Report Overview
Submitted URL
dl-dr-4.xyz/drv/24/intel-power-sharing-manager-protocol_3.0.0.1.zip
IP
89.41.180.201
ASN
#25198 Interkvm Host Srl
Submitted
2024-04-19 15:48:55
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
4
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
dl-dr-4.xyz | unknown | 2023-06-04 | 2023-06-04 | 2024-04-17 | 521 B | 5.3 MB | 89.41.180.201 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Timestamp | Severity | Source IP | Destination IP | Alert |
---|---|---|---|---|
2024-04-19 15:48:28 | medium | 89.41.180.201 | Client IP |
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-04-19 | medium | dl-dr-4.xyz | Sinkholed |
ThreatFox
No alerts detected
Files detected
URL
dl-dr-4.xyz/drv/24/intel-power-sharing-manager-protocol_3.0.0.1.zip
IP
89.41.180.201
ASN
#25198 Interkvm Host Srl
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
5.3 MB (5318000 bytes)
Hash
6acb47884c9953b38466efcc1e187358
ae0f1736fdb1f347f20858f9f9cd9d52a0ea2add
Archive (22)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
BPRGInst.exe | 727d48e7a7f7ff3d8cb4e7e98bfb1370 | PE32 executable (console) Intel 80386, for MS Windows, 5 sections | |||
PSM.inf | d9fc4f9345fb479992c32a09ea660ce1 | Windows setup INFormation | |||
PSM.sys | 13d6a96a2d8a082c1254754dcc00dace | PE32 executable (native) Intel 80386, for MS Windows, 7 sections | |||
PSM_P.inf | 26a082f2dbc8d9c246e01b64545ecfb2 | Windows setup INFormation | |||
PsmWUCoinstaller01.dll | 18de58e3ec207661e93c33fd45246cf3
| PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections | |||
WdfCoinstaller01009.dll | f067d422df900e1355187fc5807d39d8 | PE32 executable (DLL) (console) Intel 80386, for MS Windows, 4 sections | |||
WdfCoinstaller01011.dll | 3d2a2d921135801835073451f002480f | PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections | |||
WiGigClassInstaller.dll | 2ebb75af12093efaab71ff0bef916a7f | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections | |||
iWiGiG.inf | d6a5554c34280cf700c453e9313402ec | Windows setup INFormation | |||
iWiGiG.sys | c7fe2ffbaae9e53df9eed49f5941b4b7
| PE32 executable (native) Intel 80386, for MS Windows, 7 sections | |||
iWiGigUM.dll | a190bf75fd1c5c0010a2df806bebf6be | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections | |||
iWiGigUM.inf | 2d7de3ff555fd648f86b68b797b400d8 | Windows setup INFormation | |||
imausbhpal.cat | b3d2f141193ad396afa2cf1d353e1e74 | DER Encoded PKCS#7 Signed Data | |||
imausbhpal.inf | a31b7bf66df9f506a2d91c0dde56ef7b | Windows setup INFormation | |||
imausbhpal.sys | 446309940f09415c2d2ecc644da6230a | PE32 executable (native) Intel 80386, for MS Windows, 7 sections | |||
imausbhub.cat | 68845f687e4a7309289126c3ad4a7486 | DER Encoded PKCS#7 Signed Data | |||
imausbhub.inf | f4cd374281a8f865d32712128119400d | Windows setup INFormation | |||
imausbhub.sys | 3ae22dd4cfdc3cd574fdc3d4fd6526ee | PE32 executable (native) Intel 80386, for MS Windows, 9 sections | |||
iwigig.cat | fd6dcc2498f241b60227f4f926befafa | DER Encoded PKCS#7 Signed Data | |||
iwigigum.cat | b261af8b36672b26b5ec532fe7aa7bfc | DER Encoded PKCS#7 Signed Data | |||
psm.cat | 199eb5f798f833493617eb2f961ba411 | DER Encoded PKCS#7 Signed Data | |||
psm.cat.tmp | b044b368ce96f123a85bac8e55fcb688 | DER Encoded PKCS#7 Signed Data |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | meth_get_eip |
YARAhub by abuse.ch | malware | signed_sys_with_vulnerablity |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
dl-dr-4.xyz/drv/24/intel-power-sharing-manager-protocol_3.0.0.1.zip | 89.41.180.201 | 200 OK | 5.3 MB | |||||||
Detections
HTTP Headers
| ||||||||||