Report - github.com/X-Hax/SA-Mod-Manager/raw/master/SA-Mod-Manager/Resources/bass.zip

Report Overview

Submitted URL
github.com/X-Hax/SA-Mod-Manager/raw/master/SA-Mod-Manager/Resources/bass.zip
IP
140.82.121.4
ASN
#36459 GITHUB
Submitted
2024-04-19 00:28:26
Access
public
Website Title
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
raw.githubusercontent.com	35802	2014-02-06	2014-03-01	2024-04-18	541 B	3.6 MB	185.199.109.133
github.com	1423	2007-10-09	2016-07-13	2024-03-24	530 B	3.5 kB	140.82.121.4

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
raw.githubusercontent.com/X-Hax/SA-Mod-Manager/master/SA-Mod-Manager/Resources/bass.zip
IP
185.199.109.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.6 MB (3571699 bytes)
Hash
f91e4a15e6e187aeb81773264e2635e5
c1c72ed9adb88da230460abb7a75990a4c378e54
52bd46276b4fcd80ad35ed7cbbb2a950b400fe80a7a6f95844244b30e7a53273

Archive (14)

Filename

Md5

File type

avcodec-vgmstream-59.dll

376059296f3ce7f5650c835bcaa4756a

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

avformat-vgmstream-59.dll

b178540d90ff8a51fb516f209cff9901

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

avutil-vgmstream-57.dll

aecb373c0b9db5fbbee19bf161365d93

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

bass.dll

f2a113b6ee24d9382953c9729ae357af

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections

bass_vgmstream.dll

7f8aa2757bc949ecbd29e04e6d7e3b0e

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

jansson.dll

afc994639d9e6459c39a41093dda28ed

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections

libatrac9.dll

8ca427d6db0e8103933498785a3d8306

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

libcelt-0061.dll

74dda54864d84eeff30428afe123b2b4

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 9 sections

libcelt-0110.dll

1b44c66a3f3b191b682246cd5ca407f5

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 9 sections

libg719_decode.dll

d1307a0d570440c219caec52f9ee3d32

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

libmpg123-0.dll

6c22dea8a06d4e890e1302cb357d1bea

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections

libspeex-1.dll

f33233544cffe7f6a71afa4d8e4dea14

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 9 sections

libvorbis.dll

f5e414f574aa4b13a81a6a2e2d2eec0f

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 9 sections

swresample-vgmstream-4.dll

2dd3a2720d3da4c1ec3490f772d63ca0

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Size
	github.com/X-Hax/SA-Mod-Manager/raw/master/SA-Mod-Manager/Resources/bass.zip	140.82.121.4	0 B
URL github.com/X-Hax/SA-Mod-Manager/raw/master/SA-Mod-Manager/Resources/bass.zip IP 140.82.121.4:0 ASN #36459 GITHUB File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /X-Hax/SA-Mod-Manager/raw/master/SA-Mod-Manager/Resources/bass.zip HTTP/1.1 Host: github.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: GitHub.com date: Fri, 19 Apr 2024 00:27:48 GMT content-type: text/html; charset=utf-8 vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With access-control-allow-origin: location: https://raw.githubusercontent.com/X-Hax/SA-Mod-Manager/master/SA-Mod-Manager/Resources/bass.zip cache-control: no-cache strict-transport-security: max-age=31536000; includeSubdomains; preload x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: no-referrer-when-downgrade content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com .actions.githubusercontent.com wss://.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/ content-length: 0 x-github-request-id: E624:3321C7:172C3C3F:17625474:6621BA84 X-Firefox-Spdy: h2

	raw.githubusercontent.com/X-Hax/SA-Mod-Manager/master/SA-Mod-Manager/Resources/bass.zip	185.199.109.133	3.6 MB
URL raw.githubusercontent.com/X-Hax/SA-Mod-Manager/master/SA-Mod-Manager/Resources/bass.zip IP 185.199.109.133:0 ASN #54113 FASTLY File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 3.6 MB (3571699 bytes) Hash f91e4a15e6e187aeb81773264e2635e5 c1c72ed9adb88da230460abb7a75990a4c378e54 52bd46276b4fcd80ad35ed7cbbb2a950b400fe80a7a6f95844244b30e7a53273 HTTP Headers GET /X-Hax/SA-Mod-Manager/master/SA-Mod-Manager/Resources/bass.zip HTTP/1.1 Host: raw.githubusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK cache-control: max-age=300 content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox content-type: application/zip etag: W/"70f3a06d32755927da5c8808c3ad6cd5dd1fdd15a875018a8919466710252609" strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-frame-options: deny x-xss-protection: 1; mode=block x-github-request-id: 18DA:22870C:3ADD68D:3E20342:6621BA84 accept-ranges: bytes date: Fri, 19 Apr 2024 00:27:48 GMT via: 1.1 varnish x-served-by: cache-hel1410023-HEL x-cache: MISS x-cache-hits: 0 x-timer: S1713486469.570012,VS0,VE281 vary: Authorization,Accept-Encoding,Origin access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-fastly-request-id: a6ba7194c848d7c0c63ab5e48e5095df25cd9213 expires: Fri, 19 Apr 2024 00:32:48 GMT source-age: 0 content-length: 3571699 X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (14)

Detections

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers