Report - dlgbit.winfuture.de/CHQjZ3rm4Z6NPo8cSaom6w/1734728818/3017/software/produkey/1.97/produkey-x64.zip

Report Overview

Visited public
2024-12-20 09:28:36
Tags
URL
dlgbit.winfuture.de/CHQjZ3rm4Z6NPo8cSaom6w/1734728818/3017/software/produkey/1.97/produkey-x64.zip
Finishing URL
about:privatebrowsing
IP / ASN
212.53.203.76
#8893 Artfiles New Media GmbH
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dlgbit.winfuture.de	unknown	unknown	2017-02-01	2024-12-08	552 B	112 kB	212.53.203.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
dlgbit.winfuture.de/CHQjZ3rm4Z6NPo8cSaom6w/1734728818/3017/software/produkey/1.97/produkey-x64.zip
IP
212.53.203.76
ASN
#8893 Artfiles New Media GmbH

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
112 kB (111654 bytes)
Hash
92355337eef70cac2b5a4d107a8117a7
2a9a163a6bf7bdf46501eeaf863fb98665e080f9
f96cc6afe52368be9b9e851f28dcb24830a3738e9e5687989b421a2cc8c5da06

Archive (3)

Filename

Md5

File type

ProduKey.exe

bd8f7ce4f2b41cc827b02c239b36cff8

PE32+ executable (GUI) x86-64, for MS Windows, 5 sections

ProduKey.chm

043023f6b2362cdd1b9b6cf766de3f76

MS Windows HtmlHelp Data

readme.txt

f10b89d722f41fc4dc606cc3bf1a7e74

ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 34/67

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

dlgbit.winfuture.de/CHQjZ3rm4Z6NPo8cSaom6w/1734728818/3017/software/produkey/1.97/produkey-x64.zip

212.53.203.76

200 OK

112 kB

URL User Request GET HTTP/2
dlgbit.winfuture.de/CHQjZ3rm4Z6NPo8cSaom6w/1734728818/3017/software/produkey/1.97/produkey-x64.zip
IP
212.53.203.76:443
ASN
#8893 Artfiles New Media GmbH

Certificate
IssuerLet's Encrypt
Subjectdlgbit.winfuture.de
FingerprintD9:76:B0:BB:E7:7E:A1:2C:15:18:48:B1:63:17:6A:E8:4A:4E:EE:CC
ValidityMon, 04 Nov 2024 05:06:31 GMT - Sun, 02 Feb 2025 05:06:30 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
112 kB (111654 bytes)
Hash
92355337eef70cac2b5a4d107a8117a7
2a9a163a6bf7bdf46501eeaf863fb98665e080f9
f96cc6afe52368be9b9e851f28dcb24830a3738e9e5687989b421a2cc8c5da06

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 34/67

HTTP Headers

GET /CHQjZ3rm4Z6NPo8cSaom6w/1734728818/3017/software/produkey/1.97/produkey-x64.zip HTTP/1.1
Host: dlgbit.winfuture.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 20 Dec 2024 09:28:11 GMT
content-type: application/zip
content-length: 111654
last-modified: Sun, 18 Apr 2021 07:59:35 GMT
etag: "607be6e7-1b426"
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (3)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers