Report Overview

  1. Visited public
    2024-09-13 21:08:53
    Tags
  2. URL

    dwnld5.t1mnsft.com/offergate/TelamonCleaner.exe?clid=66e3bf6ceb457og&sub1=0ysc0c0sc800cgos&sub2=29857&sub3=&extra1=

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    104.21.34.11

    #13335 CLOUDFLARENET

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
dwnld5.t1mnsft.comunknown2023-05-302024-02-21 13:40:472024-04-16 19:42:44
aus5.mozilla.org25481998-01-242015-10-27 08:06:242024-09-12 19:05:32
r11.o.lencr.orgunknown2020-06-292024-06-07 07:43:572024-09-12 18:12:05
r10.o.lencr.orgunknown2020-06-292024-06-06 21:45:112024-09-12 18:12:12

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    dwnld5.t1mnsft.com/offergate/TelamonCleaner.exe?clid=66e3bf6ceb457og&sub1=0ysc0c0sc800cgos&sub2=29857&sub3=&extra1=

  2. IP

    172.67.194.176

  3. ASN

    #13335 CLOUDFLARENET

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 10 sections

    Size

    2.5 MB (2510392 bytes)

  2. Hash

    c11b2532d2f6238b6413dd354ca860a4

    e641b7816f204f6e1b7fbd67449b4324a0a13b06

    Detections

    AnalyzerVerdictAlert
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (13)

URLIPResponseSize
r11.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.76.226 504 B
r10.o.lencr.org/
23.36.76.226 504 B
r10.o.lencr.org/
23.36.76.226 504 B
r10.o.lencr.org/
23.36.76.226 504 B
r11.o.lencr.org/
23.36.76.226 504 B
dwnld5.t1mnsft.com/offergate/TelamonCleaner.exe?clid=66e3bf6ceb457og&sub1=0ysc0c0sc800cgos&sub2=29857&sub3=&extra1=
172.67.194.176200 OK2.5 MB
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
35.244.181.201 444 B