Report Overview
Visitedpublic
2024-12-11 00:52:27
Tags
Submit Tags
URL
packages.diladele.com/squid/4.14/squid.msi
Finishing URL
about:privatebrowsing
IP / ASN
88.198.141.190
#24940 Hetzner Online GmbH
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
packages.diladele.com
unknown2006-08-082014-12-162024-02-08

Related reports

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumpackages.diladele.com/squid/4.14/squid.msiDetect files is `SliverFox` malware

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
packages.diladele.com/squid/4.14/squid.msi
IP / ASN
88.198.141.190
#24940 Hetzner Online GmbH
File Overview
File TypeComposite Document File V2 Document, Little Endian, Os: Windows, Version 6.3, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Installer for Squid from Diladele B.V., Author: Squid Project, Keywords: Installer, Comments: This installer database contains the logic and data required to install Squid., Template: x64;1033, Revision Number: {BEC11220-38CC-479D-950D-FF0506EB2BCD}, Create Time/Date: Thu May 13 20:14:12 2021, Last Saved Time/Date: Thu May 13 20:14:12 2021, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.1.2318), Security: 2
Size18 MB (17502208 bytes)
MD52025919c486437aca72b3499ac06dfd7
SHA15e2931bd047e77719d623995c51a83c8ddcd4432

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
Detect files is `SliverFox` malware

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize