Mathematica 3.0 notebook

lualib.pas

35556e730e02f12d2420c9161bc591e0

Mathematica 3.0 notebook

lua.exe

47eb9bc40eaff591fb8ad620fcd5ddb6

PE32+ executable (console) x86-64, for MS Windows, 5 sections

lua53-32.exp

8e2f1f78a05726e9ef16c8312265a33c

Intel amd64 COFF object file, not stripped, 2 sections, symbol offset=0x2705, 298 symbols, created Tue May 12 00:42:35 2015, 1st section name ".edata"

lua53-32.lib

20c07f6190b01a71aeab0a895a13f27e

current ar archive

lua53-64.dll

b7c9f1e7e640f1a034be84af86970d45

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

lua53-64.exp

8982cef561f3b993bc5d6ac9ee65eafb

Intel amd64 COFF object file, not stripped, 2 sections, symbol offset=0x2705, 298 symbols, created Wed Apr 29 23:59:15 2015, 1st section name ".edata"

lua53-64.lib

e8309f93c098abb4050d71721f4b5cbd

current ar archive

luac32.exe

fc079563300f94faebe1766b38f6ea7f

PE32 executable (console) Intel 80386, for MS Windows, 5 sections

luac64.exe

11bf3ec9ca538fd344e8ac08504a3fae

PE32+ executable (console) x86-64, for MS Windows, 6 sections

lua53-32.dll

ad3f33bac8eadab224adaf4cf6d5b97a

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

lua53-64.dll

b7c9f1e7e640f1a034be84af86970d45

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

main.lua

62771a63fdc87764bff87d82918ab02a

JavaScript source, ASCII text, with CRLF line terminators

nil

a07a697a3f0c8ad11a573a53f6c716e9

ASCII text, with no line terminators

overlay.fx

650c02fc9f949d14d62e32dd7a894f5e

C source, ASCII text, with CRLF line terminators

packfiles.bat

76515d7229e5e892557c9a8c92fd7809

ASCII text

process.exe

0929566e04a5e598d98f5244fff343c0

PE32+ executable (console) x86-64, for MS Windows, 10 sections

run.exe

87b2e541bd839db2e6dfc0a6d1990c03

PE32+ executable (console) x86-64, for MS Windows, 11 sections

settings

6ad74483f0c3262b4426a94ba442d4a5

ASCII text, with CRLF line terminators

standalonephase1.dat

eb339eecec8aa8c0fd3b08d39799d4d8

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

tiny.dat

419bfebb2f430bc8a246515bd55e024e

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

VulcanV1.exe

f2c4d5f2e82c7e67e47f74911c141605

PE32+ executable (GUI) x86-64, for MS Windows, 9 sections

dbghelp.dll

7a7a9cd081ab016f84249ef4f06493ad

PE32+ executable (DLL) (console) x86-64, for MS Windows, 8 sections

dbghelp.dll

893ec728b6fa9d7277963847bd408f4f

PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections

symsrv.dll

896ab17393ec4956d4dfded6a769bbbc

PE32+ executable (DLL) (console) x86-64, for MS Windows, 7 sections

sqlite3.dll

c11138204609ea63a3e88b4c8c09b035

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections

symsrv.dll

1473a9ccb67526d4010f1b0f9e6b2977

PE32+ executable (DLL) (console) x86-64, for MS Windows, 8 sections

symsrv.yes

7215ee9c7d9dc229d2921a40e899ec5f

very short file (no magic)

IMPORTANT.txt

573ea7bff67e13a173363b04d4a0e993

ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
Public Nextron YARA rules	malware	Detects imphash often found in malware samples (Zero hits with with search for 'imphash:x p:0' on Virustotal)
Public Nextron YARA rules	malware	Detects suspicious InjectDLL keyword found in hacktools or possibly unwanted applications
VirusTotal	malicious	VirusTotal - Scan result 32/67

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

github.com/emac3399son/Vulcan/releases/download/Executor/VulcanV1.6.zip

140.82.121.4

302 Found

0 B

URL User Request GET HTTP/2
github.com/emac3399son/Vulcan/releases/download/Executor/VulcanV1.6.zip
IP
140.82.121.4:443
ASN
#36459 GITHUB

Certificate
IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /emac3399son/Vulcan/releases/download/Executor/VulcanV1.6.zip HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: GitHub.com
date: Sat, 04 May 2024 16:14:59 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/795917091/07953444-eb9d-418f-a74d-c896137d289c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240504%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240504T161459Z&X-Amz-Expires=300&X-Amz-Signature=25194ff84021ebbc11352ca96b3d85163e63643381288febdecb8b7ae00f366c&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=795917091&response-content-disposition=attachment%3B%20filename%3DVulcanV1.6.zip&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: D8B8:30997F:18D0B874:192D80DB:66365F03
X-Firefox-Spdy: h2

objects.githubusercontent.com/github-production-release-asset-2e65be/795917091/07953444-eb9d-418f-a74d-c896137d289c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240504%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240504T161459Z&X-Amz-Expires=300&X-Amz-Signature=25194ff84021ebbc11352ca96b3d85163e63643381288febdecb8b7ae00f366c&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=795917091&response-content-disposition=attachment%3B%20filename%3DVulcanV1.6.zip&response-content-type=application%2Foctet-stream

185.199.108.133

200 OK

13 MB

URL User Request GET HTTP/2
objects.githubusercontent.com/github-production-release-asset-2e65be/795917091/07953444-eb9d-418f-a74d-c896137d289c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240504%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240504T161459Z&X-Amz-Expires=300&X-Amz-Signature=25194ff84021ebbc11352ca96b3d85163e63643381288febdecb8b7ae00f366c&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=795917091&response-content-disposition=attachment%3B%20filename%3DVulcanV1.6.zip&response-content-type=application%2Foctet-stream
IP
185.199.108.133:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
13 MB (13074889 bytes)
Hash
d16829d98ee699ca393eb5c94bbb589e
fbfe9dc3f82c2984ac9a33ab359d8dc772c0c5e1
833d3ccd8c0e93c02a72e63335b1f374d7b2786877ae184317b8592eadba9f84

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 32/67

HTTP Headers

GET /github-production-release-asset-2e65be/795917091/07953444-eb9d-418f-a74d-c896137d289c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240504%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240504T161459Z&X-Amz-Expires=300&X-Amz-Signature=25194ff84021ebbc11352ca96b3d85163e63643381288febdecb8b7ae00f366c&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=795917091&response-content-disposition=attachment%3B%20filename%3DVulcanV1.6.zip&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Sat, 04 May 2024 12:24:04 GMT
etag: "0x8DC6C3516A954EF"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 15a44785-a01e-0023-3e1d-9e7b96000000
x-ms-version: 2020-10-02
x-ms-creation-time: Sat, 04 May 2024 12:24:04 GMT
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=VulcanV1.6.zip
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 0
date: Sat, 04 May 2024 16:15:00 GMT
x-served-by: cache-iad-kiad7000024-IAD, cache-hel1410032-HEL
x-cache: HIT, MISS
x-cache-hits: 16, 0
x-timer: S1714839300.132824,VS0,VE567
content-length: 13074889
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (268)

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers