Report - github.com/WarlitoTools2024/Fighter/raw/main/Balmond%20Collector.zip

Report Overview

Submitted URL
github.com/WarlitoTools2024/Fighter/raw/main/Balmond%20Collector.zip
IP
140.82.121.3
ASN
#36459 GITHUB
Submitted
2024-04-25 11:03:34
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
github.com	1423	2007-10-09	2016-07-13	2024-03-24	522 B	3.5 kB	140.82.121.4
raw.githubusercontent.com	35802	2014-02-06	2014-03-01	2024-04-23	533 B	8.6 MB	185.199.108.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
raw.githubusercontent.com/WarlitoTools2024/Fighter/main/Balmond%20Collector.zip
IP
185.199.108.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
8.6 MB (8550290 bytes)
Hash
fe9f3b87f7e67bcaffd0329f24543ac7
d1539daa672398810b2faa1efbb8ad6f21e55cf6
5986c615ac7b0534e5b441ae4512c553b727ad6ee3e5f5c6dac87ceb34ef5eec

Archive (21)

Filename

Md5

File type

berserk_cityaction_head_add.unity3d

7fe62b0389914410ade898d89cf6c0ef

DIY-Thermocam raw data (Lepton 3.x), scale 1024-0, spot sensor temperature 0.000000, unit celsius, color scheme 1, maximum point enabled, calibration: offset -563053032636416.000000, slope 38685626227668133590597632.000000

berserk_cityaction_scene_add.unity3d

044b69e2484da8458ed2b87fb7824d9a

data

hero_fuwang_skin.unity3d

8765f2305f799e622342c694f7997f57

data

hero_fuwang_skin_high_add.unity3d

c9f6e34fdcfd2435e3d763ab2492dc6b

data

heroshow_ip03_add.unity3d

77419ac606144bec42b514202f6e3ff0

data

kuangzhanshi_chongji.unity3d

c60a7f52bf1334e8f2ec6b926f2a48f3

DIY-Thermocam raw data (Lepton 2.x), scale 20480-0, spot sensor temperature -nan, unit celsius, color scheme 17, calibration: offset 0.000000, slope 131080.000000

kuangzhanshi_dazhao.unity3d

16d63b50eeda38667ca076b5c14b5c51

data

kuangzhanshi_dazhao_01.unity3d

8260b8be947cf53a16a32023315b758a

kuangzhanshi_hit.unity3d

d1496d9f7e45581cc9f00a9c604f0cda

data

kuangzhanshi_hit_02.unity3d

4d8493038c19fcbcf217abeefe8dbf85

data

kuangzhanshi_hit_0201.unity3d

2fb57d0296acd3f1c9e38144db1cc063

data

kuangzhanshi_hit_0202.unity3d

8517ad7d6780c9119a862555c6bc7138

data

kuangzhanshi_pugong_01.unity3d

cd4bf29ba3f6a23c19104d50c6726d73

data

kuangzhanshi_pugong_02.unity3d

222d003d4d0a3b0279d0e32b59e2ec08

data

kuangzhanshi_pugong_03.unity3d

5b27931a1d8c96ceb5b62da8545a20c1

data

kuangzhanshi_xuanfengzhan.unity3d

d153f561daee288d80230bcd8a737168

data

sfx_1021.2021.bnk

12e15b4561c8ba8a4c7ca4952728c9d2

Wwise SoundBank (little-endian), version 140, id 80B08EA5

show_1021.2021.bnk

df4d68f73b91be45c5d876b28aa8d50c

Wwise SoundBank (little-endian), version 140, id C2481C6D

show_vo_1021.2021.bnk

85c62c256cc9056d3896a1421b1a9a68

Wwise SoundBank (little-endian), version 140, id 9C0DB757

vo_1021.2021.bnk

dc5708fe759aa77a7fb38aeffab856fe

Wwise SoundBank (little-endian), version 140, id 0E014C3F

Hero021.unity3d

d3f1ac9c7bed6fb02a199e90b621acfa

data

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	github.com/WarlitoTools2024/Fighter/raw/main/Balmond%20Collector.zip	140.82.121.4	302 Found	0 B
URL User Request GET HTTP/2 github.com/WarlitoTools2024/Fighter/raw/main/Balmond%20Collector.zip IP 140.82.121.4:443 ASN #36459 GITHUB Certificate IssuerSectigo Limited Subjectgithub.com FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /WarlitoTools2024/Fighter/raw/main/Balmond%20Collector.zip HTTP/1.1 Host: github.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: GitHub.com date: Thu, 25 Apr 2024 11:03:06 GMT content-type: text/html; charset=utf-8 vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With access-control-allow-origin: location: https://raw.githubusercontent.com/WarlitoTools2024/Fighter/main/Balmond%20Collector.zip cache-control: no-cache strict-transport-security: max-age=31536000; includeSubdomains; preload x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: no-referrer-when-downgrade content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com .actions.githubusercontent.com wss://.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/ content-length: 0 x-github-request-id: D8AE:0EC4:74CE19:761A3A:662A386A X-Firefox-Spdy: h2

	raw.githubusercontent.com/WarlitoTools2024/Fighter/main/Balmond%20Collector.zip	185.199.108.133	200 OK	8.6 MB
URL User Request GET HTTP/2 raw.githubusercontent.com/WarlitoTools2024/Fighter/main/Balmond%20Collector.zip IP 185.199.108.133:443 ASN #54113 FASTLY Certificate IssuerDigiCert Inc Subject.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 8.6 MB (8550290 bytes) Hash fe9f3b87f7e67bcaffd0329f24543ac7 d1539daa672398810b2faa1efbb8ad6f21e55cf6 5986c615ac7b0534e5b441ae4512c553b727ad6ee3e5f5c6dac87ceb34ef5eec HTTP Headers GET /WarlitoTools2024/Fighter/main/Balmond%20Collector.zip HTTP/1.1 Host: raw.githubusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK cache-control: max-age=300 content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox content-type: application/zip etag: W/"2adb1f398c5161422cb7b1f21a4fe5a837f650bfa606c47386a4dee72d873324" strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-frame-options: deny x-xss-protection: 1; mode=block x-github-request-id: 8C5A:0E8C:101532B:10E3E71:662A3818 accept-ranges: bytes date: Thu, 25 Apr 2024 11:03:06 GMT via: 1.1 varnish x-served-by: cache-hel1410028-HEL x-cache: HIT x-cache-hits: 0 x-timer: S1714042987.852618,VS0,VE1 vary: Authorization,Accept-Encoding,Origin access-control-allow-origin: cross-origin-resource-policy: cross-origin x-fastly-request-id: 85424daa27f16226a081e8bf8741107afc710ef1 expires: Thu, 25 Apr 2024 11:08:06 GMT source-age: 82 content-length: 8550290 X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (21)

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers