Report - nmap.org/dist/nmap-7.94-setup.exe

Report Overview

Visitedpublic

2025-03-18 00:15:58

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
nmap.org	192176	1999-01-18	2012-05-21	2025-03-17	501 B	32 MB	50.116.1.184

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-03-18	medium	nmap.org/dist/nmap-7.94-setup.exe	Detect pe file that no import table

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

nmap.org/dist/nmap-7.94-setup.exe

IP / ASN

50.116.1.184

#63949 Akamai Connected Cloud

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

Size32 MB (32459224 bytes)

MD5d2bc7c20f26de8686206f97d28acce1d

SHA19a97416865d2a71a15fb574f2a0331a8c7fd2fe3

SHA25679b3d68bead9cba2ba6687c0fc1459223e1f2a63bb93559e42ff41bf78eb356f

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET nmap.org/dist/nmap-7.94-setup.exe

50.116.1.184

200 OK

32 MB

URL

nmap.org/dist/nmap-7.94-setup.exe

IP / ASN

50.116.1.184

#63949 Akamai Connected Cloud

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

First Seen2025-03-18

Last Seen2025-05-16

Times Seen4

Size32 MB (32459224 bytes)

MD5d2bc7c20f26de8686206f97d28acce1d

SHA19a97416865d2a71a15fb574f2a0331a8c7fd2fe3

SHA25679b3d68bead9cba2ba6687c0fc1459223e1f2a63bb93559e42ff41bf78eb356f

Certificate Info

IssuerLet's Encrypt

Subjectinsecure.com

Fingerprint85:8B:18:E0:3E:7F:56:02:9E:60:E2:D4:7D:69:B2:9B:2D:EE:91:85

ValidityWed, 22 Jan 2025 10:02:50 GMT - Tue, 22 Apr 2025 10:02:49 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

HTTP Headers

GET /dist/nmap-7.94-setup.exe HTTP/1.1
Host: nmap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 18 Mar 2025 00:15:37 GMT
Server: Apache/2.4.6 (CentOS)
Strict-Transport-Security: max-age=31536000; preload
Vary: Host
Last-Modified: Sat, 20 May 2023 21:58:31 GMT
ETag: "1ef49d8-5fc272362ea93"
Accept-Ranges: bytes
Content-Length: 32459224
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/octet-stream