Report Overview
Visitedpublic
2025-02-04 14:29:53
Tags
Submit Tags
URL
xz.927game.com/pc/hidatarecovery_4654B612.exe?manufc=0cbgp3
Finishing URL
xz.927game.com/pc/hidatarecovery_4654B612.exe?manufc=0cbgp3
IP / ASN
61.164.242.163
#136190 JINHUA, ZHEJIANG Province, P.R.China.
Title
xz.927game.com/pc/hidatarecovery_4654B612.exe?manufc=0cbgp3

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
xz.927game.com
unknown2014-05-102024-05-042025-01-24

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
high
61.164.242.163
Client IPET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
xz.927game.com/pc/hidatarecovery_4654B612.exe?manufc=0cbgp3&acnexa=wsnhg2
IP / ASN
61.164.242.163
#136190 JINHUA, ZHEJIANG Province, P.R.China.
File Overview
File TypePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections
Size1.6 MB (1569992 bytes)
MD58fb6645e0f40fe123077175c4df42271
SHA1cf1c3299669174b73c55453880ed7ed8761cf196

Detections

AnalyzerVerdictAlert
VirusTotalsuspicious

JavaScript (6)

HTTP Transactions (5)

URLIPResponseSize