Report Overview

  1. Submitted URL

    qa.rhubcom.com/as/wapi/TurboMeetingStarter.exe?role=attendee&name=&email=&meeting_id=&user_password=&meeting_password=&meeting_type=0&pass_through=&ram=1684991377&plst=

  2. IP

    64.71.188.147

    ASN

    #6939 HURRICANE

  3. Submitted

    2023-06-01 00:38:33

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    2

  3. Threat Detection Systems

    1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
qa.rhubcom.comunknown2005-01-042023-01-092023-05-28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
high 64.71.188.147Client IP
low 64.71.188.147Client IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    qa.rhubcom.com/as/wapi/TurboMeetingStarter.exe?role=attendee&name=&email=&meeting_id=&user_password=&meeting_password=&meeting_type=0&pass_through=&ram=1684991377&plst=

  2. IP

    64.71.188.147

  3. ASN

    #6939 HURRICANE

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows\012- data

    Size

    790 kB (790064 bytes)

  2. Hash

    8dc7aa1d226975530499d9880681f1e6

    1b5a790dbcaa1b6952a36ec66f45c70646869784

    Detections

    AnalyzerVerdictAlert
    VirusTotal0/0

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
qa.rhubcom.com/as/wapi/TurboMeetingStarter.exe?role=attendee&name=&email=&meeting_id=&user_password=&meeting_password=&meeting_type=0&pass_through=&ram=1684991377&plst=
64.71.188.147200 OK790 kB