Report - dw33.malavida.com/dwn/0a72732a910475ad39fb6b4a3b0990d3bba7d33d2bd072b71c82f35b92bd0c7b/DS4Windows

Report Overview

Submitted URL
dw33.malavida.com/dwn/0a72732a910475ad39fb6b4a3b0990d3bba7d33d2bd072b71c82f35b92bd0c7b/DS4Windows_3.1.10.zip
IP
5.145.168.46
ASN
#39020 Comvive Servidores S.L.
Submitted
2024-05-02 18:34:00
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
7

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dw33.malavida.com	unknown	2001-05-31	2021-08-15	2023-01-20	562 B	3.7 MB	5.145.168.46

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
dw33.malavida.com/dwn/0a72732a910475ad39fb6b4a3b0990d3bba7d33d2bd072b71c82f35b92bd0c7b/DS4Windows_3.1.10.zip
IP
5.145.168.46
ASN
#39020 Comvive Servidores S.L.

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
3.7 MB (3691067 bytes)
Hash
b4e1434fe6dcdcc568f89c61e4d65078
62f34caa43730132483dc95392d482c38d9ca840
2b3dd63bd0bf62fb6827dff4f323a0c8099313ea7826e74c6d592248e2595bef

Archive (62)

Filename

Md5

File type

build.js

61b6490d371c57d566ae713880f3ab40

JavaScript source, ISO-8859 text, with very long lines (1164), with CRLF line terminators

index.html

b7f3e0aec1e9905b2706285819ad8627

HTML document, ASCII text, with CRLF line terminators

DependencyPropertyGenerator.Core.dll

d9732473b12f627c54c5c71849f99e19

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DotNetProjects.Wpf.Extended.Toolkit.dll

b59365511c243acc47608e40f56d49ba

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Updater.exe

36c2074cf30fd2f960108eda26977645

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

DS4Windows.deps.json

cf5805b041bbdd3ef5fe334480ec4016

JSON text data

DS4Windows.dll

10347d0ccb561276a5929dae9a65affd

PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.exe

e04a76a4b5a4c802eb3c228909f60bbb

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

DS4Windows.runtimeconfig.json

cf0ac34a43db571842afc9d7f779c907

JSON text data

FakerInputDll.dll

f9dcb7840822eb05881e5d6ca52decab

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

FakerInputWrapper.dll

33516f16e0ecbcf00b91c5eb44f3fbc7

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

H.NotifyIcon.dll

a11cf38e9090ec05a2801b0a2b91cab9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

H.NotifyIcon.Wpf.dll

c55c75689792afd64a98f718afb4cebf

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

HttpProgress.dll

e97fb25cb7d477d5c3116f3add7c060e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ICSharpCode.AvalonEdit.dll

7ca104c3e98d3cbd162fdef84edd3b8f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

ab9262cd7688eb3713009e4b9075c061

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

d7507714c8f12198e5474d7ef94e2053

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

f142427e8af0cb303459a6773f0a92bc

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

19f3a97f752fd9d5ca2d0f396ff83a3f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

41d0b21877ff12147f516ca4ad45e6d6

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

cdeab974eb43d77f6bade325b13aaf73

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

59f03892d07c2672ea1a8d63f7a3a7c4

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

c6d5a977c7451a82704ac03519f0c694

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

a9c4b450f89335f0c12c3cb40b465906

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

c7c11960671d8b6c307b5c8c8de9672b

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

82c3acd81ea2457b0a3fc2cbd08a4dd4

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

bad880518a5d6ac9ef9719589ec6ed9e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

ff950f40aeb66094e8ee0465ab35f763

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

2b518b391f289fd1281d2d585a175088

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

fd6a995a2a9aff9127954cd737aaa1e7

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

8cd586e15f1d08e9e50d421202842570

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

65fa53de5b17bb94733e73621ee26cbc

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

2d1fbf1036ecd309cb5211e9534444e1

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

a886e28b7a456b004a4f4e78e27b796f

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

38e68beee1b1693d9c5b39a97620fa1e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

efff8d45bc82d384d59fd7d30b8888b7

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

010e54f435020b37cf2c1174a9d80ac6

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

042b6bd777278b8b3b23c7652f97fa5c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

1f616ede95a28b65762965d8e69b2bcf

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

0ea6fa8f945f5ba67a2d458ec84898d0

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

367090557d5597a09728b6d264e1f190

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

85573b6d873d429839d8ccb01da2af23

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

MdXaml.dll

b2ca888da2b0b58b6ae2174b92c4cf1f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MdXaml.Plugins.dll

ac33d0167eb47892e3ad53580d70b539

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Win32.TaskScheduler.dll

f991dca7413cb6a9e28ed527205655b5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Nefarius.Utilities.DeviceManagement.dll

063b6f490c0dd093ae5d43835c8635e2

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Nefarius.ViGEm.Client.dll

6f24fb07be069c21adf97d8d8229bd6c

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

NLog.config

11896215efa8bcec73387ef26ab68619

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

NLog.dll

7810c3b05950f860fea686d43248d2f2

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Ookii.Dialogs.Wpf.dll

8b9618ca8a33bc141daf1cafa9e4101b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Management.dll

83cda4cc597e6a0b2ebbd1b8f41e94d3

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SharpOSC.dll

05076225457aa5faeb0d7027033c84ee

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Management.dll

88b0572d04511832862a672aa59f6e57

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SharpDX.dll

6c00b8be8fb6ff838c79c9de405db1f5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SharpDX.XInput.dll

b16aaf6fa2e6432e0c342a166e98a372

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

XInputChecker.deps.json

8674b916e72d44161f9ad73b2f1f5521

JSON text data

XInputChecker.dll

d6378c23e85b7c663fe80674189182dd

PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

XInputChecker.exe

9849b775edebd24750919ae3d7a5670d

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

XInputChecker.runtimeconfig.json

6e10a8345833382a21cd2da5494d75c1

JSON text data

WPFLocalizeExtension.dll

b7be5ad601b0b488d1ed19c14d2feb55

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

WpfScreenHelper.dll

e07c6bc7a3e5e33a01aa8d2115f87e35

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

XAMLMarkupExtensions.dll

5dcced37c71c67061cef2ca0a6f42487

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 1/65

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

dw33.malavida.com/dwn/0a72732a910475ad39fb6b4a3b0990d3bba7d33d2bd072b71c82f35b92bd0c7b/DS4Windows_3.1.10.zip

5.145.168.46

200 OK

3.7 MB

URL User Request GET HTTP/2
dw33.malavida.com/dwn/0a72732a910475ad39fb6b4a3b0990d3bba7d33d2bd072b71c82f35b92bd0c7b/DS4Windows_3.1.10.zip
IP
5.145.168.46:443
ASN
#39020 Comvive Servidores S.L.

Certificate
IssuerSectigo Limited
Subject*.malavida.com
FingerprintDD:AD:14:1C:69:D1:86:8F:20:49:51:28:42:E5:20:08:49:C8:28:B2
ValidityMon, 12 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
3.7 MB (3691067 bytes)
Hash
b4e1434fe6dcdcc568f89c61e4d65078
62f34caa43730132483dc95392d482c38d9ca840
2b3dd63bd0bf62fb6827dff4f323a0c8099313ea7826e74c6d592248e2595bef

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/65

HTTP Headers

GET /dwn/0a72732a910475ad39fb6b4a3b0990d3bba7d33d2bd072b71c82f35b92bd0c7b/DS4Windows_3.1.10.zip HTTP/1.1
Host: dw33.malavida.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 02 May 2024 18:33:31 GMT
server: Apache
accept-ranges: bytes
cache-control: public
x-robots-tag: noindex
last-modified: Tue, 22 Nov 2022 11:30:02 GMT
content-length: 3691067
content-type: application/zip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (62)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers