Report - c10.patreonusercontent.com/4/patreon-media/p/post/112863220/d7ff290dfb6541dcbeefb45c8790b9ee/eyJhIjoxLCJwIjoxfQ==/1.zip?token-hash=FZZhLWmFX5ukWXKIbpIp0uwNDH8x7KSRImmzJN1vNJE=&token-time=1747094400

Report Overview

Visited public
2025-05-09 21:41:42
Tags
URL
c10.patreonusercontent.com/4/patreon-media/p/post/112863220/d7ff290dfb6541dcbeefb45c8790b9ee/eyJhIjoxLCJwIjoxfQ==/1.zip?token-hash=FZZhLWmFX5ukWXKIbpIp0uwNDH8x7KSRImmzJN1vNJE=&token-time=1747094400
Finishing URL
about:privatebrowsing
IP / ASN
104.18.70.106
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
c10.patreonusercontent.com	39060	2017-04-06	2017-08-23	2025-05-04	665 B	3.2 MB	104.18.70.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
c10.patreonusercontent.com/4/patreon-media/p/post/112863220/d7ff290dfb6541dcbeefb45c8790b9ee/eyJhIjoxLCJwIjoxfQ==/1.zip?token-hash=FZZhLWmFX5ukWXKIbpIp0uwNDH8x7KSRImmzJN1vNJE=&token-time=1747094400
IP
104.18.70.106
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
3.2 MB (3233660 bytes)
Hash
e8ed6686f231c76898872d993a88c297
333481925546b62429a134c6c146fbdcfb0960f8
e8f1a46acb6148ef4a7360a989ad169edca8cfb540670ddf1d43e36fb5c15054

Archive (88)

Filename

Md5

File type

changelog.txt

9ccddfa6ab05f926accd9494fd88d477

ASCII text, with CRLF line terminators

FCLiveEditor.DLL

10c7de1b33e3fd5d26910e5f6ba2b51b

PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections

Launcher.exe

25564292c1ec8767cd58b1b5025e2e01

PE32+ executable (GUI) x86-64, for MS Windows, 6 sections

LiveEditorClearRegistry.reg

8d2c6d407506d54b05465a18b4cf91ff

Unicode text, UTF-16, little-endian text, with CRLF line terminators

legacy_structure.txt

165c6c306fe1082ba17a7ed978492e35

ASCII text, with CRLF line terminators

EAAntiCheat.GameServiceLauncher.exe

db9507019006ea934bd18d464aa52c69

PE32+ executable (console) x86-64, for MS Windows, 6 sections

Benzema Regen.json

e9d86a0ac3816cfd5b3963f59aa85ae1

JSON text data

CR7 Regen.json

efb481496cfe7b411e8cc9c26fc7c4e4

JSON text data

Free Agents.json

3cb5b3755ccdc1716c9c356fb3fb476b

JSON text data

Generated Players.json

cc69a7bd6475597475a11719023b6b00

JSON text data

Messi Regen.json

7ae584394df9a5fa6c71e6b2a60c1713

JSON text data

Retiring Players.json

2480604351b73adee85ad77dc60f4883

JSON text data

RL9 Regen.json

3a3b27ce5e2d5a6ccc07239f17985e26

JSON text data

localize.json

009786e04487c8520a534584066be9f7

JSON text data

DOC.MD

e5167e3cceaae1b1886da40a43894870

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

live_editor.lua

c12e2264aa96cd76c1a1ad633c3db9ec

ASCII text, with CRLF line terminators

README.txt

d697257af9dba9ef92a02b17fa94bc22

ASCII text, with CRLF line terminators

main.lua

d13c8d8e94dc8a8a9ed798c2f0071ea1

ASCII text, with CRLF line terminators

temp_doc_draft.md

1e8078ae3613bc4c22ad55983446cfb4

ASCII text, with CRLF line terminators

aardvark_manager.lua

9f6f784e71518529834dd84fd8945d8c

ASCII text, with CRLF line terminators

consts.lua

3bd4fde4256d41bfe36dc9ea184a2025

ASCII text, with CRLF line terminators

enums.lua

1d0335dbf662fd6787022e4005a9af3c

ASCII text, with CRLF line terminators

fcecareermodeusermanager.lua

cb6384a6fff5879bce0437598bd98bab

Ruby script, ASCII text, with CRLF line terminators

helpers.lua

705470978c9bd52c0a6ced673f364578

Ruby script, ASCII text, with CRLF line terminators

managers.lua

d41d8cd98f00b204e9800998ecf8427e

common.lua

63ae652396e83e7007482a13197017c9

ASCII text, with CRLF line terminators

consts.lua

3422888ab59b3cc96325c3029bec4ca3

ASCII text, with CRLF line terminators

date.lua

c77746069621e1e36932ab94c6d853ba

Ruby script, ASCII text, with CRLF line terminators

live_editor.lua

49eb14ba4c7cb9d9eec655ecd0ec27db

ASCII text, with CRLF line terminators

logger.lua

36f3185f5c948f4a90f00222e54f4c32

ASCII text, with CRLF line terminators

memory.lua

b963cee9a62e171b3dd98409220a1f2d

ASCII text, with CRLF line terminators

player.lua

92dee7d654dc824d09fd87495c3bb440

ASCII text, with CRLF line terminators

players_manager.lua

5cb2d3ade96583c09c929c6839c247ef

ASCII text, with CRLF line terminators

json.lua

e0491981c91d9f947de1c1feb83bd83a

ASCII text, with CRLF line terminators

gp_attribulator_manager.lua

1fb61d6b58055ccc0c135053a3ecb202

ASCII text, with CRLF line terminators

consts.lua

de732cc8a28474f7d1e7b5222b303b18

ASCII text, with CRLF line terminators

helpers.lua

a3bb128b94428565d995900f0df5c630

Ruby script, ASCII text, with CRLF line terminators

playstyles_enum.lua

92bd7b69eea786fb68bcadf3908316d8

ASCII text, with CRLF line terminators

enums.lua

7eeb238c0c68d029d7c54630dd104de7

ASCII text, with CRLF line terminators

db.lua

873a7abd7e1d05aa112e02c15dfd1438

Ruby script, ASCII text, with CRLF line terminators

field.lua

9fecb88299931033d219b939d1135dc0

ASCII text, with CRLF line terminators

table.lua

9049392da284b308b8c99ae859f67ee8

ASCII text, with CRLF line terminators

aardvark_manager_test.lua

e4f36f89cb8aa1f8ba3d34a1a3cab5be

ASCII text, with CRLF line terminators

event_handlers_test.lua

8c5db88318cb10cb67fb4db70fdc8b75

ASCII text, with CRLF line terminators

plugins.lua

2fdb61a0bbf827a2e0e68bf6230be101

Ruby script, ASCII text, with CRLF line terminators

t3db.lua

c02918fc3d3695ea06a08011dfea62e0

ASCII text, with CRLF line terminators

tests.lua

ebaf5b38f3821605b443d69d2928bf0c

ASCII text, with CRLF line terminators

timing.lua

5e79ec15f67d1f8e71812e9c447d3e76

ASCII text, with CRLF line terminators

1ovr_99pot.lua

2e60de4440ec786ee98c84290c95947b

Ruby script, ASCII text, with CRLF line terminators

99ovr_99pot.lua

528caa3dafb4a3e8c62d4edd12496f2b

Ruby script, ASCII text, with CRLF line terminators

99ovr_99pot_in_given_team.lua

ea659de5eeeac84c1fd4db42f92a13b1

Ruby script, ASCII text, with CRLF line terminators

99pot_in_given_team.lua

26e4dfcabe986aa30f460b65844ca66a

Ruby script, ASCII text, with CRLF line terminators

auto_import_gameplay.lua

8e0075829b97be0b703c0674650bbe14

ASCII text, with CRLF line terminators

auto_max_user_team_fitness.lua

141f9767526c358eba8a6c6d873a4684

Ruby script, ASCII text, with CRLF line terminators

auto_max_user_team_form.lua

fa85dc13f142347cd348624bb82b9cb5

Ruby script, ASCII text, with CRLF line terminators

auto_max_user_team_form_morale_sharpness.lua

e091330cb44ec5a50e079b53e633fbbc

Ruby script, ASCII text, with CRLF line terminators

auto_max_user_team_morale.lua

f2ee8f92f80380e590dc51781b7226e3

Ruby script, ASCII text, with CRLF line terminators

auto_max_user_team_sharpness.lua

5c60b6637a8345a64f498e481a7a2bfc

Ruby script, ASCII text, with CRLF line terminators

auto_max_vpro_fitness.lua

bc7e12ec67f0728bc9e7fa7176ab13e3

Ruby script, ASCII text, with CRLF line terminators

custom_headassetid_to_playerid.lua

6e6749dc65106b9cd26d5b60752ed03c

Ruby script, ASCII text, with CRLF line terminators

custom_tattoos_to_playerid.lua

5b5b59f2a88feb2c6ebb4767aa59c1b2

Ruby script, ASCII text, with CRLF line terminators

delete_generated_players.lua

dc40900b48340faf09a77507268e86cb

ASCII text, with CRLF line terminators

export_season_stats.lua

85793983d0f57943d5863e69ed169879

Ruby script, ASCII text, with CRLF line terminators

export_transfer_history.lua

42d77d7c522b3f51b9b7ba9e8e73a8f2

Ruby script, ASCII text, with CRLF line terminators

extend_cpu_players_contracts.lua

739b57a45f97c29cb662f149da8bed9b

Ruby script, ASCII text, with CRLF line terminators

extend_user_team_players_contracts.lua

27efa24d6b8309432c663ec604251f65

Ruby script, ASCII text, with CRLF line terminators

find_teams_no_gk.lua

bd58bd98be19a00fec60d2ccfdea6b00

ASCII text, with CRLF line terminators

fix_players_headmodels.lua

d96f7e3aec9079987a0085645a029f2b

Ruby script, ASCII text, with CRLF line terminators

fix_vpro_nationality.lua

7d3c228c596b59b24db99a84facd544d

Ruby script, ASCII text, with CRLF line terminators

generate_minifaces.lua

52e3053be8f6a50d9c538a6c8737ec11

Ruby script, ASCII text, with CRLF line terminators

generate_minifaces_for_players_with_realface.lua

9fdd93d811f007a0c449363227f795c9

Ruby script, ASCII text, with CRLF line terminators

generate_minifaces_user_team.lua

06b1434d59f73237bcca9b64cda2e5e1

Ruby script, ASCII text, with CRLF line terminators

is_retiring=0.lua

933c31dc2586d16fb48657a5ca166624

ASCII text, with CRLF line terminators

is_retiring=1.lua

754c4c4974c0a76dd3c177c97039f6f5

ASCII text, with CRLF line terminators

list_players.lua

e226cc4db95f89d8c9bde95c82a51d12

ASCII text, with CRLF line terminators

mass_edit_age.lua

3bbc8cde8ad597a89030db6780a3c51c

Ruby script, ASCII text, with CRLF line terminators

mass_edit_squadrole.lua

599c8cdc57023e46cee8bf08d5c3cd96

Ruby script, ASCII text, with CRLF line terminators

medium_socklenghtcode.lua

d6d9d59488954ec21a185b2fb1a02984

ASCII text, with CRLF line terminators

modifier=0.lua

e7e918f6741e6e224ca50faa3adccc9d

ASCII text, with CRLF line terminators

pap_all_playstyles.lua

93f4504b08ae26381107425b24d65a99

Ruby script, ASCII text, with CRLF line terminators

print_team_jersey_numbers.lua

ef1532f1bf6ba78c5b099b938ba93af7

ASCII text, with CRLF line terminators

small_squad_find.lua

6b0922d2ef0aec16225a907bcd0461ff

ASCII text, with CRLF line terminators

track_cm_events.lua

2d6921f25c1e7936bbb6dabe0c1f7a8b

Ruby script, ASCII text, with CRLF line terminators

unlock_boots.lua

e9b8ec45460fc131ae45ef8679ae7d34

ASCII text, with CRLF line terminators

unlock_mgr_clothes.lua

7ce3bc6277ba626f698e1e34f6121562

ASCII text, with CRLF line terminators

untuck_shirts.lua

59446c6889eb8c8a304fbdf1627ab18a

ASCII text, with CRLF line terminators

vpro_99ovr.lua

a6c12bb3d64ed5cc1be6914ef03b47bf

Ruby script, ASCII text, with CRLF line terminators

vpro_always_starter.lua

4db3f9d6652ea7bf6454992da8e1f63f

Ruby script, ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/67

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

c10.patreonusercontent.com/4/patreon-media/p/post/112863220/d7ff290dfb6541dcbeefb45c8790b9ee/eyJhIjoxLCJwIjoxfQ==/1.zip?token-hash=FZZhLWmFX5ukWXKIbpIp0uwNDH8x7KSRImmzJN1vNJE=&token-time=1747094400

104.18.70.106

200 OK

3.2 MB

URL User Request GET
c10.patreonusercontent.com/4/patreon-media/p/post/112863220/d7ff290dfb6541dcbeefb45c8790b9ee/eyJhIjoxLCJwIjoxfQ==/1.zip?token-hash=FZZhLWmFX5ukWXKIbpIp0uwNDH8x7KSRImmzJN1vNJE=&token-time=1747094400
IP
104.18.70.106:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectpatreonusercontent.com
FingerprintEE:FF:52:01:D0:0E:B0:98:15:07:9B:17:F8:02:BD:8B:0D:8E:86:8F
ValidityMon, 24 Mar 2025 06:45:56 GMT - Sun, 22 Jun 2025 07:45:34 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
3.2 MB (3233660 bytes)
Hash
e8ed6686f231c76898872d993a88c297
333481925546b62429a134c6c146fbdcfb0960f8
e8f1a46acb6148ef4a7360a989ad169edca8cfb540670ddf1d43e36fb5c15054

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/67

HTTP Headers

GET /4/patreon-media/p/post/112863220/d7ff290dfb6541dcbeefb45c8790b9ee/eyJhIjoxLCJwIjoxfQ==/1.zip?token-hash=FZZhLWmFX5ukWXKIbpIp0uwNDH8x7KSRImmzJN1vNJE=&token-time=1747094400 HTTP/1.1
Host: c10.patreonusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 09 May 2025 21:41:09 GMT
content-type: application/zip
content-length: 3233660
cf-ray: 93d45bf718011c12-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://www.patreon.com
cache-control: public, max-age=31536000
content-disposition: attachment; filename="FC 25 LE v25.1.0.zip"; filename*=utf-8''FC%2025%20LE%20v25.1.0.zip
etag: "e8ed6686f231c76898872d993a88c297"
expires: Sat, 09 May 2026 21:41:08 GMT
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, Content-Length
timing-allow-origin: https://patreon.com, https://www.patreon.com, https://*.patreondev.com
x-patreon-sha: 85e57446431c3586d22727bc0a5338b11043262e
x-patreon-uuid: f21e6d06-5789-5d36-9cbf-eaddb56fb4bb
set-cookie: __cf_bm=AGY3QbD002fuOP23zfLwVwaXZlZs73DYgbjRDCwG2E4-1746826869-1.0.1.1-EfcrCmfS4mZFca._ONov2zz0.w_zfCc_Bz.Srtid9ABmIYfrp5dXEjKoJ8r971ua7d0kgi.ScuIut5WuhKqvi0myCey0R72GjVDg6l7Uci8; path=/; expires=Fri, 09-May-25 22:11:09 GMT; domain=.patreonusercontent.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5s%2Flj4ffqnTM13Caauioky3q1Lc8mBcJZ8nr6axK10hNCPIGfubBDy6Luc%2BkEPV21HrhTjIlhOJa%2FctAPZkbWFp112jDC79y61gBnPvzHX8dK%2FxVrqIR8Gd8LAtTdFAysvbDA0QJI%2BBeL7SO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (88)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers