Report Overview

  1. URL

    updates.dxbx.ru/DxBx.Desktop-setup-v1.3.0.exe

  2. IP

    94.26.225.78

    ASN

    #49505 OOO Network of data-centers Selectel

  3. Submitted

    2023-06-09T06:24:18Z

    Access

    public

  4. Tags

    None

  5. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    0

Domain Summary

Domain Rank First Seen Last Seen
ocsp.godaddy.com (1) 698 2012-05-20 21:28:57 2023-06-08 18:14:26
aus5.mozilla.org (1) 2548 2015-10-27 08:06:24 2023-06-08 18:14:56
ciscobinary.openh264.org (1) 40822 2014-10-07 07:43:56 2023-06-08 08:57:31

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Severity Source IP Destination IP Alert
high  94.26.225.78 Client IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip

  2. IP

    62.115.252.115

  3. ASN

    #1299 Telia Company AB

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate\012- data

    Size

    511815

  2. Hash

    152eda253e242e18443ef3282495bc7c

    ff0fa85565f21ec4931baad4573b4c0bd08c4019

    8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48

    Detections

    Analyzer Verdict Alert
    VirusTotal 0/60

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size
ocsp.godaddy.com/
192.124.249.41 1777
aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-72-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
35.244.181.201 445
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
62.115.252.115 511815