Report Overview

  1. Submitted URL

    195.20.16.46/download/crypted_d786fd3e.exe

  2. IP

    195.20.16.46

    ASN

    #211409 Shelter LLC

  3. Submitted

    2024-04-20 13:21:07

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    5

  3. Threat Detection Systems

    3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
195.20.16.46unknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
highClient IP 195.20.16.46
highClient IP 195.20.16.46
mediumClient IP 195.20.16.46
high 195.20.16.46Client IP
medium 195.20.16.46Client IP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
medium195.20.16.46Sinkholed

ThreatFox

No alerts detected


Files detected

  1. URL

    195.20.16.46/download/crypted_d786fd3e.exe

  2. IP

    195.20.16.46

  3. ASN

    #211409 Shelter LLC

  1. File type

    PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

    Size

    452 kB (452064 bytes)

  2. Hash

    8f1d79f77c7f0c6bc7fe6c1361cc6919

    47aad1811054297f2877bfb36dcc4eb9fbde6687

    Detections

    AnalyzerVerdictAlert
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
195.20.16.46/download/crypted_d786fd3e.exe
195.20.16.46200 OK452 kB