Report Overview

  1. Visited public
    2025-03-14 09:07:55
    Tags
  2. URL

    elmorelab.com/files/updater_airin/UpdaterAirin.exe

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    104.21.96.1

    #13335 CLOUDFLARENET

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
elmorelab.comunknown2018-08-192020-06-172025-02-22

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumelmorelab.com/files/updater_airin/UpdaterAirin.exeDetect pe file that no import table

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    elmorelab.com/files/updater_airin/UpdaterAirin.exe

  2. IP

    104.21.112.1

  3. ASN

    #13335 CLOUDFLARENET

  1. File type

    PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

    Size

    431 kB (430824 bytes)

  2. Hash

    f36fde098314a27faa2d29aeb76c2bfb

    156b293c80743c32b34ac9a44487360eefb51fb5

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    Detect pe file that no import table
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
elmorelab.com/files/updater_airin/UpdaterAirin.exe
104.21.112.1200 OK431 kB