Report - airspy.com/downloads/sdrsharp-x86.zip

Report Overview

Submitted URL
airspy.com/downloads/sdrsharp-x86.zip
IP
104.21.78.140
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-25 21:28:18
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
7

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
airspy.com	unknown	2013-04-22	2014-02-26	2024-01-24	491 B	2.8 MB	104.21.78.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
airspy.com/downloads/sdrsharp-x86.zip
IP
104.21.78.140
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
2.8 MB (2781674 bytes)
Hash
d4e8aaca250217235ab3f9ebadada7ae
479c1f9455faadb117f1ad20c2ede6d0e5a1afdb
d20e3fd4109dc5a884d35c2bbb58bc41ba1ed722262b4acfa28e064b7f756678

Archive (19)

Filename

Md5

File type

airspy.dll

82295f5b5458074b39f252871bd44d73

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 6 sections

airspyhf.dll

9ed2330381749287e306fa365da53ef0

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

aor_iq.dll

2f017587733010e2775199340c0b2456

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

aor_iq_receiver.exe

0550fe6688d0e0f326177a13360126d0

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

BandPlan.xml

f084bf5455775e2fbdf76dc90c8b74a2

XML 1.0 document, ASCII text

hackrf.dll

01a4da06bc9afe49d4b65006984d2cd6

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections

httpget.exe

023645fcb885ae8322b5128ebe74de68

PE32 executable (console) Intel 80386, for MS Windows, 5 sections

install-rtlsdr.bat

ca27717726bedd6be4eefdf8a58ed0c9

DOS batch file, ASCII text, with CRLF line terminators

libusb-1.0.dll

4aa3b67c378b399020733692f5b8b4e2

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 4 sections

msvcr100.dll

f9c5fd78dbe91702d4a24918d0387cf4

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections

msvcr120.dll

8b97c6b035211ea651ba4e41035eeda0

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

PortAudio.dll

f235b9adb6d124ee71e1ecf55cc3bc7c

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

pthreadVCE2.dll

7f9477467c996642f24323ae62698a43

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

sdriq.dll

c594c078271480022a214add1d04f54e

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

SDRSharp.config

930ce278446e77087985c24d0ba9ada5

XML 1.0 document, ASCII text, with CRLF line terminators

SDRSharp.exe

82cac5b3c27379b3fa1fbd54827b72a3

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

shark.dll

9b8858eb96fd6391190ef0e141f9edd9

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

unzip.exe

9fef36be1188b70e4e31be52bb19453c

PE32 executable (console) Intel 80386, for MS Windows, 3 sections

zip.exe

83af340778e7c353b9a2d2a788c3a13a

PE32 executable (console) Intel 80386, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 1/65

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

airspy.com/downloads/sdrsharp-x86.zip

104.21.78.140

200 OK

2.8 MB

URL User Request GET HTTP/2
airspy.com/downloads/sdrsharp-x86.zip
IP
104.21.78.140:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectairspy.com
Fingerprint73:AA:E0:9D:5E:6A:7A:09:5A:AA:75:5A:1E:6E:85:D5:51:B2:B8:C7
ValiditySat, 30 Mar 2024 04:41:03 GMT - Fri, 28 Jun 2024 04:41:02 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
2.8 MB (2781674 bytes)
Hash
d4e8aaca250217235ab3f9ebadada7ae
479c1f9455faadb117f1ad20c2ede6d0e5a1afdb
d20e3fd4109dc5a884d35c2bbb58bc41ba1ed722262b4acfa28e064b7f756678

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/65

HTTP Headers

GET /downloads/sdrsharp-x86.zip HTTP/1.1
Host: airspy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:27:50 GMT
content-type: application/zip
content-length: 2781674
vary: X-Forwarded-Proto,Accept-Encoding
last-modified: Thu, 25 Apr 2024 09:30:51 GMT
etag: "2a71ea-616e8716fcea7"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 5117
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nIxh4MVN8YhxNeDRiB%2BvMkyYrHZTaPPJ2Kyk8SYGBtoH%2FKZoaSr6tqlaWv%2BuXy6YBqN5LIiJZOazV%2BXVtgnTDzYqMTEVEH9y%2FPZ0y2Ix9LngzHVS5TvssGK3ALxn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a16b5fa859569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (19)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers