Report - nnmstatic.win/forum/uTorrent%20221%20Build%2025302.zip

Report Overview

Visitedpublic

2024-05-15 20:04:01

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
nnmstatic.win	unknown	2022-04-29	2022-05-24 22:23:52	2024-04-17 11:10:07	508 B	1.2 MB	172.67.175.99

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

nnmstatic.win/forum/uTorrent%20221%20Build%2025302.zip

IP / ASN

172.67.175.99

#13335 CLOUDFLARENET

File Overview

File TypeZip archive data, at least v1.0 to extract, compression method=store

Size1.1 MB (1149392 bytes)

MD5cf9828d577d0954766046fe665f5e828

SHA14f586dd4aab6caef02d03418bee6280fba0c48a0

SHA2567ae51a0280a3acef6be60bb6af580c08f5b093522b3771a81f595f33b458dff8

Archive (2)

Modified	Filename	Size	MD5	File type
2023-11-24 23:05	uTorrent.exe	400 kB	bb2fcfa2415d0f08653157d8e998d342	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections
2023-11-24 23:05	utorrent.lng	772 kB	225b27b6da6821e432c7086d4e9efe36	Zip archive data, at least v1.0 to extract, compression method=deflate

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 9/67

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET nnmstatic.win/forum/uTorrent%20221%20Build%2025302.zip

172.67.175.99

200 OK

1.1 MB

URL User Request GET HTTPS

nnmstatic.win/forum/uTorrent%20221%20Build%2025302.zip

IP / ASN

172.67.175.99

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeZip archive data, at least v1.0 to extract, compression method=store

First Seen2023-12-22

Last Seen2024-11-12

Times Seen24

Size1.1 MB (1149392 bytes)

MD5cf9828d577d0954766046fe665f5e828

SHA14f586dd4aab6caef02d03418bee6280fba0c48a0

SHA2567ae51a0280a3acef6be60bb6af580c08f5b093522b3771a81f595f33b458dff8

Certificate Info

IssuerGoogle Trust Services LLC

Subjectnnmstatic.win

Fingerprint4E:58:68:09:CE:CD:E0:E3:57:90:76:CD:F5:0F:C1:7F:4B:95:C1:BE

ValidityTue, 14 May 2024 23:58:16 GMT - Mon, 12 Aug 2024 23:58:15 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 9/67

HTTP Headers

GET /forum/uTorrent%20221%20Build%2025302.zip HTTP/1.1
Host: nnmstatic.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 15 May 2024 20:03:36 GMT
content-type: application/zip
content-length: 1149392
last-modified: Fri, 24 Nov 2023 21:12:19 GMT
etag: "656111b3-1189d0"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fL18gekWZR03ONIYjLr9OSspmN%2B%2BbKtn2s27zGNQ7myc76feV3k01ulVvA1E9tLSnFouyrMwJkOXTcgWhFYLq5%2FgdwqmW3P7pvRQ3Vae%2F3T6YOq6MGVGm2UiPqATaffe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8845bb777dc47131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2