Report - cdn.discordapp.com/attachments/1213687679644860526/1214729902318944277/U5O3wKK.zip?ex=660ca161&is=65fa2c61&hm=f0395958d69ff268e771129eb6f4dbf8cbb0af0d920ebd012c885c83013a0ddb&

Report Overview

Submitted URL
cdn.discordapp.com/attachments/1213687679644860526/1214729902318944277/U5O3wKK.zip?ex=660ca161&is=65fa2c61&hm=f0395958d69ff268e771129eb6f4dbf8cbb0af0d920ebd012c885c83013a0ddb&
IP
162.159.134.233
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-29 15:43:31
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.discordapp.com	2474	2015-02-26	2015-08-24	2024-03-28	629 B	4.4 MB	162.159.129.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
cdn.discordapp.com/attachments/1213687679644860526/1214729902318944277/U5O3wKK.zip?ex=660ca161&is=65fa2c61&hm=f0395958d69ff268e771129eb6f4dbf8cbb0af0d920ebd012c885c83013a0ddb&
IP
162.159.129.233
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.4 MB (4358683 bytes)
Hash
0214eaa47266c2ec5561e5a005a46687
d83495dd5c4cd9f032c93a1f50eaa499b8f5e1ce
5d28aa574111840a05c27e6436ee4cda4298d64fcdb08e6284dc8405083719ea

Archive (19)

Filename

Md5

File type

Bepinject.dll

780906a1c737b556afdb291d1c85839a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Zenject.dll

f2db8bfe2c747f0b20b91f76a985f30b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Zenject-usage.dll

50308a0942816cd007cc9b4e50a3f820

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Utilla.dll

6bd7ddba43cabcdf70beb3434015fea3

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

background.png

772ca65a289a2407412613a9a04591ce

PNG image data, 1000 x 800, 8-bit grayscale, non-interlaced

ComputerInterface.Commands.dll

79ad71cf92cfec028e157276c0f6690f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ComputerInterface.dll

e4e32f409014914db1860e7045366eca

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ComputerInterface.RoomBrowser.dll

d41d8cd98f00b204e9800998ecf8427e

Unity.TextMeshPro.dll

2e026bc8f526af09389bb7fa6c87655d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

background.png

09b2757a1da8af6f34a3dd56d6c643f3

PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced

ComputerInterface.Commands.dll

79ad71cf92cfec028e157276c0f6690f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ComputerInterface.dll

e4e32f409014914db1860e7045366eca

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ComputerInterface.RoomBrowser.dll

d41d8cd98f00b204e9800998ecf8427e

Unity.TextMeshPro.dll

2e026bc8f526af09389bb7fa6c87655d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

background.png

772ca65a289a2407412613a9a04591ce

PNG image data, 1000 x 800, 8-bit grayscale, non-interlaced

ComputerInterface.Commands.dll

79ad71cf92cfec028e157276c0f6690f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ComputerInterface.dll

e4e32f409014914db1860e7045366eca

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ComputerInterface.RoomBrowser.dll

d41d8cd98f00b204e9800998ecf8427e

Unity.TextMeshPro.dll

2e026bc8f526af09389bb7fa6c87655d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/63

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

cdn.discordapp.com/attachments/1213687679644860526/1214729902318944277/U5O3wKK.zip?ex=660ca161&is=65fa2c61&hm=f0395958d69ff268e771129eb6f4dbf8cbb0af0d920ebd012c885c83013a0ddb&

162.159.129.233

200 OK

4.4 MB

URL User Request GET HTTP/2
cdn.discordapp.com/attachments/1213687679644860526/1214729902318944277/U5O3wKK.zip?ex=660ca161&is=65fa2c61&hm=f0395958d69ff268e771129eb6f4dbf8cbb0af0d920ebd012c885c83013a0ddb&
IP
162.159.129.233:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectdiscordapp.com
Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39
ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.4 MB (4358683 bytes)
Hash
0214eaa47266c2ec5561e5a005a46687
d83495dd5c4cd9f032c93a1f50eaa499b8f5e1ce
5d28aa574111840a05c27e6436ee4cda4298d64fcdb08e6284dc8405083719ea

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/63

HTTP Headers

GET /attachments/1213687679644860526/1214729902318944277/U5O3wKK.zip?ex=660ca161&is=65fa2c61&hm=f0395958d69ff268e771129eb6f4dbf8cbb0af0d920ebd012c885c83013a0ddb& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 15:43:04 GMT
content-type: application/zip
content-length: 4358683
cf-ray: 86c0f932684db505-OSL
cf-cache-status: HIT
accept-ranges: bytes, bytes
age: 528157
cache-control: public, max-age=31536000
content-disposition: attachment; filename="U5O3wKK.zip"
etag: "0214eaa47266c2ec5561e5a005a46687"
expires: Sat, 29 Mar 2025 15:43:04 GMT
last-modified: Wed, 06 Mar 2024 00:22:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1709684577377902
x-goog-hash: crc32c=9SDIbA==, md5=AhTqpHJmwuxVYeWgBaRmhw==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4358683
x-guploader-uploadid: ABPtcPqjDTwcRcsRX-bEhmgFMa2IhqHQuBhU9tUFJKCKuRr-q_PuIr6NGLYdkYg2sLMJbERpsXDUt4j8cw
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q9pTZd%2FV0NjgJ4EqCuRxAFw7THL7oOdXuNgK4Er7OiXV1AUU%2FVjpFoLQQMvbyHw0vKcUD5wk200Jw21BeAH3UImwOmybEhcCMbCOqob84PksYonAoSrdSb46f0BpkNaX4WoRpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=wWvHZmu5qdZtjmnYGFAhvVz2EDx2sExXi_aw49vbahw-1711726984-1.0.1.1-tvahyJE2i_1Uf4aF133MYSgM_I.bA0SQgoOowlMCSwKCXhGS_Ku7IOjnTllU_WoTbVB6yY0iUN7vFCwkooyPJw; path=/; expires=Fri, 29-Mar-24 16:13:04 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=XyQodeD48tTJ_NlK1z6o9xWt8jvhRCnwNnRTdBwa3iM-1711726984099-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2