Report Overview
Visitedpublic
2024-09-30 17:02:27
Tags
Submit Tags
URL
mrauthtool.com/Tools/Mr_Auth_Tool_2.2.zip
Finishing URL
about:privatebrowsing
IP / ASN
104.21.47.149
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
r10.o.lencr.org
unknown2020-06-292024-06-06 21:45:112024-09-29 18:13:43
mrauthtool.com
unknown2022-11-272022-11-27 11:26:122024-04-12 16:53:47
r11.o.lencr.org
unknown2020-06-292024-06-07 07:43:572024-09-29 18:12:51

Related reports

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
mrauthtool.com/Tools/Mr_Auth_Tool_2.2.zip
IP / ASN
104.21.47.149
#13335 CLOUDFLARENET
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=deflate
Size3.2 MB (3184518 bytes)
MD55f9b6e9c4f8541fdacf90a1a2371dc96
SHA1c552d6c4e9786b0839d85151724b87f1c2483a5d
Archive (1)
FilenameMD5File type
Mr_Auth_Tool_2.2.exe4551680e3af8fd2812de96b5de533b37PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
Detects an SFX archive with automatic script execution
VirusTotalmalicious

JavaScript (0)

HTTP Transactions (10)

URLIPResponseSize