Report Overview

  1. Visited public
    2024-07-23 07:35:57
    Tags
  2. URL

    github.com/Nekiplay/ImGUI-RakSamp-Lite/releases/download/1.0.0/Overlay.zip

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    140.82.121.4

    #36459 GITHUB

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r10.o.lencr.orgunknown2020-06-292024-06-06 21:45:112024-07-22 18:12:14
github.com14232007-10-092016-07-13 12:28:222024-07-22 19:13:57
objects.githubusercontent.com1340602014-02-062021-11-01 22:34:292024-07-22 12:47:39

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    objects.githubusercontent.com/github-production-release-asset-2e65be/750362349/381df603-1a38-4cb7-b5b6-9aa2d592957b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240723%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240723T073529Z&X-Amz-Expires=300&X-Amz-Signature=5575f7ec0fa36686a0ea1f9e29dbfa8535453b654d7eeb2e575745435c049a0f&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=750362349&response-content-disposition=attachment%3B%20filename%3DOverlay.zip&response-content-type=application%2Foctet-stream

  2. IP

    185.199.108.133

  3. ASN

    #54113 FASTLY

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    4.8 MB (4816324 bytes)

  2. Hash

    0d9ab36ab2f9a890cbd34a2a9bdb4fc6

    ef3c81a411ab39388eddf86c9c78bf179024c34f

  1. Archive (23)

  2. FilenameMd5File type
    SixLabors.ImageSharp.dll
    372c4d1944e40a8b24b6b9d29999f784
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    TextCopy.dll
    e61e96793215c73767ad52734949408a
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    Vortice.D3DCompiler.dll
    9f9bd8a478a32acd54fa28fb435059f3
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    Vortice.Direct3D11.dll
    1493e19815f9358b27ac95a125d233a6
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    Vortice.DirectX.dll
    382c8e9cb8a173a5939cef2face4915e
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    Vortice.DXGI.dll
    1b5e08292968af0c319bc791152ce574
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    Vortice.Mathematics.dll
    ab2a9f369c1a0de7eef90a4b910c32a1
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    libcimgui.so
    e5fac064e700677db5f4fe52f8c18523
    ELF 64-bit LSB shared object, x86-64, version 1 (SYSV)
    libcimgui.dylib
    9fe5532692bc2d5629c771c2be346471
    Mach-O universal binary with 2 architectures: [x86_64: - Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|WEAK_DEFINES|BINDS_TO_WEAK|NO_REEXPORTED_DYLIBS>] [ - arm64: - Mach-O 64-bit arm64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|WEAK_DEFINES|BINDS_TO_WEAK|NO_REEXPORTED_DYLIBS>]
    cimgui.dll
    8653fb569d92913e122b556710e0c6a8
    PE32+ executable (DLL) (console) Aarch64, for MS Windows, 6 sections
    cimgui.dll
    1389e96a800ae0928dd9f541d7a26a66
    PE32+ executable (DLL) (console) x86-64, for MS Windows, 7 sections
    cimgui.dll
    c0c3c07ed43f4c34c4388f432b088bab
    PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections
    ClickableTransparentOverlay.dll
    4ae16e94ff31e76ded060a0d3ec12e00
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    ImGUI RakSamp.deps.json
    93010cf314c2a058aa07e7b2abdc4fa3
    JSON text data
    ImGUI RakSamp.dll
    cd9e256a16462bb0dcaafa0aa12d1dcc
    PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    ImGUI RakSamp.exe
    4669312a307b63b172506f71678eefb4
    PE32 executable (console) Intel 80386, for MS Windows, 5 sections
    ImGUI RakSamp.runtimeconfig.json
    9fcdf880f73e74cf6347f8194b9f3509
    JSON text data
    ImGui.NET.dll
    b3c8b6098becd30384d7a23e4b74daa8
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    Memory.dll
    c34f4a629fda50ac05436fd320d056a8
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    Microsoft.Extensions.DependencyInjection.Abstractions.dll
    e8d86c8ea27425bfa8b59619ca0ca7d9
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    Process.NET.dll
    fd7407a44637e7f9ad6320c933962090
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    SharpGen.Runtime.COM.dll
    ea2735bc076f447ef9d5715e50895a4b
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    SharpGen.Runtime.dll
    ce9406c7630bf4f9f0485066ff659404
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

JavaScript (0)

HTTP Transactions (10)

URLIPResponseSize
r10.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
GET github.com/Nekiplay/ImGUI-RakSamp-Lite/releases/download/1.0.0/Overlay.zip
140.82.121.4302 Found0 B
GET objects.githubusercontent.com/github-production-release-asset-2e65be/750362349/381df603-1a38-4cb7-b5b6-9aa2d592957b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240723%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240723T073529Z&X-Amz-Expires=300&X-Amz-Signature=5575f7ec0fa36686a0ea1f9e29dbfa8535453b654d7eeb2e575745435c049a0f&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=750362349&response-content-disposition=attachment%3B%20filename%3DOverlay.zip&response-content-type=application%2Foctet-stream
185.199.108.133200 OK4.8 MB
r10.o.lencr.org/
23.36.76.226 504 B
r10.o.lencr.org/
23.36.76.226 504 B
r10.o.lencr.org/
23.36.76.226 504 B
r10.o.lencr.org/
23.36.76.226 504 B