Report Overview
Visitedpublic
2025-03-01 17:22:43
Tags
Submit Tags
URL
fs1.fileupdown.com/c8fa31ba1e7ba515/BootstrapperNew.zip?download_token=371b7fc55afd7db1586fbac07cfe827352791fef80b336296a3219393fa2c240
Finishing URL
about:privatebrowsing
IP / ASN
104.21.74.42
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Host Summary

HostRankRegisteredFirst SeenLast Seen
fs1.fileupdown.com
unknown2023-03-242023-06-222023-06-22

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
fs1.fileupdown.com/c8fa31ba1e7ba515/BootstrapperNew.zip?download_token=371b7fc55afd7db1586fbac07cfe827352791fef80b336296a3219393fa2c240
IP / ASN
172.67.197.194
#13335 CLOUDFLARENET
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=deflate
Size2.5 MB (2540331 bytes)
MD57197bf8c046e26caaf5def7ff3a4daa9
SHA13a2a1a9014ed0eae492e3291a1bc3a82569af053
Archive (1)
FilenameMD5File type
BootstrapperNew.exef227cdfd423b3cc03bb69c49babf4da3PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen
YARAhub by abuse.chmalware
Detect pe file that no import table
VirusTotalmalicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize