Report - content.elprotronic.ca/downloads/drivers/DriversInstaller-XS-X2S-SC-GANG-CMSIS-DAP-24H2.zip

Report Overview

Visitedpublic

2024-12-09 18:36:35

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
content.elprotronic.ca	unknown	2014-07-30	2015-03-31	2024-10-29	545 B	2.6 MB	172.67.73.31

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

content.elprotronic.ca/downloads/drivers/DriversInstaller-XS-X2S-SC-GANG-CMSIS-DAP-24H2.zip

IP / ASN

172.67.73.31

#13335 CLOUDFLARENET

File Overview

File TypeZip archive data, at least v2.0 to extract, compression method=store

Size2.6 MB (2604495 bytes)

MD5b1b42997b2dc0b2727a34f31634bd9a6

SHA1d5940ba6604fa64eda373da15d2fd5a7f76b057c

SHA256fc95cf7a0f6a52b20a75da421bad38322f6f99f2d31eb9a541e1c47534384988

Archive (8)

Modified	Filename	Size	MD5	File type
2024-10-11 13:31	dpinst.exe	556 kB	7779ddb23b1712d43437c209450bcaf9	PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections
2024-10-11 10:24	xstream.cat	12 kB	a5ad04eab7af6896194aafe936fd909f	DER Encoded PKCS#7 Signed Data
2024-10-11 10:24	XStream.inf	6.3 kB	5fb02bd8e0e2593beccb7c587f60122b	Windows setup INFormation
2024-10-11 13:31	DPInst64.exe	1.1 MB	32a40a5da87e4147df696a3f58f58cd4	PE32+ executable (GUI) x86-64, for MS Windows, 5 sections
2024-10-11 10:24	xstream.cat	12 kB	a5ad04eab7af6896194aafe936fd909f	DER Encoded PKCS#7 Signed Data
2024-10-11 10:24	XStream.inf	6.3 kB	5fb02bd8e0e2593beccb7c587f60122b	Windows setup INFormation
2024-10-11 13:30	XS-DriverInstaller.exe	2.0 MB	0e48464e1e5ffe7d5a4d2bbabf80f3c7	PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections
2024-10-11 13:30	XS-DriverUninstaller.exe	2.0 MB	f4b8fdb5d6e32f600691f05bd43c8596	PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 8/68

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET content.elprotronic.ca/downloads/drivers/DriversInstaller-XS-X2S-SC-GANG-CMSIS-DAP-24H2.zip

172.67.73.31

200 OK

2.6 MB

URL

content.elprotronic.ca/downloads/drivers/DriversInstaller-XS-X2S-SC-GANG-CMSIS-DAP-24H2.zip

IP / ASN

172.67.73.31

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeZip archive data, at least v2.0 to extract, compression method=store

First Seen2024-12-09

Last Seen2024-12-09

Times Seen1

Size2.6 MB (2604495 bytes)

MD5b1b42997b2dc0b2727a34f31634bd9a6

SHA1d5940ba6604fa64eda373da15d2fd5a7f76b057c

SHA256fc95cf7a0f6a52b20a75da421bad38322f6f99f2d31eb9a541e1c47534384988

Certificate Info

IssuerGoogle Trust Services

Subjectelprotronic.ca

Fingerprint13:2B:82:80:57:D1:D7:89:D2:E4:FE:02:ED:12:B1:F3:E4:D1:1B:CE

ValidityTue, 12 Nov 2024 11:35:12 GMT - Mon, 10 Feb 2025 11:35:11 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 8/68

HTTP Headers

GET /downloads/drivers/DriversInstaller-XS-X2S-SC-GANG-CMSIS-DAP-24H2.zip HTTP/1.1
Host: content.elprotronic.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 09 Dec 2024 18:36:10 GMT
content-type: application/zip
content-length: 2604495
last-modified: Fri, 11 Oct 2024 17:37:45 GMT
etag: "27bdcf-62436f1deac40"
cache-control: max-age=43200
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fF2%2Bg3SymTX6CC5WCa5a8DWypLOT9QtO1mK94C0sLIDvKDfu8C2Vb0Ph9qcx7QM9fUDUvIdK0xTm0ltyWTwX7h66GUqq7BlUDkX9RDBfapSeIKoGpgbE0qNUA9rOzyGsFVGu8gg28q4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ef71965080e0afe-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=6233&min_rtt=465&rtt_var=11293&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3281&recv_bytes=1308&delivery_rate=2867326&cwnd=240&unsent_bytes=0&cid=a9a8f0fe9695a9e3&ts=285&x=0"
X-Firefox-Spdy: h2