Report - dukeworld.duke4.net/eduke32/oldmp/eduke32-oldmp-20120912.7z

Report Overview

Visited public
2025-05-02 06:42:21
Tags
URL
dukeworld.duke4.net/eduke32/oldmp/eduke32-oldmp-20120912.7z
Finishing URL
about:privatebrowsing
IP / ASN
212.8.242.16
#49981 WorldStream B.V.
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

5

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dukeworld.duke4.net	unknown	2005-03-02	2014-05-12	2025-04-30	527 B	1.5 MB	212.8.242.16

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
dukeworld.duke4.net/eduke32/oldmp/eduke32-oldmp-20120912.7z
IP
212.8.242.16
ASN
#49981 WorldStream B.V.

File type
7-zip archive data, version 0.3
Size
1.5 MB (1460156 bytes)
Hash
58cc375c99ef1204fd79e2cef125af35
769fda4c6c38adf7d98bb4bd8006d799c66d8f94
19e986aca60bc2a9f37d5bebab5ec374cb1d313143017368f51df769df513849

Archive (11)

Filename

Md5

File type

buildlic.txt

68b498942a59b13f60086049f5711ab7

ASCII text, with CRLF line terminators

EDuke32-OldMP Readme.txt

5715ddbd5f8c8954dc3cdc3d558fc553

ASCII text, with CRLF line terminators

gdbcommand.txt

cbbf058717f815850e422d811b0942ea

ASCII text, with CRLF line terminators

GNU.TXT

8b2da277227a33a539463fe8bcfa0b11

ASCII text, with very long lines (804), with CRLF line terminators

ninjadebug.debug.txt

2e80a78fa96fb8bb31200a8bcb1e9b55

ASCII text, with CRLF line terminators

ninjadebug.txt

aea03699060cb0e0111aed432d6aceb5

ASCII text, with CRLF line terminators

eduke32-oldmp.debug.exe

ca7797d45dfd10dec5ac77bbf6c32a78

PE32 executable (GUI) Intel 80386, for MS Windows, 16 sections

eduke32-oldmp.exe

1390cee47285e62a143e58b32eed08db

PE32 executable (GUI) Intel 80386, for MS Windows, 16 sections

ninjadebug.debug.exe

300c81690f4f53e5c4519a828d7179d0

PE32 executable (console) Intel 80386, for MS Windows, 13 sections

ninjadebug.exe

c4e15d7f34e94e504c857495d857e246

PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, 8 sections

tee.exe

d4c1422782c424c586c2524176bcd492

PE32 executable (console) Intel 80386, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 12/58

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

dukeworld.duke4.net/eduke32/oldmp/eduke32-oldmp-20120912.7z

212.8.242.16

200 OK

1.5 MB

URL User Request GET
dukeworld.duke4.net/eduke32/oldmp/eduke32-oldmp-20120912.7z
IP
212.8.242.16:443
ASN
#49981 WorldStream B.V.

Certificate
IssuerLet's Encrypt
Subjectduke4.net
Fingerprint38:6C:2D:65:47:50:BC:B1:F8:16:13:31:DC:41:C1:3C:7E:05:7B:7B
ValidityTue, 11 Mar 2025 06:34:14 GMT - Mon, 09 Jun 2025 06:34:13 GMT

File type
7-zip archive data, version 0.3
Size
1.5 MB (1460156 bytes)
Hash
58cc375c99ef1204fd79e2cef125af35
769fda4c6c38adf7d98bb4bd8006d799c66d8f94
19e986aca60bc2a9f37d5bebab5ec374cb1d313143017368f51df769df513849

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 12/58

HTTP Headers

GET /eduke32/oldmp/eduke32-oldmp-20120912.7z HTTP/1.1
Host: dukeworld.duke4.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 02 May 2025 06:41:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 18 Nov 2013 23:56:40 GMT
ETag: "1647bc-4eb7c4c92be00"
Accept-Ranges: bytes
Content-Length: 1460156
Keep-Alive: timeout=1, max=1024
Connection: Keep-Alive
Content-Type: application/x-7z-compressed