Report Overview

  1. Visited public
    2025-02-04 14:29:53
    Tags
  2. URL

    xz.927game.com/pc/hidatarecovery_4654B612.exe?manufc=0cbgp3

  3. Finishing URL

    xz.927game.com/pc/hidatarecovery_4654B612.exe?manufc=0cbgp3

  4. IP / ASN
    61.164.242.163

    #136190 JINHUA, ZHEJIANG Province, P.R.China.

    Title
    xz.927game.com/pc/hidatarecovery_4654B612.exe?manufc=0cbgp3
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
xz.927game.comunknown2014-05-102024-05-042025-01-24

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
high 61.164.242.163Client IP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    xz.927game.com/pc/hidatarecovery_4654B612.exe?manufc=0cbgp3&acnexa=wsnhg2

  2. IP

    61.164.242.163

  3. ASN

    #136190 JINHUA, ZHEJIANG Province, P.R.China.

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

    Size

    1.6 MB (1569992 bytes)

  2. Hash

    8fb6645e0f40fe123077175c4df42271

    cf1c3299669174b73c55453880ed7ed8761cf196

    Detections

    AnalyzerVerdictAlert
    VirusTotalsuspicious

JavaScript (6)

HTTP Transactions (5)

URLIPResponseSize
xz.927game.com/
61.164.242.163200 OK857 B
xz.927game.com/pc/hidatarecovery_4654B612.exe?manufc=0cbgp3
61.164.242.163200 OK941 B
xz.927game.com/favicon.ico
61.164.242.163404 Not Found1.2 kB
xz.927game.com/
61.164.242.163200 OK854 B
xz.927game.com/pc/hidatarecovery_4654B612.exe?manufc=0cbgp3&acnexa=wsnhg2
61.164.242.163200 OK1.6 MB