Report Overview
Visitedpublic
2024-10-18 16:06:43
Tags
Submit Tags
URL
west-wind.com/files/wwclient.zip
Finishing URL
about:privatebrowsing
IP / ASN

149.28.15.235
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
7
Host Summary
Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
---|---|---|---|---|---|---|---|---|
west-wind.com | 573365 | 1995-10-04 | 2012-08-31 | 2024-10-15 | 486 B | 6.5 MB | ![]() 149.28.15.235 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
No alerts detected
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
Mnemonic Secure DNS
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
west-wind.com/files/wwclient.zip
IP / ASN

149.28.15.235
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=store
Size6.5 MB (6459990 bytes)
MD56b5954bd5c2b87179bc83e1d5442dca6
SHA148f8030a8593160d3aa8d21d18dd18a6a8a162d8
Archive (104)
Filename | MD5 | File type |
---|---|---|
wwbusiness.VCT | f5407fbd1817e65d04571373581b8aa0 | Adobe Photoshop Color swatch, version 1, 924 colors; 1st RGB space (0), w 0x1, x 0, y 0, z 0; 2nd RGB space (0), w 0, x 0, y 0, z 0 |
wwbusiness.vcx | 9de5ab462819551a65364f5e5b9e3dd8 | Visual FoxPro DBF, 5 records * 109, update-date 18-11-8, codepage ID=0x3, with memo .FPT, at offset 1032 1st record "COMMENT Class " |
wwbusinessobject.PRG | f1aa5a2a2777d5c7a2d991b9fa40c14f | ASCII text, with CRLF line terminators |
config.fpw | 9d1b3e5fea17d7e3fc11ea2cd105b8bc | ASCII text, with CRLF line terminators |
dunzip32.dll | c76d8e6eaefdfb62d0ddf7a670c2e5ed | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections |
dzip32.dll | 0a4cc328ae0bcb13e9056c9afcf3a9c5 | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections |
FluentFTP.dll | 8ba7cbafc584cc3183d5d21aa22a98ca | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
Markdig.dll | 3c06a7764b1ebdbe5274847f42e772fc | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
Newtonsoft.Json.dll | 195ffb7167db3219b217c4fd439eedd6 | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
Renci.SshNet.dll | a8a17572df9dcbe2946d2d5cfd66c655 | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
load_wwipstuff.PRG | 11dc671c838db9dd25d1afb9119a2767 | ASCII text, with CRLF line terminators |
smtp.SCT | 48425a3e694ddb2f3e8b93f5f03ecffa | data |
smtp.scx | 39c7bf5f4e77e5638bd3a9fd861c5ecf | Visual FoxPro DBF, 29 records * 109, update-date 16-5-26, codepage ID=0x3, with memo .FPT, at offset 1032 1st record "COMMENT Screen " |
AspNetJsonSerializer.PRG | b906c256b00643c7f2090302efd33991 | ASCII text, with CRLF line terminators |
asyncmethod_webclient.PRG | 18988da81396d8d2900042e98bdee7af | ASCII text, with CRLF line terminators |
collectiontests.prg | 482097b87fe77a7cac91cb12f79851c3 | ASCII text, with CRLF line terminators |
dataset.PRG | c8bf89e60a1d1551cfb15822839ae05c | ASCII text, with CRLF line terminators |
datasetraw.prg | b717b626b3e8c893793316bf85df118f | ASCII text, with CRLF line terminators |
dotnetcore.prg | 1d46ef29cd456225a0fb0ba5fbdb5bd9 | ASCII text, with CRLF line terminators |
dotnetCore_LiveReloadServer.PRG | 86c03af23509b3a51c641d110afb949d | ASCII text, with CRLF line terminators |
eventlog.prg | 39e82f3a0124eda1b5ae2514be614417 | ASCII text, with CRLF line terminators |
filewatcher_events.PRG | 557fcd82729a98d12357bca2ccd3c161 | ASCII text, with CRLF line terminators |
getIpFromDomain.PRG | 46a4d69e1566482fe5b64acc7aeda80e | ASCII text, with CRLF line terminators |
GetSslCertificates.PRG | 56702f56f7565f4e61e1ac754be7c896 | ASCII text, with CRLF line terminators |
InteropExamples.dll | 8bdadc4d22a50207da65e236c3756b48 | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
networkstatus.PRG | 9fbd3f5fb6bc4a225f4821ddace12dac | ASCII text, with CRLF line terminators |
OpenPop.dll | 10ee863dfd9ef54be574f73fe52f2769 | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
openpop.PRG | a9b415ee956f2b97ac83b657e65e7c42 | ASCII text, with CRLF line terminators |
Pass20Parameters.prg | b41569d3ee20e2617c45e5b6c61e68a1 | ASCII text, with CRLF line terminators |
PassEnumArray.prg | 5148161c8c072e78470a9949299e1e90 | ASCII text, with CRLF line terminators |
persons.prg | 73f7b878bab111198285e0b48da2b50e | ASCII text, with CRLF line terminators |
processes.PRG | 56075822388116b1c1e6ee7735a49d17 | ASCII text, with CRLF line terminators |
resizeImage.PRG | b758457d13e9a4e4b229264c10eaf725 | ASCII text, with CRLF line terminators |
SailBig.jpg | 90a1edc4b55f38ee2cc374561283b9d1 | JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 1401x1050, components 3 |
License_DotNetReflector6.rtf | 1960cb0b28356e0cdc6f13e8f1fe6ebe | Rich Text Format data, version 1, ANSI, code page 1252, default middle east language ID 1025 |
log4net.dll | 5f3bd963f02108c36592b5728fa725c5 | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
log4net_LICENSE.txt | 74ae3e8ad4267784fca1593fcbe3d091 | ASCII text, with CRLF line terminators |
Reflector.cfg | d39f4f7e555e41e635831486a0331fda | Generic INItialization configuration [AssemblyCache] |
Reflector.exe | 143f2dea68a725eab4f51c7c433847f5 | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
Reflector.exe.config | b8b115a63c9368a5ff56f0bead67be64 | XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators |
typepassingtests.prg | 3562fbfcdf0ed4d617a73d8bba3c7905 | ASCII text, with CRLF line terminators |
config.fpw | 231e07bfc6ddac6df9b91b60e829c797 | ASCII text, with CRLF line terminators |
Readme.md | 7b0ff9c852c7642c597ace0609dcf727 | Unicode text, UTF-8 (with BOM) text, with CRLF line terminators |
wwDotNetBridge.dll | a841ffaaa14cd9c3d790e11b774965b0 | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
wwdotnetbridgetest.exe | bdf549e9ebd1b80e1b63968f7e2c6447 | PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections |
wwdotnetbridgetest.PJT | 73da2d4aa233324f8811fb4e3b95c617 | Adobe Photoshop Color swatch, version 0, 893 colors; 1st RGB space (0), w 0x21, x 0, y 0, z 0; 2nd RGB space (0), w 0, x 0, y 0, z 0 |
wwdotnetbridgetest.PJX | 33f81e1dabe6ddd84f12ab8a19d0d4da | Visual FoxPro DBF, 3 records * 130, update-date 18-6-22, codepage ID=0x3, with memo .FPT, at offset 1192 1st record "�" |
wwDotnetBridgeTest.PRG | 212a07ff56ecfa095dd3603419895f6e | ASCII text, with CRLF line terminators |
wwipstuff.dll | fc4857ea53daeb61c8207a66ff0e5d68 | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections |
wwEncryptionSample.PRG | c57f324ee429b9eec27086eefcbf2864 | ASCII text, with CRLF line terminators |
wwipstuff_samples.PRG | 2fdf326286774d1f830175c403faca1f | ASCII text, with CRLF line terminators |
wwJsonServiceClient.prg | cbbb02dab88d7bf8141450ed5c096208 | ASCII text, with CRLF line terminators |
wwsmtp_sample.PRG | bc382d2585cf18264cf230160ec9fdb9 | ASCII text, with CRLF line terminators |
wws_id.dbf | 689becc1b6321d5b439b0a78c4beb788 | Visual FoxPro DBF, 1 record * 57, update-date 17-10-19, codepage ID=0x3, at offset 456 1st record "distfiles 2 " |
FXUPersist.XML | 7fc4c535134a7d8b822f8c04284eceb6 | XML document, ASCII text, with CRLF line terminators |
FXUPersistGetTemplate.XML | 70bab0f21dd867b555b8375dfa815ba0 | XML document, ASCII text, with CRLF line terminators |
FXUResults.CDX | ef82aff0994c2193408edaef0683d911 | xBase compound index, index options (0xe0, compact format, structure), index signature 1, sort order 0, expression length 1 |
FXUResults.DBF | 51810ba0b676558d711385df4fa964b1 | Visual FoxPro DBF, 22 records * 393, update-date 21-8-27, codepage ID=0x3, with index file .MDX, with memo .FPT, at offset 616 1st record "WebConnectionConfigurationTests C:\webconnection\" |
FXUResults.FPT | e3813cfd75a6f4f4c96d46feb6b1c1e9 | Adobe Photoshop Color swatch, version 0, 64 colors; 1st RGB space (0), w 0x40, x 0, y 0, z 0; 2nd RGB space (0), w 0, x 0, y 0, z 0 |
markdownparserTests.PRG | c289ded441e37b2a56d77876ce375074 | HTML document, ASCII text, with CRLF line terminators |
SailBig.jpg | d41d8cd98f00b204e9800998ecf8427e | |
SAILBIG_DOWNLOADED.JPG | d41d8cd98f00b204e9800998ecf8427e | |
test.prg | a1b70189e17ec8cca3aee471365c9edf | ASCII text, with CRLF line terminators |
test.wcs | ffacad16cb0261bfbd05d3f3a1e3747f | ASCII text, with CR line terminators |
wwCollectionsTest.prg | a11e7ce11a35c1f39cd0fbd596201119 | ASCII text, with CRLF line terminators |
wwHttpTests.prg | fbf67e008efbbc3e3d7241769ade4ceb | ASCII text, with CRLF line terminators |
wwJsonSerializerTests.PRG | 2a671db8264fc079dee8e0751e3ed598 | ASCII text, with CRLF line terminators |
wwScriptingTests.PRG | 0f00a9247e90eaa21a9f7ddb514a4a13 | ASCII text, with CRLF line terminators |
wwSFTPTests.prg | 2d78fb5520d5f395fa4af94abdba186c | data |
wwStreamTests.PRG | bad1fa012ea9a5633db8de6adc7e3013 | ASCII text, with CRLF line terminators |
wwUserSecurityTests.PRG | 88ffeb98c09f130daa67e589d806bf70 | ASCII text, with CRLF line terminators |
wwUtilsTests.PRG | c303e851b45279ede7161ac93ae8beaa | ASCII text, with CRLF line terminators |
crt_dbf.prg | 6d90b74550f003457ea1c4e578a6e87e | ASCII text, with CRLF line terminators |
crt_dbf.SCT | d360210e45b64983831887d4a14702c8 | data |
crt_dbf.SCX | 4d3ae5ad1f52c081249369f6578a078d | Visual FoxPro DBF, 12 records * 109, update-date 06-10-26, codepage ID=0x3, with memo .FPT, at offset 1032 1st record "COMMENT Screen " |
getconstants.exe | 84d0e93f77a1d6c24ce2647e45d94628 | PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections |
log4net.dll | 5f3bd963f02108c36592b5728fa725c5 | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
readme.rtf | a776c1e29e8ec3da2ec6f0c9df633533 | Rich Text Format data, version 1, ANSI, code page 1252, default middle east language ID 1025 |
Reflector.exe | 143f2dea68a725eab4f51c7c433847f5 | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
Reflector.exe.config | b8b115a63c9368a5ff56f0bead67be64 | XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators |
wrapper.exe | e16174685f1d9a7e23ec252a4bc077cb | PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections |
wwDialogs.VCT | e020a80d9be19e6704717fd66712a4a1 | data |
wwdialogs.vcx | 38a2a89bf4f9afe116d3ea72ad660532 | Visual FoxPro DBF, 30 records * 109, update-date 09-5-26, codepage ID=0x3, with memo .FPT, at offset 1032 1st record "COMMENT Class " |
wwResponse.PRG | 1fdc983dea4c7d9fd70916cd419b00de | ASCII text, with CRLF line terminators |
wwResponseString.PRG | dd8f68c85980d789cd035487af388ee6 | ASCII text, with CRLF line terminators |
wwShowCursor.PRG | ea3967ec1b60b423bedf18ea34d71293 | ASCII text, with very long lines (309), with CRLF line terminators |
wwTypeLib.VCT | 8164ae29355b612d12ea5e523d9e18ec | data |
wwtypelib.vcx | c2cdfa72f558ecf56bc66febdcbb1939 | Visual FoxPro DBF, 11 records * 109, update-date 02-1-10, codepage ID=0x3, with memo .FPT, at offset 1032 1st record "COMMENT Class " |
wconnect.h | f9993f9a3025b3db5cbaa66cdaaf9ae1 | ASCII text, with CRLF line terminators |
wwclient.app | 8bfb8fd9463f2c5d780183b84da18a41 | data |
wwclient.chm | db8ed3bb00563a46a5f4a65b8e8de779 | MS Windows HtmlHelp Data |
wwClient_console.app | 53e81a0ed1a3570a2aa29040e7ca7a7f | data |
wwDotNetBridge.dll | 6610cb2808ce5f5e0ea41fc8dc6223e0 | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
wwDotNetBridge_XP.dll | 0df0dbbf03415fec9c8a3034b2e6d735 | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections |
wwimaging.dll | de5051e4cd58b1f439058fdc3c324073 | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections |
wwipstuff.dll | fabb3b8b081a09adae66b1689d4b525e | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections |
zlib1.dll | b8a9e91134e7c89440a0f95470d5e47b | PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections |
_Getting Started with West Wind Client Tools.url | 50c61e853377284b5ac11ea228b3e931 | MS Windows 95 Internet shortcut text (URL=<https://client-tools.west-wind.com/docs/_0lh115ju8.htm>), ASCII text, with CRLF line terminators |
_Open-VisualFoxPro-IDE-Here.ps1 | 85d7eb219c08827ddbbae0cb5cc7b8f6 | ASCII text, with CRLF line terminators |
_Quick Start Internet Tools Examples.url | f0759b93179df71767578235c17b4ab4 | MS Windows 95 Internet shortcut text (URL=<https://client-tools.west-wind.com/docs/_s9001zxi9.htm>), ASCII text, with CRLF line terminators |
_test-wwdotnetbridge.prg | 1ab6afa685b515b54e04b23356097d6b | ASCII text, with CRLF line terminators |
_West WindClient Tools Documentation.url | 6733b194bd10b2dbd20e7c91098860b6 | MS Windows 95 Internet shortcut text (URL=<https://client-tools.west-wind.com/docs>), ASCII text, with CRLF line terminators |
_What's new - West Wind Client Tools.url | c684c321ae86dd850db80946724b34a3 | MS Windows 95 Internet shortcut text (URL=<https://client-tools.west-wind.com/docs/_0su1f0xyd.htm>), ASCII text, with CRLF line terminators |
__IMPORTANT_Shareware Version - PLEASE READ.url | e4b02da6c179fc24b32f4bfc00ab1d2f | MS Windows 95 Internet shortcut text (URL=<https://client-tools.west-wind.com/docs/_51f1bswlk.htm>), ASCII text, with CRLF line terminators |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
YARAhub by abuse.ch | malware | pe_detect_tls_callbacks |
YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
YARAhub by abuse.ch | malware | pe_detect_tls_callbacks |
YARAhub by abuse.ch | malware | pe_detect_tls_callbacks |
JavaScript (0)
No Javascripts found
No JavaScripts
HTTP Transactions (1)
URL | IP | Response | Size | |
---|---|---|---|---|
GET west-wind.com/files/wwclient.zip | ![]() | 200 OK | 6.5 MB | |
URL west-wind.com/files/wwclient.zip IP / ASN ![]() 149.28.15.235 Requested byN/A Resource Info File typeZip archive data, at least v2.0 to extract, compression method=store First Seen2024-10-18 Last Seen2024-10-18 Times Seen1 Size6.5 MB (6459990 bytes) MD56b5954bd5c2b87179bc83e1d5442dca6 SHA148f8030a8593160d3aa8d21d18dd18a6a8a162d8 SHA2568caac277ef884b0f846c9de72cad42caf7e0dddd12f100b7183fa0557d1c0066 Certificate Info IssuerLet's Encrypt Subjectwest-wind.com FingerprintC6:A4:11:34:68:97:39:94:F2:46:16:CA:DC:0F:C4:7F:F6:06:42:33 ValiditySat, 28 Sep 2024 18:28:22 GMT - Fri, 27 Dec 2024 18:28:21 GMT HTTP Headers
| ||||