Report - raw.githubusercontent.com/RheaAbode/layla/main/normal3%20to%20saber.zip

Report Overview

Submitted URL
raw.githubusercontent.com/RheaAbode/layla/main/normal3%20to%20saber.zip
IP
185.199.108.133
ASN
#54113 FASTLY
Submitted
2024-04-25 11:02:44
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
raw.githubusercontent.com	35802	2014-02-06	2014-03-01	2024-04-23	525 B	7.0 MB	185.199.108.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
raw.githubusercontent.com/RheaAbode/layla/main/normal3%20to%20saber.zip
IP
185.199.108.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
7.0 MB (7014584 bytes)
Hash
86b7a0b9d9ee3d60c20c3fc98768eff8
1990c4ef6e5781501216371167fd74c0e3f4a39b
deb7265c018f48039796266c8d80f58bba1a8accecd8df10c2fd8411826633f5

Archive (35)

Filename

Md5

File type

hero_shooter_skin05_add.unity3d

000a522e7642995792127427574e2fd6

data

hero_shooter_skin05_high_add.unity3d

d6f7b74b5c66cf54859d1f2f8aed34e1

data

nextshooter_CityAction_01_skin06_add.unity3d

aa8a72ac9ba06ccc4968e86d8eb3bf0d

data

nextshooter_CityAction_02_skin06_add.unity3d

b8a94a5d254d462c69a8a50f11979208

data

nextshooter_CityAction_03_skin06_add.unity3d

3f62d71416b3db902d6ffccd5bfd04ce

data

war2shooter_CityAction_Body1_add.unity3d

ec8e4225136106006bf373acfadc2388

data

war2shooter_CityAction_Body2_add.unity3d

49216256065a44bdf04ca5b62168ce2c

data

war2shooter_CityAction_Weapon_add.unity3d

adee6fc788038846dfa4c213e303ed28

data

war2shooter_attack01.unity3d

f4d6d8e7e2ba3279bf94248fb2be1c51

data

war2shooter_attack02.unity3d

13bbed2bb4bfb77256fe1b561bcbff6e

data

war2shooter_attack_fire.unity3d

6eefa90e5e4d4f7031861e4aac7d448f

data

war2shooter_attack_qiangkou.unity3d

927310bc474f5cb2fcd8eb65d0a06573

data

war2shooter_attack_qiangkou2.unity3d

60ca4be9ac35147ffe1cc7d880485b90

data

war2shooter_ring01.unity3d

81ad59c64341b861f48fef6771692a35

data

war2shooter_ring02.unity3d

8f24ba2689ed00ebb501a04317be7ebf

data

war2shooter_ring03.unity3d

817d4c5a42fed932f404cb5dd1c5f523

DIY-Thermocam raw data (Lepton 3.x), scale 1024-0, spot sensor temperature 0.000000, unit celsius, color scheme 1, maximum point enabled, calibration: offset -563053032636416.000000, slope 38685626227668133590597632.000000

war2shooter_ring04.unity3d

61b82e5bfb2e3ab56b88c6c7a15ede9e

data

war2shooter_skill01.unity3d

b587930c8e9958385de17f54b3948350

data

war2shooter_skill01_hit.unity3d

dfe30ad6333d7c469763f88b9656b76a

data

war2shooter_skill01_hit2.unity3d

9d98ae1aae0a9c239c0996abeef07f49

data

war2shooter_skill01_hit3.unity3d

144b7b51646795602e31a6b772697bf5

data

war2shooter_skill01_qiangkou.unity3d

5826e48c16dfbb008db96d0a4fd77110

data

war2shooter_skill02.unity3d

f2ce7545009567d90e0ea28ba2e9ae0c

data

war2shooter_skill02_beiji.unity3d

6b7e5fee40a69e3f9a1a1a9f87383396

DIY-Thermocam raw data (Lepton 2.x), scale 1024-0, spot sensor temperature 0.000000, unit celsius, color scheme 1, minimum point enabled, calibration: offset -0.000000, slope 0.015625

war2shooter_skill02_beiji2.unity3d

b9588e7eb814585af5fa027e58b35e83

war2shooter_skill02_beiji3.unity3d

63eea6913ab7eead61d4f8f9b5f735de

war2shooter_skill02_biaoji.unity3d

332f89fbed39a36ff82ffa07be8f7c0b

war2shooter_skill02_qiangkou.unity3d

f2f893d0a2b4c617589c5007bdb447a9

data

war2shooter_skill03_hit1.unity3d

41569fd8012d52a90ccf4c3bb5f36aed

data

war2shooter_skill03_jiguang_1.unity3d

bb6cbd73af9fee65566f5caae01beaef

data

war2shooter_skill03_jiguang_2.unity3d

71cf9313c7cb9ed3d39629ae3250c72f

data

show_1181.bnk

d18731addf99b0fe7363ee89ea314114

Wwise SoundBank (little-endian), version 113, id C24A5AC2, SFX

show_vo_1181.bnk

86ee02124b6d134b9714d59708aaca86

Wwise SoundBank (little-endian), version 113, id 2810D250, english (US)

vo_1181.bnk

9be05cf90bc531335d3a3c159cda1bdd

Wwise SoundBank (little-endian), version 113, id 0A038468, english (US)

Hero186_add.unity3d

c95fc61629ee7563de8ae1614a28e94e

data

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	raw.githubusercontent.com/RheaAbode/layla/main/normal3%20to%20saber.zip	185.199.108.133	200 OK	7.0 MB
URL User Request GET HTTP/2 raw.githubusercontent.com/RheaAbode/layla/main/normal3%20to%20saber.zip IP 185.199.108.133:443 ASN #54113 FASTLY Certificate IssuerDigiCert Inc Subject.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 7.0 MB (7014584 bytes) Hash 86b7a0b9d9ee3d60c20c3fc98768eff8 1990c4ef6e5781501216371167fd74c0e3f4a39b deb7265c018f48039796266c8d80f58bba1a8accecd8df10c2fd8411826633f5 HTTP Headers GET /RheaAbode/layla/main/normal3%20to%20saber.zip HTTP/1.1 Host: raw.githubusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK cache-control: max-age=300 content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox content-type: application/zip etag: W/"d8d1220468328675bb9d358bc370a6f420c3002204497018b218ad4499c7e08e" strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-frame-options: deny x-xss-protection: 1; mode=block x-github-request-id: 88D6:0DE3:2F2BBA:311B03:662A3838 accept-ranges: bytes date: Thu, 25 Apr 2024 11:02:17 GMT via: 1.1 varnish x-served-by: cache-hel1410028-HEL x-cache: MISS x-cache-hits: 0 x-timer: S1714042937.656899,VS0,VE411 vary: Authorization,Accept-Encoding,Origin access-control-allow-origin: cross-origin-resource-policy: cross-origin x-fastly-request-id: 15bf7bedd1d70e9740569ee10b5cd9ebf46fa605 expires: Thu, 25 Apr 2024 11:07:17 GMT source-age: 0 content-length: 7014584 X-Firefox-Spdy: h2

raw.githubusercontent.com/RheaAbode/layla/main/normal3%20to%20saber.zip

185.199.108.133

200 OK

7.0 MB

URL User Request GET HTTP/2
raw.githubusercontent.com/RheaAbode/layla/main/normal3%20to%20saber.zip
IP
185.199.108.133:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
7.0 MB (7014584 bytes)
Hash
86b7a0b9d9ee3d60c20c3fc98768eff8
1990c4ef6e5781501216371167fd74c0e3f4a39b
deb7265c018f48039796266c8d80f58bba1a8accecd8df10c2fd8411826633f5

HTTP Headers

GET /RheaAbode/layla/main/normal3%20to%20saber.zip HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/zip
etag: W/"d8d1220468328675bb9d358bc370a6f420c3002204497018b218ad4499c7e08e"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 88D6:0DE3:2F2BBA:311B03:662A3838
accept-ranges: bytes
date: Thu, 25 Apr 2024 11:02:17 GMT
via: 1.1 varnish
x-served-by: cache-hel1410028-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714042937.656899,VS0,VE411
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: 15bf7bedd1d70e9740569ee10b5cd9ebf46fa605
expires: Thu, 25 Apr 2024 11:07:17 GMT
source-age: 0
content-length: 7014584
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (35)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers