Report Overview

  1. Visited public
    2024-05-15 16:03:18
  2. URL

    update9.cta.99.com/spzf/spco_8230.exe

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    34.120.36.25

    #396982 GOOGLE-CLOUD-PLATFORM

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
zerossl.ocsp.sectigo.com40492018-08-162020-05-09 21:05:292024-05-14 19:05:49
update9.cta.99.comunknown1997-03-172014-02-17 10:59:052021-11-30 05:24:52

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    update9.cta.99.com/spzf/spco_8230.exe

  2. IP

    34.120.36.25

  3. ASN

    #396982 GOOGLE-CLOUD-PLATFORM

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

    Size

    1.8 MB (1827815 bytes)

  2. Hash

    77536bb5387949685ff79146769598c8

    8f5b767e03a98961b71a48d5f2b1f3d78eb2d3c6

    Detections

    AnalyzerVerdictAlert
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (3)

URLIPResponseSize
zerossl.ocsp.sectigo.com/
104.18.38.233 728 B
zerossl.ocsp.sectigo.com/
172.64.149.23 728 B
update9.cta.99.com/spzf/spco_8230.exe
34.120.36.25200 OK1.8 MB