Report Overview

  1. Submitted URL

    filebin.net/i1o206xj5sw37bzb/sfpatch.zip

  2. IP

    88.99.137.18

    ASN

    #24940 Hetzner Online GmbH

  3. Submitted

    2024-04-16 05:58:23

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
filebin.net3854982012-07-192013-10-232024-04-15
s3.filebin.netunknown2012-07-192023-11-162024-04-15

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    s3.filebin.net/filebin/27387fb97527c11d63e9689c6b6e89c0ffa4f65cfbfc5d6d996f11b85f1b21df/e8bd0391420b8f9d9f2852d85cb561cb2471b327dda046c71a552427f3e536a1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=7pMj6hGeoKewqmMQILjm%2F20240416%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240416T055756Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&response-cache-control=max-age%3D300&response-content-disposition=filename%3D%22sfpatch.zip%22&response-content-type=application%2Fzip&X-Amz-Signature=0e79e87877b14aba1707a8dc2feeeb1f3fc9d66aa4a6036ac361bdf4f2006aa1

  2. IP

    88.99.137.18

  3. ASN

    #24940 Hetzner Online GmbH

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    12 MB (11530851 bytes)

  2. Hash

    526f8b4720cb788a1046ef9c49413af1

    1cf038e76405875fa9c615d279b59ad92d7f06ca

  1. Archive (1)

  2. FilenameMd5File type
    sfpatch.exe
    6de47748cafdc948ba6e0b8956d3001e
    PE32+ executable (console) x86-64, for MS Windows, 7 sections

    Detections

    AnalyzerVerdictAlert
    Public InfoSec YARA rulesmalware
    Identifies executable converted using PyInstaller.

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
filebin.net/i1o206xj5sw37bzb/sfpatch.zip
88.99.137.18302 Found23 B
s3.filebin.net/filebin/27387fb97527c11d63e9689c6b6e89c0ffa4f65cfbfc5d6d996f11b85f1b21df/e8bd0391420b8f9d9f2852d85cb561cb2471b327dda046c71a552427f3e536a1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=7pMj6hGeoKewqmMQILjm%2F20240416%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240416T055756Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&response-cache-control=max-age%3D300&response-content-disposition=filename%3D%22sfpatch.zip%22&response-content-type=application%2Fzip&X-Amz-Signature=0e79e87877b14aba1707a8dc2feeeb1f3fc9d66aa4a6036ac361bdf4f2006aa1
88.99.137.18200 OK12 MB