Report Overview

  1. Visited public
    2025-05-08 07:03:49
    Tags
  2. URL

    www.screenpresso.com/binaries/releases/stable/dotnet47/Screenpresso.exe

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    46.105.204.6

    #16276 OVH SAS

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
www.screenpresso.com4182632009-10-072014-02-192025-04-28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumwww.screenpresso.com/binaries/releases/stable/dotnet47/Screenpresso.exeDetect pe file that no import table

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    www.screenpresso.com/binaries/releases/stable/dotnet47/Screenpresso.exe

  2. IP

    46.105.204.6

  3. ASN

    #16276 OVH SAS

  1. File type

    PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

    Size

    20 MB (20305408 bytes)

  2. Hash

    b7c11d5ff35e493f874c62caeafbe364

    283500c62f94b437e30f038a0368bf56b955769d

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    Detect pe file that no import table

JavaScript (0)

HTTP Transactions (3)

URLIPResponseSize
www.screenpresso.com/binaries/releases/stable/dotnet47/Screenpresso.exe
46.105.204.6307 Temporary Redirect20 MB
www.screenpresso.com/binaries/releases/stable/dotnet47/Screenpresso.exe?__r=1.a77acd439cbfa75e31959adc12bbd304
46.105.204.6307 Temporary Redirect20 MB
www.screenpresso.com/binaries/releases/stable/dotnet47/Screenpresso.exe
46.105.204.6200 OK20 MB