Report - github.com/Robloxgamingdev22/main/archive/refs/heads/main.zip

Report Overview

Submitted URL
github.com/Robloxgamingdev22/main/archive/refs/heads/main.zip
IP
140.82.121.3
ASN
#36459 GITHUB
Submitted
2024-05-19 14:08:22
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
github.com	1423	2007-10-09	2016-07-13	2024-05-15	515 B	3.5 kB	140.82.121.3
codeload.github.com	62359	2007-10-09	2013-04-18	2024-05-16	516 B	1.6 MB	140.82.121.9

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
codeload.github.com/Robloxgamingdev22/main/zip/refs/heads/main
IP
140.82.121.9
ASN
#36459 GITHUB

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
1.6 MB (1641173 bytes)
Hash
8a4fef10998c40b51844f64e90e7424c
d19e3fc60aeb827a4b43920c1e109fcf03c4c739
090ba8515126ba907d262f626b81f8d1359680a81ba7dc2b0abdf4234abff8b3

Archive (14)

Filename

Md5

File type

CeleryAPI.dll

99a217bdc8c685c3b0a319d9ea8a14db

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Web.WebView2.Core.dll

e77cd7924e692b88ad687e1366142daf

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Web.WebView2.Core.xml

bd092dc2357e06927258d7e338e980d3

XML 1.0 document, ASCII text, with very long lines (1219), with CRLF line terminators

Microsoft.Web.WebView2.WinForms.dll

4ee8937206e9d8ec553a698b3a7aaa37

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Web.WebView2.WinForms.xml

c09409aac254f17c1c648e6f0464b035

XML 1.0 document, ASCII text, with very long lines (565), with CRLF line terminators

Microsoft.Web.WebView2.Wpf.dll

7300c3316258fc74822e0311f09361db

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Web.WebView2.Wpf.xml

cd83c8495fe175f446d6eb420df1a683

XML 1.0 document, ASCII text, with very long lines (560), with CRLF, CR line terminators

Siticone.Desktop.UI.dll

1582aa45d981e0e569c6e05698642b30

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

WebView2Loader.dll

8f9e7a7126a8a440aef80162940ada9a

PE32+ executable (DLL) (console) Aarch64, for MS Windows, 7 sections

WebView2Loader.dll

edf66bf72432a69f88d47696ef5762cf

PE32+ executable (DLL) (console) x86-64, for MS Windows, 10 sections

WebView2Loader.dll

6e91d5628fcaf7a67cd8cca2c2de9342

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 6 sections

windows x.exe

d427be29cbe6dc9b9531a16abfd9ca80

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

windows x.exe.config

15c8c4ba1aa574c0c00fd45bb9cce1ab

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

windows x.pdb

49c7479dc5fb5aaefac803f57f85c86c

MSVC program database ver 7.00, 512*67 bytes

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	github.com/Robloxgamingdev22/main/archive/refs/heads/main.zip	140.82.121.3	302 Found	0 B
URL User Request GET HTTP/2 github.com/Robloxgamingdev22/main/archive/refs/heads/main.zip IP 140.82.121.3:443 ASN #36459 GITHUB Certificate IssuerSectigo Limited Subjectgithub.com FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /Robloxgamingdev22/main/archive/refs/heads/main.zip HTTP/1.1 Host: github.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found server: GitHub.com date: Sun, 19 May 2024 14:07:55 GMT content-type: text/html; charset=utf-8 vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With location: https://codeload.github.com/Robloxgamingdev22/main/zip/refs/heads/main cache-control: max-age=0, private strict-transport-security: max-age=31536000; includeSubdomains; preload x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: no-referrer-when-downgrade content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/copilot-codex/completions .actions.githubusercontent.com wss://.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/ content-length: 0 x-github-request-id: B7E2:4BDF:15D6D38E:162FDFC1:664A07BB X-Firefox-Spdy: h2

	codeload.github.com/Robloxgamingdev22/main/zip/refs/heads/main	140.82.121.9	200 OK	1.6 MB
URL User Request GET HTTP/2 codeload.github.com/Robloxgamingdev22/main/zip/refs/heads/main IP 140.82.121.9:443 ASN #36459 GITHUB Certificate IssuerSectigo Limited Subject.github.com Fingerprint0D:F6:EC:50:FA:ED:AE:6E:13:AF:82:94:52:F7:11:1B:0A:CF:7C:20 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT File type Zip archive data, at least v1.0 to extract, compression method=store Size 1.6 MB (1641173 bytes) Hash 8a4fef10998c40b51844f64e90e7424c d19e3fc60aeb827a4b43920c1e109fcf03c4c739 090ba8515126ba907d262f626b81f8d1359680a81ba7dc2b0abdf4234abff8b3 HTTP Headers GET /Robloxgamingdev22/main/zip/refs/heads/main HTTP/1.1 Host: codeload.github.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK access-control-allow-origin: https://render.githubusercontent.com content-disposition: attachment; filename=main-main.zip content-length: 1641173 content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox content-type: application/zip cross-origin-resource-policy: cross-origin etag: W/"f5a6ce728ae5e42fbc1f64e5163e64517720df6e569e030bb1879b39647c087d" strict-transport-security: max-age=31536000 vary: Authorization,Accept-Encoding,Origin x-content-type-options: nosniff x-frame-options: deny x-xss-protection: 1; mode=block date: Sun, 19 May 2024 14:07:56 GMT x-github-request-id: E78F:1FE2F9:F4DD2F:12CA94D:664A07BC X-Firefox-Spdy: h2