Report - supporter-files.nexus-cdn.com/7800/3/Nightreign%20Seamless%20Co-op%20v0.0.2-3-0-0-2-1748902517.zip?md5=BV9Uq3rnWr5bgLQACqp0Cg&expires=1749244053&user

Report Overview

Visited public
2025-06-06 17:09:00
Tags
URL
supporter-files.nexus-cdn.com/7800/3/Nightreign%20Seamless%20Co-op%20v0.0.2-3-0-0-2-1748902517.zip?md5=BV9Uq3rnWr5bgLQACqp0Cg&expires=1749244053&user_id=183878436
Finishing URL
about:privatebrowsing
IP / ASN
185.229.191.156
#60068 Datacamp Limited
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
supporter-files.nexus-cdn.com	573057	2018-07-16	2018-08-07	2025-06-05	630 B	1.2 MB	185.229.191.156

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
supporter-files.nexus-cdn.com/7800/3/Nightreign%20Seamless%20Co-op%20v0.0.2-3-0-0-2-1748902517.zip?md5=BV9Uq3rnWr5bgLQACqp0Cg&expires=1749244053&user_id=183878436
IP
185.229.191.156
ASN
#60068 Datacamp Limited

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.2 MB (1235336 bytes)
Hash
314b634b84aca2ae2cb44ceead60829e
af27d3fdbabc7ec274aedce5f79736f105a62f24
91f7e5488c93365c66982fb691500d73d4c123f82e170c659e9a4e3b03a8a250

Archive (5)

Filename

Md5

File type

nrsc_launcher.exe

6120cb90325f623828c94cf2430e3fac

PE32+ executable (console) x86-64, for MS Windows, 6 sections

crashpad_handler.exe

3ec03507fc8a9e09a4e26a10efadad32

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

english.json

e604b82b4a6c975c83fff3a27640a53f

JSON text data

nrsc_settings.ini

74841b206c4c2e58701bbdde8b8d94d9

Generic INItialization configuration [SAVE]

nrsc.dll

6a1b34bd9950e56fcf8a5dcc1862702b

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 11 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 2/68

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET supporter-files.nexus-cdn.com/7800/3/Nightreign%20Seamless%20Co-op%20v0.0.2-3-0-0-2-1748902517.zip?md5=BV9Uq3rnWr5bgLQACqp0Cg&expires=1749244053&user_id=183878436

185.229.191.156

200 OK

1.2 MB

URL User Request GET
supporter-files.nexus-cdn.com/7800/3/Nightreign%20Seamless%20Co-op%20v0.0.2-3-0-0-2-1748902517.zip?md5=BV9Uq3rnWr5bgLQACqp0Cg&expires=1749244053&user_id=183878436
IP
185.229.191.156:443
ASN
#60068 Datacamp Limited

Certificate
IssuerGlobalSign nv-sa
Subject*.nexus-cdn.com
FingerprintD7:18:A7:15:D1:3B:CC:ED:1D:AA:BC:94:30:7F:5A:7A:3D:93:AC:ED
ValidityThu, 19 Sep 2024 15:26:19 GMT - Tue, 21 Oct 2025 15:26:18 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.2 MB (1235336 bytes)
Hash
314b634b84aca2ae2cb44ceead60829e
af27d3fdbabc7ec274aedce5f79736f105a62f24
91f7e5488c93365c66982fb691500d73d4c123f82e170c659e9a4e3b03a8a250

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/68

HTTP Headers

GET /7800/3/Nightreign%20Seamless%20Co-op%20v0.0.2-3-0-0-2-1748902517.zip?md5=BV9Uq3rnWr5bgLQACqp0Cg&expires=1749244053&user_id=183878436 HTTP/1.1
Host: supporter-files.nexus-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.24.0
date: Fri, 06 Jun 2025 17:08:37 GMT
content-type: application/zip
content-length: 1235336
last-modified: Mon, 02 Jun 2025 22:15:17 GMT
etag: "683e2275-12d988"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (5)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers