Report Overview

  1. Visited public
    2024-10-31 02:20:22
    Tags
  2. URL

    dl5.oo-software.com/files/stub/OODiskEraseProfessional14GER.exe

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    93.90.192.112

    #8560 IONOS SE

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
dl5.oo-software.comunknown1997-01-312017-02-022024-10-28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumdl5.oo-software.com/files/stub/OODiskEraseProfessional14GER.exemeth_get_eip
mediumdl5.oo-software.com/files/stub/OODiskEraseProfessional14GER.exepe_detect_tls_callbacks

OpenPhish

No alerts detected


PhishTank

No alerts detected


Mnemonic Secure DNS

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    dl5.oo-software.com/files/stub/OODiskEraseProfessional14GER.exe

  2. IP

    93.90.192.112

  3. ASN

    #8560 IONOS SE

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

    Size

    2.7 MB (2670632 bytes)

  2. Hash

    a57cc9a60b6941b74cbe96e58330fe21

    855538931341f063953b1faf70330a4eae49ae05

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    meth_get_eip
    YARAhub by abuse.chmalware
    pe_detect_tls_callbacks

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
dl5.oo-software.com/files/stub/OODiskEraseProfessional14GER.exe
93.90.192.112200 OK2.7 MB