Report - puni.sh/api/plugins/download/6/Artisan/versions/latest.zip

Report Overview

Visited public
2025-05-04 06:54:09
Tags
URL
puni.sh/api/plugins/download/6/Artisan/versions/latest.zip
Finishing URL
about:privatebrowsing
IP / ASN
104.21.50.100
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
puni.sh	unknown	2019-12-29	2020-02-12	2025-05-04	526 B	8.5 MB	104.21.50.100

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
puni.sh/api/plugins/download/6/Artisan/versions/latest.zip
IP
104.21.50.100
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
8.5 MB (8472305 bytes)
Hash
4510731f9d20a0edd1cb29f688b14a63
074a36ffe77431d31b72c9ca970cdb9948bba82a
0b2d99c57a86f4f12134c08ecdcd97452671dcc8e919090bd6dc1496784b1578

Archive (45)

Filename

Md5

File type

Artisan.deps.json

01f4a8d1537de061d34baae32433ad72

JSON text data

Artisan.dll

3086876df0b69fbf7a178f292a536112

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Artisan.json

28e4147ee7dde2101b8cb9a0c227b620

JSON text data

Artisan.pdb

8489f8bce8c1dc9e6807090139b43533

Microsoft Roslyn C# debugging symbols version 1.0

Discord.Net.Core.dll

875503902a909e5293923bdb86ee95ea

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Discord.Net.Rest.dll

23b5d856fcd0edca9faf58ccfede39c9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Discord.Net.Webhook.dll

d3aec612afa8e1923fa4b831ba1ae04c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ECommons.dll

db2f44ca0fa45c03650aacf77f0fff86

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

ECommons.pdb

b1fdc12303e8228511446dba5891a28e

Microsoft Roslyn C# debugging symbols version 1.0

ECommons.xml

8d54a0a0095126c11782758eb4aff7cb

XML 1.0 document, ASCII text, with very long lines (338), with CRLF line terminators

FuzzySharp.dll

df70ed147cf08a569d9f7889bb92bda0

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

JetBrains.Annotations.dll

4070dbd7e4f189212aee684204c0d56f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Bcl.AsyncInterfaces.dll

8074b0eeb2d4cf9b1a6b26865bf91aa5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.CodeAnalysis.CSharp.dll

9149dec0cf6a625fa186798e843cb370

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.CodeAnalysis.dll

1ff445466f1798c38377be792f064900

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Extensions.DependencyInjection.Abstractions.dll

38236f9c2408bda46c13efef364326fe

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Extensions.DependencyInjection.dll

7d40b6217fc409171015d905a22f8e85

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

NAudio.Asio.dll

eb254b04d63a9f03b77563243805f68f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

NAudio.Core.dll

48867f392b8e77dc06c062638c6fbd36

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

NAudio.dll

555d4c629b3d58d3d4314e2fa51d2f63

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

NAudio.Midi.dll

3f5c79100f4f7902114c3fcba275c606

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

NAudio.Wasapi.dll

278ebb79da14ecf8e0559530c2fda076

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

NAudio.WinForms.dll

2da1307837dc63aaab828470701a2761

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

NAudio.WinMM.dll

faf1ba532964984a34d60674fbc7a5a7

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Newtonsoft.Json.dll

adf3e3eecde20b7c9661e9c47106a14a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

OtterGui.dll

b8033dc56917a413a55810de63df04d6

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

OtterGui.pdb

a2ae0a77d4d48eccd039dcd118acc303

Microsoft Roslyn C# debugging symbols version 1.0

PunishLib.dll

2d9294b22d7bcbc4e17ffd0b11e83a65

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

PunishLib.pdb

0ed60b3b2ca7bbd40668d71cfc68838b

Microsoft Roslyn C# debugging symbols version 1.0

raphael-cli.exe

52cddc53e87520ee2427def4a39224f0

PE32+ executable (console) x86-64, for MS Windows, 5 sections

Reloaded.Memory.dll

7efab0043464a47e3ce02bf1e9e1435f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SharpDX.Direct2D1.dll

ea2ce667f370890e7e9dc72db541418b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SharpDX.dll

6c00b8be8fb6ff838c79c9de405db1f5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SharpDX.DXGI.dll

faccd233e453d81a69c5081971031ed9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Interactive.Async.dll

cc387f50f9f88db1aa777d78ffd22ff4

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Linq.Async.dll

f7541ec3df7a001fe2a9013ac31d4e2c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Images\artisan-icon.png

ba6d9f7d300d3cf9b7339003e57256ba

PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced

Images\artisan.png

ec527bf85bb53099fcc4866191cbe5d2

PNG image data, 455 x 120, 8-bit/color RGBA, non-interlaced

Images\AutoMode.png

c7a5dba50638145dd572a49a28b8d5df

PNG image data, 280 x 54, 8-bit/color RGB, non-interlaced

Images\EnduranceNewSetting.png

fa061a194553b37c69ed91930ad0fe51

PNG image data, 333 x 212, 8-bit/color RGBA, non-interlaced

Images\Icon.png

5ef611ca71ad1d41d504267ae037d7c5

PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced

Images\OutlineExample.png

3df5c596b89854510a2c6b1cc32b892b

PNG image data, 81 x 83, 8-bit/color RGB, non-interlaced

Images\RecipeWindowExample.png

d71150dd4075e80308aae8055940ca15

PNG image data, 268 x 134, 8-bit/color RGB, non-interlaced

Images\ThemeCraftingWindowExample.png

1d06782e82f286db422af21b6a5a403b

PNG image data, 187 x 142, 8-bit/color RGBA, non-interlaced

Sounds\Time Up.mp3

84ca2d61bafe374ed74de3227e359dd0

Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	puni.sh/api/plugins/download/6/Artisan/versions/latest.zip	104.21.50.100	200 OK	8.5 MB
URL User Request GET puni.sh/api/plugins/download/6/Artisan/versions/latest.zip IP 104.21.50.100:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectpuni.sh Fingerprint1C:A0:F0:FE:F4:34:4E:16:86:06:8F:60:9D:B1:D2:1A:F7:7D:D8:ED ValidityThu, 10 Apr 2025 02:21:37 GMT - Wed, 09 Jul 2025 03:20:10 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 8.5 MB (8472305 bytes) Hash 4510731f9d20a0edd1cb29f688b14a63 074a36ffe77431d31b72c9ca970cdb9948bba82a 0b2d99c57a86f4f12134c08ecdcd97452671dcc8e919090bd6dc1496784b1578 HTTP Headers GET /api/plugins/download/6/Artisan/versions/latest.zip HTTP/1.1 Host: puni.sh User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Sun, 04 May 2025 06:53:32 GMT content-type: application/zip content-length: 8472305 server: cloudflare nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} cf-ray: 93a614e54c6f56ba-OSL vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch content-disposition: attachment; filename="Artisan-latest.zip.zip" content-security-policy: frame-ancestors 'self' https://*.youtube.com cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GgU4zfwQ2rtVe2704%2BdSRO%2FSirgM4qMzVo7h8imQVguzOrmG7iHbj1RdkQda%2BNOU1faMLUuXLnxnq4B%2FN6oCiMH5XaulQR5J4havK%2F8vhkXvCWvU7lX08J9u"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfCacheStatus;desc="DYNAMIC", cfL4;desc="?proto=TCP&rtt=799&min_rtt=474&rtt_var=579&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3263&recv_bytes=1274&delivery_rate=7051948&cwnd=254&unsent_bytes=0&cid=bbe7a8dc3a138308&ts=591&x=0" X-Firefox-Spdy: h2

puni.sh/api/plugins/download/6/Artisan/versions/latest.zip

104.21.50.100

200 OK

8.5 MB

URL User Request GET
puni.sh/api/plugins/download/6/Artisan/versions/latest.zip
IP
104.21.50.100:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectpuni.sh
Fingerprint1C:A0:F0:FE:F4:34:4E:16:86:06:8F:60:9D:B1:D2:1A:F7:7D:D8:ED
ValidityThu, 10 Apr 2025 02:21:37 GMT - Wed, 09 Jul 2025 03:20:10 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
8.5 MB (8472305 bytes)
Hash
4510731f9d20a0edd1cb29f688b14a63
074a36ffe77431d31b72c9ca970cdb9948bba82a
0b2d99c57a86f4f12134c08ecdcd97452671dcc8e919090bd6dc1496784b1578

HTTP Headers

GET /api/plugins/download/6/Artisan/versions/latest.zip HTTP/1.1
Host: puni.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 04 May 2025 06:53:32 GMT
content-type: application/zip
content-length: 8472305
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 93a614e54c6f56ba-OSL
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch
content-disposition: attachment; filename="Artisan-latest.zip.zip"
content-security-policy: frame-ancestors 'self' https://*.youtube.com
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GgU4zfwQ2rtVe2704%2BdSRO%2FSirgM4qMzVo7h8imQVguzOrmG7iHbj1RdkQda%2BNOU1faMLUuXLnxnq4B%2FN6oCiMH5XaulQR5J4havK%2F8vhkXvCWvU7lX08J9u"}],"group":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfCacheStatus;desc="DYNAMIC", cfL4;desc="?proto=TCP&rtt=799&min_rtt=474&rtt_var=579&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3263&recv_bytes=1274&delivery_rate=7051948&cwnd=254&unsent_bytes=0&cid=bbe7a8dc3a138308&ts=591&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (45)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers