Report - github.com/quivings/Solara/raw/main/Files/Solara.Dir.zip

Report Overview

Visited public
2024-07-15 17:01:41
Tags
URL
github.com/quivings/Solara/raw/main/Files/Solara.Dir.zip
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.4
#36459 GITHUB
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
raw.githubusercontent.com	35802	2014-02-06	2014-03-01 08:08:08	2024-07-14 22:19:30	521 B	8.5 MB	185.199.108.133
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-14 18:12:33	2.3 kB	6.2 kB	23.36.76.226
github.com	1423	2007-10-09	2016-07-13 12:28:22	2024-07-11 08:46:07	510 B	3.6 kB	140.82.121.3

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
raw.githubusercontent.com/quivings/Solara/main/Files/Solara.Dir.zip
IP
185.199.108.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
8.5 MB (8479787 bytes)
Hash
3e43dcff99c57b4cb9d97e24e25db99d
5faf0c31e64e5e4f12dbef19b691afe34ca3db91
11a49e73950aa79c817fed5d9697a1dd54ec0a2a49d6912e242723d9362e93b1

Archive (200)

Filename

Md5

File type

path.txt

d41d8cd98f00b204e9800998ecf8427e

version.txt

23b47a0a28223a2175373a46e9b2c26f

ASCII text, with no line terminators

cd57e4c171d6e8f5ea8b8f824a6a7316.dll

d2707360ae563a7a10e27beba85a6cd9

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 12 sections

cd57e4c171d6e8f5ea8b8f824a6a7316.exe

d84e7f79f4f0d7074802d2d6e6f3579e

PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

libcurl.dll

e31f5136d91bad0fcbce053aac798a30

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

Microsoft.Web.WebView2.Core.dll

851fee9a41856b588847cf8272645f58

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Web.WebView2.WinForms.dll

4cf94ffa50fd9bdc0bb93cceaede0629

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Web.WebView2.Wpf.dll

34ec990ed346ec6a4f14841b12280c20

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

index.js

e462fb7561f6c9bccb24e62bb93889d2

JavaScript source, ASCII text, with CRLF line terminators

index.js

4fe4d2c90a2fd19d6e97443a7d24f815

JavaScript source, ASCII text

package.json

32a15d6909fcae63e52d8664593d32d5

JSON text data

array-flatten.js

4b17fa06c54846b686b8b799e9dd253a

JavaScript source, ASCII text

package.json

cb1aa7f817100a03395dd0163bf6ebe9

JSON text data

index.js

b9e991c0e57c4d5adde68a2f4f063bc7

JavaScript source, ASCII text

read.js

c148bb38c59ce266e271c96ab1f2d192

JavaScript source, ASCII text

json.js

6b036408f968978bf9668496db9953ba

JavaScript source, ASCII text

raw.js

acb38e4fe575afaf8d1a257e47c6e362

JavaScript source, ASCII text

text.js

beb4ada09306f8d6435566d9e88076d3

JavaScript source, ASCII text

urlencoded.js

906a833480ce8841bfa5aeb95b5c085f

JavaScript source, ASCII text

package.json

826bd4315438573ba1a6d88ae2a2aa65

JSON text data

index.js

83cf8fe86424252c5a9a3e2fe90dbd57

JavaScript source, ASCII text

package.json

5e3137feec27c5d88693e0cb2ff95d3c

JSON text data

callBound.js

fda064fefaeb89252271922954d69a4f

JavaScript source, ASCII text

index.js

40109fa1aade9c89c9587e77011f7301

JavaScript source, ASCII text

package.json

7327c5e04c116460b3c73ee92292269a

JSON text data

index.js

43a307ff7de26dbec523ec966c434f94

JavaScript source, ASCII text

package.json

5b285d4db057e7e72225e8e928d2ffa3

JSON text data

index.js

4781c7ea0309edac61c3a36e3ea9da10

JavaScript source, ASCII text

package.json

0de0482c40698c075e13e4d54ff34466

JSON text data

index.js

db5deda6183845891fe9b5667cde042d

JavaScript source, ASCII text

package.json

d55aa6bd2733ca1031186952d1485f43

JSON text data

index.js

a9634aa95d321b9a6d90bec5d3d23937

JavaScript source, ASCII text

package.json

076c53814237236a9d1aa999f33ee501

JSON text data

package.json

71a7656944ffe50cc27ebe02491ae49b

JSON text data

debug.js

74bdccf347345d27fe8a4ac3add99c60

JavaScript source, ASCII text

index.js

dd13897ea2eed92695bb7e4e744a9148

JavaScript source, ASCII text

node.js

25807a97fbb1fcc42a013abc7d7768c4

JavaScript source, ASCII text

index.js

92d50385cb04e9bba48103d21a4a08dd

JavaScript source, ASCII text

package.json

05b9ba4536b59b74c4b3c95327787004

JSON text data

index.js

002a1f3e813cc05d9e3cc011f6601628

JavaScript source, ASCII text

package.json

7f0a9d228c79f0ee4b89fc6117f1c687

JSON text data

index.js

35723299a9b5b96d111cbf94c56c898f

JavaScript source, ASCII text

package.json

6015f23c6e2fd79f4a6e29453ce4dc1d

JSON text data

index.js

e7a3f46d4b903c9f8a025cb753b1a538

JavaScript source, ASCII text

package.json

3ed21090e07ef5dd57729a77c4291cb9

JSON text data

index.js

b90cf71779f72e14be703a4e494e968c

JavaScript source, ASCII text

package.json

453a9bb10c91e0ec44f305b14e30ce82

JSON text data

index.js

0c95e46d0f08bd96b93cfbea66888afc

JavaScript source, ASCII text

package.json

e9c758769fec9883d5ce3d30b8ee1047

JSON text data

index.js

b7bc620dd53aa6a7dd2ec301305117fe

JavaScript source, ASCII text

package.json

c4725fba887a7ff0ac3858d435a1b240

JSON text data

eval.js

1e89f5b29003f4edb43df2dd17d42317

JavaScript source, ASCII text

index.js

f8ebbf637a1ab43a7188d855fdc7787b

JavaScript source, ASCII text

package.json

7e6b784827a0aff2a05c343f8a53e88d

JSON text data

range.js

bc149f1f9a727b3ce635241092c84a55

JavaScript source, ASCII text

ref.js

219b6e072aebeb07620cc1fdddf70185

JavaScript source, ASCII text

syntax.js

0afbd3a8277df33593b212951d15e83d

JavaScript source, ASCII text

type.js

9f2f1f6bb3dc762bc12e377e00e9f775

JavaScript source, ASCII text

uri.js

73e1a7405c670740980cad2abda5ca15

JavaScript source, ASCII text

index.js

8eaca1927e67861a7682b7b2c0906ef1

JavaScript source, ASCII text

package.json

fec91cc11e50ee734c65c2d703db3884

JSON text data

index.js

866e37a4d9fb8799d5415d32ac413465

JavaScript source, ASCII text

application.js

15cf9c2f48c7ba6583c59d28908e3e27

JavaScript source, ASCII text

express.js

d467bc485eddf6d38278bc6b1dc16389

JavaScript source, ASCII text

init.js

3711ae7ea348d39a41c5139a63e89c12

JavaScript source, ASCII text

query.js

a6e9a6c92c5bfdd9d7b08b267a3b1d44

JavaScript source, ASCII text

request.js

7de9073e4cd5121ebd975f8fc252e3b3

JavaScript source, ASCII text

response.js

b95e98d87c48b055f2e37cf427b2edbf

JavaScript source, ASCII text

index.js

97a86cf767627bba9b50bffbdda677a8

JavaScript source, ASCII text

layer.js

c6e16965ef05cc02cfee78022496abab

JavaScript source, ASCII text

route.js

f369e8206668eed53791e8633d8b9850

JavaScript source, ASCII text

utils.js

d0af8049aeae0b030cada613fe49ef9c

JavaScript source, ASCII text

view.js

09c05d27b2f11d1bd70fb54c24c60311

JavaScript source, ASCII text

package.json

3b5b76b70b0a549dce72c5a02756d2a8

JSON text data

index.js

d50e9637775204f194d629000189f69c

JavaScript source, ASCII text

package.json

3d09ac571e0b6eaf8fdb9806118b6d30

JSON text data

index.js

485e8b30d7f9b0394b2ac54ed51ddb06

JavaScript source, ASCII text

package.json

e7df15eb8d27abec5607f111411a9df1

JSON text data

index.js

57dbafb6c310ce7063690f5688acedd5

JavaScript source, ASCII text

package.json

193849cf18966de2814f4f6e85740069

JSON text data

implementation.js

90ffc505f9a898a56dab665f19bd1798

JavaScript source, ASCII text

index.js

80c4b0103888a6175e5579dedbab1ea3

JavaScript source, ASCII text

package.json

325c50acb9dd3d834589c1aeb318c9a8

JSON text data

index.js

7fd37b7099eb69f0fc8ee86a47f69e16

JavaScript source, ASCII text

package.json

322602876e4a7e2716019566ca203f85

JSON text data

index.js

9d619a4bc9cbf4f8f3a9f735f88acce2

JavaScript source, ASCII text

package.json

decfdb3ee3a3a8ac4460e083201ff8b2

JSON text data

index.js

58e3b71ae6d84d4371dd90900b2b7f01

JavaScript source, ASCII text

package.json

e1b6e64cea1f71881fabb0759bac0d43

JSON text data

index.js

a8c2d4ea312a1de8d1fa3dbf93aaa444

JavaScript source, ASCII text

package.json

510168f5c4c087586d843e93cc695783

JSON text data

index.js

6e64fb0aa43856e2353bc04afd460eeb

JavaScript source, ASCII text

package.json

ccb4058e21eb78dd88d3a003dc3cc489

JSON text data

index.js

1282693c4d8fa15c683c5f633c9108bc

JavaScript source, ASCII text

package.json

854e83356c304640e79edea88870cb14

JSON text data

shams.js

d84aa1a07b111dcbe4c4a887e147ed14

JavaScript source, ASCII text

index.js

213c0887addecc762964db8ce2030f2f

JavaScript source, ASCII text

package.json

f44e01d2e815367806c58207ac92a5fc

JSON text data

dbcs-codec.js

6decbcdfe2ba5ed5c3a75466ce94cdfc

JavaScript source, ASCII text

dbcs-data.js

e56d3d57df85dc818087254a8a16a699

JavaScript source, Unicode text, UTF-8 text

index.js

7a13671a7fbc74c463377b3cda863503

JavaScript source, ASCII text

internal.js

701b0858fb6fa82101365d81d7406f04

JavaScript source, Unicode text, UTF-8 text

sbcs-codec.js

6f257833a4d930eaa9af9225faef16b8

JavaScript source, ASCII text

sbcs-data.js

336be4eda323a03b88d06985f15c3524

JavaScript source, Unicode text, UTF-8 text

sbcs-data-generated.js

78c27d9268d36644ac77b82b956f5b1f

data

utf16.js

7ad12158af65189b85796de64923f031

JavaScript source, ASCII text

utf7.js

cf6746c76930fe21a716ef03d700b208

JavaScript source, ASCII text

bom-handling.js

7b3d4519f05bf0cc8d70a4d950c72c55

JavaScript source, ASCII text

extend-node.js

24ac97737522b61c26b830d350cfcaea

JavaScript source, ASCII text

index.js

c1da5b53fa60006bc973dc785bed2ca6

JavaScript source, Unicode text, UTF-8 text

streams.js

8628e41438801c5bfdabf3be9b1ff548

JavaScript source, ASCII text

package.json

a8b97f25878ddc5419a9afe173037035

JSON text data

inherits.js

9ced637189714b8d21d34aeb50b42ae8

JavaScript source, ASCII text

package.json

f73908dab55d4259f3ed052ce9fb2fbb

JSON text data

ipaddr.js

faea7806284886c6c63a41c247008fbd

JavaScript source, ASCII text

package.json

17bc176c8d78f76c5e70cad7ba16a598

JSON text data

index.js

ef1845377cbbf76edd411a370738ed2b

JavaScript source, ASCII text

package.json

127ce4abeb265c6eef7b45540241ca91

JSON text data

index.js

b4d3859e603602c87a45682862055af0

JavaScript source, ASCII text

package.json

570e06d8ce0167e07a32ba70fdd56795

JSON text data

index.js

17d4a4ba378c1fd10dcfd061439f7ea0

JavaScript source, ASCII text

package.json

8a9cbead0f83bf845207ad21534dfdfa

JSON text data

mime.js

2930e6caad95dfad928d76fc1eb2e003

JavaScript source, ASCII text

package.json

624ef11f91e60b224942ff81b13d10c6

JSON text data

types.json

4ac089e4f393ed139cb2ee55726c66a5

JSON text data

db.json

052e457b88d815c1792e1f8ce8509fc3

JSON text data

index.js

911d3d2ae7be42b05ba9275ed7722859

JavaScript source, ASCII text

package.json

12c5cd5cfa1d4f45af207db1715d4b70

JSON text data

index.js

bf015bb6811afc5c98e3e5f7072fdc79

JavaScript source, ASCII text

package.json

7ad9a6119e3173ea667f1409fefba992

JSON text data

index.js

ae157c9a8e70902576c2d8a06dbcde32

JavaScript source, ASCII text

package.json

cbd55880a650b56c3d5acddbbdbee9bc

JSON text data

index.js

279d02856c1815ce3b6745ee234a91ae

JavaScript source, ASCII text

charset.js

7977a65b1542fa8ce9650e58607f4b07

JavaScript source, ASCII text

encoding.js

e03dd226452c58ce083ab4468851f0b1

JavaScript source, ASCII text

language.js

f10e434ae4eed2d3d46ff47582ed9938

JavaScript source, ASCII text

mediaType.js

0fdaa0ed7cab2ce5fcbd7b361a85892c

JavaScript source, ASCII text

package.json

5d2bc8ae77831203c6d0ce3a17e599cf

JSON text data

index.js

30aec21da8fc4b15f237a4d6b99d1a9b

JavaScript source, ASCII text

package.json

883b6091188e84e9da4678f187c5251a

JSON text data

util.inspect.js

7be99e6d26fa9567c53527a9f2a0b799

JavaScript source, ASCII text

index.js

b1c3d24b92f25989b8aefc7f6aaa91ba

JavaScript source, ASCII text

package.json

436846dd0f4348ac2ee93c9c5eb291e4

JSON text data

index.js

3750351b6b1aa7f3e65d5499ea45006e

JavaScript source, ASCII text

package.json

5b1493bd775444f0994d0b1063db1900

JSON text data

index.js

cb184302e8d26369e9c0392fa4c8d0cb

JavaScript source, ASCII text

package.json

19e58964462995e183c1cd8147a9b8a1

JSON text data

index.js

0ec33ea2ccb3a107c666a0b311f0e28e

JavaScript source, ASCII text

package.json

9b004d1140b24f5ae3f21fcdba8951fc

JSON text data

formats.js

74e3187201ce03c0be48c3d744ce9b93

JavaScript source, ASCII text

index.js

1459a9952f6b500d24818bb6e3e37368

JavaScript source, ASCII text

parse.js

90f8fbd8451fdb537b916f9b2f753456

JavaScript source, Unicode text, UTF-8 text

stringify.js

1cbd67c569a1faee16de2ff17fc8bf10

JavaScript source, Unicode text, UTF-8 text

utils.js

37d7f5eda99a09f6169ddb31b0800519

JavaScript source, ASCII text

package.json

8293830097b45284f0fa44658785c307

JSON text data

index.js

e72576333d27d1c9b3901c4b9e597f27

JavaScript source, ASCII text

package.json

89b7cc42d2831a8061361ca29545f837

JSON text data

index.js

c7da7dd272deb49b1042a6ad81419d5e

JavaScript source, ASCII text

package.json

58476fbd36d659574fc58355c7349d40

JSON text data

index.js

35de14728187b87c9ab687c3bdc37436

JavaScript source, ASCII text

package.json

b206856c7ef099626bf28cdc5498787a

JSON text data

package.json

274d956f400350c9f6cf96d22cdda227

JSON text data

safer.js

b548fa7365e81d472250949a6b4ccc69

JavaScript source, ASCII text

index.js

638e22792701426da6dcfe743a272762

JavaScript source, ASCII text

index.js

83c46187ed7b1e33a178f4c531c4ea81

JavaScript source, ASCII text

package.json

a682078f64a677ddad1f50307a14b678

JSON text data

package.json

331e9be93662fd4127e84beed1b3c82c

JSON text data

index.js

3707f8d6ee2c6d88ffab23c0c4f1509b

JavaScript source, ASCII text

package.json

c72c82df31ad86a65e2e48c33c03988b

JSON text data

index.js

3f8df1ed175b6f94bca846b018f56f6d

JavaScript source, ASCII text

package.json

d5c44d4cc2d418c8a4248912b241ea03

JSON text data

index.js

0426a4c38b91533c932059bcb80f163d

JavaScript source, ASCII text

package.json

3c0480d60c15fe4fe27ae36205d1f949

JSON text data

index.js

ae7485eadf030bac549bd7f2061c1369

JavaScript source, ASCII text

package.json

9d06d3c21ae37a4600c5685baad644fa

JSON text data

codes.json

8fe432aab55e65b4ed24a6753d5e53ca

JSON text data

index.js

7c5205330288c271e7582c282e40d21a

JavaScript source, ASCII text

package.json

210cda9d522bab0911dff42346dee4be

JSON text data

index.js

b7a1b5c3f74ff7e0a11b61d56673afa0

JavaScript source, ASCII text

package.json

fd6e2543a1b015cc443c7a2dcc4e3668

JSON text data

index.js

f9aa3afdc332adae59aa21d31090582d

JavaScript source, ASCII text

package.json

ffa244d8a6f745a081a0cdde026879c9

JSON text data

index.js

377f0c4bddbbd7e73b32a53e687df342

JavaScript source, ASCII text

package.json

f8318a554ed98c6a030942e9c14aaac8

JSON text data

index.js

20d03f8bf4486091c44f17a97cbb6c24

JavaScript source, ASCII text

package.json

0230ade39b9c19f5fcc29ed02dff4afe

JSON text data

index.js

8217c2d942ee5bf6866c92662515d975

JavaScript source, ASCII text

package.json

3577fc17c1b964af7cfe2c17c73f84f3

JSON text data

package.json

b9f2ca8a50d6d71642dd920c76a851e5

JSON text data

index.html

7ed00e10ff463cc9afd05d41fc77ac06

HTML document, ASCII text, with very long lines (994), with CRLF line terminators

lua.js

8706d861294e09a1f2f7e63d19e5fcb7

JavaScript source, ASCII text

editor.main.css

233217455a3ef3604bf4942024b94f98

ASCII text, with very long lines (65254)

editor.main.js

9399a8eaa741d04b0ae6566a5ebb8106

JavaScript source, Unicode text, UTF-8 text, with very long lines (25715)

editor.main.nls.js

74dd2381ddbb5af80ce28aefed3068fc

Unicode text, UTF-8 text, with very long lines (8613)

loader.js

8a3086f6c6298f986bda09080dd003b1

JavaScript source, ASCII text, with very long lines (1024)

Newtonsoft.Json.dll

195ffb7167db3219b217c4fd439eedd6

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

vcruntime140.dll

7a2b8cfcd543f6e4ebca43162b67d610

PE32+ executable (DLL) (console) x86-64, for MS Windows, 7 sections

WebView2Loader.dll

a0bd0d1a66e7c7f1d97aedecdafb933f

PE32+ executable (DLL) (console) x86-64, for MS Windows, 10 sections

Wpf.Ui.dll

aead90ab96e2853f59be27c4ec1e4853

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

zlib1.dll

75365924730b0b2c1a6ee9028ef07685

PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows, 11 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	malicious	VirusTotal - Scan result 25/68

JavaScript (0)

HTTP Transactions (9)

URL IP Response Size

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
d0a174d2755142ad2976fe236247d9ee
8c0b842ebb519f1d7e5e1494001c0a089fad2d90
c280a1ed1c68947bce376616600122bd7ca4adda711d65cb4fe52556ce29b26a

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C280A1ED1C68947BCE376616600122BD7CA4ADDA711D65CB4FE52556CE29B26A"
Last-Modified: Mon, 15 Jul 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16082
Expires: Mon, 15 Jul 2024 21:29:11 GMT
Date: Mon, 15 Jul 2024 17:01:09 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
71d8b1aa21db1e3bd7c1c93ec0a27e67
fedadfaa4439b365295709d4bdc6e3ec0fe6c086
b480a5bc991ec721db08973ad1c2946c09ca899b78ca50bfd56bffac0d2d4e39

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B480A5BC991EC721DB08973AD1C2946C09CA899B78CA50BFD56BFFAC0D2D4E39"
Last-Modified: Sun, 14 Jul 2024 15:29:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7644
Expires: Mon, 15 Jul 2024 19:08:33 GMT
Date: Mon, 15 Jul 2024 17:01:09 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
3ce85b1d34b1e8024ca9a37cff66221a
39236c242bdb2053821ca7b473582450acff9b39
4efba0f7a3c02e999ff66fdeea5e0170ef5feb724739a1eeb9b4719772c0deac

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4EFBA0F7A3C02E999FF66FDEEA5E0170EF5FEB724739A1EEB9B4719772C0DEAC"
Last-Modified: Sun, 14 Jul 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18246
Expires: Mon, 15 Jul 2024 22:05:15 GMT
Date: Mon, 15 Jul 2024 17:01:09 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
1069501beed320ba3e21b591ba8dc5ce
9e6b836cfea33a56e2e2598f27cb528578c8033c
568773d146699ebccbd5d393211720dd1b3d4eeb03bdfd8ad4d32c4720814c31

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "568773D146699EBCCBD5D393211720DD1B3D4EEB03BDFD8AD4D32C4720814C31"
Last-Modified: Sun, 14 Jul 2024 16:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10028
Expires: Mon, 15 Jul 2024 19:48:18 GMT
Date: Mon, 15 Jul 2024 17:01:10 GMT
Connection: keep-alive

github.com/quivings/Solara/raw/main/Files/Solara.Dir.zip

140.82.121.3

302 Found

0 B

URL User Request GET HTTP/2
github.com/quivings/Solara/raw/main/Files/Solara.Dir.zip
IP
140.82.121.3:443
ASN
#36459 GITHUB

Certificate
IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /quivings/Solara/raw/main/Files/Solara.Dir.zip HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: GitHub.com
date: Mon, 15 Jul 2024 17:01:10 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
access-control-allow-origin: 
location: https://raw.githubusercontent.com/quivings/Solara/main/Files/Solara.Dir.zip
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: FDE7:0F42:87D7637:8AAD147:669555D6
X-Firefox-Spdy: h2

raw.githubusercontent.com/quivings/Solara/main/Files/Solara.Dir.zip

185.199.108.133

200 OK

8.5 MB

URL User Request GET HTTP/2
raw.githubusercontent.com/quivings/Solara/main/Files/Solara.Dir.zip
IP
185.199.108.133:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
8.5 MB (8479787 bytes)
Hash
3e43dcff99c57b4cb9d97e24e25db99d
5faf0c31e64e5e4f12dbef19b691afe34ca3db91
11a49e73950aa79c817fed5d9697a1dd54ec0a2a49d6912e242723d9362e93b1

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 25/68

HTTP Headers

GET /quivings/Solara/main/Files/Solara.Dir.zip HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/zip
etag: W/"32baad48fe4fc008a9f4fa2d8faff59780d71f0a61df19e0dcc3c7c224960ad3"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 1A08:1ABE27:19018E3:1A6F841:669555D6
accept-ranges: bytes
date: Mon, 15 Jul 2024 17:01:11 GMT
via: 1.1 varnish
x-served-by: cache-hel1410028-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1721062871.516235,VS0,VE668
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: 32b6317ad9272303d434a39d8831b6126dd1a0b2
expires: Mon, 15 Jul 2024 17:06:11 GMT
source-age: 1
content-length: 8479787
X-Firefox-Spdy: h2

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
80ee007415e4a9cd9ff180ee56d4fd90
08276896e8774d12a699400ffe88939d02acd056
b76186c793cde690af253f9096553d00dffd54dc33faf5b9a7059b5ce61de651

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B76186C793CDE690AF253F9096553D00DFFD54DC33FAF5B9A7059B5CE61DE651"
Last-Modified: Sat, 13 Jul 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3579
Expires: Mon, 15 Jul 2024 18:00:51 GMT
Date: Mon, 15 Jul 2024 17:01:12 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
80ee007415e4a9cd9ff180ee56d4fd90
08276896e8774d12a699400ffe88939d02acd056
b76186c793cde690af253f9096553d00dffd54dc33faf5b9a7059b5ce61de651

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B76186C793CDE690AF253F9096553D00DFFD54DC33FAF5B9A7059B5CE61DE651"
Last-Modified: Sat, 13 Jul 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3579
Expires: Mon, 15 Jul 2024 18:00:51 GMT
Date: Mon, 15 Jul 2024 17:01:12 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
80ee007415e4a9cd9ff180ee56d4fd90
08276896e8774d12a699400ffe88939d02acd056
b76186c793cde690af253f9096553d00dffd54dc33faf5b9a7059b5ce61de651

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B76186C793CDE690AF253F9096553D00DFFD54DC33FAF5B9A7059B5CE61DE651"
Last-Modified: Sat, 13 Jul 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3579
Expires: Mon, 15 Jul 2024 18:00:51 GMT
Date: Mon, 15 Jul 2024 17:01:12 GMT
Connection: keep-alive

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (200)

Detections

JavaScript (0)

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size