Report Overview
Visitedpublic
2024-11-01 16:41:29
Tags
Submit Tags
URL
github.com/bol-van/zapret/archive/refs/tags/v67.zip
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.3
#36459 GITHUB
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
github.com
14232007-10-092016-07-132024-10-30
codeload.github.com
623592007-10-092013-04-182024-10-30

Related reports

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Mnemonic Secure DNS

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
codeload.github.com/bol-van/zapret/zip/refs/tags/v67
IP / ASN
140.82.121.9
#36459 GITHUB
File Overview
File TypeZip archive data, at least v1.0 to extract, compression method=store
Size6.2 MB (6224941 bytes)
MD5c643f52ebdb58daa8ebd7a3cdadbce52
SHA11d5dcc18da708e9240dfe6a9d813bbbed9582229
Archive (294)
FilenameMD5File type
.gitattributes3accd1048776b3d40631a63b3cc17ab2ASCII text
.gitignored1ebea663d421a6210505ff786ab54dbASCII text
Makefile39d2b51c8101c646d413b76fa606395amakefile script, ASCII text
ip2net22c7f43a4ec97fa44f082e17795c66bbELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV)
mdig5f94d33b729003af71dcfe17d03ae69cELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV)
nfqws4c5c723978d26803a58680f82b8187f7ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV)
tpws502afe70231cf6af3fb76a20af6bf159ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV)
ip2net00e78bc596686167ccaaf06307e79fb8ELF 32-bit LSB executable, ARM, EABI5 version 1 (GNU/Linux)
mdige8b1f641a7e3065e7061df3d38557f2eELF 32-bit LSB executable, ARM, EABI5 version 1 (GNU/Linux)
nfqws7112dbf95e249ee781c6d7ec87b61d72ELF 32-bit LSB executable, ARM, EABI5 version 1 (GNU/Linux)
tpws3a0acbe3ef601fdf15fb5aaf966aa43eELF 32-bit LSB executable, ARM, EABI5 version 1 (GNU/Linux)
dvtws0c2b2175164ad684f0e1f7bea0ca198aELF 64-bit LSB executable, x86-64, version 1 (FreeBSD)
ip2netec3e4a4e895bc856ef68edd49cc2c13eELF 64-bit LSB executable, x86-64, version 1 (FreeBSD)
mdig165bc7e2c97ce3877b0697b4cadddd77ELF 64-bit LSB executable, x86-64, version 1 (FreeBSD)
tpws38174fc7bf41aae21db00488d7997876ELF 64-bit LSB executable, x86-64, version 1 (FreeBSD)
ip2net730d08980a3a571c5c8284af6d27ea34Mach-O universal binary with 2 architectures: [x86_64: - Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|PIE>] [ - arm64: - Mach-O 64-bit arm64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|PIE>]
mdig8ed720bdb4fe769ab0aa1d479dab5effMach-O universal binary with 2 architectures: [x86_64: - Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|PIE>] [ - arm64: - Mach-O 64-bit arm64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|PIE>]
tpws5fd46221488182219d490a7897ad7f1fMach-O universal binary with 2 architectures: [x86_64: - Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|PIE>] [ - arm64: - Mach-O 64-bit arm64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|PIE>]
ip2net88a0f5f9c96aa45380a1f0f6ded2dbfbELF 32-bit LSB executable, MIPS, MIPS32 version 1 (SYSV)
mdiga0e4a21f97a6270dea26d05a76d8f4e5ELF 32-bit LSB executable, MIPS, MIPS32 version 1 (SYSV)
nfqws2d33489c1630008b7d9881727c848d1fELF 32-bit LSB executable, MIPS, MIPS32 version 1 (SYSV)
tpwsb3e490133b1dc1041ac1fc5717c5fe47ELF 32-bit LSB executable, MIPS, MIPS32 version 1 (SYSV)
ip2netf2dc792b26b895275d40b6ad06f6a56cELF 32-bit MSB executable, MIPS, MIPS32 version 1 (SYSV)
mdig405de608c7fd2d7456d15199464d78ddELF 32-bit MSB executable, MIPS, MIPS32 version 1 (SYSV)
nfqwscfc26c25df7acab3c3ed4ed1437849dfELF 32-bit MSB executable, MIPS, MIPS32 version 1 (SYSV)
tpws6a61cdbe2e7136e65c1cb68b070ef5ecELF 32-bit MSB executable, MIPS, MIPS32 version 1 (SYSV)
ip2net5b2ee6c5df959b4379976d796e5f4849ELF 64-bit MSB executable, MIPS, MIPS64 rel2 version 1 (SYSV)
mdigd18b4b6d256faec6d5380b15c0125a01ELF 64-bit MSB executable, MIPS, MIPS64 rel2 version 1 (SYSV)
nfqwsf0f603e425d4f8245941e0f0180b137eELF 64-bit MSB executable, MIPS, MIPS64 rel2 version 1 (SYSV)
tpws594ab4b718efdb338e49eeea87f7482fELF 64-bit MSB executable, MIPS, MIPS64 rel2 version 1 (SYSV)
ip2netea6de7919482d791fe1ece5f05fe8610ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (GNU/Linux)
mdige1880e4677df49a9520f342802c1b31eELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (GNU/Linux)
nfqws82f78126f0c724418f5dbad3d066eb6fELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (GNU/Linux)
tpws70a4453047439ebca41fd0425e4c5d75ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (GNU/Linux)
WinDivert.dll387b5f1334fe717221295b18203cd70cPE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 7 sections
WinDivert32.sys451ec31152318d1249f41aed387dd262PE32 executable (native) Intel 80386, for MS Windows, 6 sections
cygwin1.dll8d81285bf054e8a098d5abc1407fea57PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed, 3 sections
ip2net.exef08e333d38e0cd2b4bfe68d100bda280PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, 9 sections
killall.exedbbaab56ea2db95a662001d2b4ca8382PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, 8 sections
mdig.exec0293a40f22fc4eee1d5e4549b87a930PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, 9 sections
readme.txt6feeee68326711944d3542519de2ce38ASCII text, with CRLF line terminators
winws.exe3ae50009dc88878b0eaee6f3dac430f5PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, 9 sections
WinDivert.dllb2014d33ee645112d5dc16fe9d9fcbffPE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows, 9 sections
WinDivert64.sys89ed5be7ea83c01d0de33d3519944aa5PE32+ executable (native) x86-64, for MS Windows, 8 sections
cygwin1.dllc50b50303fae4afe7248307339a00d13PE32+ executable (DLL) (console) x86-64, for MS Windows, 3 sections
ip2net.exe90ec2d86d6ff98dfd9cd75b4ff992996PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows, 11 sections
mdig.exe1e178b66d2af9350061ef0bf4000a75dPE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows, 11 sections
readme.txt6feeee68326711944d3542519de2ce38ASCII text, with CRLF line terminators
winws.exee56125cfe50af44c715935ab9c08dca2PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows, 10 sections
ip2net4a768cf26b3817bda02bd8a5f4b02140ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux)
mdigc087ee3fabe0c39e22ff7b62d64e7e72ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux)
nfqwsdcfea6715fa2664df4e214727af27879ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux)
tpws1b89adcf29a11ed786b9ac8d1e314131ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux)
ip2nete6feb5004c26580666d35a2155bbbacdELF 64-bit LSB executable, x86-64, version 1 (SYSV)
mdig33a118d26a4f3b6d9d22ffc26bdc3104ELF 64-bit LSB executable, x86-64, version 1 (SYSV)
nfqwsa6e4704ae0b9cd0735cded4af6ed539aELF 64-bit LSB executable, x86-64, version 1 (SYSV)
tpwsa2a697824379ba8cbd0f819f368cf57eELF 64-bit LSB executable, x86-64, version 1 (SYSV)
tpws_wsl.tgz095ba62515989a90903b42146d479a28gzip compressed data, max compression, from Unix
blockcheck.sh878dd59674a5b95329a4929ea620e044POSIX shell script, ASCII text executable, with very long lines (400)
base.shd33dd306afa186b1a1bab5727f29d4e7Unicode text, UTF-8 text
custom.shaa67e4c253af9ebe3065d503672a0516ASCII text
dialog.sh6fd5b6525dfdd5fdff0a4919fd1a5105ASCII text
elevate.sh6a2f4103dc14704a6db57a4468d8acfeASCII text
fwtype.sh870dcc207c4808cc6934d204a1f2311aASCII text
installer.sh2bc815ebcee91479d61e8ebca9b75de6ASCII text
ipt.sh8f7d833b6231a2516f23356d96266223ASCII text
linux_fw.sh9f52c890b1d10a987d53ebd4629654acASCII text
linux_iphelper.sh43c2894f9ae3ebbb20ef34c33a930cb4ASCII text
list.sh98497f3071b5070d352945188b6c87d1ASCII text
nft.sh8e0b7ee1b639ff7e99b55537557fa052ASCII text
pf.sha76467f5c2266c5f48f6c8d393813e7cASCII text
queue.sh2048844f39b485bb8b52ceec641c1932ASCII text
virt.shc161da3593f20e9920b48c5525ce141bASCII text
config.default15307c9301c7ed836dfaab5f79fbf9c5ASCII text
LICENSE.txt853c681fb0ea780ca453e42f849cffa5ASCII text
bsd.eng.mde2a24de9f541334445856859873aa771ASCII text
bsd.txt82a95e3a80d308d5087782d4b6066990Unicode text, UTF-8 text
bsdfw.txt556b2d1b49c7469f4fd63d3a00f4d2b8ASCII text
changes.txt12032d21609fcbe62042461982910577ASCII text
build_howto_openwrt.txt434749613640ace8479d80cde911d030ASCII text, with CRLF line terminators
Makefileae87870165ba9cce152082429496e645ASCII text
readme.txt876928487bc05978a7319032257f72f6ASCII text, with CRLF line terminators
Makefileb286aeedc23ce0e237d2344079a9e367ASCII text
readme.txt5419ed61a8f4970a4f921908cf08533dASCII text, with CRLF line terminators
Makefilef78f74ef09d8010647805e9206e75f11ASCII text
readme.txt629c2f875af2e4b2c0de17f01e3665b9ASCII text, with CRLF line terminators
Makefilee7de1697f6a3e0b31c3ab6963c7da4dfASCII text
readme.txtcfe6971d5047b4ecccefd8ef8f525bd8ASCII text, with CRLF line terminators
iptables.txtadafbf0ec65f25601756ba3a1196d756ASCII text
manual_setup.txt9c2b36b06b1b26fc74d66bc78f5d6cb9Unicode text, UTF-8 text
nftables.txt7d87bd76c4586a2d09693b438705e8abASCII text
nftables_notes.txt167e5c7637071be910ce7569e7965743Unicode text, UTF-8 text
quick_start.txt040498f27e8a36266c2e82f203442a51Unicode text, UTF-8 text
quick_start_windows.txt6078faf546e1ff0e77127ebbc13f710eUnicode text, UTF-8 text
readme.eng.mde4877b761d17fbd8e6785d3a0c268f9eUnicode text, UTF-8 text, with very long lines (426)
readme.txt9969c728497694deee1bf4549747c129Unicode text, UTF-8 text
redsocks.txt649d291af5946dc61dc8859b76e37116Unicode text, UTF-8 text
windows.eng.md8886406a66e732b4284117d37610ec7fUnicode text, UTF-8 text
windows.txt403a787be588d4ae59d899f6632d0d33Unicode text, UTF-8 (with BOM) text
010-wg-mod.patchd772cfc3b3bd176cd6e5c1f667c4c774unified diff output text, 1st line "Index: WireGuard-0.0.20190123/src/cookie.c", 2nd line "===================================================================", 3rd line "--- WireGuard-0.0.20190123.orig/src/cookie.c", ASCII text
wireguard-mod.txta0e2b512988f7a319fcb57fffdc5d0cbC source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
wireguard_iproute_openwrt.txt8dfc14896b5151a102a9b848964f04f7Unicode text, UTF-8 (with BOM) text, with CRLF, LF line terminators
dht_find_node.binb0af2e09b3977dfe983b7b7df50d04c3data
dht_get_peers.bind755f09ea9d03f842e1ad2693ebc4bbedata
dtls_clienthello_w3_org.bine091d8e448cb76d8842ca22643e12b82data
http_iana_org.bin1f002c8a1cab457d3735b2a3042b5857ASCII text, with CRLF line terminators
quic_initial_facebook_com.binfbed62e95d51ee56b8045e905e0945dfdata
quic_initial_facebook_com_quiche.bin4537d172b1fcf9a63f1d910b51999a39data
quic_initial_rr2---sn-gvnuxaxjvh-o8ge_googlevideo_com.bin2b046660489f3105d8ab682472b90e8edata
quic_initial_rutracker_org.bin0fffe2ce436e3135e80287f5218f398adata
quic_initial_rutracker_org_kyber_1.bin8972e88af7f4e932513ce7c93d5c730edata
quic_initial_rutracker_org_kyber_2.bine8276b3baa700d1ca5c826cb2b07db0adata
quic_initial_vk_com.bin79be17b482d8ee1e96eec9e16e7a506ddata
quic_initial_www_google_com.bin312526d39958d89b1f8ab67789ab985fdata
quic_short_header.bin41024fe1d0152f545887d7b84bcca430data
tls_clienthello_gosuslugi_ru.bine2c7337d41e48644dcb16591c446ab17data
tls_clienthello_iana_org.bin25f535aebfdfce4b84e4fd996cb82ac1data
tls_clienthello_rutracker_org_kyber.binb09cf16b9c9e2785b01a98965132d03cdata
tls_clienthello_sberbank_ru.bin6287cc49725e3f869660c078355eee06data
tls_clienthello_vk_com.bin5299f24cf3ef34818300e204cf40c203data
tls_clienthello_vk_com_kyber.bin2e3f8f12885093044a4a7b064f9006b7SPARC executable not stripped
tls_clienthello_www_google_com.bin7ab7ad857c5b8794fbdf1091b494dc94data
wireguard_initiation.binb8f6d4112a4ffafcddf3186d3ff2444cdata
wireguard_response.binf4d0b945d98614931ac640b9e769f34fdata
zero_1024.bin0f343b0931126a20f133d67c2b018a3bdata
zero_256.bin348a9791dc41b89796ec3808b5b5262fdata
zero_512.binbf619eac0cdf3f68d496ea9344137e8bdata
run-zapret-hostlist8f66099bff15300c61a647cdcf97d400a /system/bin/busybox sh script, ASCII text executable
run-zapret-ip418a41ec48eadd174af938a20b8a6f97a /system/bin/busybox sh script, ASCII text executable
unfuck_nfqueue.ko20ec4f0209a680460408ba57ea7af6b3ELF 32-bit LSB relocatable, ARM, EABI5 version 1 (SYSV)
unzapret6d843dfcdcb5192d8706bfe73e956124a /system/bin/busybox sh script, ASCII text executable
unzapret-ip423d0911f5203822367f4eb16a28d69ba /system/bin/busybox sh script, ASCII text executable
zapretcbf9c6639607048242d897dd7d08a451a /system/bin/busybox sh script, ASCII text executable
zapret-ip7765e4b9030b24432068058c35b8e0daa /system/bin/busybox sh script, ASCII text executable
50-extra-tpws510e15d5334b1651dc2657f86d2931feASCII text
.keepd41d8cd98f00b204e9800998ecf8427e
functions364c62b9d554e83f970aebb91a932a92ASCII text
zapret6bcd647969a2d74eccb92d3045ab0eeaPOSIX shell script, ASCII text executable
zapret.plistfbae16b6edc1c527e549fec0d20f693bXML 1.0 document, ASCII text
zapret3c9e71f7ecb2f57fa91ecd9a606e7cb0a /sbin/openrc-run script, ASCII text executable
readme.txt3d7e2fbe1258c03b257ed8ca9e3bff03ASCII text
tpwse482608d0b356b1b8505350b74ec164bASCII text
firewall.userd09fabaa2bc29909a9b8af2d02971ab8ASCII text
tpwsec99e60525ea21c26c2c9f7fc2e08545POSIX shell script, ASCII text executable
90-tpws.nftd6eb20cca055f0e233380ff8a31b64e9ASCII text
90-zapreta5f8cf8d96e6c4964e0f3ef9a3a997e6POSIX shell script, ASCII text executable
50-dht4all3360742c8aa52b2b8ca1446e1c89ffd7ASCII text
50-discordad121b916f79a9e79843bab1fb4d5000ASCII text, with very long lines (10937)
.keepd41d8cd98f00b204e9800998ecf8427e
firewall.zapret665c6f714d6bf51c560b5aeca08d7693ASCII text
functionsd5c458ce7474dce2821548d0b58e7cf1ASCII text
zapret6420902c483b18e9b309f8e5cb85c47aPOSIX shell script, ASCII text executable
zapret.sh97b89be89d11d87b2c8fab2d87c9652fPOSIX shell script, ASCII text executable
finishe3faf24b1cb5351a81066cbd6150f067POSIX shell script, ASCII text executable
runa7d11f58fe67da1db5a8aeae0bcaae74POSIX shell script, ASCII text executable
downa97974c63b5dc2e724c11745e2435649execline script text executable
type85bceea1fb94d4166f24496dc40a35e6ASCII text
upf6f9dd8008e77c5b1b5e94fb42d09589execline script text executable
zapret-list-update.servicebea2586cbfe1eb2d461c6170cf6a68a9ASCII text
zapret-list-update.timer3b9ed715d81035af382df1d6ed51a41aASCII text
zapret.service919b2edeeeafd212a88655daa4b61400ASCII text
50-dht4all6e9f558f2511b7dff0a3749141d72db7ASCII text
50-discordd3ce8398c5e80f105a8a528f12a1a748ASCII text, with very long lines (10937)
.keepd41d8cd98f00b204e9800998ecf8427e
functions13866d5bbd2bee7142a2b47e54177f6eASCII text
zapret95dcedc62b4de59aa34c49009b296579POSIX shell script, ASCII text executable
install_bin.shcece6d659e85bc50cecd9fe6680f3227POSIX shell script, ASCII text executable
install_easy.sha38c82fe72f8fe9a526ed4911e593ae3POSIX shell script, Unicode text, UTF-8 text executable
install_prereq.sh3cbb7343576cb4b06d0e3abd91da1de3POSIX shell script, ASCII text executable
Makefile303e39cd68be297e97eb9ae4482f7849makefile script, ASCII text
ip2net.ce622f2d5d5a72e917efebabcd20cbfddC source, ASCII text
qsort.c585afe08cdd547c5685c6b91a240fd26C source, ASCII text
qsort.heeb34ef16d0b8f1281ba5e0acb134006C source, ASCII text
antifilter.helperbdb87253b018e79ff821c089fd3aae6cASCII text
clear_lists.shb6562b573604c17ea78327f18555a7e9POSIX shell script, ASCII text executable
create_ipset.sha57858729afac8b8e3e30a57261f505bPOSIX shell script, ASCII text executable
def.shd531fd36f2cc74bd27d49478c31cd533ASCII text, with very long lines (508)
get_antifilter_allyouneed.sh35ddcf2b44323174e679710278b9c099POSIX shell script, ASCII text executable
get_antifilter_ip.sh6fe4537d3a3f64184d6ec2dcbfe1aa41POSIX shell script, ASCII text executable
get_antifilter_ipresolve.sh2387e8298c3e049b763ce5bb12779da0POSIX shell script, ASCII text executable
get_antifilter_ipsmart.sh833b91bb018c26de1e91193013a04a56POSIX shell script, ASCII text executable
get_antifilter_ipsum.shd8573e850ae757d3a610721ed6ba2ad2POSIX shell script, ASCII text executable
get_antizapret_domains.sh23cc1902ab8c69697bde60c9ec04349ePOSIX shell script, ASCII text executable
get_config.sh1688589bdc81657f93c67f31a4c8b049POSIX shell script, ASCII text executable
get_exclude.sh1cda036887f4b5c0bc1e6b34d52a2891POSIX shell script, ASCII text executable
get_ipban.shac1aff761140be4a5f42e89c7069da55POSIX shell script, ASCII text executable
get_reestr_hostlist.sh676c71c2ffa4022908d7dc493309c3a5POSIX shell script, ASCII text executable
get_reestr_preresolved.sh38a37139d85fbdaf9191d42bfa8b36d6POSIX shell script, ASCII text executable
get_reestr_preresolved_smart.shdec3a04828577916f23f63fb85bf71c3POSIX shell script, ASCII text executable
get_reestr_resolvable_domains.shfa9c5cc320c1bdabbd6561513b576555POSIX shell script, ASCII text executable
get_reestr_resolve.sh1b87d754ebe20cfd36c8281b20f87157POSIX shell script, ASCII text executable
get_refilter_domains.sh1cf2310b13ce7944edd430f4e19be087POSIX shell script, ASCII text executable
get_refilter_ipsum.sh075e49f1e74623bd207aff1a35b9ffb5POSIX shell script, ASCII text executable
get_user.sh15a043f00233eea9e08e5afe9154dd0bPOSIX shell script, ASCII text executable
zapret-hosts-user-exclude.txt.defaultae777962a21fb76f4b952cb90c44dc37ASCII text
Makefileb2903bb57f0b1e5d306dab0d1e5ce913makefile script, ASCII text
mdig.c3bb4b2336e097baf03e229c13025e420C source, ASCII text
BSDmakefile1be0b9e026c8cbb1e1ceb912452bfc64makefile script, ASCII text
Makefiled706308c72265df928802c07fb393327makefile script, ASCII text
checksum.cfb40b40334ffedb51ffdd2d386157076C source, ASCII text
checksum.h76c0beedca79222fb32c2ed71f9cefbdC source, ASCII text
conntrack.c4eda4931a740f1e1d7e5ed050019d679C source, ASCII text
conntrack.hc19d8fe4e494b559590b1ae43eb2a191C source, ASCII text
aes-gcm.ce965a7a32b05e128764cdd541bc668bbC source, ASCII text
aes-gcm.h92e77e84a646dda42407a0e9e95f3b6cC source, ASCII text
aes.c7b9bcd812068797f7fb7ec600f27d5d6C source, ASCII text
aes.hed6982b20039473f9f6e526d6951c28bC source, ASCII text
gcm.cfdce934ee69907371bd0bcf26799b2e4C source, ASCII text
gcm.h27cb11c6dd76b19e197c8858784e950dC source, ASCII text
hkdf.c851a8394f84fe731480cd552dcbcaa47C source, ASCII text
hmac.c159ded58681b648e54c36fedfb366393C source, ASCII text
sha-private.h780fcf0c414098e2cb615fee0d4b6f7cC source, ASCII text
sha.h9e048d4e47d43d6d7eaa0d191a80f877C source, ASCII text
sha224-256.c27e2de403728600dbb8f5cf0f451dea8C source, ASCII text
usha.cf46e7fd0a15ccf59652c4157145e3f94C source, ASCII text
darkmagic.c22cb35f064a345b8aca3a243166262f4C source, ASCII text
darkmagic.h939678e351716353107faed7e9066c09C source, ASCII text
desync.c92fc7d453dd426376f8f2ce100b4451fC source, ASCII text
desync.h1eadc365146c62003c794d41a9906890C source, ASCII text
gzip.c1558a5888f49de7dd1180bc187e119c5C source, ASCII text
gzip.h64f4e612adbf606e5f5e28d93dcdc615C source, ASCII text
helpers.c85d16af3a0311901b1fd503a83192fa3C source, ASCII text
helpers.h1e9d4b6adf5af3574b3620e1f463a202C source, ASCII text
hostlist.caf49782166ba4e86c99268932fd6f0afC source, ASCII text
hostlist.h61985e0044360c4b3213f4e37a3b9f5dC source, ASCII text
ipset.c93c41c6ff0a9e87007d59f505c2fde62C source, ASCII text
ipset.he6d19a3a1b1557b15b2637206e41a042C source, ASCII text
nfqws.c3dd1b53223889639b7cb95cafd7d7db6C source, ASCII text
nfqws.h192260b68d6fad5e94b3d5587e7c645fC source, ASCII text
packet_queue.c4c075a4c6195fbff8a12e8c9a55776d0C source, ASCII text
packet_queue.h46ade7b3dd6ffd1bc86f06cf95912bdeC source, ASCII text
params.c154719c7d9a32b8cddd29ad1c56d25daC source, ASCII text
params.he8d0df56126200663e2ab0c8f424654dC source, ASCII text
pools.c6ece68e1383bbab6248a4b2aab9437e8C source, ASCII text
pools.heddec5a53494568222f0c9199ff840f3C source, ASCII text
protocol.c5c72af45ebd370f33d7bd1ea13f83d5bC source, ASCII text
protocol.h4afc7f4a93c34496ded4628de36223acC source, ASCII text
sec.c14622f2ec7e91e9c13feb7b1ca54d442C source, ASCII text
sec.h8087ce2897eb458d95309034d91502dfC source, ASCII text
uthash.h30d2bbd1c9c40b9e5a7e4b503552cd7fC source, ASCII text
win.c86f7ad89d44e517ebd9b6246923da28cC source, ASCII text
win.hbf2bc40a621be1b17b0a0825b535c413C source, ASCII text
winicon.oc9574d299ce7cc8e83afa68ddfde318cIntel 80386 COFF object file, no line number info, not stripped, 1 section, symbol offset=0x11b0, 1 symbols, 1st section name ".rsrc"
winmanifest.o56b4fd07e469e8be5dec1239db46c3a5Intel 80386 COFF object file, no line number info, not stripped, 1 section, symbol offset=0x53e, 1 symbols, 1st section name ".rsrc"
winicon.o48f500bf5fc4b91ec6d576540c77a617Intel amd64 COFF object file, no line number info, not stripped, 1 section, symbol offset=0x11c0, 1 symbols, 1st section name ".rsrc"
winmanifest.ob4545b92c371abce4197ff4dff0f8674Intel amd64 COFF object file, no line number info, not stripped, 1 section, symbol offset=0x53e, 1 symbols, 1st section name ".rsrc"
libwindivert32.a30137dce1ee8276765e83eae6aced618current ar archive
libwindivert64.a341c4b8cc49da93dd14548fd4fe5246ccurrent ar archive
windivert.h35b5cd3b17b74a42794ae8e225a3f0aaC source, ASCII text
.keepd41d8cd98f00b204e9800998ecf8427e
BSDmakefilee067bc06c5536ec6151aaa76d40fdd5dmakefile script, ASCII text
Makefile4ced43da27781f761bf2c6d1ab9010a5makefile script, ASCII text
epoll.hf9ec6a52204c9d568fa43fe6ebfad683C source, ASCII text
epoll.c62a41f932f94d4a8e402fcaeb9b5e7c1C source, ASCII text
epoll_shim_ctx.cd5c209c32fb9cc2af3d8fc1da5bf4313C source, ASCII text
epoll_shim_ctx.h4ef9c11b3f9b6e68f157414d608f51b6C source, ASCII text
epollfd_ctx.caaafe4bd35062b16793ff8bd1fd77594C source, ASCII text
epollfd_ctx.h70044039afea3bac9998f759cd8ee30dC source, ASCII text
eventfd_ctx.he6192a33923f9ee1719e5de78953fe7bC source, ASCII text
fix.c6c64fccd86002e47aff28ef7f8106d8fC source, ASCII text, with CRLF line terminators
fix.h48e7b903989ee17b2c7eacf2f713645cC source, ASCII text
signalfd_ctx.hc0b7ab4f46dcc2fddd853a914b99164fC source, ASCII text
timerfd_ctx.hc5de200bd0b2e7e48c54a447eeebf369C source, ASCII text
gzip.c1558a5888f49de7dd1180bc187e119c5C source, ASCII text
gzip.h64f4e612adbf606e5f5e28d93dcdc615C source, ASCII text
helpers.cd989e07f685b73408334f38c40a2d759C source, ASCII text
helpers.h8fbf6df468fdaceefae73b1c26bb7f7eC source, ASCII text
hostlist.ccb868e371c54ec7bb7e80c98bc4270f9C source, ASCII text
hostlist.h61985e0044360c4b3213f4e37a3b9f5dC source, ASCII text
ipset.cbdc65c73c848dc5f6969b09969bbfbfaC source, ASCII text
ipset.he6d19a3a1b1557b15b2637206e41a042C source, ASCII text
pfvar.h8b8ed8102ee3d497e6055b9f8b253c9eC source, ASCII text
tree.h2d1a50cb619ba72f282ac323a2a380a1C source, ASCII text
params.c6511a0888937719c3cf7d523bef0eb8bC source, ASCII text
params.h7ddad9e59ef9fb9c3c209b23238589d6C source, ASCII text
pools.c6ece68e1383bbab6248a4b2aab9437e8C source, ASCII text
pools.heddec5a53494568222f0c9199ff840f3C source, ASCII text
protocol.c0551bd02356e082b36c0395d3141c313C source, ASCII text
protocol.h3e9a8b6e0248fde32c3592cfab60f30bC source, ASCII text
redirect.cecb0e5b5240824b0dcc3be72bdb086ecC source, ASCII text
redirect.h3135ea211abc47503b5d5d23b0745d1dC source, ASCII text
resolver.c1278f8ed6b734b9e6a29a5ce331db223C source, ASCII text
resolver.hda01bae865cbc7087b99d0335d248d16C source, ASCII text
sec.ca0c8d6fbbb83b7f7492ba5f03b309c68C source, ASCII text
sec.h2a133a2c903bffe1e21b7f6790307b4fC source, ASCII text
socks.hc2891edbb51f99feaa8a621bbacbbdd0C source, ASCII text, with CRLF line terminators
tamper.c4bbe0c1dfaa48113acd9cb9c87a68e91C source, ASCII text
tamper.h797af4e0f5a89a91db3782f2778edbdbC source, ASCII text
tpws.ced32d50f95c07393b221f5b8f41b9b2fC source, ASCII text
tpws.h36c20e11d360abac222da77e7288a3a2C source, ASCII text
tpws_conn.cedec64e4b4625507d004a70146dbd8fdC source, ASCII text
tpws_conn.h9ede9b4e42ad8d276aa146fd4f70d17bC source, ASCII text
uthash.h30d2bbd1c9c40b9e5a7e4b503552cd7fC source, ASCII text
uninstall_easy.sh3b83c0f4647f16b9a51bdd66b51b3dcfPOSIX shell script, ASCII text executable

Detections

AnalyzerVerdictAlert
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects WinDivert User-Mode packet capturing driver
YARAhub by abuse.chmalware
files - file ~tmp01925d3f.exe
YARAhub by abuse.chmalware
pe_detect_tls_callbacks
YARAhub by abuse.chmalware
pe_detect_tls_callbacks
Public Nextron YARA rulesmalware
Detects WinDivert User-Mode packet capturing driver
YARAhub by abuse.chmalware
files - file ~tmp01925d3f.exe
YARAhub by abuse.chmalware
pe_detect_tls_callbacks
YARAhub by abuse.chmalware
pe_detect_tls_callbacks
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
Public Nextron YARA rulesmalware
Detects a suspicious ELF binary with UPX compression
VirusTotalmalicious
VirusTotal - Scan result 16/66

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize