Report Overview

  1. Visited public
    2024-11-11 19:02:34
    Tags
    Submit Tags
  2. URL

    bg3se-updates.norbyte.dev/Channels/Release/ManualInstall.zip

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    172.67.212.25

    #13335 CLOUDFLARENET

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
bg3se-updates.norbyte.devunknown2019-03-042023-09-042024-04-14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Mnemonic Secure DNS

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    bg3se-updates.norbyte.dev/Channels/Release/ManualInstall.zip

  2. IP

    104.21.85.236

  3. ASN

    #13335 CLOUDFLARENET

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    3.6 MB (3622699 bytes)

  2. Hash

    cf37b39d761f0849b114f618ad6d735e

    b4ce97b73d2b3478098c63ca78d1034f94e1842c

  1. Archive (2)

  2. FilenameMd5File type
    DWrite.dll
    931b99e346f6c3235bbefea2f52a9c79
    PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 8 sections
    libprotobuf-lite.dll
    6cfd64a46b5caf0bbfe789964f669186
    PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
bg3se-updates.norbyte.dev/
104.21.85.236301 Moved Permanently167 B
GET bg3se-updates.norbyte.dev/Channels/Release/ManualInstall.zip
104.21.85.236200 OK3.6 MB