Report - cdn.discordapp.com/attachments/781954129136058399/1164254411313393745/MW2_PC-FPS_and_FOV_Unlocker.zip?ex=6616ccea&is=660457ea&hm=09278cb6f48acc2a5723b23c2a0c1f9226e9c9dca0f97eae84eaf3bb6196c2dc&

Report Overview

Submitted URL
cdn.discordapp.com/attachments/781954129136058399/1164254411313393745/MW2_PC-FPS_and_FOV_Unlocker.zip?ex=6616ccea&is=660457ea&hm=09278cb6f48acc2a5723b23c2a0c1f9226e9c9dca0f97eae84eaf3bb6196c2dc&
IP
162.159.134.233
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-29 15:40:42
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.discordapp.com	2474	2015-02-26	2015-08-24	2024-03-28	648 B	1.5 MB	162.159.135.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
cdn.discordapp.com/attachments/781954129136058399/1164254411313393745/MW2_PC-FPS_and_FOV_Unlocker.zip?ex=6616ccea&is=660457ea&hm=09278cb6f48acc2a5723b23c2a0c1f9226e9c9dca0f97eae84eaf3bb6196c2dc&
IP
162.159.135.233
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.4 MB (1449930 bytes)
Hash
fa0c5fed3a365edb8584d4e6c7b99291
af8611d89d877750aa816dfaf665b910896d0a49
79631a5cd80702f6bb446b54f5ad9f7ae1b357bb8d4ee5893d426d65e993eaa8

Archive (21)

Filename

Md5

File type

app.ini

90c8d02ab7fcf26fd3f756a6a479b5e8

Windows setup INFormation

Guna.UI2.dll

de97f5f8b11269f60e9b0a0d66266a4c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

LINDRA - Market.exe

b28d43bb8a897862e2dd73340d4160e7

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

LINDRA - Market.exe.config

9dbad5517b46f41dbb0d8780b20ab87e

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

LINDRA - Market.pdb

581350b6a87f1ecad80c593156501021

MSVC program database ver 7.00, 512*295 bytes

Markdig.dll

5d410a8355cf0e2f8690e305877a58b5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Markdig.xml

a291b764c0f479980298ca04205990a8

XML 1.0 document, ASCII text, with CRLF line terminators

MarketOffsets.dll

3280009c445737699b53ebbc75202214

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MarketOffsets.pdb

adef031daa3be6ecb4667fde6c062f13

MSVC program database ver 7.00, 512*99 bytes

MarketUpdater.exe

3536265738b443cb83f94619a0e763f4

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MarketUpdater.exe.config

9dbad5517b46f41dbb0d8780b20ab87e

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

MarketUpdater.pdb

c9d0f1e0a48b0fec277338bf7dfb6e6f

MSVC program database ver 7.00, 512*83 bytes

System.Buffers.dll

ecdfe8ede869d2ccc6bf99981ea96400

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Buffers.xml

1c55860dd93297a6ea2fad2974834c3a

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (727), with CRLF line terminators

System.Memory.dll

6fb95a357a3f7e88ade5c1629e2801f8

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Memory.xml

add19745a43b2515280ce24671863114

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

System.Numerics.Vectors.dll

aaa2cbf14e06e9d3586d8a4ed455db33

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Numerics.Vectors.xml

95dd29ca17b63843ad787d3bc9c8c933

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

System.Runtime.CompilerServices.Unsafe.dll

da04a75ddc22118ed24e0b53e474805a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Runtime.CompilerServices.Unsafe.xml

26cd9e7e8a62bb97cace4e4ac16987a0

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Tutorial.url

fca125ac474fc3a759a793590b29ac39

MS Windows 95 Internet shortcut text (URL=<https://www.youtube.com/@lillobby>), ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 3/64

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

cdn.discordapp.com/attachments/781954129136058399/1164254411313393745/MW2_PC-FPS_and_FOV_Unlocker.zip?ex=6616ccea&is=660457ea&hm=09278cb6f48acc2a5723b23c2a0c1f9226e9c9dca0f97eae84eaf3bb6196c2dc&

162.159.135.233

200 OK

1.4 MB

URL User Request GET HTTP/2
cdn.discordapp.com/attachments/781954129136058399/1164254411313393745/MW2_PC-FPS_and_FOV_Unlocker.zip?ex=6616ccea&is=660457ea&hm=09278cb6f48acc2a5723b23c2a0c1f9226e9c9dca0f97eae84eaf3bb6196c2dc&
IP
162.159.135.233:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectdiscordapp.com
Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39
ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.4 MB (1449930 bytes)
Hash
fa0c5fed3a365edb8584d4e6c7b99291
af8611d89d877750aa816dfaf665b910896d0a49
79631a5cd80702f6bb446b54f5ad9f7ae1b357bb8d4ee5893d426d65e993eaa8

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 3/64

HTTP Headers

GET /attachments/781954129136058399/1164254411313393745/MW2_PC-FPS_and_FOV_Unlocker.zip?ex=6616ccea&is=660457ea&hm=09278cb6f48acc2a5723b23c2a0c1f9226e9c9dca0f97eae84eaf3bb6196c2dc& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 15:40:14 GMT
content-type: application/zip
content-length: 1449930
cf-ray: 86c0f50b6974b50b-OSL
cf-cache-status: HIT
accept-ranges: bytes, bytes
cache-control: public, max-age=31536000
content-disposition: attachment; filename="MW2_PC-FPS_and_FOV_Unlocker.zip"
etag: "fa0c5fed3a365edb8584d4e6c7b99291"
expires: Sat, 29 Mar 2025 15:40:14 GMT
last-modified: Wed, 18 Oct 2023 17:31:22 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1697650282518036
x-goog-hash: crc32c=+N+HVQ==, md5=+gxf7To2XtuFhNTmx7mSkQ==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1449930
x-guploader-uploadid: ABPtcPp_2LSRFbqyUa8VuyPITiT8OPnG4nly4hxB0puHNQWKWCHBkpoWdf14W6zNcvldk0YftYZvgWDYEg
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VJkIDTsOLG0cVtD53PBbWEh3xEins4aumi7Jk9%2B58PtMGkc908N3Lwu3YXQc4ndeSS621hz0tK87BySu9wo6syK5mxQQRcN4N1riqibcKoes3buqUXOZihfVxL7pamBEHutioQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=NhGAPdgCYTpUnpBliyKj6GxL_0lIPtPm6hemJ3igH70-1711726814-1.0.1.1-3UsRl225QKxHNVS1POe41Zy1fuaxCDoPSdy.nOicHyvGiqjQ42qJ76LMmNyS_0ip_PffAD9POV0K1e4uy2idxg; path=/; expires=Fri, 29-Mar-24 16:10:14 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=z8BA4DcNMlWAP4.bdn8Ry2.7SbIQ4Bz8yCH3BjaGsO0-1711726814027-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (21)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers