Report - tencent-android.cdn.flydigi.com/PC/MOD/Cyberpunk_Mod

Report Overview

Submitted URL
tencent-android.cdn.flydigi.com/PC/MOD/Cyberpunk_Mod_2022090802.zip
IP
42.177.83.63
ASN
#4837 CHINA UNICOM China169 Backbone
Submitted
2024-04-16 22:03:36
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
status.rapidssl.com	6946	2002-04-05	2018-06-15	2024-04-16	331 B	735 B	192.229.221.95
tencent-android.cdn.flydigi.com	unknown	2008-07-11	2021-12-18	2024-04-13	521 B	5.2 MB	116.153.46.40

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
tencent-android.cdn.flydigi.com/PC/MOD/Cyberpunk_Mod_2022090802.zip
IP
116.153.46.40
ASN
#4837 CHINA UNICOM China169 Backbone

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
5.2 MB (5157675 bytes)
Hash
e4e1e8b57f5acc118da805ed6600cf65
e786dd66196dd623b75a37ef8352bd0f94d3045c
3d97914c103a62650777133cc4655aa7a14bba42fa1017ad84335190ea1fc71b

Archive (106)

Filename

Md5

File type

dualsense.archive

2b8a67d915d8022b01ed5bdf4a405941

data

dualsense.archive.xl

966b27043aa4b8166409165e04aa871b

ASCII text, with CRLF line terminators

d3d11.dll

d90bdfcb24da0a93a71903abbb332a78

PE32+ executable (DLL) (console) x86-64, for MS Windows, 8 sections

global.ini

c044b277b9a24f95739d17868ecd2527

ASCII text, with CRLF line terminators

LICENSE

33e41ee247da35b99c5b273bf3d8dcdf

ASCII text, with CRLF line terminators

cyber_engine_tweaks.asi

fd1892e9783ecc85b7cabd98286abf9f

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

CyberpunkMod.exe

4c2ad9ac0c266d58da93fe569312532f

PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

CyberpunkMod.exe.config

15c8c4ba1aa574c0c00fd45bb9cce1ab

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

CyberpunkMod.pdb

0b64099096a9ee7832817f80d0481916

MSVC program database ver 7.00, 512*63 bytes

DualSenseResource.dll

b932acdbabe6521bcbf6112581c68cea

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DualSenseResource.pdb

5c4214e91349dc7450b2d1e3bf1b2bfa

MSVC program database ver 7.00, 512*39 bytes

DualSenseXConfig.txt

f3dba656f80bf96057363d33781d4343

ASCII text, with CRLF line terminators

INIFileParser.dll

2e77f841dbf271fd1ffc460bfd87a1d5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

INIFileParser.xml

9e1e82310f8566a90f561c8cfd437b04

XML 1.0 document, ASCII text

Newtonsoft.Json.dll

081d9558bbb7adce142da153b2d5577a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Newtonsoft.Json.xml

f414b3f68fe7c4f094b8fe8382f858c9

XML 1.0 document, ASCII text, with CRLF line terminators

trigger.ini

2f41606c4b37ea75c234f8b450c7b2d0

Generic INItialization configuration [Choppy]

version.txt

cfcd208495d565ef66e7dff9f98764da

very short file (no magic)

init.lua

145e82ac31802f890a592d033f191acf

ASCII text, with CRLF line terminators

Cron.lua

d9335107e3f43d7f08dd21f6c27d7703

ASCII text, with CRLF line terminators

GameSession.lua

8c9aefe6d3375209fbdaf908f78f4828

ASCII text, with CRLF line terminators

GameSettings.lua

5c3df8ef9f60a992de3f711d4a345427

ASCII text

GameUI.lua

9d19a629797f4038afe1f55fd252cb83

JavaScript source, ASCII text, with CRLF line terminators

observers.lua

a5829320321519b3bd3983c2e20308d6

JavaScript source, ASCII text, with CRLF line terminators

Braindance.lua

4dcb26f7212b0db2cbb8a22c83130c7b

ASCII text, with CRLF line terminators

Resistance.lua

8e4ac4cae5ae8b670739993a90200826

ASCII text, with CRLF line terminators

Scanner.lua

b318a44041e79ce2f297c8f63ed89f57

ASCII text, with CRLF line terminators

Health.lua

041a1de02bd8c0622ae13dd37501aacb

ASCII text, with CRLF line terminators

WantedLevel.lua

23671ff2bd5c0652acc4fd2db277a086

ASCII text, with CRLF line terminators

CheckDataFromDSX.lua

95c251d21278e302e9d8d93912621196

ASCII text, with CRLF line terminators

CheckRGB.lua

9b429a12046e40bee6b3cf84956469f2

ASCII text, with CRLF line terminators

GetFrequency.lua

e32587cd65783e29e45781208d723dbe

ASCII text, with CRLF line terminators

GetState.lua

bc0faf2fe8d95fd57430d1aa94b8a342

ASCII text, with CRLF line terminators

GetTransmissionChange.lua

d55f505eefec2475276248f97e5036e0

ASCII text, with CRLF line terminators

GetVehicleSpeed.lua

7f710b012049ec3aaa2b66267d9f4b93

ASCII text, with CRLF line terminators

GetWantedLevel.lua

8ae8f02770bad2ed28dd355e84d5557a

ASCII text, with CRLF line terminators

HandleZoneChange.lua

968fb69a86170e1d1a4d3c236a5c0df7

ASCII text, with CRLF line terminators

IsInMenu.lua

c82b1c233621a2e5be4ba11ec3a56fa4

ASCII text, with CRLF line terminators

IsMagazineEmpty.lua

a19a01e8ff458a50b978a8a940d575e1

ASCII text, with CRLF line terminators

LoadFolder.lua

3eb004628bb0464a75d3a2c9ecfdeb56

ASCII text, with CRLF line terminators

ManageSettings.lua

1de86bd9608db0be85a57e50f5bc2d60

ASCII text, with CRLF line terminators

PulseLED.lua

ae3c88885579e0e309f7c23338867c63

ASCII text, with CRLF line terminators

SaveFile.lua

278ea6c9ba1278b55a4adc816279254f

ASCII text, with CRLF line terminators

Set.lua

b9808d2ce8b18920c440d28abe254179

ASCII text, with CRLF line terminators

SetupNativeSettings.lua

72bf8bc4e47668a970f83c37bc587203

ASCII text, with CRLF line terminators

ShowBatteryLevel.lua

18c8a395b671646eb86462a6016191d2

ASCII text, with CRLF line terminators

Warn.lua

8af83d0560dc4c60a6de8298cf76d96a

ASCII text, with CRLF line terminators

default.lua

6e2d0c38dfe949890afaeac922cf0ffb

ASCII text, with CRLF line terminators

AllDisabled.lua

82854dc1c17776f192f61f9273d2472d

ASCII text, with CRLF line terminators

LTChoppyRTChoppy.lua

15bff9c820a39ab8d552bc2566580cb1

ASCII text, with CRLF line terminators

LTGallopingRTGalloping.lua

fb09fa4feafb597506840c9cb3cc8a8a

ASCII text, with CRLF line terminators

LTHardestRTHardest.lua

90c7185ac9a01957e94dde96004de6c6

ASCII text, with CRLF line terminators

LTMachineRTMachine.lua

b6209866a20c38bd5914b843bb4a4245

ASCII text, with CRLF line terminators

LTResistanceRTGalloping.lua

e64b644ba59e49b838d32509d75b02a6

ASCII text, with CRLF line terminators

LTResistanceRTMachine.lua

dfa9e0e68edbb4eb4b474074b6727da1

ASCII text, with CRLF line terminators

LTResistanceRTResistance.lua

b1dad6b5211aaa17e4084470bc8ad48c

ASCII text, with CRLF line terminators

LTRigidRTRigid.lua

6dea591c6260581a48684e53af0c314c

ASCII text, with CRLF line terminators

vehicleBikeBaseObject.lua

99bb54a46e2610f22ac42c4af5b2eeea

ASCII text, with CRLF line terminators

vehicleCarBaseObject.lua

0957a9aae75fe0d602a012d58cdaac5f

ASCII text, with CRLF line terminators

vehicleTankBaseObject.lua

d1e3d5aeb349be10905916142ecd2a7c

ASCII text, with CRLF line terminators

Cyb_Launcher.lua

3cfb808d59be2503217f5b7cfca3633b

ASCII text, with CRLF line terminators

Cyb_MantisBlades.lua

a081e9422af383862730f229b2ae75f0

ASCII text, with CRLF line terminators

Cyb_NanoWires.lua

be91d9fc96d8ba2c9aa02004c23ac346

ASCII text, with CRLF line terminators

Cyb_StrongArms.lua

ce94139918fb9f69928eef687b756c3f

ASCII text, with CRLF line terminators

default.lua

d4b00c55a635cef27c86f7a70e2d0a66

ASCII text, with CRLF line terminators

Wea_Fists.lua

7514065367bc87ef39f48254cf183634

ASCII text, with CRLF line terminators

Wea_Hammer.lua

f1aaf1b3d861bfecab5e68c623ba7802

ASCII text, with CRLF line terminators

Wea_Handgun.lua

a0b938a0ce09fa1be8441a51864e7077

ASCII text, with CRLF line terminators

Wea_HeavyMachineGun.lua

c70b26e76bb5548e953749efb253159c

ASCII text, with CRLF line terminators

Wea_Katana.lua

a5c12a8acf40d5b6ab55fe5531317844

ASCII text, with CRLF line terminators

Wea_Knife.lua

52590d33c837732840f0d06dd3015ca9

ASCII text, with CRLF line terminators

Wea_LightMachineGun.lua

30ac059160f2814c656d846f121c44ce

ASCII text, with CRLF line terminators

Wea_LongBlade.lua

4dbebe18a4278bfdd1d8adf118ba2949

ASCII text, with CRLF line terminators

Wea_OneHandedClub.lua

22ed2f33f17d126eb6d8a6a112c3fe29

ASCII text, with CRLF line terminators

Wea_PrecisionRifle.lua

a6ac98625e7616963385c71fe770609a

ASCII text, with CRLF line terminators

Wea_Revolver.lua

4f0f9fbeb069bc7b887cd4bbc2cd7874

ASCII text, with CRLF line terminators

Wea_Rifle.lua

22b7e845052346d4396f5585b488685e

ASCII text, with CRLF line terminators

Wea_Shotgun.lua

8d5b19f137ef0af0be8baab5932c8f83

ASCII text, with CRLF line terminators

Wea_ShotgunDual.lua

14bb78f119ea25092bb7c1c30f6fc029

ASCII text, with CRLF line terminators

Wea_SniperRifle.lua

ada3d3cdc9091c29e913b87882dcb30e

ASCII text, with CRLF line terminators

Wea_SubmachineGun.lua

e2f7f155492ba140bdaf2017e649e90f

ASCII text, with CRLF line terminators

Wea_TwoHandedClub.lua

45ec28b145fd192a80a32ca15acd20d5

ASCII text, with CRLF line terminators

init.lua_deprecated

4fae4b3847cecd56957171da13124f8e

ASCII text, with CRLF line terminators

THIS FOLDER IS NO LONGER USED.txt

63a006242e914e484f81dd807e7ce107

ASCII text, with no line terminators

Cron.lua

172f12af8b5a27b6947a30dc7c0684c6

ASCII text

EventProxy.lua

7dfd6f7224ff90d95f4e838e50047318

JavaScript source, ASCII text

init.lua

0ed3e56782a10a55ed05e96a079a2fc7

JavaScript source, ASCII text

Ref.lua

3c376c279bf299907a113fb639f1d40b

ASCII text

UIButton.lua

e12f944ae605eb8d16d8f21df57b1b5c

ASCII text

autoexec.lua

e7edddaaac15d271d18b34c61517c888

ASCII text, with CRLF line terminators

json.lua

a6f4c77566eafcc87009072f11f16a49

ASCII text, with CRLF line terminators

LICENSE

f0ab9756bdc147013bc6b078a8888f14

ASCII text, with CRLF line terminators

README.md

74ab493dce25ad4345bdb0e35de3c398

ASCII text, with CRLF line terminators

ThirdParty_LICENSES

5f248c515af492c009f87c59478fc8ae

Unicode text, UTF-8 text, with very long lines (460), with CRLF line terminators

version.dll

e571efb75da4dcf7e545fc60495592f5

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections

scripts.ini

7b8e35dbada0f834b88ee976ca789f76

ASCII text, with CRLF line terminators

scc.exe

e854de66c0cdef52a99dbed4735916ef

PE32+ executable (console) x86-64, for MS Windows, 6 sections

mod.version

abc96ddfc2f93ad563dfc73dc14971cf

ASCII text, with no line terminators

Native Settings Widget.reds

44c8e9daea6d1c26a57c445663ff3e44

ASCII text, with CRLF line terminators

redscript.toml

9db83bbe72eff54422e3382be7bde2e1

ASCII text, with CRLF line terminators

.DS_Store

d8aae2eccaaa3b1cccc64ef5aafbaa8d

Apple Desktop Services Store

LICENSE.txt

61ce38ba9eaf014edb0991e771218604

ASCII text, with CRLF line terminators

ArchiveXL.dll

2ac948cba3e64823f141664fc4d76a93

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

DualSense Support.dll

7a699447b4f9665bd9c7fa0b7822442b

PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections

RED4ext.dll

2ad172e6bc04f9738d94809bff050240

PE32+ executable (DLL) (console) x86-64, for MS Windows, 11 sections

THIRD_PARTY_LICENSES.txt

aad63133ad20aac9d95d89082fa76873

ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 1/65

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

status.rapidssl.com/

192.229.221.95

471 B

URL
status.rapidssl.com/
IP
192.229.221.95:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
b465c00e9c6c427a6351a65a70f3df4c
4e19facba9f85a8d0dec86e6887323b239c5d1a5
caf610918ac6f454c44c0b31d86259e92752f6aca7f34e71421709c1ee7cf1d4

HTTP Headers

POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4475
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Tue, 16 Apr 2024 22:03:08 GMT
Last-Modified: Tue, 16 Apr 2024 20:48:33 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471

tencent-android.cdn.flydigi.com/PC/MOD/Cyberpunk_Mod_2022090802.zip

116.153.46.40

200 OK

5.2 MB

URL User Request GET HTTP/1.1
tencent-android.cdn.flydigi.com/PC/MOD/Cyberpunk_Mod_2022090802.zip
IP
116.153.46.40:443
ASN
#4837 CHINA UNICOM China169 Backbone

Certificate
IssuerDigiCert Inc
Subject*.cdn.flydigi.com
FingerprintDE:F7:67:84:6E:C4:3E:7F:1E:C8:3B:21:13:12:52:6C:A9:8B:D1:3F
ValidityTue, 29 Aug 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
5.2 MB (5157675 bytes)
Hash
e4e1e8b57f5acc118da805ed6600cf65
e786dd66196dd623b75a37ef8352bd0f94d3045c
3d97914c103a62650777133cc4655aa7a14bba42fa1017ad84335190ea1fc71b

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/65

HTTP Headers

GET /PC/MOD/Cyberpunk_Mod_2022090802.zip HTTP/1.1
Host: tencent-android.cdn.flydigi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Last-Modified: Thu, 08 Sep 2022 18:24:31 GMT
Etag: "e4e1e8b57f5acc118da805ed6600cf65"
Content-Type: application/zip
Date: Wed, 20 Mar 2024 18:24:26 GMT
Server: tencent-cos
x-cos-hash-crc64ecma: 17031891147112588210
x-cos-request-id: NjVmYjI5ZDlfY2VlZjcxMDlfNTMwY19hNGM0MWRh
Content-Length: 5157675
Accept-Ranges: bytes
X-NWS-LOG-UUID: 12173686996242511797
Connection: keep-alive
X-Cache-Lookup: Cache Hit

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (106)

Detections

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers