Report Overview
Submitted URL
dl-dr-4.xyz/drv/old/Intel-FORCED-81x64-WIGIG_3.0.34123.7_old-drp.zip
IP
89.41.180.201
ASN
#25198 Interkvm Host Srl
Submitted
2024-04-19 15:49:10
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
3
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
dl-dr-4.xyz | unknown | 2023-06-04 | 2023-06-04 | 2024-04-18 | 522 B | 6.9 MB | 89.41.180.201 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Timestamp | Severity | Source IP | Destination IP | Alert |
---|---|---|---|---|
2024-04-19 15:48:42 | medium | 89.41.180.201 | Client IP |
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-04-19 | medium | dl-dr-4.xyz | Sinkholed |
ThreatFox
No alerts detected
Files detected
URL
dl-dr-4.xyz/drv/old/Intel-FORCED-81x64-WIGIG_3.0.34123.7_old-drp.zip
IP
89.41.180.201
ASN
#25198 Interkvm Host Srl
File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
6.9 MB (6904405 bytes)
Hash
efb10d3534ab7284d5172e0e82d72d8d
842f18e1ceef32ac6883b517dcbd19ce141d1786
Archive (19)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
BPRGInst.exe | 359fb4fc041ddaae34556dee33630eb1 | PE32+ executable (console) x86-64, for MS Windows, 6 sections | |||
Dock_Image.pack | ddda26e190fbc15668d822640c9a47b8 | data | |||
Dock_Image_Production.pack | e2e445e0179ffc9fa73e17ff1ac6aa79 | data | |||
Names.xml | 8de677a5d068571317e3772c7872a98c | XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators | |||
WdfCoinstaller01011.dll | d10864c1730172780c2d4be633b9220a | PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections | |||
WiGigClassInstaller.dll | 52ce1a474c509e717edc1ab5033a0399 | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections | |||
WiGigFW.elf | 913bbc644f8fafb6baa31dd3bb72ce81 | ELF 32-bit LSB executable, Synopsys ARCompact ARC700 cores, version 1 (SYSV) | |||
iWiGiG.inf | 4309fccab7f29f62d03d19adf4191ed1 | Windows setup INFormation | |||
iWiGiG.sys | 990794a635a31231c386f1a5c7b70ae2
| PE32+ executable (native) x86-64, for MS Windows, 8 sections | |||
iWiGigUM.dll | 762301eabe5fa2da377a5dc65cfdbb92 | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections | |||
iWiGigUM.inf | 2e641f2a5835a5c7afaa9bca7ed82872 | Windows setup INFormation | |||
imausbhpal.cat | dda6ff879aa3d8d25f8bf500c6a06077 | DER Encoded PKCS#7 Signed Data | |||
imausbhpal.inf | 6014b2c60fa239a059d5e9854d6a8980 | Windows setup INFormation | |||
imausbhpal.sys | 41618c755c1995b8886a5af30abf99e9 | PE32+ executable (native) x86-64, for MS Windows, 8 sections | |||
imausbhub.cat | 7b0cee23588aa0a68f1db46bb053e06d | DER Encoded PKCS#7 Signed Data | |||
imausbhub.inf | a01837a1cddb5e6e7f15f9c0a56aae23 | Windows setup INFormation | |||
imausbhub.sys | 8b2d6e2dcedc8bfae9c8d2204357fbea | PE32+ executable (native) x86-64, for MS Windows, 10 sections | |||
iwigig.cat | 2b6add049ec387ccd0cbeeab725fed2a | DER Encoded PKCS#7 Signed Data | |||
iwigigum.cat | a51f17424ccf60ece8d870906a067308 | DER Encoded PKCS#7 Signed Data |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | signed_sys_with_vulnerablity |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
dl-dr-4.xyz/drv/old/Intel-FORCED-81x64-WIGIG_3.0.34123.7_old-drp.zip | 89.41.180.201 | 200 OK | 6.9 MB | |||||||
Detections
HTTP Headers
| ||||||||||