Report - c10.patreonusercontent.com/4/patreon-media/p/post/127886903/45881d96792140f48585f7288dae0363/eyJhIjoxLCJwIjoxfQ==/1.zip?token-time=1747008000&token-hash=GlIoEJ7hGCYKxNLeogEydVtOhuAZVWelB8UpnAIc-OE=

Report Overview

Visited public
2025-05-08 09:35:37
Tags
URL
c10.patreonusercontent.com/4/patreon-media/p/post/127886903/45881d96792140f48585f7288dae0363/eyJhIjoxLCJwIjoxfQ==/1.zip?token-time=1747008000&token-hash=GlIoEJ7hGCYKxNLeogEydVtOhuAZVWelB8UpnAIc-OE=
Finishing URL
about:privatebrowsing
IP / ASN
104.18.69.106
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
c10.patreonusercontent.com	39060	2017-04-06	2017-08-23	2025-05-04	665 B	9.1 MB	104.18.70.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
c10.patreonusercontent.com/4/patreon-media/p/post/127886903/45881d96792140f48585f7288dae0363/eyJhIjoxLCJwIjoxfQ==/1.zip?token-time=1747008000&token-hash=GlIoEJ7hGCYKxNLeogEydVtOhuAZVWelB8UpnAIc-OE=
IP
104.18.70.106
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
9.1 MB (9112897 bytes)
Hash
dfbc2fa5b8c2e2c82bafe8088f3e3cc2
19e027e63eb7f32e2b28587e808e9b6f3734924f
49fde0951dd6cd18802fe171615b0af2c10d2581ca99ebcdc648b519d3b3984b

Archive (96)

Filename

Md5

File type

changelog.txt

5a0dd5a6b7246c16eb70ccf45a357d32

ASCII text, with CRLF line terminators

FCLiveEditor.DLL

2c7b52c098cf8fc89afe9fab277b9cea

PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections

Launcher.exe

8e0549b6a4bec9633ec90f5d3b11cfa2

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

LiveEditorClearRegistry.reg

8d2c6d407506d54b05465a18b4cf91ff

Unicode text, UTF-16, little-endian text, with CRLF line terminators

EAAntiCheat.GameServiceLauncher.exe

db9507019006ea934bd18d464aa52c69

PE32+ executable (console) x86-64, for MS Windows, 6 sections

Benzema Regen.json

3437ffc0878b3e369c8e554d1fd8a898

JSON text data

CR7 Regen.json

6592572be42e15637b75a24cc42d7702

JSON text data

Free Agents.json

3cb5b3755ccdc1716c9c356fb3fb476b

JSON text data

Generated Players.json

6409ca4b8b5aa94a8b994d2dfdd328ce

JSON text data

Messi Regen.json

9d6e27de394c989f046e7af9932e967e

JSON text data

Retiring Players.json

2480604351b73adee85ad77dc60f4883

JSON text data

RL9 Regen.json

789b9b270caa2cdc7a1d4c469257b8b1

JSON text data

localize.json

e633d2a2304f282c49bcfa7b17bf8a51

JSON text data

live_editor.lua

2271621421c9d1e6963ef2a811d400a6

ASCII text, with CRLF line terminators

README.txt

d697257af9dba9ef92a02b17fa94bc22

ASCII text, with CRLF line terminators

main.lua

d13c8d8e94dc8a8a9ed798c2f0071ea1

ASCII text, with CRLF line terminators

aardvark_manager.lua

4e065487448a67585ea0a24f4eb709f4

ASCII text, with CRLF line terminators

consts.lua

9096317008a6ae05630168be2639bcbb

ASCII text, with CRLF line terminators

enums.lua

88a575b1ea3f8449c179a659499aa124

ASCII text, with CRLF line terminators

fcecareermodeusermanager.lua

bc9be5d1fffa4e2d171b47c3b4f59a8a

Ruby script, ASCII text, with CRLF line terminators

helpers.lua

9e78a681901db06ff1faaeb088b176e4

Ruby script, ASCII text, with CRLF line terminators

managers.lua

d41d8cd98f00b204e9800998ecf8427e

common.lua

63ae652396e83e7007482a13197017c9

ASCII text, with CRLF line terminators

consts.lua

2bc3979500279057b71aa7f19ae2f2ea

ASCII text, with CRLF line terminators

date.lua

c77746069621e1e36932ab94c6d853ba

Ruby script, ASCII text, with CRLF line terminators

live_editor.lua

3f6e5cbf502bebe3276d28ec2e3fd014

ASCII text, with CRLF line terminators

logger.lua

36f3185f5c948f4a90f00222e54f4c32

ASCII text, with CRLF line terminators

memory.lua

b963cee9a62e171b3dd98409220a1f2d

ASCII text, with CRLF line terminators

player.lua

92dee7d654dc824d09fd87495c3bb440

ASCII text, with CRLF line terminators

players_manager.lua

5cb2d3ade96583c09c929c6839c247ef

ASCII text, with CRLF line terminators

transfer_ban_manager.lua

e42d4dd02f6a98722fd4e4b2a4fe1641

ASCII text, with CRLF line terminators

json.lua

e0491981c91d9f947de1c1feb83bd83a

ASCII text, with CRLF line terminators

gp_attribulator_manager.lua

97c8ec336c06041bf2509e2de882a1b4

ASCII text, with CRLF line terminators

enums.lua

01c236065f7f11bebaa20d8acc14e515

ASCII text, with CRLF line terminators

http.lua

a9cb61e80c846de664597c35f8cb8872

Ruby script, ASCII text, with CRLF line terminators

request.lua

5b674ede2f7122f673a8ed44a3ad6db3

Ruby script, ASCII text, with CRLF line terminators

game_localization.lua

06a10623dcca76c51a09840f6f534c0d

ASCII text, with CRLF line terminators

consts.lua

de732cc8a28474f7d1e7b5222b303b18

ASCII text, with CRLF line terminators

helpers.lua

490788f15af73c9a6d74bc3da29bcab1

Ruby script, ASCII text, with CRLF line terminators

playstyles_enum.lua

a43e4c4bcb7cf61f535b747a7edfd390

ASCII text, with CRLF line terminators

enums.lua

7eeb238c0c68d029d7c54630dd104de7

ASCII text, with CRLF line terminators

db.lua

873a7abd7e1d05aa112e02c15dfd1438

Ruby script, ASCII text, with CRLF line terminators

field.lua

9fecb88299931033d219b939d1135dc0

ASCII text, with CRLF line terminators

table.lua

9049392da284b308b8c99ae859f67ee8

ASCII text, with CRLF line terminators

aardvark_manager_test.lua

3a560c26fdf88dfc8fc5947884789aa4

ASCII text, with CRLF line terminators

event_handlers_test.lua

8c5db88318cb10cb67fb4db70fdc8b75

ASCII text, with CRLF line terminators

gameplay_attribulator_test.lua

4f65e923178fd476df1e1d6f9037d838

ASCII text, with CRLF line terminators

game_loc_test.lua

d309442a4c15dead752b32c64d791508

ASCII text, with CRLF line terminators

http_test.lua

8c80bbc603174c019919262447c7b6fd

ASCII text, with CRLF line terminators

plugins.lua

2fdb61a0bbf827a2e0e68bf6230be101

Ruby script, ASCII text, with CRLF line terminators

t3db.lua

c02918fc3d3695ea06a08011dfea62e0

ASCII text, with CRLF line terminators

tests.lua

ebaf5b38f3821605b443d69d2928bf0c

ASCII text, with CRLF line terminators

timing.lua

5e79ec15f67d1f8e71812e9c447d3e76

ASCII text, with CRLF line terminators

transfer_ban_test.lua

8d9b03a136a63a64605817faee3c89e6

ASCII text, with CRLF line terminators

1ovr_99pot.lua

2e60de4440ec786ee98c84290c95947b

Ruby script, ASCII text, with CRLF line terminators

99ovr_99pot.lua

528caa3dafb4a3e8c62d4edd12496f2b

Ruby script, ASCII text, with CRLF line terminators

99ovr_99pot_in_given_team.lua

ea659de5eeeac84c1fd4db42f92a13b1

Ruby script, ASCII text, with CRLF line terminators

99pot_in_given_team.lua

26e4dfcabe986aa30f460b65844ca66a

Ruby script, ASCII text, with CRLF line terminators

auto_max_user_team_fitness.lua

55f0561e8280d7bac38a01dfb8671342

Ruby script, ASCII text, with CRLF line terminators

auto_max_user_team_form.lua

0cd7abb96f8aefeb13dec8c1bda6a71b

Ruby script, ASCII text, with CRLF line terminators

auto_max_user_team_form_morale_sharpness.lua

6983b0bc050f9b3ee8915179c0aebf85

Ruby script, ASCII text, with CRLF line terminators

auto_max_user_team_morale.lua

46c421efe36b436341bcb81bdd4ec21a

Ruby script, ASCII text, with CRLF line terminators

auto_max_user_team_sharpness.lua

6562abf40896b03693e29030587fc45d

Ruby script, ASCII text, with CRLF line terminators

auto_max_vpro_fitness.lua

daec07c1545120c5abd431a51f94121e

Ruby script, ASCII text, with CRLF line terminators

custom_headassetid_to_playerid.lua

6e6749dc65106b9cd26d5b60752ed03c

Ruby script, ASCII text, with CRLF line terminators

custom_tattoos_to_playerid.lua

5b5b59f2a88feb2c6ebb4767aa59c1b2

Ruby script, ASCII text, with CRLF line terminators

delete_generated_players.lua

61d4b04ad506688616f2302163e04a21

ASCII text, with CRLF line terminators

export_season_stats.lua

05229f3d24242a9e1951ee19221f2204

Ruby script, ASCII text, with CRLF line terminators

export_transfer_history.lua

4c035460016eadfdd9aa8fa5fd1226cb

Ruby script, ASCII text, with CRLF line terminators

extend_cpu_players_contracts.lua

739b57a45f97c29cb662f149da8bed9b

Ruby script, ASCII text, with CRLF line terminators

extend_user_team_players_contracts.lua

27efa24d6b8309432c663ec604251f65

Ruby script, ASCII text, with CRLF line terminators

find_teams_no_gk.lua

bd58bd98be19a00fec60d2ccfdea6b00

ASCII text, with CRLF line terminators

fix_players_headmodels.lua

90f58058efeeea6a7a0f963ea7498988

Ruby script, ASCII text, with CRLF line terminators

generate_minifaces.lua

52e3053be8f6a50d9c538a6c8737ec11

Ruby script, ASCII text, with CRLF line terminators

generate_minifaces_for_players_with_realface.lua

9fdd93d811f007a0c449363227f795c9

Ruby script, ASCII text, with CRLF line terminators

generate_minifaces_user_team.lua

06b1434d59f73237bcca9b64cda2e5e1

Ruby script, ASCII text, with CRLF line terminators

is_retiring=0.lua

933c31dc2586d16fb48657a5ca166624

ASCII text, with CRLF line terminators

is_retiring=1.lua

754c4c4974c0a76dd3c177c97039f6f5

ASCII text, with CRLF line terminators

list_players.lua

7c341a7415cdb167eb379f881b3c6e4c

ASCII text, with CRLF line terminators

list_transfer_bans.lua

b2a2eeb4be22da6081f281ac8252eb0a

ASCII text, with CRLF line terminators

mass_edit_age.lua

3bbc8cde8ad597a89030db6780a3c51c

Ruby script, ASCII text, with CRLF line terminators

mass_edit_squadrole.lua

599c8cdc57023e46cee8bf08d5c3cd96

Ruby script, ASCII text, with CRLF line terminators

medium_socklenghtcode.lua

d6d9d59488954ec21a185b2fb1a02984

ASCII text, with CRLF line terminators

modifier=0.lua

e7e918f6741e6e224ca50faa3adccc9d

ASCII text, with CRLF line terminators

pap_all_playstyles.lua

938b57fa8ff9aed6aa9aa98e101fb49c

Ruby script, ASCII text, with CRLF line terminators

print_team_jersey_numbers.lua

ef1532f1bf6ba78c5b099b938ba93af7

ASCII text, with CRLF line terminators

small_squad_find.lua

6b0922d2ef0aec16225a907bcd0461ff

ASCII text, with CRLF line terminators

track_cm_events.lua

2d6921f25c1e7936bbb6dabe0c1f7a8b

Ruby script, ASCII text, with CRLF line terminators

transfer_ban_all_teams.lua

8d125df737957d222255dd936f0f6ae7

ASCII text, with CRLF line terminators

unlock_boots.lua

e9b8ec45460fc131ae45ef8679ae7d34

ASCII text, with CRLF line terminators

unlock_mgr_clothes.lua

7ce3bc6277ba626f698e1e34f6121562

ASCII text, with CRLF line terminators

untuck_shirts.lua

59446c6889eb8c8a304fbdf1627ab18a

ASCII text, with CRLF line terminators

vpro_99ovr.lua

36eb8a9d9702541e902a19b593a74cd2

Ruby script, ASCII text, with CRLF line terminators

vpro_always_starter.lua

a1c0fcee34103f31d15b8a15c30231d8

Ruby script, ASCII text, with CRLF line terminators

base_players.csv

3015ae021d99af206a8e632b5e480755

CSV Unicode text, UTF-8 text

cards.csv

ad05e098262e1970dbf5e9659506bbbc

CSV Unicode text, UTF-8 text

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/67

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

c10.patreonusercontent.com/4/patreon-media/p/post/127886903/45881d96792140f48585f7288dae0363/eyJhIjoxLCJwIjoxfQ==/1.zip?token-time=1747008000&token-hash=GlIoEJ7hGCYKxNLeogEydVtOhuAZVWelB8UpnAIc-OE=

104.18.70.106

200 OK

9.1 MB

URL User Request GET
c10.patreonusercontent.com/4/patreon-media/p/post/127886903/45881d96792140f48585f7288dae0363/eyJhIjoxLCJwIjoxfQ==/1.zip?token-time=1747008000&token-hash=GlIoEJ7hGCYKxNLeogEydVtOhuAZVWelB8UpnAIc-OE=
IP
104.18.70.106:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectpatreonusercontent.com
FingerprintEE:FF:52:01:D0:0E:B0:98:15:07:9B:17:F8:02:BD:8B:0D:8E:86:8F
ValidityMon, 24 Mar 2025 06:45:56 GMT - Sun, 22 Jun 2025 07:45:34 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
9.1 MB (9112897 bytes)
Hash
dfbc2fa5b8c2e2c82bafe8088f3e3cc2
19e027e63eb7f32e2b28587e808e9b6f3734924f
49fde0951dd6cd18802fe171615b0af2c10d2581ca99ebcdc648b519d3b3984b

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/67

HTTP Headers

GET /4/patreon-media/p/post/127886903/45881d96792140f48585f7288dae0363/eyJhIjoxLCJwIjoxfQ==/1.zip?token-time=1747008000&token-hash=GlIoEJ7hGCYKxNLeogEydVtOhuAZVWelB8UpnAIc-OE= HTTP/1.1
Host: c10.patreonusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 08 May 2025 09:35:01 GMT
content-type: application/zip
content-length: 9112897
cf-ray: 93c7f6edef8c1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://www.patreon.com
cache-control: public, max-age=31536000
content-disposition: attachment; filename="FC 25 LE v25.3.5.zip"; filename*=utf-8''FC%2025%20LE%20v25.3.5.zip
etag: "dfbc2fa5b8c2e2c82bafe8088f3e3cc2"
expires: Fri, 08 May 2026 09:35:01 GMT
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, Content-Length
timing-allow-origin: https://patreon.com, https://www.patreon.com, https://*.patreondev.com
x-patreon-sha: 4fd9edb6b537b91f0173134b1e40ca4d32b77aad
x-patreon-uuid: 6ded548c-7eaa-5b11-a811-2884491957b2
set-cookie: __cf_bm=Uc8l5pLDi3Ct9uwLO4h05FWq49wle3VL3nSttOqyUwk-1746696901-1.0.1.1-ee.TbrYX9PjiSFcNnM58jitzeFsnvxX3TfHl5pdlcjV5_3j0OnU6CfQ63jPPnrdTe5akb8gC85l9J_Sn8oxeeVEtdLXTA0_s9ZFpRY3OeDc; path=/; expires=Thu, 08-May-25 10:05:01 GMT; domain=.patreonusercontent.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AB8TZGtK4HqG8MOgM3R1TRBmJbh%2Ff6QSZuiKPSCr%2F2qg45l3rtHDlj2JdP%2FwebtwmAKAmNoB1sE5o3gCGzssdPLumIsHyWxNvwbNxhxWAn94e4LU9rnrZ23%2F0uyjncFi3CxZS4bNvRR7rWJS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (96)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers