Report - github.com/URUWorks/additional-files/raw/main/whisper/whisper_win64.zip

Report Overview

Submitted URL
github.com/URUWorks/additional-files/raw/main/whisper/whisper_win64.zip
IP
140.82.121.3
ASN
#36459 GITHUB
Submitted
2024-05-05 05:20:36
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
11

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
github.com	1423	2007-10-09	2016-07-13	2024-03-24	525 B	3.5 kB	140.82.121.3
raw.githubusercontent.com	35802	2014-02-06	2014-03-01	2024-05-03	536 B	16 MB	185.199.110.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
raw.githubusercontent.com/URUWorks/additional-files/main/whisper/whisper_win64.zip
IP
185.199.110.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
16 MB (15993227 bytes)
Hash
ce4380c4e177c686eb091b8da41fc8c4
bf29916e34dcce7837c4f89e15789157e6110e79
e6abb62da7875aecc340763cf32b5f968236348e9bb7f9fb7e3070ec72e00b58

Archive (14)

Filename

Md5

File type

bench.exe

790cc710f9b89c3d747d5aa639ac0cfb

PE32+ executable (console) x86-64, for MS Windows, 6 sections

clblast.dll

52e3234c62efeaead75f439be51bd14a

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections

command.exe

2cc4f7e5da2051f01d4a4977bdb1601b

PE32+ executable (console) x86-64, for MS Windows, 6 sections

libopenblas.dll

dd619ceed78420d9f2407aeaf53c3ac3

PE32+ executable (DLL) (console) x86-64, for MS Windows, 19 sections

lsp.exe

a31b2b3a37d8970afcce45d49fa98f3d

PE32+ executable (console) x86-64, for MS Windows, 6 sections

main.exe

0fc43b3ec5c4f14136f6eb218e7747f2

PE32+ executable (console) x86-64, for MS Windows, 6 sections

quantize.exe

eb815aa8b5132dadaf78e2538321214f

PE32+ executable (console) x86-64, for MS Windows, 6 sections

SDL2.dll

217a4e3f330941dacd5f5e9746f1489e

PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows, 12 sections

server.exe

6e45b2340cc6e99c273da71857e51a72

PE32+ executable (console) x86-64, for MS Windows, 6 sections

stream.exe

36820a121b008795d0b20aef3199c31b

PE32+ executable (console) x86-64, for MS Windows, 6 sections

talk-llama.exe

cd76ec6fb0eebe3246ab246690783c30

PE32+ executable (console) x86-64, for MS Windows, 6 sections

talk.exe

54deb61192dcae3b3c39298dd6a007ce

PE32+ executable (console) x86-64, for MS Windows, 6 sections

wchess.exe

593bbba1b1e1db5d43a032b3eaf705ea

PE32+ executable (console) x86-64, for MS Windows, 6 sections

whisper.dll

13de5a3cb92217037b03ac6939879bc5

PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/64

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

github.com/URUWorks/additional-files/raw/main/whisper/whisper_win64.zip

140.82.121.3

302 Found

0 B

URL User Request GET HTTP/2
github.com/URUWorks/additional-files/raw/main/whisper/whisper_win64.zip
IP
140.82.121.3:443
ASN
#36459 GITHUB

Certificate
IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /URUWorks/additional-files/raw/main/whisper/whisper_win64.zip HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: GitHub.com
date: Sun, 05 May 2024 05:20:01 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
access-control-allow-origin: 
location: https://raw.githubusercontent.com/URUWorks/additional-files/main/whisper/whisper_win64.zip
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: 06C2:30997F:1B803970:1BE98EC8:66371701
X-Firefox-Spdy: h2

raw.githubusercontent.com/URUWorks/additional-files/main/whisper/whisper_win64.zip

185.199.110.133

200 OK

16 MB

URL User Request GET HTTP/2
raw.githubusercontent.com/URUWorks/additional-files/main/whisper/whisper_win64.zip
IP
185.199.110.133:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
16 MB (15993227 bytes)
Hash
ce4380c4e177c686eb091b8da41fc8c4
bf29916e34dcce7837c4f89e15789157e6110e79
e6abb62da7875aecc340763cf32b5f968236348e9bb7f9fb7e3070ec72e00b58

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/64

HTTP Headers

GET /URUWorks/additional-files/main/whisper/whisper_win64.zip HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/zip
etag: W/"b466bec5946f43b2a7d9c9a53956b87e53fb8b71b666fb7989aa5557fb588da9"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 3E66:EFC42:9FD6CD:AA4216:66371702
accept-ranges: bytes
date: Sun, 05 May 2024 05:20:02 GMT
via: 1.1 varnish
x-served-by: cache-hel1410027-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714886402.096781,VS0,VE811
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: cc090035a1b97f0e8c3158f2a723badd0e00167b
expires: Sun, 05 May 2024 05:25:02 GMT
source-age: 1
content-length: 15993227
X-Firefox-Spdy: h2