Report Overview
Visitedpublic
2025-01-14 09:09:16
Tags
Submit Tags
URL
pkgs.tailscale.com/stable/tailscale-setup-1.44.3-amd64.msi
Finishing URL
about:privatebrowsing
IP / ASN
199.38.181.239
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
pkgs.tailscale.com 1 alert(s) on this Host | 406879 | 2017-08-15 | 2020-03-16 | 2025-01-12 | 512 B | 20 MB | 199.38.181.239 |
Related reports
Threat Detection Systems
Public InfoSec YARA rules
| Scan Date | Severity | Indicator | Alert |
|---|---|---|---|
| 2025-01-14 | medium | pkgs.tailscale.com/stable/tailscale-setup-1.44.3-amd64.msi | Detect files is `SliverFox` malware |
OpenPhish
No alerts detected
PhishTank
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
pkgs.tailscale.com/stable/tailscale-setup-1.44.3-amd64.msi
IP / ASN
199.38.181.239
File Overview
File TypeComposite Document File V2 Document, Little Endian, Os: Windows, Version 5.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Tailscale is a zero config VPN for building secure networks. Install on any device in minutes. Remote access from any network or physical location. Built on WireGuard.WireGuard is a registered trademark of Jason A. Donenfeld., Author: Tailscale Inc., Keywords: Installer;Tailscale;vpn;security;privacy;wireguard;networking, Comments: This installer database contains the logic and data required to install Tailscale., Template: x64;1033, Revision Number: {A18F38BA-CA82-4B7B-829F-FC886C52C952}, Create Time/Date: Mon Jan 8 20:27:48 2024, Last Saved Time/Date: Mon Jan 8 20:27:48 2024, Number of Pages: 500, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (), Security: 2
Size20 MB (20016640 bytes)
MD5828cd198a617ebf4cfe3efa31311fa25
SHA1fda36a5c60a4b402ae5d49abe9ab3bcccc333c8c
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware |
JavaScript (0)
No JavaScripts
HTTP Transactions (1)
| URL | IP | Response | Size |
|---|