Report Overview

  1. Submitted URL

    www.bluefoxvideo.com/downloads/st/b-zune-video-converter.exe?

  2. IP

    192.185.36.35

    ASN

    #19871 NETWORK-SOLUTIONS-HOSTING

  3. Submitted

    2024-04-23 08:26:13

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
www.bluefoxvideo.comunknown2007-08-312012-10-172024-02-29
aus5.mozilla.org25481998-01-242015-10-272024-04-21

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumwww.bluefoxvideo.com/downloads/st/b-zune-video-converter.exe?Detect files is `SliverFox` malware

Files detected

  1. URL

    www.bluefoxvideo.com/downloads/st/b-zune-video-converter.exe?

  2. IP

    192.185.36.35

  3. ASN

    #19871 NETWORK-SOLUTIONS-HOSTING

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

    Size

    12 MB (12322174 bytes)

  2. Hash

    8f813a7c566e14712040feaa7d262045

    fd63c486276815f3f55bde9b373383915c64763b

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    Detect files is `SliverFox` malware

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
www.bluefoxvideo.com/downloads/st/b-zune-video-converter.exe?
192.185.36.35200 OK12 MB
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
35.244.181.201 444 B