Report - ds4-window.com/files/DS4Windows_3.3.3

Report Overview

Visited public
2024-12-30 04:59:34
Tags
Submit Tags
URL
ds4-window.com/files/DS4Windows_3.3.3_x64.zip
Finishing URL
about:privatebrowsing
IP / ASN
172.67.190.142
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ds4-window.com	unknown	2024-12-02	2024-12-30	2024-12-30	499 B	4.3 MB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
ds4-window.com/files/DS4Windows_3.3.3_x64.zip
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
4.3 MB (4306953 bytes)
Hash
b35e3aaeb5ffca32d4b426474a755361
e869c8164400e1801e48c561b608e84a91515109
cf5619bcb51b82e4e1765276e9f67fb1e2d23dff968a653657acf35bafff8bf4

Archive (63)

Filename

Md5

File type

build.js

61b6490d371c57d566ae713880f3ab40

JavaScript source, ISO-8859 text, with very long lines (1164), with CRLF line terminators

index.html

b7f3e0aec1e9905b2706285819ad8627

HTML document, ASCII text, with CRLF line terminators

DotNetProjects.Wpf.Extended.Toolkit.dll

8983f161391ab632b9d2aea51a69c4ce

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Updater.exe

e86b6ba53ca8462baeaee561ae187e9f

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

DS4Windows.deps.json

a2a3bbf0765877ce03b5e3a3414d604a

JSON text data

DS4Windows.dll

12ef7ab3e301423c7cd6ed95b52360de

PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.exe

e196e463c0e550d0f49748008fbb27b9

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

DS4Windows.runtimeconfig.json

d2e7aa8f1b739e4896f676105034aa3d

JSON text data

FakerInputDll.dll

7c87a11e5c2bbd4e2414c568ea4f4360

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

FakerInputWrapper.dll

25989ccc74dcf12a2216c196d8c94b9b

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

H.NotifyIcon.dll

a44681119866a16fd9a3461a839559a8

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

H.NotifyIcon.Wpf.dll

be2a9028bc37629428f8b36d58fc4723

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

HttpProgress.dll

e97fb25cb7d477d5c3116f3add7c060e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ICSharpCode.AvalonEdit.dll

7ca104c3e98d3cbd162fdef84edd3b8f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

a9b68e0c6a30fd6a12c6c2b463cb9711

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

07f0ee3755b7ee84d14fee452cc2ca3b

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

cf84bf5a4834ce4dabe93a299148c71e

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

19f3a97f752fd9d5ca2d0f396ff83a3f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

2a8b2787a7f1ea973a381cd74e24aa09

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

373a1e357ab1840419b742b54b5b2271

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

cdeab974eb43d77f6bade325b13aaf73

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

90e175d2a564611f8fa2b92f93598daf

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

76aabce0f9ae5b4fc540ce9638796af0

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

c6d5a977c7451a82704ac03519f0c694

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

a8b12242993bbb4759dfaccf9c9dfabf

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

b553fda88b5a3340a9e26ed78bcd8459

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

2292e95dcd3e7ea8a60bdf081969c0aa

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

bad880518a5d6ac9ef9719589ec6ed9e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

47d8d1bc70a78cd465cd386794e08291

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

9b3fdaba699b3b73dc7c26ad964cde10

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

25b0cfbce4ca49d8a407ebca1f2e534b

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

f8e8d989882282f656c4c85af197cf44

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

8cd586e15f1d08e9e50d421202842570

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

c2c7d5b5de9f61bacc2c9e22db7f3732

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

b6ddd921a4e387b7f77424bfafe28030

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

4fba205648064c0594a2444768eeead1

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

38e68beee1b1693d9c5b39a97620fa1e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DS4Windows.resources.dll

95c19884c1ac45668d20cb978aff4918

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

acd788532ab980ad2425a95dee10db23

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

59af7cff48b36a75d0502f19b6c172b0

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

22db060f4f2829c1c536505f3686a6f0

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

2fa6fbf2345009470412996fae9afac9

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

DS4Windows.resources.dll

a75b4cd0cd7fa6a7bfd8806c3ec4a04b

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Microsoft.Win32.TaskScheduler.resources.dll

367090557d5597a09728b6d264e1f190

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MdXaml.dll

b5cdcf10ce45741ece1c387d10055989

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

MdXaml.Plugins.dll

764571ef7701efe91ab8db6973dd17b9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Win32.TaskScheduler.dll

f991dca7413cb6a9e28ed527205655b5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Nefarius.ViGEm.Client.dll

816e2195f1dfae52d9df622d84bc2795

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

NLog.config

11896215efa8bcec73387ef26ab68619

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

NLog.dll

d530d8481f6df12b200839723c70ad6f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Ookii.Dialogs.Wpf.dll

8b9618ca8a33bc141daf1cafa9e4101b

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Management.dll

631f2191c0977d2c4e027b60bb1980d8

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SharpOSC.dll

7172055ae13d1571b9a516523e18af66

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

System.Management.dll

276550f496b54483a66607af10d72168

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SharpDX.dll

6c00b8be8fb6ff838c79c9de405db1f5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

SharpDX.XInput.dll

b16aaf6fa2e6432e0c342a166e98a372

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

XInputChecker.deps.json

78e8f0d355f9431f57e0724d7ee01afe

JSON text data

XInputChecker.dll

9b705ab9fe6c65f50c0d78a68b5c7630

PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

XInputChecker.exe

dbaa035b5d914b731c636bc44cc61f22

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

XInputChecker.runtimeconfig.json

c4e22c63e6fbafd17fde20fc5830b27f

JSON text data

WPFLocalizeExtension.dll

b7be5ad601b0b488d1ed19c14d2feb55

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

WpfScreenHelper.dll

e07c6bc7a3e5e33a01aa8d2115f87e35

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

XAMLMarkupExtensions.dll

5dcced37c71c67061cef2ca0a6f42487

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
VirusTotal	suspicious	VirusTotal - Scan result 1/65

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET ds4-window.com/files/DS4Windows_3.3.3_x64.zip

188.114.96.1

200 OK

4.3 MB

URL User Request GET HTTP/2
ds4-window.com/files/DS4Windows_3.3.3_x64.zip
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectds4-window.com
FingerprintB5:61:68:83:79:2F:F1:D4:F6:61:03:A2:0E:08:C7:72:EE:B0:2B:3F
ValidityFri, 13 Dec 2024 10:06:22 GMT - Thu, 13 Mar 2025 11:04:35 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
4.3 MB (4306953 bytes)
Hash
b35e3aaeb5ffca32d4b426474a755361
e869c8164400e1801e48c561b608e84a91515109
cf5619bcb51b82e4e1765276e9f67fb1e2d23dff968a653657acf35bafff8bf4

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/65

HTTP Headers

GET /files/DS4Windows_3.3.3_x64.zip HTTP/1.1
Host: ds4-window.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 30 Dec 2024 04:59:08 GMT
content-type: application/zip
content-length: 4306953
last-modified: Fri, 13 Dec 2024 17:05:07 GMT
etag: "675c6943-41b809"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6NxLbzmYSK76yGiXPa3xsbZUK9j9WsjigfQCaANe2XuYJsJ1%2BLtjFaCO%2BJWTErQ%2BZ3ctaw9KjDFCJjFXHzSNIYDftGTbo1c242F5X%2FDiHc%2BqfGGJrmIXODqYMFTnRQRH7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f9f756ca8a05690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfCacheStatus;desc="MISS", cfL4;desc="?proto=TCP&rtt=5695&min_rtt=471&rtt_var=10466&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3280&recv_bytes=1267&delivery_rate=7581151&cwnd=254&unsent_bytes=0&cid=16241f5e7c2c3beb&ts=444&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (63)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers