Report Overview

  1. Visited public
    2024-10-01 19:18:26
    Tags
  2. URL

    tj.shwswl.cn/wjcq.exe?auth_key=1715993243-0-0-4818e31d979c93d42dee8df1c4f5b21f

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    14.29.101.168

    #4134 Chinanet

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r10.o.lencr.orgunknown2020-06-292024-06-06 21:45:112024-09-30 18:12:17
r11.o.lencr.orgunknown2020-06-292024-06-07 07:43:572024-09-30 18:12:04
tj.shwswl.cn7438472016-08-112020-07-28 12:39:462024-09-25 14:26:29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    tj.shwswl.cn/wjcq.exe?auth_key=1715993243-0-0-4818e31d979c93d42dee8df1c4f5b21f

  2. IP

    14.29.101.169

  3. ASN

    #4134 Chinanet

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

    Size

    29 MB (29157888 bytes)

  2. Hash

    d69b44625a48e305957f61aae8f62c28

    e9b85e62171b600824575ca34d845b314b66b3cd

    Detections

    AnalyzerVerdictAlert
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (8)

URLIPResponseSize
r10.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
r11.o.lencr.org/
23.36.77.32 504 B
tj.shwswl.cn/wjcq.exe?auth_key=1715993243-0-0-4818e31d979c93d42dee8df1c4f5b21f
14.29.101.169200 OK29 MB