Report - github.com/ldcomcn/XDAGUI/releases/download/xdagui-up/Data.zip

Report Overview

Submitted URL
github.com/ldcomcn/XDAGUI/releases/download/xdagui-up/Data.zip
IP
140.82.121.3
ASN
#36459 GITHUB
Submitted
2024-05-08 22:05:53
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
5

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
github.com	1423	2007-10-09	2016-07-13	2024-03-24	516 B	3.9 kB	140.82.121.3
objects.githubusercontent.com	134060	2014-02-06	2021-11-01	2024-05-08	987 B	12 MB	185.199.110.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
objects.githubusercontent.com/github-production-release-asset-2e65be/431718923/01deb817-7f20-4703-9506-2ec79ddf77a1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240508%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240508T220524Z&X-Amz-Expires=300&X-Amz-Signature=82bc3f7bb727ac3155c1d9c118f029e8384864cd4774d71320f25d763a37560e&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=431718923&response-content-disposition=attachment%3B%20filename%3DData.zip&response-content-type=application%2Foctet-stream
IP
185.199.110.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
12 MB (12207060 bytes)
Hash
bfb7d51f37af03e776b99ec96cc51f65
861356a090d4610b2130fafb51ea6acd0d93ed69
3ea04d79d258cc2a304465ded7220d4aa8add6f21685eb1005e8fd44f9599c0f

Archive (19)

Filename

Md5

File type

config.json

1e44e745e62a8ddfd3e62813db21266e

JSON text data

version.json

d0bc65bf2a26ccf9132aae626669b766

JSON text data

config.json

c4069b44ddd886f9ba75dc27cb5e5411

JSON text data

mDatagram.exe

dd2e787396108286d0a037fcdb709c53

PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

XDAGPCExplorer.exe

43c192b97090d7a3c343a96953e8aa61

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

myFont.ttf

8e286e1a68c8baa259c7cc006bb84056

TrueType Font data, 18 tables, 1st "GDEF", name offset 0x38d2b0

en.pak

06717aa4ab6e7ffc47b6f05684601cbe

ASCII text, with CRLF line terminators

fr.pak

af1e60c954bfb162b71a98de2eaa597c

Unicode text, UTF-8 text, with CRLF line terminators

READ.txt

e7c353b24058ceb6b58f1964c030e280

ISO-8859 text, with very long lines (452), with CRLF line terminators

ru.pak

10bd92542b7dfb5cd7ddff9c4d9619c4

Unicode text, UTF-8 text, with CRLF line terminators

zh.pak

9e93c1eb7299874bb6169d743f8ef001

ISO-8859 text, with CRLF line terminators

XDAGUIMini.exe

19fa7ea712fb0c70a42f2639cca24d6e

PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

en.pak

24a03d937f1cbf0732089c319170840f

ASCII text, with CRLF line terminators

fr.pak

08d78600a3b550cf3ed5771ab71706ca

Unicode text, UTF-8 text, with CRLF line terminators

READ.txt

e7c353b24058ceb6b58f1964c030e280

ISO-8859 text, with very long lines (452), with CRLF line terminators

ru.pak

09ad978723dc30f9b549a6524b8bbb2b

Unicode text, UTF-8 text, with CRLF line terminators

zh.pak

54c667e498134417b54c09f8e334fceb

ISO-8859 text, with CRLF line terminators

XDAGUI_Server.exe

5274fed957a4be335b51a352669a4eff

PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

PExplorer.exe

e47ccca0917541789c7c2ba8f1e53069

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	github.com/ldcomcn/XDAGUI/releases/download/xdagui-up/Data.zip	140.82.121.3	302 Found	0 B
URL User Request GET HTTP/2 github.com/ldcomcn/XDAGUI/releases/download/xdagui-up/Data.zip IP 140.82.121.3:443 ASN #36459 GITHUB Certificate IssuerSectigo Limited Subjectgithub.com FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /ldcomcn/XDAGUI/releases/download/xdagui-up/Data.zip HTTP/1.1 Host: github.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: GitHub.com date: Wed, 08 May 2024 22:05:24 GMT content-type: text/html; charset=utf-8 vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/431718923/01deb817-7f20-4703-9506-2ec79ddf77a1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240508%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240508T220524Z&X-Amz-Expires=300&X-Amz-Signature=82bc3f7bb727ac3155c1d9c118f029e8384864cd4774d71320f25d763a37560e&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=431718923&response-content-disposition=attachment%3B%20filename%3DData.zip&response-content-type=application%2Foctet-stream cache-control: no-cache strict-transport-security: max-age=31536000; includeSubdomains; preload x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: no-referrer-when-downgrade content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com .actions.githubusercontent.com wss://.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/ content-length: 0 x-github-request-id: 559F:28EC7D:25C94DA:265550A:663BF724 X-Firefox-Spdy: h2

	objects.githubusercontent.com/github-production-release-asset-2e65be/431718923/01deb817-7f20-4703-9506-2ec79ddf77a1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240508%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240508T220524Z&X-Amz-Expires=300&X-Amz-Signature=82bc3f7bb727ac3155c1d9c118f029e8384864cd4774d71320f25d763a37560e&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=431718923&response-content-disposition=attachment%3B%20filename%3DData.zip&response-content-type=application%2Foctet-stream	185.199.110.133	200 OK	12 MB
URL User Request GET HTTP/2 objects.githubusercontent.com/github-production-release-asset-2e65be/431718923/01deb817-7f20-4703-9506-2ec79ddf77a1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240508%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240508T220524Z&X-Amz-Expires=300&X-Amz-Signature=82bc3f7bb727ac3155c1d9c118f029e8384864cd4774d71320f25d763a37560e&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=431718923&response-content-disposition=attachment%3B%20filename%3DData.zip&response-content-type=application%2Foctet-stream IP 185.199.110.133:443 ASN #54113 FASTLY Certificate IssuerDigiCert Inc Subject.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 12 MB (12207060 bytes) Hash bfb7d51f37af03e776b99ec96cc51f65 861356a090d4610b2130fafb51ea6acd0d93ed69 3ea04d79d258cc2a304465ded7220d4aa8add6f21685eb1005e8fd44f9599c0f HTTP Headers GET /github-production-release-asset-2e65be/431718923/01deb817-7f20-4703-9506-2ec79ddf77a1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240508%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240508T220524Z&X-Amz-Expires=300&X-Amz-Signature=82bc3f7bb727ac3155c1d9c118f029e8384864cd4774d71320f25d763a37560e&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=431718923&response-content-disposition=attachment%3B%20filename%3DData.zip&response-content-type=application%2Foctet-stream HTTP/1.1 Host: objects.githubusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: application/octet-stream content-md5: v7fVHzevA+d2uZ7JbMUfZQ== last-modified: Tue, 19 Mar 2024 10:48:54 GMT etag: "0x8DC48022BC9BA02" server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 69e7136c-501e-006a-7392-a1397d000000 x-ms-version: 2020-10-02 x-ms-creation-time: Tue, 19 Mar 2024 10:48:54 GMT x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob content-disposition: attachment; filename=Data.zip x-ms-server-encrypted: true via: 1.1 varnish, 1.1 varnish accept-ranges: bytes age: 0 date: Wed, 08 May 2024 22:05:25 GMT x-served-by: cache-iad-kjyo7100164-IAD, cache-hel1410027-HEL x-cache: HIT, MISS x-cache-hits: 5, 0 x-timer: S1715205925.588149,VS0,VE491 content-length: 12207060 X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (19)

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers