Report Overview
Submitted URL
www.nirsoft.net/utils/wnetwatcher.zip
IP
138.128.181.29
ASN
#33182 DIMENOC
Submitted
2024-04-23 13:34:54
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
www.nirsoft.net | 147497 | 2004-08-26 | 2012-05-22 | 2024-04-18 | 491 B | 441 kB | 138.128.181.29 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
www.nirsoft.net/utils/wnetwatcher.zip
IP
138.128.181.29
ASN
#33182 DIMENOC
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
441 kB (440650 bytes)
Hash
88f11e2522787178b2e2bd060da344a1
d8ab67f0b05e19abd8b18e080947db5663222735
Archive (3)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
WNetWatcher.exe | 2c14e5bd63be6856a2103115a0a62170
| PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections | |||
WNetWatcher.chm | f474b96eebb417b3dae92ca4a556dc0e | MS Windows HtmlHelp Data | |||
readme.txt | a5af2e6e3a9ce7bc661d3ba2685afeb2 | ASCII text, with CRLF line terminators |
Detections
Analyzer | Verdict | Alert |
---|---|---|
VirusTotal | malicious |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
www.nirsoft.net/utils/wnetwatcher.zip | 138.128.181.29 | 200 OK | 441 kB | |||||||
Detections
HTTP Headers
| ||||||||||