Report - cdn.discordapp.com/attachments/975937548167806986/1092984807211925594/IVMP-CLIENT-1.1.0.zip

Report Overview

Visited public
2023-12-10 09:47:23
Tags
URL
cdn.discordapp.com/attachments/975937548167806986/1092984807211925594/IVMP-CLIENT-1.1.0.zip
Finishing URL
about:privatebrowsing
IP / ASN
162.159.130.233
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.discordapp.com	2474	2015-02-26	2015-08-24 15:06:21	2023-12-09 05:10:05	557 B	2.8 MB	162.159.130.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
cdn.discordapp.com/attachments/975937548167806986/1092984807211925594/IVMP-CLIENT-1.1.0.zip
IP
162.159.130.233
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate - data
Size
2.8 MB (2760060 bytes)
Hash
dea8940ee9fb5763db0ef6e21b399ffa
420e881256fb7d7bb46b1479656f09d8292f52c5
2218d5eb301154d59096559341c98e643638b6c76d86d984a9c2a6e6d23c06ab

Archive (13)

Filename

Md5

File type

bass.dll

490860a36091e637375a2289ea8a21a3

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections

ClientManager.dll

aed74e4c386788316da87bb522859e21

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 7 sections

anims.dat

62efacb16af2cb2e8a72094a2061d4d9

ASCII text, with CRLF line terminators

favorites.txt

5a087c6beeaecd6bb3ff26695f0280aa

ASCII text, with no line terminators

cursor2.png

196e93374fa2e04eeb89c7d394eabfca

PNG image data, 48 x 72, 8-bit gray+alpha, non-interlaced

DefaultSkin.png

59ead9eb4b62cb2c600c366c8a8505f7

PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced

ivmpGameLauncher.exe

1f6282e609a59aaf3371c51e42506c72

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

launcherAssist.dll

e0ac312162f9b8dddf40ad585d509eea

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

LaunchGTAIV.exe

5709d86cbfcd6c30774bff3b9c311c53

PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

IVMP-TS.dll

8263abd136468b42f45f4c98e91d8863

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

directsound_win32.dll

8f918347280beb3856bd94ed8d390a4e

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

windowsaudiosession_win32.dll

7fdfd350814fc3662c6959334a5bd35a

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

ts3client.dll

b855ba80dbe3694cb3da22b61f128f77

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 6/63

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

cdn.discordapp.com/attachments/975937548167806986/1092984807211925594/IVMP-CLIENT-1.1.0.zip

162.159.130.233

200 OK

2.8 MB

URL User Request GET HTTP/2
cdn.discordapp.com/attachments/975937548167806986/1092984807211925594/IVMP-CLIENT-1.1.0.zip
IP
162.159.130.233:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectdiscordapp.com
Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39
ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate - data
Size
2.8 MB (2760060 bytes)
Hash
dea8940ee9fb5763db0ef6e21b399ffa
420e881256fb7d7bb46b1479656f09d8292f52c5
2218d5eb301154d59096559341c98e643638b6c76d86d984a9c2a6e6d23c06ab

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 6/63

HTTP Headers

GET /attachments/975937548167806986/1092984807211925594/IVMP-CLIENT-1.1.0.zip HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 10 Dec 2023 09:45:52 GMT
content-type: application/zip
content-length: 2760060
cf-ray: 83348eb9683f56b9-OSL
cf-cache-status: HIT
accept-ranges: bytes, bytes
age: 358978
cache-control: public, max-age=31536000
content-disposition: attachment; filename="IVMP-CLIENT-1.1.0.zip"
etag: "dea8940ee9fb5763db0ef6e21b399ffa"
expires: Mon, 09 Dec 2024 09:45:52 GMT
last-modified: Wed, 05 Apr 2023 01:31:24 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1680658284789842
x-goog-hash: crc32c=6zPRWA==, md5=3qiUDun7V2PbDvbiGzmf+g==
x-goog-metageneration: 3
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2760060
x-guploader-uploadid: ABPtcPoJeJ7EdQb1rPjSGW1r4m8tMoqWW8ygm8oXm2gPu12LqU7g7PBpwbSGUP1WlRS59hJcuOk
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u8PsMiZ4P99Idt%2BLfkqLw2T70qRK7%2BjqiW0oU3BR7%2BAvK4qh2T3dwvaxATz4uVFJPx8l8QHl0yQ96sArKA1EvNftWuFpaiJ6h3yFVjM9j0P%2B%2Ftx1l%2FbGnW6isGQqwjH2%2FDqRig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=dILZRRfbGoQoYD5pUAJr6nRd8qz5uxO0LDJkQRmr5pE-1702201552-1-AWX9ZF26mEoa/ihIP/fY7HcShg4gwyYFFuIsqa2aEFwXz/AT2tToMMTnuikHsnkEYjEErb6i3HSGlqcOb464p34=; path=/; expires=Sun, 10-Dec-23 10:15:52 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=0Z5mT4Au3zuSNvO65OaTK2nGDw_9458ood3mcr5DVmc-1702201552899-0-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (13)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers