Report - cdn.discordapp.com/attachments/1191835192495702138/1201471285763522631/boost_fps_bung_teen_free_by.stefan.zip?ex=662b7f54&is=662a2dd4&hm=de7c97751968ce54e034c16b2167e6c7c51e2eae2230e3191892ab37b6d3711c&

Report Overview

Submitted URL
cdn.discordapp.com/attachments/1191835192495702138/1201471285763522631/boost_fps_bung_teen_free_by.stefan.zip?ex=662b7f54&is=662a2dd4&hm=de7c97751968ce54e034c16b2167e6c7c51e2eae2230e3191892ab37b6d3711c&
IP
162.159.130.233
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-25 16:36:14
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
25

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.discordapp.com	2474	2015-02-26	2015-08-24	2024-04-24	656 B	13 MB	162.159.129.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
cdn.discordapp.com/attachments/1191835192495702138/1201471285763522631/boost_fps_bung_teen_free_by.stefan.zip?ex=662b7f54&is=662a2dd4&hm=de7c97751968ce54e034c16b2167e6c7c51e2eae2230e3191892ab37b6d3711c&
IP
162.159.129.233
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
13 MB (13355444 bytes)
Hash
092a8f5e1e5c48973fb2fed765c96730
49e378f8de8e9e0438c21c4bca95550da1155b6c
8add2102d8ea1e21907a1de22573d6d394d56e2ee25f775dbbe187786fcc0a07

Archive (285)

Filename

Md5

File type

1. READ FIRST.txt

446301a56e833c7c5f14cf289eb6a0c8

ASCII text, with CRLF line terminators

2. NEED HELP.txt

e93c8c4597da16e5573f4f8ff88a3fa3

ASCII text, with no line terminators

3. Pause Updates !.url

b911c55b8659e21b7c5bdd7cf1e35253

Generic INItialization configuration [InternetShortcut]

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

MUST READ.txt

c4774f52155d7113d873a2d55eb9a78f

ASCII text, with CRLF line terminators

Should look like this.jpg

89ca121bc1e8dcca6300a65ec903e045

JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2017 (Macintosh), datetime=2018:03:09 02:26:21], baseline, precision 8, 800x600, components 3

Fan Curve tweak.PNG

9e5702a85421569c7efc4cd006077fce

PNG image data, 333 x 611, 8-bit/color RGBA, non-interlaced

-USEALLAVAILABLECORES.PNG

3fada44ddb8e336dd3afe6942ae68e8a

PNG image data, 1510 x 498, 8-bit/color RGBA, non-interlaced

How you get to the settings.PNG

bab0efdf715078cb594685d5f811d3ff

PNG image data, 624 x 22, 8-bit/color RGBA, non-interlaced

Riot games game user settings.PNG

616724fe27cdae919f34ac78e923da6d

PNG image data, 277 x 192, 8-bit/color RGBA, non-interlaced

Disable Hardware Acceleration, Overlays _ Startup For Apps.png

599305c456930fd1b56b1c81778aa214

PNG image data, 799 x 1827, 8-bit/color RGBA, non-interlaced

Verify And Repair Game.png

fa421e82ee7f12810d158d8d8ff4c2b0

PNG image data, 1725 x 671, 8-bit/color RGBA, non-interlaced

Mouse Movement Recorder.exe

9068be3e543f868007d9dd408d138d22

PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, 7 sections

Recormended Parts that would lower latency and boost frames.txt

9677522e20ee099680fe837272ef7da6

ASCII text, with CRLF line terminators

mouse-rate-test.html

cbf198eaf0e903a33f68dd91589501c5

HTML document, Unicode text, UTF-8 text, with very long lines (64927)

10 Delete _Temp_ Files.lnk

0172d7a6c2810707c634975454c55604

MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Directory, ctime=Fri Jun 18 20:51:11 2021, mtime=Fri Jul 9 08:02:06 2021, atime=Fri Jul 9 08:02:06 2021, length=8192, window=hide

11 Delete Temp Files.lnk

8a417c65b8b4e1bb661f9a3f53409c28

MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Directory, ctime=Sat Dec 7 09:14:52 2019, mtime=Fri Jul 9 07:55:41 2021, atime=Fri Jul 9 07:55:33 2021, length=8192, window=hide

13 Disk Cleanup (Clean Up System Files).lnk

052ebe462113c605dc34896953098c6d

MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Fri Apr 9 13:50:10 2021, mtime=Fri Jul 9 08:06:57 2021, atime=Fri Apr 9 13:50:10 2021, length=320000, window=hide

Cache Cleaner.bat

b741f2a2026378cfc69acc3393eba109

ASCII text

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

1. Turn Gamebar Off.url

ad8be6d1c424a9642fbe6706dd745fe5

Generic INItialization configuration [InternetShortcut]

10. Remove Startup Apps.url

3dbe9d9e68c37e7f0ef5741b36324732

Generic INItialization configuration [InternetShortcut]

11. Restart Apps Off.url

bf00a7b582581aca5d8705f8cbb71421

Generic INItialization configuration [InternetShortcut]

12. Sync Your Settings Off.url

5120bd1982bcc6741ef0a4db17290551

Generic INItialization configuration [InternetShortcut]

2. Transparency Effects Off.url

6ff3360c82f49520f3751f0622e9c845

Generic INItialization configuration [InternetShortcut]

3. Pause Updates.url

b911c55b8659e21b7c5bdd7cf1e35253

Generic INItialization configuration [InternetShortcut]

4. Store Update Apps Automatically Off.lnk

59d17393d35955e7ef5f017738567bf3

MS Windows shortcut, Item id list present, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

5. Automatically Update Maps Off.url

636098a63eb4388958d7c789e0fafa06

Generic INItialization configuration [InternetShortcut]

6 . Disable Hibernate (Run As Admin).cmd

1a7f7b44889916819240336b980699b7

DOS batch file, ASCII text, with CRLF line terminators

7. Rebuild Performance Counters (Run As Admin).cmd

ce34b00fb9217b954d5423aeddd113a0

DOS batch file, ASCII text, with CRLF line terminators

8. Disable Background Apps.url

c11ad148171fb89dc961e943689659e9

Generic INItialization configuration [InternetShortcut]

9 Registry Tweaks.reg

03daecdea7181d5610390294311c6cb8

Windows Registry text (Win2K or above)

Click Adjust For Best perfomance.lnk

be25dc20a2de9eb4e49c12c850be8026

MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Sat Dec 7 09:09:00 2019, mtime=Fri Jul 9 12:08:00 2021, atime=Sat Dec 7 09:09:00 2019, length=84480, window=hide

Disable Startup apps.lnk

bdca0ae6e5802646ebd58fc0cf1fc58e

MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Fri Apr 9 13:49:34 2021, mtime=Fri Jul 9 08:11:39 2021, atime=Fri Apr 9 13:49:34 2021, length=1213744, window=hide

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

Discord Debloat by Retch.bat

0968adbd8439bba11fd6ae2b21568b67

DOS batch file, ASCII text, with CRLF line terminators

READ FIRST.txt

05f607e2b0fc8f367319ec089d8247c1

ASCII text, with no line terminators

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

2.PNG

de6f600d92495ea9859380349ad21684

PNG image data, 794 x 240, 8-bit/color RGBA, non-interlaced

3.PNG

cbdff5aa5febb2c98a56a4b5df87d2be

PNG image data, 1644 x 182, 8-bit/color RGBA, non-interlaced

Capture.PNG

a3b2f959f51018e2ba07255206d6e807

PNG image data, 1639 x 351, 8-bit/color RGBA, non-interlaced

1- Spotify_Remove_Languages_by_RETCH.bat

a0f0457404b5b21de39aff4ee3fd10e9

ASCII text, with CRLF line terminators

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

1. Install Power Plan.cmd

8c5ba109151acf867e3ef1f771253a29

DOS batch file, ASCII text, with CRLF line terminators

if command doesnt work use this.txt

c91e29b4be406607ce719aceb842ca2e

ASCII text, with CRLF line terminators

Power Options - Shortcut.lnk

83d0ba5c28c923052efe9dc976e4e08a

MS Windows shortcut, Item id list present, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hide

Retch_Low_Latency_1.2.pow

d7c5505a4a07ce66e2cdf43e336a4440

MS Windows registry file, NT/2000 or above

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

Disable Hyper Virtualization.bat

c23338019f39e1055ccf293383a76385

ASCII text, with no line terminators

Disable Trusted Platform Module.bat

33240a52c8f196cc57848cf1a8df3f6b

ASCII text, with no line terminators

Disable Windows HPET.bat

395ea024d39c9d99837a2d144f07e22c

ASCII text, with CRLF line terminators

Enable xAPIC (better performance).bat

85e6a4216f9b3826615a35ed5704da0b

ASCII text, with CRLF line terminators

Legacy TSC.bat

a22de620ba3b7943b0b6f49821c31668

ASCII text, with no line terminators

Revert All to Default.bat

e1f0f140f3108562195707e4245fd480

ASCII text, with CRLF line terminators

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

csrss.exe Realtime Priority.reg

e743f127411409cc4d9847741c431115

Windows Registry text (Win2K or above)

CursorBlinkRate.reg

ddbd9d63a78f923516b5f152ce6c7f02

Windows Registry text (Win2K or above)

Disable Automatic Maintenance.reg

42e1688ddadc9f3d53a7fc225bf3a59b

Windows Registry text (Win2K or above)

Disable Clear Pagefile at Shutdown.reg

50d4c3077dc19d56f169c5704bee88b8

Windows Registry text (Win2K or above)

Disable Firefox Updates.reg

0d48619c6781c35798f9a8e58afad15a

Windows Registry little-endian text (Win2K or above)

Disable Hibernation.reg

062168bf01252dd887bae72709deff15

Windows Registry text (Win2K or above)

Disable Nagles Algorithm.reg

38405145dc4ccfaba8944a62aa3f75d2

Windows Registry text (Win2K or above)

Disable Network Usage.reg

871679245ae4f3d06a19e9ca23fc4c3a

Windows Registry text (Win2K or above)

Disable Notification Center.reg

b4415910f7660ac87e08c12f150454ad

Windows Registry text (Win2K or above)

Disable Power Throttling.reg

7648619f39a1f30b7ac71f236ba01798

Windows Registry text (Win2K or above)

Disable Prefetcher.reg

82301a0f9e1011215407f19eb81417dc

Windows Registry text (Win2K or above)

Disable Spectre and Meltdown.reg

359edaeade78066708c8091214651726

Windows Registry text (Win2K or above)

Disable Superfetch.reg

3ab106347f4c7e9f34c32e6ed1e4e1dd

Windows Registry text (Win2K or above)

DisableNetBT.reg

6d7e327e1e24178fd6ebb9c7f6c0972b

Windows Registry little-endian text (Win2K or above)

Do this if you have 16gb Ram .reg

ffdf200411c966acec75b96b695d7b56

Windows Registry text (Win2K or above)

Do this if you have 8GB RAM .reg

e542e49702da5264a78221f01ae94d51

Windows Registry text (Win2K or above)

Copy paste in a admin powershell.txt

177b8b93ba2f434ffcf1395302434de4

ASCII text, with CRLF line terminators

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

1. COPY AND PASTE INTO WINDOWS POWERSHELL.txt

fe76e6f269afe78ef30ce329b294b8a6

ASCII text, with CRLF line terminators

2. Copy paste in a admin powershell.txt

1e21b94c02481652295b9b93c4bb5fbd

ASCII text, with CRLF line terminators

3. MORE INFO.PNG

2d0b9c60ff1df088715b53355f14cc6f

PNG image data, 873 x 708, 8-bit/color RGBA, non-interlaced

4. Windows update.PNG

a95ea8ae0a7fec3b3ce87f2daf0712a5

PNG image data, 803 x 683, 8-bit/color RGBA, non-interlaced

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

ButtonExtended.dll

d45cab94cfb2d3dd1b7bbad86090e896

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

1..PNG

0ec013e51a5a7397585f3afec5af3afd

PNG image data, 881 x 605, 8-bit/color RGBA, non-interlaced

2 make sure your on privacy.PNG

84ffacf55f4326542f24e0a06ee1fe24

PNG image data, 873 x 604, 8-bit/color RGBA, non-interlaced

3..PNG

2c2f9691c981da81204998d74be4228b

PNG image data, 876 x 606, 8-bit/color RGBA, non-interlaced

4..PNG

1b733c0d7da3c0a198c7b5b7a8ca7b47

PNG image data, 880 x 609, 8-bit/color RGBA, non-interlaced

Read Me First.txt

a0af49b80631107f6d3c277562f0d107

ASCII text, with very long lines (315), with CRLF line terminators

Ultimate Windows Tweaker 4.8.exe

dfd18eabcfa63ce63fdbebe4673e99c8

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

UWT Homepage.url

2d98d02e794606f540235133d238fdfa

MS Windows 95 Internet shortcut text (URL=<https://www.thewindowsclub.com/ultimate-windows-tweaker-4-windows-10>), ASCII text, with CRLF line terminators

Intel Disable bios services.txt

dbb90d97a5b0647e2f1bc212c26c2c78

ASCII text, with CRLF line terminators

Ryzen cpu bios tweak.txt

2e3c0e92aca9ba2a616f41a05d1a7efc

ASCII text, with CRLF line terminators

2021-01-20__17-10-20_DDULog.xml

6af9fe899980375d4fece873d50bda93

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-23__14-26-18_DDULog.xml

7b56938f5b133918c565f09a6ed95f5c

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF, CR line terminators

2021-01-23__15-53-52_DDULog.xml

61e23053e4fa8bfbbf50ff78e2500f7a

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-23__16-41-02_DDULog.xml

63496bf6708cc1d4972a6b9b5f78c1f3

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__08-37-20_DDULog.xml

51429d917df889704cc79bc3c681b141

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__09-01-40_DDULog.xml

ef8acee0782fb6aa137c22885e437da0

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__09-51-52_DDULog.xml

34486b3b402e91b6294f8d5e37807fdd

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__12-07-59_DDULog.xml

ce04c7d1d1261e172b10d5b8ddfe95b7

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__12-49-20_DDULog.xml

1331202df518b138eff61a856fdb32b3

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__13-27-29_DDULog.xml

089e99a1dd847e54142db59baaaac9ab

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__15-18-53_DDULog.xml

e2a574be90f83db7cbc33c102a698717

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Display Driver Uninstaller.exe

34c88df32e7694386a11be0d5635e66c

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Display Driver Uninstaller.exe.config

c63a9e93265ff0b65cc923e35a25a597

XML 1.0 document, ASCII text, with CRLF line terminators

Display Driver Uninstaller.pdb

c66acac4671b7a68f18885e71f307868

MSVC program database ver 7.00, 512*1291 bytes

Issues and solutions.txt

4d29ce16237fec3a3bace44eda19ab56

ASCII text, with very long lines (360), with CRLF line terminators

Licence.txt

d62627392a6d2bf8db15a23fea269840

ASCII text, with very long lines (1119), with CRLF line terminators

Readme.txt

d2eaef6baa83b9631b28c0b455d62f50

ASCII text, with CRLF line terminators

classroot.cfg

7f92472092a396a1172e3d3cd081e944

ASCII text, with CRLF line terminators

clsidleftover.cfg

60b8f1d8beb48e51abb22fed0b1c436e

ASCII text, with CRLF line terminators

driverfiles.cfg

e7b593de61df0e64309fddddc42ba6e7

ASCII text, with CRLF line terminators

interface.cfg

d26ff4c7bd788d176463bd1534d0d0b1

ASCII text, with CRLF line terminators

packages.cfg

e0323af9edeeca54100c97cd1e165570

ASCII text, with CRLF line terminators

services.cfg

9fdac8c12e7edfafb52469cf5af9d380

ASCII text, with CRLF line terminators

classroot.cfg

dc178ab2066692f7531d17cc761a9ca4

ASCII text, with CRLF line terminators

clsidleftover.cfg

f8a1e7c3b8e4bffe220f02192008dd05

ASCII text, with CRLF line terminators

driverfiles.cfg

46c8bc5eb67c3569f1119b99de108b70

ASCII text, with CRLF line terminators

interface.cfg

f37b89fa3b54bf60d0b5ad875a6650d8

ASCII text, with CRLF line terminators

packages.cfg

c9b4c7d78ece1c23e7f253f34214b274

ASCII text, with CRLF line terminators

services.cfg

962cbed74e56663b4c4c974abd8fe0ed

ASCII text, with CRLF line terminators

Arabic.xml

197e729b67984cfafaf50ff6f89eace9

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Bulgarian.xml

71cbbd51ab26b0622d58d631c582c49e

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Chinese (Simplified).xml

a8e06be96047a6cb1aa80e5a02d7b3e8

XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators

Chinese (Traditional).xml

3c1f9a7b7fd343d6ddee1999597b0e94

XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators

Czech.xml

e2ab71a99fbfcb8b0da387261d8ca9e3

XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators

Danish.xml

70181b67855c113a5531b984c23c450d

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Dutch.xml

40d928323921af33bc4ae4662220b6f2

XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators

English.xml

b52eac577a8319bb2eeb76dafc8b31f1

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Finnish.xml

7b67c5896bf70d4947e91a0fbcba4bb8

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

French.xml

0d2aa7c7c136c1bec2448e6db66e20e3

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

German.xml

4fe579dc3b8e3761e97acfce643b97f5

XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators

Greek.xml

d048ec5409a00e87c16008c5f089283c

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Hebrew.xml

b59535080454462cd8eb577c24612f0d

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Hungarian.xml

b20b45f00b14c29d8cae6291b545248a

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Italian.xml

b997ec2a4a4170c083a183431352a52e

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Japanese.xml

47eccb6e75d5608fc6b930f2d3586d09

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Korean.xml

b4b63dd9d7564c1f4e809d23036cd310

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Macedonian (Latin).xml

0b12f4af582d715f0b7bf4f1248537d2

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Polish.xml

907d0af6af22877f1035d366c547554d

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Portuguese.xml

5f7a03604db3f023f6213d661999854d

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

PortugueseBrazil.xml

fc638d287a297db1c66c10bbb5318e8c

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Russian.xml

4efcf5bd4a04b7a0183ac1e9e3f0a561

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Serbian (Cyrilic).xml

d1d88cacce57c90bfebec145e95a0538

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Serbian (Latin).xml

358d404248c473cb3cd427d69f621398

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Slovak.xml

bee7a7a02a604c4f07867213e252f6eb

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Slovenian.xml

b9b27715dcfcb67a2db4c5f3f9ccc6d4

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Spanish (Spain).xml

4585e0f12fbb209c8d473716d3b8f18b

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Spanish.xml

dc1d550b6a6f47c6cdeb99d4d0fc87ae

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Swedish.xml

44075fe0688636ec3cb3ed43c0406493

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Thai.xml

6d2222c55da575d7abebbc55e285a441

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Turkish.xml

d7aeeb6f3dd2d8dc4e96770504a58f94

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Ukrainian.xml

fc96a127cca8e697de19824d2a7e4d11

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

_For translators - ReadMe.txt

6d9d18c1dc410770e9d1a057bea52ad0

exported SGML document, ASCII text, with CRLF line terminators

classroot.cfg

d7fab3164fde0b1924f84293394df562

ASCII text, with CRLF line terminators

clsidleftover.cfg

db96e613e5b963cc44dc0c2f169819a3

ASCII text, with CRLF line terminators

clsidleftoverGFE.cfg

de38dcdd8f96d368d50cc1e042be6c9f

ASCII text, with CRLF line terminators

driverfiles.cfg

112e407f27c52e2fde882c6dd12ad212

ASCII text, with CRLF line terminators

gfedriverfiles.cfg

7be8f654585e66601f5e197329f0aee6

ASCII text, with CRLF line terminators

gfeservice.cfg

ea29a6571bf9600e13129586b9c0e0d4

ASCII text, with CRLF line terminators

interface.cfg

cc56bfeeb973557fdffb2a24c4ee5864

ASCII text, with CRLF line terminators

interfaceGFE.cfg

841a76da4775ed6f28e72bc218bcdf5d

ASCII text, with CRLF line terminators

packages.cfg

943450da8c97bb2c766e8e8eed8de3e5

ASCII text, with CRLF line terminators

services.cfg

78b16cac9345d2489ba45438c51d3d52

ASCII text, with CRLF line terminators

classroot.cfg

d9ee1341fb5df6225cdbb65a2eb64533

ASCII text, with CRLF line terminators

clsidleftover.cfg

dd42b235270f8372537dc57f4737a156

ASCII text, with CRLF line terminators

driverfiles.cfg

ce4e9e76c44aa5509a2821cd530dc435

ASCII text, with CRLF line terminators

packages.cfg

0a02d5f2b50c4ffe1931b74e47beed66

ASCII text, with no line terminators

services.cfg

f2459d1381fda7c97bdb2ba1805872f4

ASCII text, with CRLF line terminators

Settings.xml

4cacac51e942274e034ac14a69e6161b

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

NVCleanstall_1.8.0.exe

509889bf8c9738362daaa9e1c2a92d07

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Read.txt

c48b874c905dbaacc75571cdf950e359

ASCII text, with no line terminators

Optimize Display settings.PNG

56c701bd293eb69b3a377a8bd6241f71

PNG image data, 863 x 493, 8-bit/color RGBA, non-interlaced

Safe oc gpu settings for stability.PNG

27c235cb3216bf3fa5fb37bf5f8fd8ed

PNG image data, 1288 x 606, 8-bit/color RGBA, non-interlaced

2021-01-20__17-10-20_DDULog.xml

6af9fe899980375d4fece873d50bda93

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-23__14-26-18_DDULog.xml

7b56938f5b133918c565f09a6ed95f5c

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF, CR line terminators

2021-01-23__15-53-52_DDULog.xml

61e23053e4fa8bfbbf50ff78e2500f7a

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-23__16-41-02_DDULog.xml

63496bf6708cc1d4972a6b9b5f78c1f3

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__08-37-20_DDULog.xml

51429d917df889704cc79bc3c681b141

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__09-01-40_DDULog.xml

ef8acee0782fb6aa137c22885e437da0

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__09-51-52_DDULog.xml

34486b3b402e91b6294f8d5e37807fdd

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__12-07-59_DDULog.xml

ce04c7d1d1261e172b10d5b8ddfe95b7

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__12-49-20_DDULog.xml

1331202df518b138eff61a856fdb32b3

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__13-27-29_DDULog.xml

089e99a1dd847e54142db59baaaac9ab

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

2021-01-24__15-18-53_DDULog.xml

e2a574be90f83db7cbc33c102a698717

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Display Driver Uninstaller.exe

34c88df32e7694386a11be0d5635e66c

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Display Driver Uninstaller.exe.config

c63a9e93265ff0b65cc923e35a25a597

XML 1.0 document, ASCII text, with CRLF line terminators

Display Driver Uninstaller.pdb

c66acac4671b7a68f18885e71f307868

MSVC program database ver 7.00, 512*1291 bytes

Issues and solutions.txt

4d29ce16237fec3a3bace44eda19ab56

ASCII text, with very long lines (360), with CRLF line terminators

Licence.txt

d62627392a6d2bf8db15a23fea269840

ASCII text, with very long lines (1119), with CRLF line terminators

Readme.txt

d2eaef6baa83b9631b28c0b455d62f50

ASCII text, with CRLF line terminators

classroot.cfg

7f92472092a396a1172e3d3cd081e944

ASCII text, with CRLF line terminators

clsidleftover.cfg

60b8f1d8beb48e51abb22fed0b1c436e

ASCII text, with CRLF line terminators

driverfiles.cfg

e7b593de61df0e64309fddddc42ba6e7

ASCII text, with CRLF line terminators

interface.cfg

d26ff4c7bd788d176463bd1534d0d0b1

ASCII text, with CRLF line terminators

packages.cfg

e0323af9edeeca54100c97cd1e165570

ASCII text, with CRLF line terminators

services.cfg

9fdac8c12e7edfafb52469cf5af9d380

ASCII text, with CRLF line terminators

classroot.cfg

dc178ab2066692f7531d17cc761a9ca4

ASCII text, with CRLF line terminators

clsidleftover.cfg

f8a1e7c3b8e4bffe220f02192008dd05

ASCII text, with CRLF line terminators

driverfiles.cfg

46c8bc5eb67c3569f1119b99de108b70

ASCII text, with CRLF line terminators

interface.cfg

f37b89fa3b54bf60d0b5ad875a6650d8

ASCII text, with CRLF line terminators

packages.cfg

c9b4c7d78ece1c23e7f253f34214b274

ASCII text, with CRLF line terminators

services.cfg

962cbed74e56663b4c4c974abd8fe0ed

ASCII text, with CRLF line terminators

Arabic.xml

197e729b67984cfafaf50ff6f89eace9

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Bulgarian.xml

71cbbd51ab26b0622d58d631c582c49e

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Chinese (Simplified).xml

a8e06be96047a6cb1aa80e5a02d7b3e8

XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators

Chinese (Traditional).xml

3c1f9a7b7fd343d6ddee1999597b0e94

XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators

Czech.xml

e2ab71a99fbfcb8b0da387261d8ca9e3

XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators

Danish.xml

70181b67855c113a5531b984c23c450d

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Dutch.xml

40d928323921af33bc4ae4662220b6f2

XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators

English.xml

b52eac577a8319bb2eeb76dafc8b31f1

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Finnish.xml

7b67c5896bf70d4947e91a0fbcba4bb8

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

French.xml

0d2aa7c7c136c1bec2448e6db66e20e3

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

German.xml

4fe579dc3b8e3761e97acfce643b97f5

XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators

Greek.xml

d048ec5409a00e87c16008c5f089283c

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Hebrew.xml

b59535080454462cd8eb577c24612f0d

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Hungarian.xml

b20b45f00b14c29d8cae6291b545248a

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Italian.xml

b997ec2a4a4170c083a183431352a52e

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Japanese.xml

47eccb6e75d5608fc6b930f2d3586d09

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Korean.xml

b4b63dd9d7564c1f4e809d23036cd310

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Macedonian (Latin).xml

0b12f4af582d715f0b7bf4f1248537d2

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Polish.xml

907d0af6af22877f1035d366c547554d

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Portuguese.xml

5f7a03604db3f023f6213d661999854d

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

PortugueseBrazil.xml

fc638d287a297db1c66c10bbb5318e8c

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Russian.xml

4efcf5bd4a04b7a0183ac1e9e3f0a561

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Serbian (Cyrilic).xml

d1d88cacce57c90bfebec145e95a0538

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Serbian (Latin).xml

358d404248c473cb3cd427d69f621398

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Slovak.xml

bee7a7a02a604c4f07867213e252f6eb

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Slovenian.xml

b9b27715dcfcb67a2db4c5f3f9ccc6d4

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Spanish (Spain).xml

4585e0f12fbb209c8d473716d3b8f18b

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Spanish.xml

dc1d550b6a6f47c6cdeb99d4d0fc87ae

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Swedish.xml

44075fe0688636ec3cb3ed43c0406493

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Thai.xml

6d2222c55da575d7abebbc55e285a441

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Turkish.xml

d7aeeb6f3dd2d8dc4e96770504a58f94

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Ukrainian.xml

fc96a127cca8e697de19824d2a7e4d11

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

_For translators - ReadMe.txt

6d9d18c1dc410770e9d1a057bea52ad0

exported SGML document, ASCII text, with CRLF line terminators

classroot.cfg

d7fab3164fde0b1924f84293394df562

ASCII text, with CRLF line terminators

clsidleftover.cfg

db96e613e5b963cc44dc0c2f169819a3

ASCII text, with CRLF line terminators

clsidleftoverGFE.cfg

de38dcdd8f96d368d50cc1e042be6c9f

ASCII text, with CRLF line terminators

driverfiles.cfg

112e407f27c52e2fde882c6dd12ad212

ASCII text, with CRLF line terminators

gfedriverfiles.cfg

7be8f654585e66601f5e197329f0aee6

ASCII text, with CRLF line terminators

gfeservice.cfg

ea29a6571bf9600e13129586b9c0e0d4

ASCII text, with CRLF line terminators

interface.cfg

cc56bfeeb973557fdffb2a24c4ee5864

ASCII text, with CRLF line terminators

interfaceGFE.cfg

841a76da4775ed6f28e72bc218bcdf5d

ASCII text, with CRLF line terminators

packages.cfg

943450da8c97bb2c766e8e8eed8de3e5

ASCII text, with CRLF line terminators

services.cfg

78b16cac9345d2489ba45438c51d3d52

ASCII text, with CRLF line terminators

classroot.cfg

d9ee1341fb5df6225cdbb65a2eb64533

ASCII text, with CRLF line terminators

clsidleftover.cfg

dd42b235270f8372537dc57f4737a156

ASCII text, with CRLF line terminators

driverfiles.cfg

ce4e9e76c44aa5509a2821cd530dc435

ASCII text, with CRLF line terminators

packages.cfg

0a02d5f2b50c4ffe1931b74e47beed66

ASCII text, with no line terminators

services.cfg

f2459d1381fda7c97bdb2ba1805872f4

ASCII text, with CRLF line terminators

Settings.xml

4cacac51e942274e034ac14a69e6161b

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Fortnite 456.55.nip

7797fac04a45957416dee8df358ebdd5

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Installing A Nvidia GPU Driver.pdf

db48dc46d0dfa5938efd011778dc429a

PDF document, version 1.5

msi mode.PNG

cf237a50c3489c5230452f68e7bd8bde

PNG image data, 1005 x 68, 8-bit/color RGBA, non-interlaced

MSI_util_v2.exe

dbd2194b7a5b38636edf7112ebc6fe91

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Read First.txt

0d8ef5bc59943f3d11174d3eb5ad6958

ASCII text, with CRLF line terminators

NVCleanstall_1.8.0.exe

509889bf8c9738362daaa9e1c2a92d07

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

1. control panel settings.png

0bf7fecea526b573e6aea4824b206cd7

PNG image data, 624 x 335, 8-bit/color RGBA, non-interlaced

2. control panel settings.png

32213fba480c0464907b8558aa1f477f

PNG image data, 525 x 285, 8-bit/color RGBA, non-interlaced

3. control panel settings.png

15fe0bfbfb6406db8912be3019e163c1

PNG image data, 478 x 73, 8-bit/color RGBA, non-interlaced

4. No Scaling.PNG

066df047bf8084b502c6529e8a7f1276

PNG image data, 648 x 827, 8-bit/color RGBA, non-interlaced

5. physX.PNG

8d5621e8fcc54145969c817f8a68abc6

PNG image data, 809 x 835, 8-bit/color RGBA, non-interlaced

change.log

adee34e1ea912ee34665e95b61da0804

ASCII text, with CRLF line terminators

nvidiaInspector.exe

dedadf41de16464ec2ff6f1181270b17

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

nvidiaInspector.exe.config

5182b3d33df085cc11aba1f9c2b9e7e0

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

nvidiaProfileInspector.exe

e4ab350ca541a9f73bc9e9f4f3ce7cc5

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

restart64.exe

f3c4d94340cf8a9149ba42c62b73eaa2

PE32+ executable (GUI) x86-64, for MS Windows, 6 sections

USE THIS BEFORE APPLYING ANY PROFILE OR CHANGES or you will stutter.bat

3efa2dc611c4b3d5536bf10016a50ce7

ASCII text, with CRLF line terminators

Valorant 456.55.nip

e13d98a0ad9bcf27a424852907c256b9

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

BITS.png

0c674a687d6c7aa2937b57b843ea39c4

PNG image data, 392 x 161, 8-bit/color RGBA, non-interlaced

Enable to Profile 1.PNG

31c648be7057653801972e208f3d8501

PNG image data, 636 x 476, 8-bit/color RGBA, non-interlaced

Ram bios tweaks.txt

fb3798e5c7e05ccbdfd12880b9db4819

ASCII text, with CRLF line terminators

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

12 ISLC Settings.png

c62ee5aa9ca311c10f675fbdd95a028f

PNG image data, 1430 x 351, 8-bit/color RGBA, non-interlaced

Intelligent standby list cleaner ISLC.exe

1c02f48221ad4f8a8693fb680dada748

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Intelligent standby list cleaner ISLC.exe.Config

84f2d88847c42122f13c65144de10c00

XML 1.0 document, ASCII text, with CRLF line terminators

ReadMe.txt

f95f920b45a589756f3558e1457f47fd

ASCII text, with CRLF line terminators

Cmd Administrator.txt

b73de991eb5951d5d3d42f348caa4cf4

ASCII text, with CRLF line terminators

ETHERNET TWEAK.txt

020cef0e9e9f375b5d88b5e0a2755ff8

ASCII text, with CRLF line terminators

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

network.bat

3c3cd76f19ca6b5f955cc0764e39b60c

DOS batch file, ASCII text, with CRLF line terminators

network.reg

68c658101ef77eafc29fa11fe4be9afa

Windows Registry little-endian text (Win2K or above)

Ping Reduction .bat

13345f98b9c01558628061ea4cafc3c8

DOS batch file, ASCII text, with CRLF line terminators

RUN ALL COMMANDS IN ADMINISTRATOR ( RIGHT CLICK THE COMMANDS THEN CLICK RUN IN ADMINISTRATOR ).txt

a358e7755e1c770fc857e5beca092e41

ASCII text, with no line terminators

Best wifi driver intel wireless.txt

010227e56b98e7cc4be321f3b6f342d5

ASCII text, with CRLF line terminators

วิธีหาใช้กันเองเลย.txt

557f0730cde3897594aece3b7f281309

Unicode text, UTF-8 text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
Public Nextron YARA rules	malware	Detects possible shortcut usage for .URL persistence
Public InfoSec YARA rules	malware	Identifies executable artefacts in shortcut (LNK) files.
Public Nextron YARA rules	malware	Detects Windows eventlog cleaner used in Operation Wilted Tulip - file clrlg.bat
Public Nextron YARA rules	malware	Detects possible shortcut usage for .URL persistence
Public Nextron YARA rules	malware	Detects possible shortcut usage for .URL persistence
Public Nextron YARA rules	malware	Detects possible shortcut usage for .URL persistence
Public Nextron YARA rules	malware	Detects possible shortcut usage for .URL persistence
Public Nextron YARA rules	malware	Detects possible shortcut usage for .URL persistence
Public Nextron YARA rules	malware	Detects possible shortcut usage for .URL persistence
Public Nextron YARA rules	malware	Detects possible shortcut usage for .URL persistence
Public Nextron YARA rules	malware	Detects possible shortcut usage for .URL persistence
Public InfoSec YARA rules	malware	Identifies executable artefacts in shortcut (LNK) files.
Public InfoSec YARA rules	malware	Identifies executable artefacts in shortcut (LNK) files.
YARAhub by abuse.ch	malware	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen
Public Nextron YARA rules	malware	Detects ConfuserEx packed file
YARAhub by abuse.ch	malware	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen
YARAhub by abuse.ch	malware	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 4/64

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

cdn.discordapp.com/attachments/1191835192495702138/1201471285763522631/boost_fps_bung_teen_free_by.stefan.zip?ex=662b7f54&is=662a2dd4&hm=de7c97751968ce54e034c16b2167e6c7c51e2eae2230e3191892ab37b6d3711c&

162.159.129.233

200 OK

13 MB

URL User Request GET HTTP/2
cdn.discordapp.com/attachments/1191835192495702138/1201471285763522631/boost_fps_bung_teen_free_by.stefan.zip?ex=662b7f54&is=662a2dd4&hm=de7c97751968ce54e034c16b2167e6c7c51e2eae2230e3191892ab37b6d3711c&
IP
162.159.129.233:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectdiscordapp.com
Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39
ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
13 MB (13355444 bytes)
Hash
092a8f5e1e5c48973fb2fed765c96730
49e378f8de8e9e0438c21c4bca95550da1155b6c
8add2102d8ea1e21907a1de22573d6d394d56e2ee25f775dbbe187786fcc0a07

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 4/64

HTTP Headers

GET /attachments/1191835192495702138/1201471285763522631/boost_fps_bung_teen_free_by.stefan.zip?ex=662b7f54&is=662a2dd4&hm=de7c97751968ce54e034c16b2167e6c7c51e2eae2230e3191892ab37b6d3711c& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:35:41 GMT
content-type: application/zip
content-length: 13355444
cf-ray: 879fbf685ee0b50b-OSL
cf-cache-status: HIT
accept-ranges: bytes, bytes
age: 304998
cache-control: public, max-age=31536000
content-disposition: attachment; filename="boost_fps_bung_teen_free_by.stefan.zip"
etag: "092a8f5e1e5c48973fb2fed765c96730"
expires: Fri, 25 Apr 2025 16:35:41 GMT
last-modified: Mon, 29 Jan 2024 10:17:56 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1706523476857296
x-goog-hash: crc32c=myYsCw==, md5=CSqPXh5cSJc/sv7XZclnMA==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 13355444
x-guploader-uploadid: ABPtcPplQu9fmNbpbdPEKgr9vn6mHmZlcgv1RFUf-PlLv7ZGTv6DwxXer7j1ECe3hwN4cFr7fnA
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F2Qqb2VyG5WNp1VnhUA3hdKRwovkogTu7IWUHoQ9gV2AQNK6C%2BoikcJHS54NbEO5EXgTWT5cSaItRKK6sVHL87zL58LrrVCtHKSsG0WvdNUAjOnFo08XUdvnu%2F4ugmEmu1FjZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=TeVFY.TTRNwvZSjLX2xvKJLmADbm4cgxWzsjJyxi1gQ-1714062941-1.0.1.1-HyQ5lb0lPfETh1NZnfEPN5hA6th0HLM1kgZlq5mxyQlezZqtr63YBfwNN7V_e3ml9HbmHQtBYO5aLcDzaNGGRQ; path=/; expires=Thu, 25-Apr-24 17:05:41 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=B.cWVzzAcA6WzcFVyvltI44mVM1M3LfNX5Z2Za79Kfg-1714062941524-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (285)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers