Report - codeload.github.com/MeteorAdminz/hidden-tear/zip/master

Report Overview

Submitted URL
codeload.github.com/MeteorAdminz/hidden-tear/zip/master
IP
140.82.121.9
ASN
#36459 GITHUB
Submitted
2024-04-20 14:21:34
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
7

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
codeload.github.com	62359	2007-10-09	2013-04-18	2024-04-18	511 B	342 kB	140.82.121.9

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
codeload.github.com/MeteorAdminz/hidden-tear/zip/master
IP
140.82.121.9
ASN
#36459 GITHUB

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
341 kB (341201 bytes)
Hash
4b035f8e21ead3f127d78e0442bdab16
39d2ed9f3e3e3e0d320dcb81bac5125d1f6a86e2
14481873b22057bf60ba4ae9a78fb3a2a507b4497eb3a6369d43b996302af7e4

Archive (78)

Filename

Md5

File type

.gitignore

a4283b944de26799fbd023b023b90a3e

ASCII text

LICENSE

40e248aa8e2350fe7c50e0231a26b2f9

ASCII text

README.md

c72a7a41185a9fd8f70e7e299e374b50

ASCII text

hidden-tear-decrypter.sln

af5dd73830bbf31c0fd4e39b9d442b90

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear-decrypter.v12.suo

9e8de5b81bf8a61661f0f38abfb49988

Composite Document File V2 Document, Cannot read section info

1439690896_103.ico

15f1f4c37c00b6bc100395f081c7c04e

MS Windows icon resource - 6 icons, 16x16, 32 bits/pixel, 256x256 with - PNG image data, 256 x 256, 8-bit gray+alpha, non-interlaced, 32 bits/pixel

App.config

3f9b7c50015ca8be5ec84127bb37e2cb

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Form1.Designer.cs

4ab5a2a263d913aa49840acaad1f303e

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Form1.cs

52d8633d851c1a2fadb19241c7ca7669

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Form1.resx

e6246cad1873d9e59250e8a3375e0c36

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Program.cs

b25f226c4789a4ae38b997a07c01fa74

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

AssemblyInfo.cs

d2d3604858deb8516561f58d55adbdfe

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Resources.Designer.cs

9d0c53542ffa97f7fb0863fafcaf8d3f

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Resources.resx

0cd8c971317d19bbed44757809bcb92b

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Settings.Designer.cs

bb63f9ba9126e6643127f87c5334ba8e

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Settings.settings

8c0f00d7d9b0046695a0255f1b11b061

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear-decrypter.exe

6223c4c865ce187fdb09d625c7641b83

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

hidden-tear-decrypter.exe.config

3f9b7c50015ca8be5ec84127bb37e2cb

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear-decrypter.pdb

1b464ffbf5686a4ee3d3226047cf98f5

MSVC program database ver 7.00, 512*47 bytes

hidden-tear-decrypter.vshost.exe

00c54466cfc232e2ba1dfc4f3a679f05

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

hidden-tear-decrypter.vshost.exe.config

3f9b7c50015ca8be5ec84127bb37e2cb

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear-decrypter.vshost.exe.manifest

a19a2658ba69030c6ac9d11fd7d7e3c1

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear-decrypter.csproj

7799021b7583bdc8e346d98582af84cf

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

DesignTimeResolveAssemblyReferencesInput.cache

647e8f9194aa3e0b317a58dad12ea524

data

TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs

d41d8cd98f00b204e9800998ecf8427e

TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs

d41d8cd98f00b204e9800998ecf8427e

TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs

d41d8cd98f00b204e9800998ecf8427e

hidden-tear-decrypter.csproj.FileListAbsolute.txt

9d435eceeb85640682d43c7872ec4e2c

ASCII text, with CRLF line terminators

hidden-tear-decrypter.csproj.GenerateResource.Cache

c1bc3bb47068872f828a8c8e4c1f53df

data

hidden-tear-decrypter.exe

6223c4c865ce187fdb09d625c7641b83

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

hidden-tear-decrypter.pdb

1b464ffbf5686a4ee3d3226047cf98f5

MSVC program database ver 7.00, 512*47 bytes

hidden_tear_decrypter.Form1.resources

0e28e4e70435124b05de2b40cb98f4f2

data

hidden_tear_decrypter.Properties.Resources.resources

cd7dbc7abeda9893ce25793744443958

data

hidden-tear-offline.sln

b3820c2a15a62b3d887fc4adf643ecad

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

1440459747_pdf.ico

14465d8d0f4688a4366c3bf163ba0a17

MS Windows icon resource - 5 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel

App.config

3f9b7c50015ca8be5ec84127bb37e2cb

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Form1.Designer.cs

bda6c595b9cf640c1c7057be345f320d

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Form1.cs

c4e5eac3e683e4be59035d08dfadafd4

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Form1.resx

efe0ef0f0f514575232886932e05774c

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Program.cs

c73b0e373e7e64412f94a6a57cbb4c40

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

AssemblyInfo.cs

f76a6ea706dfb8dd16d7bc415c8f7112

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Resources.Designer.cs

38fe7b3aebea2c78895687f185e465fc

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Resources.resx

0cd8c971317d19bbed44757809bcb92b

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Settings.Designer.cs

0e4b93853e4424338948cb9053e70ff9

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Settings.settings

8c0f00d7d9b0046695a0255f1b11b061

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear-offline.csproj

580464bd38cc431b6f27f13e1cc6fced

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear.sln

161dc23054d67ffd60b06a0007574710

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear.v12.suo

05306fd04edb075459d9354f08c352fc

Composite Document File V2 Document, Cannot read section info

1439691063_pdf.ico

14465d8d0f4688a4366c3bf163ba0a17

MS Windows icon resource - 5 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel

App.config

3f9b7c50015ca8be5ec84127bb37e2cb

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Form1.Designer.cs

e0b2d017ad82cfabafa06206a12cca5b

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Form1.cs

04cbc1c440bd097150f182521a343f5a

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Form1.resx

5bad526ba3de776b75085576a4e96f6b

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Program.cs

416a378ee771c4d961a254ec0bed8b0e

C++ source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

AssemblyInfo.cs

a6859bf8739faf2981d100f5982407e6

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Resources.Designer.cs

03c5d659a3e45d6c2f7e327f441237bf

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Resources.resx

0cd8c971317d19bbed44757809bcb92b

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Settings.Designer.cs

9fbdcb74b42ed883bfac859cbaf3d0af

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Settings.settings

8c0f00d7d9b0046695a0255f1b11b061

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear.exe

412f1b66437e5159fbd54cb7bb0c526e

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

hidden-tear.exe.config

3f9b7c50015ca8be5ec84127bb37e2cb

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear.pdb

577cf4def3c0459904dbef04b9e30158

MSVC program database ver 7.00, 512*51 bytes

hidden-tear.vshost.exe

00c54466cfc232e2ba1dfc4f3a679f05

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

hidden-tear.vshost.exe.config

3f9b7c50015ca8be5ec84127bb37e2cb

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear.vshost.exe.manifest

a19a2658ba69030c6ac9d11fd7d7e3c1

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

hidden-tear.csproj

4015e806d0cbd78b62b0df2f99a8ae05

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

DesignTimeResolveAssemblyReferences.cache

f021ec538c92143562ad2844d9a1f491

data

DesignTimeResolveAssemblyReferencesInput.cache

df259b74f9b0d286d4f508c58a1da165

data

TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs

d41d8cd98f00b204e9800998ecf8427e

TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs

d41d8cd98f00b204e9800998ecf8427e

TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs

d41d8cd98f00b204e9800998ecf8427e

hidden-tear.csproj.FileListAbsolute.txt

b41cb5150b03dc8483d1af1fd117a70e

ASCII text, with CRLF line terminators

hidden-tear.csproj.GenerateResource.Cache

d1cf5ba724732fafdfa4d3127aa85642

data

hidden-tear.csprojResolveAssemblyReference.cache

bbe6947f924911ac9d9a0b2e388dd1f3

data

hidden-tear.exe

412f1b66437e5159fbd54cb7bb0c526e

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

hidden-tear.pdb

577cf4def3c0459904dbef04b9e30158

MSVC program database ver 7.00, 512*51 bytes

hidden_tear.Form1.resources

c3e2d6ca42a2840a31fd63aab05368fb

data

hidden_tear.Properties.Resources.resources

cd7dbc7abeda9893ce25793744443958

data

Detections

Analyzer	Verdict	Alert
Public Nextron YARA rules	malware	Detects ransomware distributed in COVID-19 theme
Public Nextron YARA rules	malware	Detects ransomware distributed in COVID-19 theme
VirusTotal	malicious	VirusTotal - Scan result 57/67

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

codeload.github.com/MeteorAdminz/hidden-tear/zip/master

140.82.121.9

200 OK

341 kB

URL User Request GET HTTP/2
codeload.github.com/MeteorAdminz/hidden-tear/zip/master
IP
140.82.121.9:443
ASN
#36459 GITHUB

Certificate
IssuerSectigo Limited
Subject*.github.com
Fingerprint0D:F6:EC:50:FA:ED:AE:6E:13:AF:82:94:52:F7:11:1B:0A:CF:7C:20
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
341 kB (341201 bytes)
Hash
4b035f8e21ead3f127d78e0442bdab16
39d2ed9f3e3e3e0d320dcb81bac5125d1f6a86e2
14481873b22057bf60ba4ae9a78fb3a2a507b4497eb3a6369d43b996302af7e4

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 57/67

HTTP Headers

GET /MeteorAdminz/hidden-tear/zip/master HTTP/1.1
Host: codeload.github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: https://render.githubusercontent.com
content-disposition: attachment; filename=hidden-tear-master.zip
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/zip
cross-origin-resource-policy: cross-origin
etag: W/"2b88e9865a37ec63bc698ce34cb118e9c1c0428d7c2621ffd41de60c914bf259"
strict-transport-security: max-age=31536000
vary: Authorization,Accept-Encoding,Origin
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
date: Sat, 20 Apr 2024 14:21:07 GMT
x-github-request-id: 7903:2C75E5:491CEB:5A9018:6623CF53
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (78)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers