Report Overview
Visitedpublic
2024-01-02 22:03:27
Tags
Submit Tags
URL
app.insightful.io/updates/win/service/latest/update.zip
Finishing URL
about:privatebrowsing
IP / ASN
34.96.85.57
#15169 GOOGLE
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Host Summary

HostRankRegisteredFirst SeenLast Seen
insightful-updates.io
unknown2023-08-182023-08-18 12:32:332023-10-24 16:19:34
app.insightful.io
unknown2020-12-112022-05-30 17:19:022023-10-03 18:00:54

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
insightful-updates.io/win/service/latest/update.zip
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=deflate
Size557 kB (557187 bytes)
MD5b33e10d8208c336d046d7eb360406787
SHA16f881a7fe1a01b061c9553fda852d2f8c8fb3f01
Archive (3)
FilenameMD5File type
DotNetZip.dll4014dedb43c3168eb771f35420e597ddPE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
Newtonsoft.Json.dll486015a44a273c6c554a27b3d498365cPE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
Workpuls.exe6a4b3c2584262db51f8d4977bb349bd3PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
files - file ~tmp01925d3f.exe
YARAhub by abuse.chmalware
files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
GET app.insightful.io/updates/win/service/latest/update.zip
34.96.85.57301 Moved Permanently162 B
GET insightful-updates.io/win/service/latest/update.zip
188.114.97.1200 OK557 kB