Report Overview

  1. Submitted URL

    nicolascoolman.eu/download/zhpcleaner/?wpdmdl=23616

  2. IP

    109.234.162.18

    ASN

    #50474 O2switch SAS

  3. Submitted

    2024-05-08 12:37:56

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
nicolascoolman.euunknownunknown2017-03-132024-03-14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumnicolascoolman.eu/download/zhpcleaner/?wpdmdl=23616Identifies compiled AutoIT script (as EXE).

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    nicolascoolman.eu/download/zhpcleaner/?wpdmdl=23616

  2. IP

    109.234.162.18

  3. ASN

    #50474 O2switch SAS

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

    Size

    3.4 MB (3364512 bytes)

  2. Hash

    bae82ef45cb9a70c0d77122e4457b007

    2c42322c203bb0d542b5982477d7df7f3bffcb2d

    Detections

    AnalyzerVerdictAlert
    Public InfoSec YARA rulesmalware
    Identifies compiled AutoIT script (as EXE).
    VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
nicolascoolman.eu/download/zhpcleaner/?wpdmdl=23616
109.234.162.18200 OK3.4 MB