Report - github.com/KintaroEB/POE-2-Assistance/raw/refs/heads/main/3.5.zip

Report Overview

Visitedpublic

2025-01-16 21:13:13

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
github.com	1423	2007-10-09	2016-07-13	2025-01-15	519 B	3.9 kB	140.82.121.4
raw.githubusercontent.com	35802	2014-02-06	2014-03-01	2025-01-15	530 B	7.7 MB	185.199.108.133

Related reports

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

raw.githubusercontent.com/KintaroEB/POE-2-Assistance/refs/heads/main/3.5.zip

IP / ASN

185.199.108.133

#54113 FASTLY

File Overview

File TypeZip archive data, at least v1.0 to extract, compression method=store

Size7.7 MB (7682081 bytes)

MD5da9dd381752c0b132de9b266b1fbd5ce

SHA1a6337af0e934662c18685ef7759ec7c34f49bc09

SHA256eef82834ce64d09570d752de77f56d3750c2de4a720f1b827c7b667b0faf8985

Archive (86)

Modified	Filename	Size	MD5	File type
2025-01-16 22:01	config.ini	516 B	cd5a7f9d9409e6bb89bb3e4adedcb945	Generic INItialization configuration [values]
2019-03-11 16:50	cports.exe	195 kB	996b2a9ad2af67fbf9629e86a42597c2	PE32+ executable (GUI) x86-64, for MS Windows, 5 sections
2025-01-12 12:09	ggpx_files_here	0 B	d41d8cd98f00b204e9800998ecf8427e
2025-01-16 19:56	upload_me_this_file_in_discord	0 B	d41d8cd98f00b204e9800998ecf8427e
2025-01-15 00:24	atlas.ggpx	181 kB	2e54de132d602f3d599633f24669333b	data
2025-01-15 00:24	delirium.ggpx	1.7 kB	2e5057b3d072bea446f79bee481cec2a	data
2025-01-15 00:24	minimap.ggpx	7.6 kB	aeba590be074e16629be894b4501dad7	data
2025-01-15 00:24	monsterhp.ggpx	4.7 kB	1fbd4c43de978811d1d9fb9dd4b382f2	data
2025-01-15 00:24	restore.ggpx	380 kB	e017ed010dad5ebd596076f6fe286b2b	data
2025-01-15 00:24	zoom13.ggpx	135 kB	e45e870ba4c4b62dd765106f875e06a5	data
2025-01-15 00:24	zoom16.ggpx	135 kB	3785ded1d5e7a1b8da92a86825a667c0	data
2025-01-15 00:24	zoom19.ggpx	135 kB	07d6145dd07d5cdb6bec029ed6e2938d	data
2025-01-16 19:54	ggpx_files_in_advanced	0 B	d41d8cd98f00b204e9800998ecf8427e
2025-01-08 14:00	_FUNCTIONS.AHK	2.7 kB	3f4a2ce84145c38af1b75e8b1a538736	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
2024-12-19 16:32	_INCLUDES_GLOBAL	232 B	3adf83a93430a2c3e5045a0a61e8b0f5	ASCII text, with CRLF line terminators
2025-01-04 21:06	_INCLUDES_THREAD	1.7 kB	c354e958b3da26fd1e22d587fdef4783	ASCII text, with CRLF line terminators
2025-01-14 22:55	LibBundle3.dll	46 kB	da258b2cfc77579481789df2b0fc5dc8	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
2025-01-14 23:43	LibBundledGGPK3.dll	9.2 kB	8dc28b44625424aa3f0dbf3a531035fe	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
2025-01-14 22:55	LibGGPK3.dll	62 kB	e073759831f4be629b5355771faaee15	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
2024-02-12 14:10	oo2core.dll	645 kB	a555e1cd5870d1fd7c385d0ea695aa2a	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 5 sections
2025-01-16 13:57	PatchBundle3.dll	116 kB	cf3c608dd4e432dcdc9135e146d190ed	PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections
2025-01-15 02:35	PatchBundle3.exe	139 kB	22fd07dd3087958750fe4a405ca0935e	PE32+ executable (console) x86-64, for MS Windows, 6 sections
2025-01-14 22:55	PatchBundle3.runtimeconfig.json	483 B	8668acdba4ef5bae1442d1caafb5385a	JSON text data
2025-01-15 14:58	PatchBundledGGPK3.dll	115 kB	b136082b80e03b29dc78ab3fb1dcf024	PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections
2025-01-15 02:19	PatchBundledGGPK3.exe	139 kB	39f1c2e7b1fb183c8f51e1d7559abb68	PE32+ executable (console) x86-64, for MS Windows, 6 sections
2025-01-14 22:55	PatchBundledGGPK3.runtimeconfig.json	483 B	8668acdba4ef5bae1442d1caafb5385a	JSON text data
2024-10-14 22:27	SystemExtensions.dll	92 kB	f3a2d9cd7de5c93b63115bd016c5b2d0	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
2024-12-28 00:36	always_enemy_hp.png	5.4 kB	bf4f1c3c029e34a769cd1de018e652bb	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-28 00:36	always_enemy_hp_a.png	5.5 kB	bb69e5d95035adb56a2d03341f9a3d66	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2025-01-03 19:52	blackscreenmode.png	5.2 kB	7af49d4e5700cba4c3544c9ffcfcb353	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2025-01-03 19:53	blackscreenmode_a.png	5.2 kB	5ba40549437f4a80f2983ad05e95b8d2	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-18 15:23	close.png	4.2 kB	b225d613564860b8020ba9248a1b6f2b	PNG image data, 125 x 38, 8-bit/color RGB, non-interlaced
2024-12-18 15:21	close_altered.png	4.2 kB	dc0278a2dbec73b60385115efae75942	PNG image data, 125 x 38, 8-bit/color RGB, non-interlaced
2024-12-16 05:20	dc.png	4.5 kB	1d749b98836bc8e47cead02bde8a4437	PNG image data, 200 x 38, 8-bit/color RGBA, non-interlaced
2024-12-16 06:35	dc_altered.png	4.7 kB	cbbcc1ad191ecf357baaf1cb01bf4bce	PNG image data, 200 x 38, 8-bit/color RGBA, non-interlaced
2024-12-18 21:29	enable.wav	272 kB	0d8adbf6b0dbad15f3c708510f63a295	RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz
2024-12-18 15:23	exit.png	4.3 kB	e2c3de4958bc38d7d8863f436cc33336	PNG image data, 125 x 38, 8-bit/color RGB, non-interlaced
2024-12-16 02:03	exit.wav	590 kB	0cd6c260ef1faf1efc252a25613bf31e	RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz
2024-12-18 15:21	exit_altered.png	4.3 kB	3f59cc6f003e6e12ccb739ce5f68f4f3	PNG image data, 125 x 38, 8-bit/color RGB, non-interlaced
2024-12-24 00:00	gamepad_ai.png	111 kB	8ec6073595afff32cee7b360a87dfa2e	PNG image data, 651 x 420, 8-bit/color RGB, non-interlaced
2024-12-24 00:04	gamepad_ai1.png	112 kB	3dc9ef7c8074ba6105d76f5f981471fa	PNG image data, 651 x 520, 8-bit/color RGB, non-interlaced
2024-12-27 00:25	gamepad_wnd.png	15 kB	0998493e571984a817f2f68a9bb084e0	PNG image data, 163 x 105, 8-bit/color RGB, non-interlaced
2024-12-24 00:43	insert.wav	125 kB	4b2e7f99fc2e1f402e317f862ce78ffc	RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 48000 Hz
2024-12-18 20:59	maphack.png	4.4 kB	9f654edd9409b946692998bb98fb300b	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-18 20:59	maphack_altered.png	4.4 kB	a045d78e751197d155ee79c00ccbee38	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-18 21:00	minimap.png	4.4 kB	1dd4e67ed360f9406c26c945d4f58125	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-18 21:00	minimap_altered.png	4.5 kB	c5da668a82c84d268b73a9a79b7c8148	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-20 05:16	notify.wav	248 kB	80c94c596e16453bac410773ceadadfb	RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 48000 Hz
2024-12-16 07:13	pp.png	5.0 kB	b501654a158aaa2243c532ed01b135d6	PNG image data, 188 x 35, 8-bit/color RGBA, non-interlaced
2024-12-16 07:13	pp_altered.png	4.9 kB	bcebd645465a3f95ba92678358b2c538	PNG image data, 188 x 35, 8-bit/color RGBA, non-interlaced
2024-12-24 00:42	remove.wav	162 kB	7b8be1db87a4bddee47dd8cc849a9ffd	RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 48000 Hz
2024-12-29 18:00	remove_atlas_fog.png	5.0 kB	efff2969dee80cd2ebd28e6957a324cf	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-29 18:00	remove_atlas_fog_a.png	5.1 kB	af547f3f45a6e2e89b9aa6cc15f06973	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-28 01:37	remove_delirium_fog.png	5.0 kB	ac277b4d0ac78d17143d10f7b4042510	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-28 01:37	remove_delirium_fog_a.png	5.0 kB	61636c8159a5bceaeb0c6782666f52cf	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2025-01-10 18:54	remove_shadowseffects.png	5.3 kB	150b1961b625f41aa4dd8e379d6c7ce8	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2025-01-10 18:54	remove_shadowseffects_a.png	5.4 kB	e7d71e8d2cb0674aeb6b7bc31019aed3	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-19 15:57	restore.png	4.7 kB	62e1fec0f572c925495c9c684242b055	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-19 15:58	restore_altered.png	4.7 kB	8820fdcff318dd9534505b14d22b2c6d	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-18 15:23	save.png	4.6 kB	82a631b6b495482b761a5ca35025f842	PNG image data, 125 x 38, 8-bit/color RGB, non-interlaced
2024-12-15 21:27	save.wav	313 kB	3a38af61795d6a0b85801f4c5bcd3169	RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz
2024-12-18 15:21	save_altered.png	4.6 kB	838c4b5bb5766b44663b897f6d2f062e	PNG image data, 125 x 38, 8-bit/color RGB, non-interlaced
2024-12-18 15:34	settings.png	4.8 kB	29cbb0ad3654c61efcba09aeef305a23	PNG image data, 125 x 38, 8-bit/color RGB, non-interlaced
2024-12-18 15:34	settings_altered.png	4.8 kB	286e4d6ab5e4a423fa65d3ba24a293c4	PNG image data, 125 x 38, 8-bit/color RGB, non-interlaced
2024-12-24 00:14	virtualgamepad.png	4.8 kB	87b1fc67b5bb8cee20750dbaa66f16a9	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-24 00:14	virtualgamepad_altered.png	4.8 kB	baf10cd8173f8ce72db5f2ec02024293	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-19 15:08	zoomout13.png	4.7 kB	c2becb2a42f45c0540dbcaf99d3bf3ff	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-19 15:07	zoomout13_altered.png	4.8 kB	06368455696c5c527dc55e8733a538c0	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-19 15:05	zoomout16.png	4.8 kB	3bc2b680436888ba99ed11a64b376431	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-19 15:05	zoomout16_altered.png	4.8 kB	23609b2d7f41f82cf2bea4d6c5aaa59e	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-19 17:29	zoomout19.png	4.8 kB	864058d764a34c13626feab35103240d	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2024-12-19 17:29	zoomout19_altered.png	4.8 kB	e2aa98d4c194612a35c3396939c64069	PNG image data, 200 x 38, 8-bit/color RGB, non-interlaced
2025-01-16 20:22	allow_virtualGamepadPoe2exe_to_start_always_as_admin	0 B	d41d8cd98f00b204e9800998ecf8427e
2021-03-07 22:33	ViGEmWrapper.dll	44 kB	9053d4747feb614cbe4947d80231f791	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
2024-12-29 19:55	virtualGamepadPoe2.exe	669 kB	b5ca63be02cd2fae400c434b2d6d9726	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows, 3 sections
2024-12-27 00:47	KeyListController.txt	211 B	6023c3148f2373bc3dbab898cd1b2578	ASCII text, with CRLF line terminators
2025-01-16 22:02	main.exe	3.0 MB	f771ac1aa4ca4c29805090a8162108b1	PE32+ executable (GUI) x86-64, for MS Windows, 5 sections
2025-01-16 20:24	readme.txt	652 B	d94e31975e5b0f7a680a8dee793b5246	ASCII text, with CRLF line terminators
2025-01-04 21:04	HYBRID__THREAD__UTILITY.AHK	2.3 kB	f835d9c2c0b586148af88afd0456316b	ASCII text, with CRLF line terminators
2025-01-04 21:04	LOWLIFE__THREAD__TEMPORALRIFT.AHK	864 B	6a68b839213cdb1a0d31b3f4ed80a39b	ASCII text, with CRLF line terminators
2025-01-04 21:04	MOM__THREAD__UTILITY.AHK	2.3 kB	1eeffd9dd5a1d54e1750fc02a95da97e	ASCII text, with CRLF line terminators
2024-12-29 19:56	readme.txt	826 B	e0eb170be3c64b780d58c5e3cf294453	ASCII text, with CRLF line terminators
2025-01-16 20:36	updater.exe	2.8 MB	92749280fa7b89bb2c69dffbcec01c69	PE32+ executable (GUI) x86-64, for MS Windows, 5 sections
2025-01-04 21:08	__THREAD__KEYSTATE.AHK	1.4 kB	322cdeade33a350d6135a293ea3ec74a	ASCII text, with CRLF line terminators
2025-01-04 21:06	__THREAD__TEMPORALRIFT.AHK	1.5 kB	d8e7b05615ab3a0316bda2de8ecf1d70	ASCII text, with CRLF line terminators
2025-01-04 21:13	__THREAD__UTILITY.AHK	3.0 kB	9211adbfaeb2d655bbedb4e2870b1f93	ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	meth_stackstrings
YARAhub by abuse.ch	malware	meth_stackstrings

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size