Report Overview

  1. Submitted URL

    cm-uat.neopost.com/~/media/kb_neopost_com/products/software+solutions/oms-200/standalone+media/software/software+tools/oms-200+pc+id+generatory.exe?sc_lang=ru-ru

  2. IP

    20.50.2.16

    ASN

    #8075 MICROSOFT-CORP-MSN-AS-BLOCK

  3. Submitted

    2024-05-05 01:15:10

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
cm-uat.neopost.comunknown1996-01-222020-04-132024-03-22

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumcm-uat.neopost.com/~/media/kb_neopost_com/products/software+solutions/oms-200/standalone+media/software/software+tools/oms-200+pc+id+generatory.exe?sc_lang=ru-ruDetect files is `SliverFox` malware

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    cm-uat.neopost.com/~/media/kb_neopost_com/products/software+solutions/oms-200/standalone+media/software/software+tools/oms-200+pc+id+generatory.exe?sc_lang=ru-ru

  2. IP

    20.50.2.16

  3. ASN

    #8075 MICROSOFT-CORP-MSN-AS-BLOCK

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

    Size

    2.6 MB (2550008 bytes)

  2. Hash

    36c33ce856b853b2146d7b5211f5bb1e

    a204254ce491f70339eba890bc13a9fdcb346120

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    Detect files is `SliverFox` malware
    VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
cm-uat.neopost.com/~/media/kb_neopost_com/products/software+solutions/oms-200/standalone+media/software/software+tools/oms-200+pc+id+generatory.exe?sc_lang=ru-ru
20.50.2.16200 OK2.6 MB