Report - crystalmark.info/download/archive/CrystalCPUID/CrystalCPUID49.zip

Report Overview

Visited public
2025-05-03 00:40:01
Tags
URL
crystalmark.info/download/archive/CrystalCPUID/CrystalCPUID49.zip
Finishing URL
about:privatebrowsing
IP / ASN
162.43.120.121
#131965 Xserver Inc.
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
crystalmark.info	109634	2003-07-24	2012-05-22	2025-04-30	533 B	534 kB	162.43.120.121

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
crystalmark.info/download/archive/CrystalCPUID/CrystalCPUID49.zip
IP
162.43.120.121
ASN
#131965 Xserver Inc.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
534 kB (534138 bytes)
Hash
ca1c0afc750905759b47e4e318ef6400
1b8a08e3737ca989cbadb6f98f77009f3d79d001
3eb0caec17684521247778633648d618784eb99426296812839ac3a5b787335b

Archive (16)

Filename

Md5

File type

SysInfo.txt

e92dda0eef21ec410d2ecdaf2509177f

Non-ISO extended-ASCII text, with CRLF, NEL line terminators

CrystalCPUID.txt

0e36e8e3ae68acd3413fcd4b1b172477

Non-ISO extended-ASCII text, with CRLF, NEL line terminators

ReadMeCpuid.txt

ef0409d254eceb7840d38d00802b7ad8

ASCII text, with CRLF line terminators

ReadMeCpuidJ.txt

f19c112971be51952708b4dac66de911

Non-ISO extended-ASCII text, with CRLF, NEL line terminators

chip.pci

581896ebc0a9fff9ab2df4cffbf9ea6d

ASCII text, with CRLF line terminators

chipset.pci

4c0e46983ff148795837fd55060a7eb0

ASCII text, with CRLF line terminators

class.pci

371cc8ae67547ad8ddbd56e367654062

ASCII text, with CRLF line terminators

pci.db

404881102cae479fa2930fb0b6bd9bd4

ASCII text, with CRLF line terminators

vendor.pci

541205dc3f6c9160ad4b16202ab7e753

ASCII text, with CRLF line terminators

video.pci

3fe245f440b5013a92e6c8d3a73a5988

Generic INItialization configuration [secondary]

SysInfoX64.sys

6dce259fa720ddd353293bdb2ba21b93

PE32+ executable (native) x86-64, for MS Windows, 6 sections

SysInfo.dll

bb349bee20c8b712de103b6dd3f4f225

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

SysInfo.sys

b471e3893d90fcd60471c0514c080d1d

PE32 executable (native) Intel 80386, for MS Windows, 5 sections

SysInfo.vxd

06f45ca3adb5a6baab86a489e97195d3

MS-DOS executable, LE executable for MS Windows (VxD)

SysInfoNT4.sys

9d5ac998ed087bdcfbcd48a36a3bf905

PE32 executable (native) Intel 80386, for MS Windows, 5 sections

CrystalCPUID.exe

c2f5cc49cb4a4fb6c80ca60b73618f4d

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/68

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

crystalmark.info/download/archive/CrystalCPUID/CrystalCPUID49.zip

162.43.120.121

200 OK

534 kB

URL User Request GET
crystalmark.info/download/archive/CrystalCPUID/CrystalCPUID49.zip
IP
162.43.120.121:443
ASN
#131965 Xserver Inc.

Certificate
IssuerLet's Encrypt
Subjectwww.crystalmark.info
Fingerprint72:7D:F6:00:54:40:BD:56:C0:58:52:3F:16:BD:AD:1B:DE:3F:E4:57
ValidityTue, 08 Apr 2025 03:06:47 GMT - Mon, 07 Jul 2025 03:06:46 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
534 kB (534138 bytes)
Hash
ca1c0afc750905759b47e4e318ef6400
1b8a08e3737ca989cbadb6f98f77009f3d79d001
3eb0caec17684521247778633648d618784eb99426296812839ac3a5b787335b

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/68

HTTP Headers

GET /download/archive/CrystalCPUID/CrystalCPUID49.zip HTTP/1.1
Host: crystalmark.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 03 May 2025 00:39:29 GMT
content-type: application/zip
content-length: 534138
last-modified: Sat, 01 Mar 2008 15:00:00 GMT
etag: "8267a-4476168a6bc00"
cache-control: s-maxage=10
accept-ranges: bytes
X-Firefox-Spdy: h2