Report Overview

  1. Submitted URL

    transfer.sh/get/o7WlhU/upplagins.exe

  2. IP

    144.76.136.153

    ASN

    #24940 Hetzner Online GmbH

  3. Submitted

    2023-04-04T21:26:40Z

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    5

  3. Threat Detection Systems

    0

Domain Summary

Domain Rank First Seen Last Seen
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-04-04T18:13:50Z
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-04-04T18:19:16Z
transfer.sh (1) 404333 2015-07-06T01:06:10Z 2023-04-04T15:40:13Z
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-04-04T13:13:40Z
r3.o.lencr.org (10) 344 2020-12-02T09:52:13Z 2023-04-04T18:12:09Z
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-04-04T18:13:55Z
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-04-04T18:20:05Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Severity Source IP Destination IP Alert
medium Client IP Internal IP
low Client IP Internal IP
medium Client IP Internal IP
low Client IP Internal IP
low Client IP  144.76.136.153

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    transfer.sh/get/o7WlhU/upplagins.exe

  2. IP

    144.76.136.153

  3. ASN

    #24940 Hetzner Online GmbH

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows\012- data

    Size

    1197528

  2. Hash

    1a2b16c17517d602806431c0744f5f8f

    465e2d6bd37972295cd017f78f35faa07102ab4e

    d52c40b759d5c215ab4090e972038dd6bdcad31c56d72d9a25ed6e76f3f952f1

    Detections

    Analyzer Verdict Alert
    VirusTotal 35/70

JavaScript (0)

HTTP Transactions (22)

URL IP Response Size
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
firefox.settings.services.mozilla.com/v1/
35.241.9.150 200 OK 939
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain
34.160.144.191 200 OK 5348
contile.services.mozilla.com/v1/tiles
34.117.237.239 200 OK 12
r3.o.lencr.org/
23.36.77.32 200 OK 503
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150 200 OK 329
push.services.mozilla.com/
34.117.65.55 101 Switching Protocols 0
transfer.sh/get/o7WlhU/upplagins.exe
144.76.136.153 200 OK 1197528
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeae50b2-4a88-4f71-ae4f-7fd74b695fe8.jpeg
34.120.237.76 200 OK 6898
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0936bac9-0505-47a5-932e-eb63ee65f17f.jpeg
34.120.237.76 200 OK 6494
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5a64c6f-4f76-4a92-92c4-1fa8cb48142e.jpeg
34.120.237.76 200 OK 6803
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa5f70c40-8b38-48db-b482-a5cc8f1580ef.jpeg
34.120.237.76 200 OK 6912
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6eccc3c-84ad-4e21-956c-e1be89a82cfa.jpeg
34.120.237.76 200 OK 4815
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106409ef-b973-4018-aee9-294835a882a8.jpeg
34.120.237.76 200 OK 10535