Report Overview
Submitted URL
dl-dr-4.xyz/drv/old/Intel-FORCED-7x64-WIGIG_3.0.34123.7_old-drp.zip
IP
89.41.180.201
ASN
#25198 Interkvm Host Srl
Submitted
2024-04-19 15:48:59
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
3
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
dl-dr-4.xyz | unknown | 2023-06-04 | 2023-06-04 | 2024-04-18 | 521 B | 6.9 MB | 89.41.180.201 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Timestamp | Severity | Source IP | Destination IP | Alert |
---|---|---|---|---|
2024-04-19 15:48:31 | medium | 89.41.180.201 | Client IP |
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-04-19 | medium | dl-dr-4.xyz | Sinkholed |
ThreatFox
No alerts detected
Files detected
URL
dl-dr-4.xyz/drv/old/Intel-FORCED-7x64-WIGIG_3.0.34123.7_old-drp.zip
IP
89.41.180.201
ASN
#25198 Interkvm Host Srl
File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
6.9 MB (6930801 bytes)
Hash
07f72e617afbf210f12ffd4e3415830b
d692da5b8495be890c0d9301d9d5a9637990c594
Archive (22)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
BPRGInst.exe | 359fb4fc041ddaae34556dee33630eb1 | PE32+ executable (console) x86-64, for MS Windows, 6 sections | |||
Dock_Image.pack | ddda26e190fbc15668d822640c9a47b8 | data | |||
Dock_Image_Production.pack | e2e445e0179ffc9fa73e17ff1ac6aa79 | data | |||
Names.xml | 8de677a5d068571317e3772c7872a98c | XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators | |||
WdfCoinstaller01011.dll | d10864c1730172780c2d4be633b9220a | PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections | |||
WiGigClassInstaller.dll | 52ce1a474c509e717edc1ab5033a0399 | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections | |||
WiGigFW.elf | 913bbc644f8fafb6baa31dd3bb72ce81 | ELF 32-bit LSB executable, Synopsys ARCompact ARC700 cores, version 1 (SYSV) | |||
iWiGiG.inf | 4309fccab7f29f62d03d19adf4191ed1 | Windows setup INFormation | |||
iWiGiG.sys | 990794a635a31231c386f1a5c7b70ae2
| PE32+ executable (native) x86-64, for MS Windows, 8 sections | |||
iWiGigUM.dll | 762301eabe5fa2da377a5dc65cfdbb92 | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections | |||
iWiGigUM.inf | 2e641f2a5835a5c7afaa9bca7ed82872 | Windows setup INFormation | |||
imausbhpal.cat | e0d6d954b1fa10a84fe3d52ddf17e03d | DER Encoded PKCS#7 Signed Data | |||
imausbhpal.inf | 6014b2c60fa239a059d5e9854d6a8980 | Windows setup INFormation | |||
imausbhpal.sys | bba27e79174912c1ce963edbe8dfdd1f | PE32+ executable (native) x86-64, for MS Windows, 8 sections | |||
imausbhub.cat | 83bc8daa3c06f79319b5725d6370051e | DER Encoded PKCS#7 Signed Data | |||
imausbhub.inf | a01837a1cddb5e6e7f15f9c0a56aae23 | Windows setup INFormation | |||
imausbhub.sys | 334c2f372690d82a83de0e06f16f1321 | PE32+ executable (native) x86-64, for MS Windows, 10 sections | |||
iwgnet.cat | b7f45d75111761932abe1b9c0bf2db42 | DER Encoded PKCS#7 Signed Data | |||
iwgnet.inf | f5b48c9ce67f5ca43d786367b3a91449 | Windows setup INFormation | |||
iwgnet.sys | 70cc03e540c6f1a29405d481dbedadd8 | PE32+ executable (native) x86-64, for MS Windows, 7 sections | |||
iwigig.cat | 62ff348686d582e7fd039ab818fa694c | DER Encoded PKCS#7 Signed Data | |||
iwigigum.cat | aee5c6f66415926e8fa2ae12961efb4f | DER Encoded PKCS#7 Signed Data |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | signed_sys_with_vulnerablity |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
dl-dr-4.xyz/drv/old/Intel-FORCED-7x64-WIGIG_3.0.34123.7_old-drp.zip | 89.41.180.201 | 200 OK | 6.9 MB | |||||||
Detections
HTTP Headers
| ||||||||||