Report Overview

  1. Visited public
    2024-08-22 00:13:42
    Tags
  2. URL

    downloads.auslogics.com/en/disk-defrag/disk-defrag-setup.exe

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    51.79.116.215

    #16276 OVH SAS

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r11.o.lencr.orgunknown2020-06-292024-06-07 07:43:572024-08-21 18:12:02
r10.o.lencr.orgunknown2020-06-292024-06-06 21:45:112024-08-21 18:12:41
downloads.auslogics.comunknown2005-05-112012-05-21 15:42:552024-04-17 13:24:04
aus5.mozilla.org25481998-01-242015-10-27 08:06:242024-08-21 18:45:24

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    downloads.auslogics.com/en/disk-defrag/disk-defrag-setup.exe

  2. IP

    51.79.116.215

  3. ASN

    #16276 OVH SAS

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

    Size

    21 MB (21091224 bytes)

  2. Hash

    67bcc208605f7ecbb797af220b96c4f7

    535da36a38545409945b1fef1662219d8c412db0

    Detections

    AnalyzerVerdictAlert
    VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (14)

URLIPResponseSize
r11.o.lencr.org/
23.36.76.226 504 B
r11.o.lencr.org/
23.36.76.226 504 B
r10.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
downloads.auslogics.com/en/disk-defrag/disk-defrag-setup.exe
51.79.116.215200 OK21 MB
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
35.244.181.201 444 B