Report - s7.upfiles.download/2023/11/03/03/QdoCc9H91J6SlB4GJXQtqINrEQ78ANzXxTfAkwSJ.zip?name=Battle+Axe+Overlord+v1.27.zip&ip=35.187.132.231&md5=DZwy04hmmW0u8fdI2iKS9A&expires=1713991906

Report Overview

Submitted URL
s7.upfiles.download/2023/11/03/03/QdoCc9H91J6SlB4GJXQtqINrEQ78ANzXxTfAkwSJ.zip?name=Battle+Axe+Overlord+v1.27.zip&ip=35.187.132.231&md5=DZwy04hmmW0u8fdI2iKS9A&expires=1713991906
IP
65.109.85.71
ASN
#24940 Hetzner Online GmbH
Submitted
2024-04-24 08:52:33
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
s7.upfiles.download	unknown	2021-05-17	2022-12-16	2024-04-17	631 B	921 kB	65.109.85.71

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
s7.upfiles.download/2023/11/03/03/QdoCc9H91J6SlB4GJXQtqINrEQ78ANzXxTfAkwSJ.zip?name=Battle+Axe+Overlord+v1.27.zip&ip=35.187.132.231&md5=DZwy04hmmW0u8fdI2iKS9A&expires=1713991906
IP
65.109.85.71
ASN
#24940 Hetzner Online GmbH

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
921 kB (921010 bytes)
Hash
d72889c1843c50512702f0fe13fb83ff
294170690009663f012b6cf46d2f58ecc8255135
4b67b826017b8edaf7d93100c58f18bb51356482a59dcb09e624f387f0c7c1fb

Archive (55)

Modified	Filename	Size	Md5	File type
2022-10-22 09:29	Add Keys.reg	1.9 kB	0638bda5960806871b478ea5a9884d6d	Windows Registry little-endian text (Win2K or above)
2023-09-20 10:24	I Công Nghệ - Nơi chia sẻ phần mềm game cực chuẩn.html	247 kB	93cbf84354f9a1cacb4e1a6697ed6e08	HTML document, Unicode text, UTF-8 text, with very long lines (11924), with CRLF, LF line terminators
2023-09-20 10:24	IGG Tech - Software Free Download Full Installer Step by Step - Page 2.html	172 kB	6879bb5f2eed45dbb823f5f408e4e70f	HTML document, ASCII text, with very long lines (11909), with CRLF, LF line terminators
2022-10-22 09:30	install-as-admin.zip	1.1 kB	4af672f0eff80996375a39b3bc2bb226	Zip archive data, at least v2.0 to extract, compression method=deflate
2023-02-09 19:36	overlord.svg	366 B	2a04d8fe12912e439d50915ba4120da3	SVG Scalable Vector Graphics image
2021-12-23 20:39	.debug	808 B	3bd4cb3ab44e2013bcc5b7e0f6f47c4e	XML 1.0 document, ASCII text
2023-04-11 11:53	prefs.json	475 B	d83030ce5deeff2a4b60a1d628bdf9af	JSON text data
2021-12-23 20:39	normalize.css	2.1 kB	3ac97cd4f3bff16bb219931401695433	ASCII text, with very long lines (2012)
2021-12-23 20:39	Overlord.css	7.2 kB	e5d6ea7314ef58ec78d6489685ae58bd	ASCII text, with very long lines (7184), with no line terminators
2021-12-23 20:39	protip.min.css	114 kB	79ca61d1b3b4f11345805064aa322303	ASCII text, with very long lines (65536), with no line terminators
2021-12-23 20:39	type.css	187 B	5503dc36a0d6fd313ccbc26ca48225fd	ASCII text, with no line terminators
2023-04-11 11:53	manifest.xml	3.0 kB	76d4d4a57e18c2de48f8bbee69a30024	XML 1.0 document, ASCII text
2021-12-23 20:39	SourceCodePro-Black.ttf	120 kB	fc9fc376af1a7cd77db8619a07eb4e6b	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 38 names, Macintosh, Copyright 2010, 2012 Adobe Systems Incorporated. All Rights Reserved.Source Code Pro BlackRegula
2021-12-23 20:39	SourceCodePro-Bold.ttf	120 kB	5a0856eb52623ae94b09dbbf31a27b95	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 34 names, Macintosh, Copyright 2010, 2012 Adobe Systems Incorporated. All Rights Reserved.Source Code ProBold1.017;AD
2021-12-23 20:39	SourceCodePro-ExtraLight.ttf	122 kB	dc178a6f43ff583922d683081b78d01e	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 38 names, Macintosh, Copyright 2010, 2012 Adobe Systems Incorporated. All Rights Reserved.Source Code Pro ExtraLightR
2021-12-23 20:39	SourceCodePro-Light.ttf	121 kB	4ea7ca3086635b4d34ef762e3fdc38be	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 38 names, Macintosh, Copyright 2010, 2012 Adobe Systems Incorporated. All Rights Reserved.Source Code Pro LightRegula
2021-12-23 20:39	SourceCodePro-Medium.ttf	120 kB	0cdb648acad69b0d773a4fd6be7e5737	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 38 names, Macintosh, Copyright 2010, 2012 Adobe Systems Incorporated. All Rights Reserved.Source Code Pro MediumRegul
2021-12-23 20:39	SourceCodePro-Regular.ttf	120 kB	43bb4cbf1d0ecfdb1309e4cb67264f35	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 34 names, Macintosh, Copyright 2010, 2012 Adobe Systems Incorporated. All Rights Reserved.Source Code ProRegular1.017
2021-12-23 20:39	SourceCodePro-Semibold.ttf	120 kB	1ca52b8bb78764f68000367fd39216b4	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 38 names, Macintosh, Copyright 2010, 2012 Adobe Systems Incorporated. All Rights Reserved.Source Code Pro SemiboldReg
2021-12-23 20:39	sourcesanspro-regular-webfont.ttf	52 kB	2c33650bf75aa6c5148cc2fb219e77b8	TrueType Font data, 20 tables, 1st "BASE", 15 names, Microsoft, language 0x409, Straight lSource Sans ProRegular1.040;ADBE;SourceSansPro-Regular;ADOBESource Sans Pro RegularVer
2023-04-11 13:04	index.html	28 kB	503983935b558c48c687acc259136c0d	HTML document, ASCII text, with very long lines (1605)
2023-02-09 16:48	modal.html	13 kB	d359dd4e58b5511a8ad06a3b69082134	HTML document, Unicode text, UTF-8 text, with very long lines (5646)
2021-12-23 20:39	iconDarkThemeHover.png	545 B	f97bbe330c90d3dba49350d7610bee7b	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	iconDarkThemeHover@2x.png	1.2 kB	315eddd8dbf93738997f5913b0f693f6	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	iconDarkThemeHover_2x.png	1.2 kB	315eddd8dbf93738997f5913b0f693f6	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	iconDarkThemeNormal.png	503 B	ea975964cabc1f02fcef8865b3e68c52	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	iconDarkThemeNormal@2x.png	1.0 kB	0c8593b49a8addff9a68c7b50274b1f5	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	iconDarkThemeNormal_2x.png	1.0 kB	0c8593b49a8addff9a68c7b50274b1f5	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	iconLightThemeHover.png	545 B	f97bbe330c90d3dba49350d7610bee7b	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	iconLightThemeHover@2x.png	1.2 kB	315eddd8dbf93738997f5913b0f693f6	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	iconLightThemeHover_2x.png	1.2 kB	315eddd8dbf93738997f5913b0f693f6	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	iconLightThemeNormal.png	513 B	81f85744d4a2b2d404f3ab33d19fa08e	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	iconLightThemeNormal@2x.png	1.0 kB	fb5559e93b3335b2790390ac302f9c1f	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	iconLightThemeNormal_2x.png	1.0 kB	fb5559e93b3335b2790390ac302f9c1f	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
2021-12-23 20:39	app.js	1.6 kB	ec003e48cdcb7cbe3b3e8ce98747de19	ASCII text, with very long lines (1562), with no line terminators
2021-12-23 20:39	analytics.js	1.6 kB	8916ead392464ee0a7d667cfd22dc960	ASCII text, with very long lines (1649), with no line terminators
2021-12-23 20:39	angular-animate.min.js	25 kB	ef83c719e47c91dc569c5eed984a4008	JavaScript source, ASCII text, with very long lines (24551), with no line terminators
2021-12-23 20:39	angular.js	154 kB	5469d18baab78423b923184cd9f59246	JavaScript source, ASCII text, with very long lines (65536), with no line terminators
2023-04-11 12:12	axios.js	31 kB	7bbd014e6f3cfb7121ffc12bba64d641	JavaScript source, ASCII text, with very long lines (31172), with no line terminators
2021-12-23 20:39	contextMenu.js	3.9 kB	c6a0d7df87cbded4ee42faebfd0c54a1	JavaScript source, ASCII text, with very long lines (3889), with no line terminators
2022-05-21 07:41	CSInterface.js	8.4 kB	67a66865ac2c99b517ab00bf9ed89175	JavaScript source, ASCII text, with very long lines (8364), with no line terminators
2021-12-23 20:39	firebase.js	788 kB	73df2b8bcb161b35651ea18afaa242ae	JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
2021-12-23 20:39	jquery.js	86 kB	c3880043d6a5cbbf01f2d584e6463fe0	JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
2021-12-23 20:39	modal.js	5.9 kB	a574b70342dff1b90503bb9ec932d3f8	JavaScript source, ASCII text, with very long lines (5946), with no line terminators
2021-12-23 20:39	ocLazyLoad.min.js	15 kB	27e7b304d3bfb6c761891ec8ded15a8b	JavaScript source, ASCII text, with very long lines (15092), with no line terminators
2021-12-23 20:39	promise.min.js	2.8 kB	0ef7501cdb338ee52250a4e3a6c14316	JavaScript source, ASCII text, with very long lines (2813), with no line terminators
2021-12-23 20:39	protip.min.js	33 kB	64b48850c9493baf2cde25ef49e4c249	JavaScript source, ASCII text, with very long lines (33039), with no line terminators
2022-05-20 23:40	Vulcan.js	6.0 kB	41affe5cad2e214e71af921c73b83d45	JavaScript source, ASCII text, with very long lines (6026), with no line terminators
2021-12-23 20:39	modal.js	404 B	0d35770287006f5aa4d4be4e810ac93f	ASCII text, with very long lines (404), with no line terminators
2023-02-09 16:22	Overlord-modal.js	3.5 kB	8347d75642db22f2e941c3655b975005	JavaScript source, ASCII text, with very long lines (3450), with no line terminators
2023-11-01 23:10	Overlord.js	12 kB	bfe838ecd32588f0390cbfc14f1afd8b	JavaScript source, ASCII text, with very long lines (12448), with no line terminators
2023-04-11 13:14	Overlord.jsx	260 kB	aa93918a38cea145b10f0bec9df61c5f	ASCII text
2023-04-11 13:15	signatures.xml	11 kB	6485c4e4b706a191c1fcb9fba49b5e04	ASCII text, with very long lines (9158)
2023-04-11 13:15	mimetype	41 B	c08502997fc819570b793f6e81ce0495	ASCII text, with no line terminators
2023-11-01 18:26	readme.txt	500 B	35fe79dabb9df162167e4508467c1b8c	ISO-8859 text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 17/65

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

s7.upfiles.download/2023/11/03/03/QdoCc9H91J6SlB4GJXQtqINrEQ78ANzXxTfAkwSJ.zip?name=Battle+Axe+Overlord+v1.27.zip&ip=35.187.132.231&md5=DZwy04hmmW0u8fdI2iKS9A&expires=1713991906

65.109.85.71

200 OK

921 kB

URL User Request GET HTTP/1.1
s7.upfiles.download/2023/11/03/03/QdoCc9H91J6SlB4GJXQtqINrEQ78ANzXxTfAkwSJ.zip?name=Battle+Axe+Overlord+v1.27.zip&ip=35.187.132.231&md5=DZwy04hmmW0u8fdI2iKS9A&expires=1713991906
IP
65.109.85.71:443
ASN
#24940 Hetzner Online GmbH

Certificate
IssuerLet's Encrypt
Subjects7.upfiles.download
Fingerprint82:89:A9:4A:AE:21:2C:DF:5E:9A:86:E4:7D:D6:32:D5:68:C7:C2:6D
ValidityFri, 12 Apr 2024 09:29:34 GMT - Thu, 11 Jul 2024 09:29:33 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
921 kB (921010 bytes)
Hash
d72889c1843c50512702f0fe13fb83ff
294170690009663f012b6cf46d2f58ecc8255135
4b67b826017b8edaf7d93100c58f18bb51356482a59dcb09e624f387f0c7c1fb

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 17/65

HTTP Headers

GET /2023/11/03/03/QdoCc9H91J6SlB4GJXQtqINrEQ78ANzXxTfAkwSJ.zip?name=Battle+Axe+Overlord+v1.27.zip&ip=35.187.132.231&md5=DZwy04hmmW0u8fdI2iKS9A&expires=1713991906 HTTP/1.1
Host: s7.upfiles.download
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 08:52:06 GMT
Content-Type: application/zip
Content-Length: 921010
Last-Modified: Fri, 03 Nov 2023 03:02:29 GMT
Connection: keep-alive
ETag: "654462c5-e0db2"
Cache-Control: public, must-revalidate
Pragma: no-cache
Content-Transfer-Encoding: binary
Content-disposition: attachment; filename=Battle+Axe+Overlord+v1.27.zip
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (55)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers