Report - github.com/WarlitoInjector/Roger/raw/main/Normal%20to%20transformer.zip

Report Overview

Submitted URL
github.com/WarlitoInjector/Roger/raw/main/Normal%20to%20transformer.zip
IP
140.82.121.3
ASN
#36459 GITHUB
Submitted
2024-04-18 10:59:34
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
github.com	1423	2007-10-09	2016-07-13	2024-03-24	525 B	3.5 kB	140.82.121.4
raw.githubusercontent.com	35802	2014-02-06	2014-03-01	2024-04-18	536 B	8.7 MB	185.199.109.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
raw.githubusercontent.com/WarlitoInjector/Roger/main/Normal%20to%20transformer.zip
IP
185.199.109.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
8.7 MB (8721073 bytes)
Hash
7bfa149c20666c1efce9f2b870191434
4d5e84abd3eb0ac41bf0adbd9711e077e1b044b8
21865d670e1717f277873b649bbccacbd95f45f814c18c32f540941d9cde05aa

Archive (71)

Filename

Md5

File type

hero_werewolf_skin01_add.unity3d

fd8f8c54809ea976df8c61efdc0d374c

data

hero_werewolf_skin01_high_add.unity3d

ff097df94ec5232e6efeb247a9cedf2d

data

hero_wolf_skin01_add.unity3d

7a3e2c3152d99411c3386f4b5348f1f9

data

werewolf_cityaction_foot_war2_add.unity3d

4ecd16c1452c516e77e5a9c3d1966992

data

werewolf_cityaction_pingmu_war2_add.unity3da

a5cf1f7f4ddc19defa74ff93c44472d8

data

werewolf_lang_attack_1.unity3d

faa9a20d57dfb95526f701b148a35179

data

werewolf_lang_attack_2.unity3d

fbc880c35c997d0d17985a24d72ed02c

data

werewolf_lang_attack_3.unity3d

a075a695b0753046a34673a41be4c3a9

data

werewolf_lang_attack_shouji.unity3d

2b3e7e7fe297f653028029361e3c2fff

data

werewolf_lang_skill01_canying.unity3d

e9b0c252a9cadc90e508056ac0b5113f

data

werewolf_lang_skill01_shouji.unity3d

e34a9dc9da729fbfbb179575a29134bf

data

werewolf_lang_skill02_1_you.unity3d

12fceb6fe653b00bb6f4d8658c982621

data

werewolf_lang_skill02_1_zuo.unity3d

7d0f0dc5cb692f956d4498008b1c75bc

data

werewolf_lang_skill02_2.unity3d

e0c7b353ce187ba9a0a5cfdc0174c38f

data

werewolf_lang_skill03.unity3d

8c9f9706c17a402319347f4fec9142fd

data

werewolf_lang_skill03_a.unity3d

377ca135c12c78d64d3eb493f73273da

data

werewolf_ren_attack_2_1.unity3d

bc02cd48dfce60b46aa7a559e7965193

data

werewolf_ren_attack_qishou.unity3d

275115ea2f91c0ed4fba5902f0d2d098

data

werewolf_ren_attack_qishou2.unity3d

805003ff87874958d743e22c3fc6e5bf

data

werewolf_ren_baodian.unity3d

810c21ef4cde8ba2c75eb1f26c95a0e9

DIY-Thermocam raw data (Lepton 3.x), scale 1024-0, spot sensor temperature 0.000000, unit celsius, color scheme 1, maximum point enabled, calibration: offset -563053032636416.000000, slope 38685626227668133590597632.000000

werewolf_ren_skill01_banben3.unity3d

699d57c50980bc807abba6c5ed1f00d7

data

werewolf_ren_skill01_banben4.unity3d

d4826f06d4f6ad238583b741f11c4a35

data

werewolf_ren_skill01_baodian.unity3d

034b4c45a2981f299123ecf5a0889d81

werewolf_ren_skill01_baodian2.unity3d

8ea4bfe9052678ca9c913d6fe2249ae3

data

werewolf_ren_skill01_qishou.unity3d

a9bcd344e14c51430417bc982336723a

werewolf_ren_skill01_qishou02.unity3d

b7fe66d6ee3897f5af48264c74f4f5f6

werewolf_ren_skill01_tjakra.unity3d

042e58ad3b3ef054ffd5fda993a8eeca

data

werewolf_ren_skill02.unity3d

b8fb8b8ff504ad30bfac787de873b8ad

data

werewolf_ren_skill02_1.unity3d

d9eb6562245968aa7bf4738ca7e51da0

data

werewolf_ren_skill03_1.unity3d

4daeca73d69b2f64708e504ddf34935a

data

werewolf_ren_skill03_2.unity3d

cdbe6b4bfde3097535a9470d145c1243

werewolf_ren_skill03_yifu.unity3d

b43f299e8952f38595aed0377f75ce12

data

zzp1_werewolf_lang_attack_1_skin08_add.unity3d

03d1f091c35e9f6f79e84e2983ca1240

data

zzp1_werewolf_lang_attack_2_skin08_add.unity3d

e376c3606b175eab1bb745d75e00c769

data

zzp1_werewolf_lang_attack_3_skin08_add.unity3d

427e87d31df89804b21af0eaed23bf02

data

zzp1_werewolf_lang_skill02_2_skin08_add.unity3d

b5961f1d5ef432eaf1d1ce26862575c0

data

zzp1_werewolf_lang_skill03_skin08_add.unity3d

c39fbd5906ebb9b733364ee6a4160ec5

data

zzp1_werewolf_ren_attack_2_1_skin08_add.unity3d

598d7dac65fe5e7dfe01661144247321

data

zzp1_werewolf_ren_skill01_banben4_skin08_add.unity3d

67a2cf2680f6c69137de77a1ebce55dc

data

zzp1_werewolf_ren_skill02_1_skin08_add.unity3d

ce3d72a11ecabea95656edd4c059d4c6

data

zzp1_werewolf_ren_skill02_skin08_add.unity3d

42a992153a2ba5df071a34adeda43b81

data

zzp1_werewolf_ren_skill03_1_skin08_add.unity3d

96d601327e12cc89eaac41862208c305

data

zzp1_werewolf_ren_skill03_2_skin08_add.unity3d

72c553520dff55712f0329e8ec12f86f

data

zzp1_werewolf_ren_skill03_yifu_skin08_add.unity3d

c20436caada32e7a985a68b170c00f53

data

zzp2_werewolf_CityAction_01_skin08_add.unity3d

e44333995aae76e58b2e6c2a1e0bab67

data

zzp2_werewolf_CityAction_02_skin08_add.unity3d

f5c3d955a79bd974aaed4ee0b5d4eb2b

data

zzp2_werewolf_CityAction_03_skin08_add.unity3d

cea3babacb01a643b469ad3603a09995

data

zzp2_werewolf_CityAction_04_skin08_add.unity3d

8093d505d6c5884772a354a87c7c7dd6

data

zzp2_werewolf_CityAction_05_skin08_add.unity3d

4105a1d5aab7a6795c8017e842227576

data

zzp2_werewolf_lang_attack_1_skin08_add.unity3d

6bf0b2a6f71d56cd3c99f690953cb24a

data

zzp2_werewolf_lang_attack_2_skin08_add.unity3d

f9d96113228b8f2a5a52c8275bf1a458

data

zzp2_werewolf_lang_attack_3_skin08_add.unity3d

838bd8c3b751da8c34294de0e87cb894

data

zzp2_werewolf_lang_attack_shouji_skin08_add.unity3d

615539dc2e7509644bc79c38c8fb4484

data

zzp2_werewolf_lang_skill02_1_zuo_skin08_add.unity3d

5a6935c568aa344031bc81367e3efe48

data

zzp2_werewolf_lang_skill02_2_skin08_add.unity3d

bfe2295cd6385724e3c486a67892891a

data

zzp2_werewolf_lang_skill03_skin08_add.unity3d

c6003af4b6250ae7be9bcdb0b97d1753

data

zzp2_werewolf_ren_attack_2_1_skin08_add.unity3d

a52cad9c34f6ec2b4cef070ad43483fc

data

zzp2_werewolf_ren_attack_qishou_skin08_add.unity3d

042e58ad3b3ef054ffd5fda993a8eeca

data

zzp2_werewolf_ren_baodian_skin08_add.unity3d

a3aa6a1936d8adae21ce36d3d3716642

data

zzp2_werewolf_ren_skill01_banben4_skin08_add.unity3d

d8ac050ea145c51db5f7af62b1f88251

data

zzp2_werewolf_ren_skill02_1_skin08_add.unity3d

af6f3938fddbcdf1ed0c57bc97f02ad6

data

zzp2_werewolf_ren_skill02_skin08_add.unity3d

d60b2baf1cc801a41f356b6b02678feb

data

zzp2_werewolf_ren_skill03_1_skin08_add.unity3d

800e54115bde6d51a883ad3d509e96df

data

zzp2_werewolf_ren_skill03_2_skin08_add.unity3d

03bf2d433b0f545dff713aac8af6baea

data

zzp2_werewolf_ren_skill03_yifu_skin08_add.unity3d

1660ad3ecca329d9a4c21a6e6c730b2d

data

sfx_1391.bnk

5270fddb84aed218e7b591d5a040a620

Wwise SoundBank (little-endian), version 113, id 73AE3BB7, SFX

show_1391.bnk

d7d77bc6554d4362508d79ca610961a2

Wwise SoundBank (little-endian), version 113, id 454518CF, SFX

show_vo_1391.bnk

a36121b0ebf4ba30c3bac6c7ba485dee

Wwise SoundBank (little-endian), version 113, id 23154781, english (US)

vo_1391.bnk

e8a8176ff87cfeda497701acf97b93ee

Wwise SoundBank (little-endian), version 113, id 8508C319, english (US)

Atlas_SkillIconAdd12_add.unity3d

9e4f41aa09ba58b617c86645157fe6ef

data

Hero392_add.unity3d

75a41e817a15c139108f34ff447a58c6

data

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	github.com/WarlitoInjector/Roger/raw/main/Normal%20to%20transformer.zip	140.82.121.4	302 Found	0 B
URL User Request GET HTTP/2 github.com/WarlitoInjector/Roger/raw/main/Normal%20to%20transformer.zip IP 140.82.121.4:443 ASN #36459 GITHUB Certificate IssuerSectigo Limited Subjectgithub.com FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /WarlitoInjector/Roger/raw/main/Normal%20to%20transformer.zip HTTP/1.1 Host: github.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: GitHub.com date: Thu, 18 Apr 2024 10:59:06 GMT content-type: text/html; charset=utf-8 vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With access-control-allow-origin: location: https://raw.githubusercontent.com/WarlitoInjector/Roger/main/Normal%20to%20transformer.zip cache-control: no-cache strict-transport-security: max-age=31536000; includeSubdomains; preload x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: no-referrer-when-downgrade content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com .actions.githubusercontent.com wss://.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/ content-length: 0 x-github-request-id: 1F19:29BC17:1A24CBEF:1A61FA67:6620FCF9 X-Firefox-Spdy: h2

	raw.githubusercontent.com/WarlitoInjector/Roger/main/Normal%20to%20transformer.zip	185.199.109.133	200 OK	8.7 MB
URL User Request GET HTTP/2 raw.githubusercontent.com/WarlitoInjector/Roger/main/Normal%20to%20transformer.zip IP 185.199.109.133:443 ASN #54113 FASTLY Certificate IssuerDigiCert Inc Subject.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 8.7 MB (8721073 bytes) Hash 7bfa149c20666c1efce9f2b870191434 4d5e84abd3eb0ac41bf0adbd9711e077e1b044b8 21865d670e1717f277873b649bbccacbd95f45f814c18c32f540941d9cde05aa HTTP Headers GET /WarlitoInjector/Roger/main/Normal%20to%20transformer.zip HTTP/1.1 Host: raw.githubusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK cache-control: max-age=300 content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox content-type: application/zip etag: W/"b42e7e6d9d4e6f0f3cd3750ed870b9256dc5ab68e5c0a416580c5bb7a0f21926" strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-frame-options: deny x-xss-protection: 1; mode=block x-github-request-id: F256:21BEAB:3689A20:3999A6A:6620FCF9 accept-ranges: bytes date: Thu, 18 Apr 2024 10:59:07 GMT via: 1.1 varnish x-served-by: cache-hel1410029-HEL x-cache: MISS x-cache-hits: 0 x-timer: S1713437946.356884,VS0,VE749 vary: Authorization,Accept-Encoding,Origin access-control-allow-origin: cross-origin-resource-policy: cross-origin x-fastly-request-id: 197f20067002dc037c989e5d4d1a61b5ea09a52d expires: Thu, 18 Apr 2024 11:04:07 GMT source-age: 1 content-length: 8721073 X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (71)

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers