| gitlab.com/dokutoku/rdmd-for-npp/uploads/16bb4134bb134a94042e75115ba03511/rdmd-en-x86.zip |  172.65.251.78 | 200 OK | 690 kB |
URL User Request GET HTTP/2gitlab.com/dokutoku/rdmd-for-npp/uploads/16bb4134bb134a94042e75115ba03511/rdmd-en-x86.zip IP172.65.251.78:443
CertificateIssuerSectigo Limited Subjectgitlab.com FingerprintFB:07:E4:E6:21:FA:07:5C:96:1B:66:1A:E2:99:AD:E7:68:1D:F5:D5 ValidityThu, 14 Dec 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File typeZip archive data, at least v2.0 to extract, compression method=store Size690 kB (690304 bytes) Hash044626b808a752285f7eeb664a0d12dc 52dd5a8c8b3ee2079ce004ac838c8018bdfec600 ad00a5596a89dee788c4d192e93b23448f9a079b38a556a7fbe46d5cef2b6858
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | meth_get_eip | | VirusTotal | suspicious | |
GET /dokutoku/rdmd-for-npp/uploads/16bb4134bb134a94042e75115ba03511/rdmd-en-x86.zip HTTP/1.1
Host: gitlab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 22:12:55 GMT
content-type: application/octet-stream
content-length: 690304
cache-control: max-age=0, private, must-revalidate
content-disposition: attachment; filename="rdmd-en-x86.zip"; filename*=UTF-8''rdmd-en-x86.zip
content-security-policy: base-uri 'self'; child-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ 'self' https://gitlab.com/assets/ blob: data:; connect-src 'self' https://gitlab.com wss://gitlab.com https://sentry.gitlab.net https://new-sentry.gitlab.net https://customers.gitlab.com https://snowplow.trx.gitlab.net https://sourcegraph.com https://collector.prd-278964.gl-product-analytics.com snowplow.trx.gitlab.net; default-src 'self'; font-src 'self'; form-action 'self' https: http:; frame-ancestors 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/; img-src 'self' data: blob: http: https:; manifest-src 'self'; media-src 'self' data: blob: http: https:; object-src 'none'; report-uri https://new-sentry.gitlab.net/api/4/security/?sentry_key=f5573e26de8f4293b285e556c35dfd6e&sentry_environment=gprd; script-src 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/ https://apis.google.com https://*.zuora.com/apps/PublicHostedPageLite.do 'nonce-ECTJWZTz18ik7LEV7XFUag=='; style-src 'self' 'unsafe-inline'; worker-src 'self' https://gitlab.com/assets/ blob: data:
etag: "044626b808a752285f7eeb664a0d12dc"
last-modified: Wed, 05 Aug 2020 14:45:39 GMT
permissions-policy: interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-gitlab-meta: {"correlation_id":"01HW6G9RNE0MKZHQBYSSYPBJQ7","version":"1"}
x-goog-generation: 1596638739650953
x-goog-hash: crc32c=pJUxJw==, md5=BEYmuAinUihffutmSg0S3A==
x-goog-metageneration: 1
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 690304
x-guploader-uploadid: ABPtcPrI1M4LYaFSqdJI2xPxwOWbNOsgnRHFsmC55SWeak4Bs_DmzcSJSRHTWksPYvGNauTjwZY
x-permitted-cross-domain-policies: none
x-request-id: 01HW6G9RNE0MKZHQBYSSYPBJQ7
x-runtime: 0.086499
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
gitlab-lb: haproxy-main-52-lb-gprd
gitlab-sv: web-gke-us-east1-c
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A4t9Q%2BFZZtXvVZ8aWECVNR92A6qRyLBBKtgaJXzytGKhjyUO1S7XVZvEQw4SUuuFL%2Fymz1MmHr00xP8wQLDXBsOmVKAqklK7ZdqRQLuY2IcjBmvV75D6zNfjvbc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000
set-cookie: _cfuvid=pggnUScgRxS50hQ66P_Zm7dqp_6Z8_7hlSbr0ROnJXM-1713910375349-0.0.1.1-604800000; path=/; domain=.gitlab.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 879132a3afae712f-OSL
X-Firefox-Spdy: h2
|