Report - crystalmark.info/download/archive/CrystalCPUID/CrystalCPUID47Beta.zip

Report Overview

Visited public
2025-05-03 04:11:47
Tags
URL
crystalmark.info/download/archive/CrystalCPUID/CrystalCPUID47Beta.zip
Finishing URL
about:privatebrowsing
IP / ASN
162.43.120.121
#131965 Xserver Inc.
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
crystalmark.info	109634	2003-07-24	2012-05-22	2025-04-30	537 B	482 kB	162.43.120.121

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
crystalmark.info/download/archive/CrystalCPUID/CrystalCPUID47Beta.zip
IP
162.43.120.121
ASN
#131965 Xserver Inc.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
481 kB (481207 bytes)
Hash
e77a15b24af1e4c25701bac99690c076
d1420f841176842a1e20065bc9d759c37d54ae78
4f14a6be25fe99a554cea9f7a3fa035ef75dfd2c2f78b6cd9f2df62a5168eea8

Archive (16)

Filename

Md5

File type

SysInfo.txt

0647749b7b0102301d3c71ea0582393c

Non-ISO extended-ASCII text, with CRLF, NEL line terminators

CrystalCPUID.txt

0c10ddb6dbe127f372f9e4138d160223

Non-ISO extended-ASCII text, with CRLF, NEL line terminators

ReadMeCpuid.txt

79833a2142336faace7c5ea9fc4cb7a5

ASCII text, with CRLF line terminators

ReadMeCpuidJ.txt

d666fc52788939aa1eddb4e563716bdd

Non-ISO extended-ASCII text, with CRLF, NEL line terminators

chip.pci

a05b63512e1f7274753b9e76f34fd16d

ASCII text, with CRLF line terminators

chipset.pci

df5408b3a74e8bca6a573bccb3f00df8

ASCII text, with CRLF line terminators

class.pci

371cc8ae67547ad8ddbd56e367654062

ASCII text, with CRLF line terminators

pci.db

6852632f983e64bf66fb21463baefe90

ASCII text, with CRLF line terminators

vendor.pci

541205dc3f6c9160ad4b16202ab7e753

ASCII text, with CRLF line terminators

video.pci

bf874bf67ef5bd50e49856782ed7a7bd

Generic INItialization configuration [secondary]

SysInfoX64.sys

6dce259fa720ddd353293bdb2ba21b93

PE32+ executable (native) x86-64, for MS Windows, 6 sections

SysInfo.dll

06d93ac203ec86944f4af25ae2021f25

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

SysInfo.sys

b471e3893d90fcd60471c0514c080d1d

PE32 executable (native) Intel 80386, for MS Windows, 5 sections

SysInfo.vxd

06f45ca3adb5a6baab86a489e97195d3

MS-DOS executable, LE executable for MS Windows (VxD)

SysInfoNT4.sys

9d5ac998ed087bdcfbcd48a36a3bf905

PE32 executable (native) Intel 80386, for MS Windows, 5 sections

CrystalCPUID.exe

1b71155ebf3cfd2b35f6a664cb8ce1a9

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

crystalmark.info/download/archive/CrystalCPUID/CrystalCPUID47Beta.zip

162.43.120.121

200 OK

481 kB

URL User Request GET
crystalmark.info/download/archive/CrystalCPUID/CrystalCPUID47Beta.zip
IP
162.43.120.121:443
ASN
#131965 Xserver Inc.

Certificate
IssuerLet's Encrypt
Subjectwww.crystalmark.info
Fingerprint72:7D:F6:00:54:40:BD:56:C0:58:52:3F:16:BD:AD:1B:DE:3F:E4:57
ValidityTue, 08 Apr 2025 03:06:47 GMT - Mon, 07 Jul 2025 03:06:46 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
481 kB (481207 bytes)
Hash
e77a15b24af1e4c25701bac99690c076
d1420f841176842a1e20065bc9d759c37d54ae78
4f14a6be25fe99a554cea9f7a3fa035ef75dfd2c2f78b6cd9f2df62a5168eea8

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/66

HTTP Headers

GET /download/archive/CrystalCPUID/CrystalCPUID47Beta.zip HTTP/1.1
Host: crystalmark.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 03 May 2025 04:11:16 GMT
content-type: application/zip
content-length: 481207
last-modified: Sat, 01 Mar 2008 15:00:00 GMT
etag: "757b7-4476168a6bc00"
cache-control: s-maxage=10
accept-ranges: bytes
X-Firefox-Spdy: h2