Report Overview
Visitedpublic
2025-04-30 06:15:46
Tags
Submit Tags
URL
45.9.148.125/pipsi-hsr-1.3.6.zip
Finishing URL
about:privatebrowsing
IP / ASN
45.9.148.125
#49447 Nice IT Services Group Inc.
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
45.9.148.125
unknownunknown2019-12-062023-07-19

Related reports

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
medium45.9.148.125Sinkholed
medium45.9.148.125Sinkholed

ThreatFox

No alerts detected


File detected

URL
45.9.148.125/pipsi-hsr-1.3.6.zip
IP / ASN
45.9.148.125
#49447 Nice IT Services Group Inc.
File Overview
File TypeZip archive data, at least v1.0 to extract, compression method=store
Size3.0 MB (3012378 bytes)
MD58e47dd882ffe6fb5b84bc29f28583aab
SHA182e5f1b7af42c8a47e602dad46781c978ddf3415
Archive (6)
FilenameMD5File type
Bypass.dll0170670316c3c04c66b769da1988415ePE32+ executable (DLL) (console) x86-64, for MS Windows, 9 sections
Cheat.dll7a7cced1f68daec233e1b004629f0348PE32+ executable (DLL) (console) x86-64, for MS Windows, 9 sections
Launcher.exec65de2aa08a99df95d61c65ca5f0ee9ePE32+ executable (console) x86-64, for MS Windows, 7 sections
Bypass.dll2da7214ffb11b498d0a0a5695d434050PE32+ executable (DLL) (console) x86-64, for MS Windows, 9 sections
Cheat.dlld1fa40971cec36bccd24c9a9f2717348PE32+ executable (DLL) (console) x86-64, for MS Windows, 9 sections
Launcher.execd3292883801a1a0f640f3a092517609PE32+ executable (console) x86-64, for MS Windows, 7 sections

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
meth_stackstrings
YARAhub by abuse.chmalware
meth_stackstrings
VirusTotalmalicious
VirusTotal - Scan result 17/67

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize