Report - titan-alpha.net/download/Manualpatch.zip

Report Overview

Submitted URL
titan-alpha.net/download/Manualpatch.zip
IP
172.67.132.31
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 19:25:23
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
titan-alpha.net	unknown	2021-11-07	2021-11-07	2024-04-04	494 B	5.5 MB	172.67.132.31

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
titan-alpha.net/download/Manualpatch.zip
IP
172.67.132.31
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
5.5 MB (5455359 bytes)
Hash
090eacbba47ae5166d846ffac26ec61b
08b705fee14e4e6ba2b7b78781732b721acc6ab2
68220e178d75c5b57bee73770a300de581677fa94f28b3517a1c42d3c3369f0f

Archive (48)

Filename

Md5

File type

avatarequip.bin

628ff34aa068feb8241c4f8e917d4d2d

data

tooltipinfo.bin

dce049e6f4400701ab10aa8d68e87c7a

Intel amd64 COFF executable, no line number info, stripped, 316 sections, symbol offset=0x7bacc, -856422371 symbols, optional header size 51031, created Thu Jan 1 07:21:41 1970

EffectWeaponList.bin

f997c4034e43e9ce6451dbcab140f4ce

data

ItemChangeListMulti.bin

4180e5072937773c513f7acd8d994659

data

itemlist.bin

a58fec9adfcb716c8118541855de5b7b

data

itemmixlist.bin

a3370244a99c453f25da55cf28fc2c6e

data

ItemSpStatus.bin

53fd964cc3d47aab29cae6e6521abcc3

data

LoadModelList.bin

d15dfe89837963ee90bbc5572c0b78fe

data

mapchange.bin

7678cc883f5983ae331443373112f142

data

monsterlist.bin

d54acb5e148050b7275b38ceccd586f4

data

npclist.bin

e0cc9fa7cca47e983f241e29d6546781

data

petrule.bin

33c1855cf5dab0849d579acb1b47f38e

MIPSEL-BE MIPS-II ECOFF executable - version -10.-115

questscript.bin

80ed34ab25d4111418cbdce124d8e2df

data

skilllist.bin

3cc219ebe824d9afc96b503310df0fe6

data

staticnpc.bin

b2182357efd304dd643cf9c960bb9a43

data

UpGradeList.bin

7a81653c38a89921162da27e7ca91f09

data

license.Info

01ea9153c52a1300f2b0c210c493d92b

data

Manualpatch.exe

07e2e0425fc54730343fd473a8e9a17a

PE32+ executable (console) x86-64, for MS Windows, 10 sections

MHClient-Connect.exe

2708faaa6884cf4b310a6c82fdbe10db

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

MHVerInfo.ver

6fd013e8d2be7e369cc0dc0e1ba9ed18

ASCII text, with no line terminators

msvcr711.dll

eea1a65974a7ce0e73c9258aa3e8448f

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, PECompact2 compressed, 3 sections

FTP.bat

9dd8a77a9f38f6499ca4752199074e89

DOS batch file, ASCII text, with CRLF line terminators

FTPInfo.mfi

2a0fdfd05fce5ce84999c0df0bd8b84f

ASCII text, with CRLF line terminators

item_15.tif

4ea254e1cd6bb1f41653253fad81dbbf

TIFF image data, little-endian, direntries=23, height=1024, bps=290, compression=none, PhotometricInterpretation=RGB, orientation=upper-left, width=512

chat_msg.bin

218a7d68be911acbd79a15b6d4dcc5ab

data

ConfirmSellDlg.bin

25235cec8407e46683d85754050636e0

OpenPGP Secret Key

fortwartimedlg.bin

b1e4d4bf68c004ca1a21472c994e226c

data

image_hard_path.bin

355779978c56704c07b78207a248f6c8

data

image_item_path.bin

d42700d41a9e4e23f395e39a872db5f4

data

image_msg.bin

666db949a87f9b3f0d2ee03c77201516

data

image_path.bin

9bc7a4da01e02a10391b39ea62d1855f

OpenPGP Public Key

21.bin

90cbec603b662c4df1a619583e652574

data

ConfirmSellDlg.bin

25235cec8407e46683d85754050636e0

OpenPGP Secret Key

fortwartimedlg.bin

b1e4d4bf68c004ca1a21472c994e226c

data

guild.bin

74595ff3bc47b0efb6c00e4a69ec1b63

data

itemunlockex.bin

1a33befd8b7848d2f42051edc06d9439

DOS executable (COM), start instruction 0xb86d3401 84010000

NewReinForceDlg.bin

fcd2df6d002ad63fc20d764bb3eeb7fe

data

npc_script.bin

736ac27cccd7fba659c51a7beee41b4d

data

othercharacterequip.bin

5cbe4f1bb454ef2748789b6046524b85

data

RankingWorldBossDlg.bin

aee2fd9414e981655475bd843b57be7c

data

rarecreate.bin

b7ba31e68d9371deac430fd34ce21beb

data

mini_105.dds

b9c3bbecb0f27202f9b966ae7f810ca1

Microsoft DirectDraw Surface (DDS): 512 x 512, compressed using DX10

mini_105_ful.dds

d6ebeca60787d7cd3b59a6fd7e469d60

Microsoft DirectDraw Surface (DDS): 128 x 128, compressed using DX10

NewReinForceDlg.bin

fcd2df6d002ad63fc20d764bb3eeb7fe

data

othercharacterequip.bin

5cbe4f1bb454ef2748789b6046524b85

data

parsetypelist.bin

0e2882c70e637e73acfe40774d41073c

data

RankingWorldBossDlg.bin

a5cae883a59145df7947c85c77d35e5f

data

serverlist.bin

e90f289a72e42434fff5b3f9b5c7019d

data

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_stackstrings

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	titan-alpha.net/download/Manualpatch.zip	172.67.132.31	200 OK	5.5 MB
URL User Request GET HTTP/2 titan-alpha.net/download/Manualpatch.zip IP 172.67.132.31:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjecttitan-alpha.net Fingerprint44:B5:C4:B2:81:DD:DF:E2:F6:C0:23:26:E2:F9:E7:7F:50:76:C5:18 ValidityTue, 30 Apr 2024 11:54:05 GMT - Mon, 29 Jul 2024 11:54:04 GMT File type Zip archive data, at least v1.0 to extract, compression method=store Size 5.5 MB (5455359 bytes) Hash 090eacbba47ae5166d846ffac26ec61b 08b705fee14e4e6ba2b7b78781732b721acc6ab2 68220e178d75c5b57bee73770a300de581677fa94f28b3517a1c42d3c3369f0f HTTP Headers `GET /download/Manualpatch.zip HTTP/1.1 Host: titan-alpha.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Wed, 08 May 2024 19:24:52 GMT content-type: application/x-zip-compressed content-length: 5455359 last-modified: Tue, 07 May 2024 18:10:52 GMT etag: "dfedb8e5a9a0da1:0" cache-control: max-age=14400 cf-cache-status: EXPIRED accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uN3O22j7l27ts3nkCMwi35%2BjVvtWP6RjTtzE6Jt%2Bby%2B8iJZTwKh5MY8mszGYXtOdRuDeKq9ggBTsjUouO0PhvnJIwMhkyHiB9ujSd6MmndFxLXDmGtrpwfm2kBfGUvB6pLI%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 880bd513795f1c02-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

titan-alpha.net/download/Manualpatch.zip

172.67.132.31

200 OK

5.5 MB

URL User Request GET HTTP/2
titan-alpha.net/download/Manualpatch.zip
IP
172.67.132.31:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecttitan-alpha.net
Fingerprint44:B5:C4:B2:81:DD:DF:E2:F6:C0:23:26:E2:F9:E7:7F:50:76:C5:18
ValidityTue, 30 Apr 2024 11:54:05 GMT - Mon, 29 Jul 2024 11:54:04 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
5.5 MB (5455359 bytes)
Hash
090eacbba47ae5166d846ffac26ec61b
08b705fee14e4e6ba2b7b78781732b721acc6ab2
68220e178d75c5b57bee73770a300de581677fa94f28b3517a1c42d3c3369f0f

HTTP Headers

GET /download/Manualpatch.zip HTTP/1.1
Host: titan-alpha.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 19:24:52 GMT
content-type: application/x-zip-compressed
content-length: 5455359
last-modified: Tue, 07 May 2024 18:10:52 GMT
etag: "dfedb8e5a9a0da1:0"
cache-control: max-age=14400
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uN3O22j7l27ts3nkCMwi35%2BjVvtWP6RjTtzE6Jt%2Bby%2B8iJZTwKh5MY8mszGYXtOdRuDeKq9ggBTsjUouO0PhvnJIwMhkyHiB9ujSd6MmndFxLXDmGtrpwfm2kBfGUvB6pLI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880bd513795f1c02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (48)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers