Report - www.mofaga.gov.np/downloads/nepali

Report Overview

Submitted URL
www.mofaga.gov.np/downloads/nepali_Traditional.zip
IP
202.45.146.148
ASN
#45353 NITC: IT Agency of Government of Nepal
Submitted
2024-04-25 12:10:50
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.mofaga.gov.np	unknown	unknown	2019-01-02	2024-04-15	504 B	694 kB	202.45.146.148

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.mofaga.gov.np/downloads/nepali_Traditional.zip
IP
202.45.146.148
ASN
#45353 NITC: IT Agency of Government of Nepal

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
694 kB (693675 bytes)
Hash
27556bb085a96b01fa57249cf61f5ed0
bff7212a4b61d042f3b3e322cba8592fc0cd8be7
4a11b6837894c074b215d1dadf9237172284ccb2db84da86a292f8343556683d

Archive (11)

Filename

Md5

File type

keyboardlayout Traditional.tif

76d737131563f48d2b75d53bedb08a78

TIFF image data, little-endian, direntries=21, height=1204, bps=266, compression=LZW, PhotometricInterpretation=CMYK, width=2772

keyboardlayout-Traditional.gif

489e274bcf2848b935c24eaee56436c3

GIF image data, version 89a, 665 x 289

Thumbs.db

ab8e46fcaaac52f136d82f99429326a7

Composite Document File V2 Document, Cannot read section info

Trad.dll

885327688650e15c383e63a1824637c4

PE32+ executable (DLL) (native) x86-64, for MS Windows, 3 sections

Trad.dll

a9476816e2fdf93a518fa845a8e1469d

PE32 executable (DLL) (native) Intel 80386, for MS Windows, 3 sections

Trad.dll

5bf167b51bf797dca91785ba952c42e6

PE32+ executable (DLL) (native) Intel Itanium, for MS Windows, 3 sections

setup.exe

0f54e134e950a018070674a44692a8f7

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Trad_amd64.msi

ddfcd9bd646599883c6ea1abae33ecaa

Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.0, MSI Installer, Code page: 0, Title: Nepali Unicode Traditional Layout, Keywords: Custom, Keyboard, Installer, MSI, database, MSKLC, Revision Number: {C21A1C89-CE9B-4EA3-AB54-9148C95D22D8}, Last Saved By: binee, Last Printed: Sun Apr 20 09:16:50 2008, Last Saved Time/Date: Sun Apr 20 09:16:50 2008, Comments: Nepali Unicode Traditional Layout, Author: binee, Template: x64;1033, Name of Creating Application: Keyboard Layout Creator 1.4, Subject: Keyboard Layout Creator 1.4, Number of Pages: 200, Number of Words: 0, Number of Characters: 0, Security: 2, Create Time/Date: Sun Apr 20 09:16:50 2008, Total Editing Time: Sun Apr 20 09:16:50 2008

Trad_i386.msi

01ff4bd6165f2d6586d11e3a0efd3859

Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.0, MSI Installer, Code page: 0, Title: Nepali Unicode Traditional Layout, Keywords: Custom, Keyboard, Installer, MSI, database, MSKLC, Revision Number: {2CA1D86A-5C70-4E35-9554-AD540868C61C}, Last Saved By: binee, Last Printed: Sun Apr 20 09:16:50 2008, Last Saved Time/Date: Sun Apr 20 09:16:50 2008, Comments: Nepali Unicode Traditional Layout, Author: binee, Template: Intel;1033, Name of Creating Application: Keyboard Layout Creator 1.4, Subject: Keyboard Layout Creator 1.4, Number of Pages: 200, Number of Words: 0, Number of Characters: 0, Security: 2, Create Time/Date: Sun Apr 20 09:16:50 2008, Total Editing Time: Sun Apr 20 09:16:50 2008

Trad_ia64.msi

599897ddb6180f0cf7e08f6274e127cb

Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.0, MSI Installer, Code page: 0, Title: Nepali Unicode Traditional Layout, Keywords: Custom, Keyboard, Installer, MSI, database, MSKLC, Revision Number: {A0B47945-0DB1-4ABB-B0A0-97732C6CE4BB}, Last Saved By: binee, Last Printed: Sun Apr 20 09:16:51 2008, Last Saved Time/Date: Sun Apr 20 09:16:51 2008, Comments: Nepali Unicode Traditional Layout, Author: binee, Template: Intel64;1033, Name of Creating Application: Keyboard Layout Creator 1.4, Subject: Keyboard Layout Creator 1.4, Number of Pages: 200, Number of Words: 0, Number of Characters: 0, Security: 2, Create Time/Date: Sun Apr 20 09:16:51 2008, Total Editing Time: Sun Apr 20 09:16:51 2008

Trad.dll

d7654ca3dbb5d9a7130131b7018f0241

PE32 executable (DLL) (native) Intel 80386, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/65

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

www.mofaga.gov.np/downloads/nepali_Traditional.zip

202.45.146.148

200 OK

694 kB

URL User Request GET HTTP/2
www.mofaga.gov.np/downloads/nepali_Traditional.zip
IP
202.45.146.148:443
ASN
#45353 NITC: IT Agency of Government of Nepal

Certificate
IssuerLet's Encrypt
Subjectmofaga.gov.np
FingerprintD8:9D:78:02:AA:F2:54:2F:F3:26:5F:60:2F:C0:BF:3E:DA:91:4E:F3
ValidityMon, 15 Apr 2024 03:36:43 GMT - Sun, 14 Jul 2024 03:36:42 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
694 kB (693675 bytes)
Hash
27556bb085a96b01fa57249cf61f5ed0
bff7212a4b61d042f3b3e322cba8592fc0cd8be7
4a11b6837894c074b215d1dadf9237172284ccb2db84da86a292f8343556683d

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/65

HTTP Headers

GET /downloads/nepali_Traditional.zip HTTP/1.1
Host: www.mofaga.gov.np
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 12:10:41 GMT
content-type: application/zip
content-length: 693675
last-modified: Thu, 18 May 2023 10:48:35 GMT
etag: "64660283-a95ab"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (11)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers