Report - www.scootersoftware.com/files/BCompare-5.0.6.30713.exe

Report Overview

Visitedpublic

2025-03-21 22:40:34

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
www.scootersoftware.com	138391	1997-09-28	2017-01-29	2025-03-18	522 B	28 MB	72.32.90.250

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-03-21	medium	www.scootersoftware.com/files/BCompare-5.0.6.30713.exe	Detect pe file that no import table

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

www.scootersoftware.com/files/BCompare-5.0.6.30713.exe

IP / ASN

72.32.90.250

#33070 RMH-14

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 11 sections

Size28 MB (28412320 bytes)

MD557a20c4b5e2c4c8795ab7f758ed7a360

SHA1dc325455c493e24e3295b27f396565db672ae5d5

SHA256a44ebdf3f6553756ec76b59ead716b3a44128f1d5ac96c4f5ac9fcabc4bfa66d

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET www.scootersoftware.com/files/BCompare-5.0.6.30713.exe

72.32.90.250

200 OK

28 MB

URL

www.scootersoftware.com/files/BCompare-5.0.6.30713.exe

IP / ASN

72.32.90.250

#33070 RMH-14

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 11 sections

First Seen2025-03-04

Last Seen2025-04-15

Times Seen11

Size28 MB (28412320 bytes)

MD557a20c4b5e2c4c8795ab7f758ed7a360

SHA1dc325455c493e24e3295b27f396565db672ae5d5

SHA256a44ebdf3f6553756ec76b59ead716b3a44128f1d5ac96c4f5ac9fcabc4bfa66d

Certificate Info

IssuerSectigo Limited

Subject*.scootersoftware.com

FingerprintD4:B9:27:88:94:1A:A9:A1:19:5A:ED:05:60:A2:5B:76:42:76:4C:7E

ValidityFri, 14 Mar 2025 00:00:00 GMT - Wed, 08 Apr 2026 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

HTTP Headers

GET /files/BCompare-5.0.6.30713.exe HTTP/1.1
Host: www.scootersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 21 Mar 2025 22:40:12 GMT
Server: Apache
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Last-Modified: Thu, 27 Feb 2025 20:52:13 GMT
ETag: "1b189a0-62f25dd4ea0fb"
Accept-Ranges: bytes
Content-Length: 28412320
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/octet-stream