Report Overview
Visitedpublic
2023-12-10 09:45:18
Tags
Submit Tags
URL
cdn.discordapp.com/attachments/1100926976077856829/1101985818685493268/InternetSwitch.exe
Finishing URL
about:privatebrowsing
IP / ASN
162.159.129.233
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
cdn.discordapp.com
24742015-02-262015-08-24 15:06:212023-12-09 05:10:05
ciscobinary.openh264.org
408222013-10-192014-10-07 07:43:562023-12-09 05:09:36

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
cdn.discordapp.com/attachments/1100926976077856829/1101985818685493268/InternetSwitch.exe
IP / ASN
162.159.129.233
#13335 CLOUDFLARENET
File Overview
File TypePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows - data
Size4.4 MB (4414976 bytes)
MD568ec8bb5b181d5d2506ff9f9476087a0
SHA10e21f7d94fa84a724c62d2d547032750c9dad9f7

Detections

AnalyzerVerdictAlert
VirusTotalsuspicious
VirusTotal - Scan result 6/72
URL
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP / ASN
2.22.61.59
#20940 Akamai International B.V.
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=deflate - data
Size512 kB (511815 bytes)
MD5152eda253e242e18443ef3282495bc7c
SHA1ff0fa85565f21ec4931baad4573b4c0bd08c4019
Archive (2)
FilenameMD5File type
gmpopenh264.info3d33cdc0b3d281e67dd52e14435dd04fASCII text
libgmpopenh264.sob2c1253e8a09cfe03b3d7f37de12dff7ELF 64-bit LSB shared object, x86-64, version 1 (SYSV)

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize