Report - dl1.gamedl.ru/download/3q4haa40pzpsrhq3btiikmscxy5hhb3a/H1/62e2419421ee63d288029c48e70633d8acbc35c13b418f93e3a093ec223eed31/907156/NFSU2-ModTools-v1.2.zip

Report Overview

Visited public
2025-04-27 06:10:17
Tags
URL
dl1.gamedl.ru/download/3q4haa40pzpsrhq3btiikmscxy5hhb3a/H1/62e2419421ee63d288029c48e70633d8acbc35c13b418f93e3a093ec223eed31/907156/NFSU2-ModTools-v1.2.zip
Finishing URL
about:privatebrowsing
IP / ASN
212.42.63.221
#50313 Teslatel LLC
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dl1.gamedl.ru	unknown	2007-05-07	2015-04-16	2025-04-22	622 B	1.3 MB	212.42.63.221

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
dl1.gamedl.ru/download/3q4haa40pzpsrhq3btiikmscxy5hhb3a/H1/62e2419421ee63d288029c48e70633d8acbc35c13b418f93e3a093ec223eed31/907156/NFSU2-ModTools-v1.2.zip
IP
212.42.63.221
ASN
#50313 Teslatel LLC

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
1.3 MB (1286676 bytes)
Hash
aa47bf8322d5da3dbaa55788b9d3a64e
eb502df047aa43ec6d6ba20742feef8d4fd1e7fb
62e2419421ee63d288029c48e70633d8acbc35c13b418f93e3a093ec223eed31

Archive (26)

Filename

Md5

File type

manufacturer logos.txt

820b6e57084eeeb3fde065b290d3195d

ASCII text, with CRLF line terminators

materials.txt

967bb407a5a35e70a6c6e3651bf00e79

ASCII text, with CRLF line terminators

mp.txt

eb1fb36b8f6af9be1b1aa04b23984020

ASCII text, with CRLF line terminators

NFS-CfgEd.exe

5dbabe0327cab84ef4bd667b3f8ab58e

PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections

nfstc.exe

f54ad7731b48e46a8e95433c1ebc6b8e

PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections

nfsu2gc.exe

001cb6463bfaab456f1adc5587608758

PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections

parts.txt

abbdc347dfec6cf906a9004883ca93a8

ASCII text, with CRLF line terminators

ReadMe.txt

b69fbda43a1002ed73728e432a9d8dad

ASCII text, with CRLF line terminators

BMW_M3.obj

40d012f29bb55296dec3b0cad6b728fb

ASCII text, with CRLF line terminators

BMW_M3.z3d

91a90f53d122f9c35b382d9b646a5f40

data

link.txt

0b7c483355806155f4c239fa854690e4

ASCII text, with CRLF line terminators

matlist.txt

e920fb8cfc2113d9d10efaeaefb414c4

ASCII text, with CRLF line terminators

miata.u2car

5fb73a6d71174e1d1749ae2ab5dabdfc

data

mpoints.txt

1b5a594fc7dd1e4ba49b0f312c634f99

ASCII text, with CRLF line terminators

NFS-CfgInstaller.exe

476b52d940e86a45588c4326fb421c22

PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections

Notes.txt

6cbb20ce5939958298e82b0fb9157fed

ASCII text, with no line terminators

MIATA_BADGING.dds

26217cbc82390cf4e0e23cdcd8b2e6ba

Microsoft DirectDraw Surface (DDS): 128 x 128, compressed using DX10

MIATA_INTERIOR.dds

fce538f7b16037005b28535051b9dbb9

Microsoft DirectDraw Surface (DDS): 512 x 512, compressed using DX10

MIATA_MISC.dds

211886de7a7c7eed252a04768c5c7c4a

Microsoft DirectDraw Surface (DDS): 256 x 256, compressed using DX10

MIATA_NEON.dds

7882c751c91d0f4b5d67613c3ea544cf

Microsoft DirectDraw Surface (DDS): 128 x 64, 256-bit color, compressed using DX10

MIATA_SHADOWFE.dds

80680195f9648d6cf4cb136c80ac34cd

Microsoft DirectDraw Surface (DDS): 128 x 64, compressed using DX10

MIATA_SHADOWIG.dds

b9f8cec4493121c94991177c0f3bd37d

Microsoft DirectDraw Surface (DDS): 128 x 64, compressed using DX10

MIATA_TIRE.dds

8eba0197fc540376e75dcc0cc5da3522

Microsoft DirectDraw Surface (DDS): 128 x 128, compressed using DX10

1-1091-P8-nfs_u2_mw-MIATA_NFSU2.dds

5ce78a06de132e8f64678ec97836d3b4

Microsoft DirectDraw Surface (DDS): 512 x 512, 8-bit color

1-761-P8-nfs_u2_mw-MIATA_NFSU2_MASK.dds

be5bc4964a5cdecaaef678b3a80e39af

Microsoft DirectDraw Surface (DDS): 512 x 512, 8-bit color

�� ᪠砭 � ᠩ�� PlayGround.ru.url

05925bdb80ecfaae42e0995c1d7b1445

MS Windows 95 Internet shortcut text (URL=<http://www.playground.ru/files/need_for_speed_underground_2_mod_tools_v_1_2-57156/?src=urlfile>), ASCII text

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 26/59

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

dl1.gamedl.ru/download/3q4haa40pzpsrhq3btiikmscxy5hhb3a/H1/62e2419421ee63d288029c48e70633d8acbc35c13b418f93e3a093ec223eed31/907156/NFSU2-ModTools-v1.2.zip

212.42.63.221

200 OK

1.3 MB

URL User Request GET
dl1.gamedl.ru/download/3q4haa40pzpsrhq3btiikmscxy5hhb3a/H1/62e2419421ee63d288029c48e70633d8acbc35c13b418f93e3a093ec223eed31/907156/NFSU2-ModTools-v1.2.zip
IP
212.42.63.221:443
ASN
#50313 Teslatel LLC

Certificate
IssuerLet's Encrypt
Subjectvideo.playground.ru
FingerprintF2:15:A1:92:28:26:39:ED:58:FD:55:55:EC:02:EC:F2:34:93:C3:53
ValidityFri, 28 Feb 2025 04:37:07 GMT - Thu, 29 May 2025 04:37:06 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
1.3 MB (1286676 bytes)
Hash
aa47bf8322d5da3dbaa55788b9d3a64e
eb502df047aa43ec6d6ba20742feef8d4fd1e7fb
62e2419421ee63d288029c48e70633d8acbc35c13b418f93e3a093ec223eed31

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 26/59

HTTP Headers

GET /download/3q4haa40pzpsrhq3btiikmscxy5hhb3a/H1/62e2419421ee63d288029c48e70633d8acbc35c13b418f93e3a093ec223eed31/907156/NFSU2-ModTools-v1.2.zip HTTP/1.1
Host: dl1.gamedl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Sun, 27 Apr 2025 06:09:44 GMT
Content-Type: application/octet-stream
Content-Length: 1286676
Connection: keep-alive
Last-Modified: Thu, 29 Nov 2012 09:29:23 GMT
Accept-Ranges: bytes

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (26)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers