Report - raw.githubusercontent.com/BatchExpert/CreativeNetwork/main/SublimeText.zip

Report Overview

Submitted URL
raw.githubusercontent.com/BatchExpert/CreativeNetwork/main/SublimeText.zip
IP
185.199.109.133
ASN
#54113 FASTLY
Submitted
2024-04-17 08:45:28
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
raw.githubusercontent.com	35802	2014-02-06	2014-03-01	2024-04-16	528 B	14 MB	185.199.108.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
raw.githubusercontent.com/BatchExpert/CreativeNetwork/main/SublimeText.zip
IP
185.199.108.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
14 MB (13657867 bytes)
Hash
91ecf856da3df5674361d1f0b2b7c386
44f9c0a5bd0a1ee0b32c6912b14690113c2dfcc8
e169691d88498fdc8dddc72d336680339707d459d12acf665e830f5ed4a4c98d

Archive (63)

Filename

Md5

File type

sublime_text.exe

e49fa578c992ac64ab7909ad7cd87f9b

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

plugin_host.exe

84f83e939dde24a799a61dc93575d231

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

crash_reporter.exe

6cdcb1e9cac329ac789f9a7c4d80f392

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

update_installer.exe

69a3b1bd914b4231f6e392780e4c8e94

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

subl.exe

ab959cb5c92ed42ecbd3aae8d6f2958d

PE32 executable (console) Intel 80386, for MS Windows, 8 sections

sublime.py

1498242d034d53e6d673d8a4129b1abf

Python script, ASCII text executable

sublime_plugin.py

d5fbc188cd3f12e758db5515ae75a463

Python script, ASCII text executable

python3.3.zip

de5987ee76eda6c296350c8998f11e38

Zip archive data, at least v2.0 to extract, compression method=deflate

python33.dll

9dde9cad19c76058243d86caee2ed2f9

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

msvcr100.dll

bf38660a9125935658cfa3e53fdc7d65

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections

Git Formats.sublime-package

3014eb4d47e6b25f84e2ccc69d5af111

Zip archive data, at least v2.0 to extract, compression method=store

Graphviz.sublime-package

e5167c6998cf03c438f949198706ec22

Zip archive data, at least v2.0 to extract, compression method=store

Regular Expressions.sublime-package

49b32d85f89e5b80836f4cbf4213b728

Zip archive data, at least v2.0 to extract, compression method=store

Diff.sublime-package

95d3fd823b753074626843b75f43f213

Zip archive data, at least v2.0 to extract, compression method=store

Color Scheme - Default.sublime-package

e858a540754c2c5b42efb3dfe0d29daa

Zip archive data, at least v2.0 to extract, compression method=store

Vintage.sublime-package

1dc62350ccac0ec4a3d5c38862e1c71e

Zip archive data, at least v2.0 to extract, compression method=store

Haskell.sublime-package

67a84c8a67152046282a9788f7ab4bb4

Zip archive data, at least v2.0 to extract, compression method=store

ASP.sublime-package

c270b8e74f9aeb7e7108af857877eb2c

Zip archive data, at least v2.0 to extract, compression method=store

Text.sublime-package

5c95541d9e98eeb8a6043991e0bfa99a

Zip archive data, at least v2.0 to extract, compression method=store

Go.sublime-package

ace8eaac27075c72f9e7818525f72317

Zip archive data, at least v2.0 to extract, compression method=store

Clojure.sublime-package

0e2079bb2ac430e9ab0572844d1c5b41

Zip archive data, at least v2.0 to extract, compression method=store

OCaml.sublime-package

f87b249a2f8ee726cd83904d6a7ec0bb

Zip archive data, at least v2.0 to extract, compression method=store

SQL.sublime-package

c896fb51e2b92eb61797d0aa6a178073

Zip archive data, at least v2.0 to extract, compression method=store

R.sublime-package

74aada2154cbeff3db5ed168668dc53f

Zip archive data, at least v2.0 to extract, compression method=store

Perl.sublime-package

7ef51cc23223226ab1b835346810bb32

Zip archive data, at least v2.0 to extract, compression method=store

Textile.sublime-package

a2212d6523b378c22d2de3f001dbfb4b

Zip archive data, at least v2.0 to extract, compression method=store

Batch File.sublime-package

7cc4b08efdae2cdea41b10a0611b8705

Zip archive data, at least v2.0 to extract, compression method=store

XML.sublime-package

14cc229264984a2593edc67069ca01b0

Zip archive data, at least v2.0 to extract, compression method=store

Language - English.sublime-package

3e73c85fb1d99cef8e673b2d7fe0115a

Zip archive data, at least v2.0 to extract, compression method=store

Markdown.sublime-package

e769034147f55c40ca80302af58b2c08

Zip archive data, at least v2.0 to extract, compression method=store

Ruby.sublime-package

d8319b5ee843e7217b05f8f87a5d32aa

Zip archive data, at least v2.0 to extract, compression method=store

HTML.sublime-package

3a3a5f477d0f9128ad4c7ddaf313be4f

Zip archive data, at least v2.0 to extract, compression method=store

C++.sublime-package

28666ff49a7ca2c9459cf6908ab75d5d

Zip archive data, at least v2.0 to extract, compression method=store

RestructuredText.sublime-package

10fc14efa65ce6bda129b9b457ae79ed

Zip archive data, at least v2.0 to extract, compression method=store

Pascal.sublime-package

09bfde49f0f983d1343219c822e0b84c

Zip archive data, at least v2.0 to extract, compression method=store

Color Scheme - Legacy.sublime-package

dabcb26a5eddea2cca2ba69f7ccdc03c

Zip archive data, at least v2.0 to extract, compression method=store

Objective-C.sublime-package

163b121539d3190ffb54a7bed75397f8

Zip archive data, at least v2.0 to extract, compression method=store

D.sublime-package

b348cbd2579c1fab946c7abbe4a8949f

Zip archive data, at least v2.0 to extract, compression method=store

Makefile.sublime-package

de4d9886c8b012d8783197a095a3229e

Zip archive data, at least v2.0 to extract, compression method=store

Python.sublime-package

48f247e732dffcdb7ec48b7d52afe513

Zip archive data, at least v2.0 to extract, compression method=store

C#.sublime-package

a3b7814897186ac44d91f29218e23d35

Zip archive data, at least v2.0 to extract, compression method=store

Lisp.sublime-package

3748627f2b6be2b8f972483e017c608d

Zip archive data, at least v2.0 to extract, compression method=store

Erlang.sublime-package

79d699a29923e9f6cbe6524d43f9072e

Zip archive data, at least v2.0 to extract, compression method=store

PHP.sublime-package

3b4934243148e42de5a538ffa3ecbf91

Zip archive data, at least v2.0 to extract, compression method=store

JavaScript.sublime-package

ede224857a2d3be34ed1b87ca6d926fb

Zip archive data, at least v2.0 to extract, compression method=store

AppleScript.sublime-package

d28848df5ec8c867c1069a01ac36b494

Zip archive data, at least v2.0 to extract, compression method=store

ActionScript.sublime-package

47410a7a058ad5a57d5e8814ac8edb0c

Zip archive data, at least v2.0 to extract, compression method=store

YAML.sublime-package

c4545389a34d2c5856e66c820bab9cd5

Zip archive data, at least v2.0 to extract, compression method=store

Default.sublime-package

c42225fe99249889e93821c425a8afa1

Zip archive data, at least v2.0 to extract, compression method=store

Scala.sublime-package

4dd06c7b2088922a2b3389aa8ca77415

Zip archive data, at least v2.0 to extract, compression method=store

ShellScript.sublime-package

fd19f2815809714a217c248f95f3d2db

Zip archive data, at least v2.0 to extract, compression method=store

Rust.sublime-package

cce158ee0bfa96eae9094e7c0ba7c130

Zip archive data, at least v2.0 to extract, compression method=store

Matlab.sublime-package

a55c9134567e3bcb0d291c6ba85fe93d

Zip archive data, at least v2.0 to extract, compression method=store

TCL.sublime-package

16f52380fb51911255c7a945c4c4f887

Zip archive data, at least v2.0 to extract, compression method=store

Theme - Default.sublime-package

aa7372b9bb672612acd09b07c3c8c3e1

Zip archive data, at least v2.0 to extract, compression method=store

Java.sublime-package

ccb5edd34d2958d41ca004f2a8dbafce

Zip archive data, at least v2.0 to extract, compression method=store

Lua.sublime-package

6be1be398dd3978192f2e9f30697f741

Zip archive data, at least v2.0 to extract, compression method=store

LaTeX.sublime-package

42b2505edc772367f344e1371fab1ba8

Zip archive data, at least v2.0 to extract, compression method=store

Rails.sublime-package

c6cd35da231791361958880091e9bf85

Zip archive data, at least v2.0 to extract, compression method=store

CSS.sublime-package

e937911e8d9654f4e1fa1d9cb4572730

Zip archive data, at least v2.0 to extract, compression method=store

Groovy.sublime-package

180edff428cd5a18b11d49fff2f93cf7

Zip archive data, at least v2.0 to extract, compression method=store

changelog.txt

2985f212c5163a05f3aa7d6e1b74f0a6

HTML document, ASCII text, with very long lines (330)

KEEPME

d41d8cd98f00b204e9800998ecf8427e

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	meth_get_eip
VirusTotal	suspicious	VirusTotal - Scan result 1/60

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

raw.githubusercontent.com/BatchExpert/CreativeNetwork/main/SublimeText.zip

185.199.108.133

200 OK

14 MB

URL User Request GET HTTP/2
raw.githubusercontent.com/BatchExpert/CreativeNetwork/main/SublimeText.zip
IP
185.199.108.133:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
14 MB (13657867 bytes)
Hash
91ecf856da3df5674361d1f0b2b7c386
44f9c0a5bd0a1ee0b32c6912b14690113c2dfcc8
e169691d88498fdc8dddc72d336680339707d459d12acf665e830f5ed4a4c98d

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/60

HTTP Headers

GET /BatchExpert/CreativeNetwork/main/SublimeText.zip HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/zip
etag: W/"5c8a3db0c781514531693201b067f49ef706f028e2b7a980e737e383bc9973e4"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 9434:21BEAB:2A00458:2C7E1C0:661F8C08
accept-ranges: bytes
date: Wed, 17 Apr 2024 08:44:57 GMT
via: 1.1 varnish
x-served-by: cache-hel1410025-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713343497.774313,VS0,VE700
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: f06f8a86c5125c49dd94d453a87ab1df3ef39f69
expires: Wed, 17 Apr 2024 08:49:57 GMT
source-age: 1
content-length: 13657867
X-Firefox-Spdy: h2