Report Overview
Visitedpublic
2025-05-12 20:03:25
Tags
Submit Tags
URL
totalsolucao.com/wp-content/tebu.zip?899d81b9670e2973e854
Finishing URL
about:privatebrowsing
IP / ASN
195.179.236.158
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
totalsolucao.com 1 alert(s) on this Host | unknown | 2014-05-30 | 2025-05-12 | 2025-05-12 | 525 B | 3.3 MB | 195.179.236.158 |
Related reports
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
| Scan Date | Severity | Indicator | Alert |
|---|---|---|---|
| 2025-05-12 | medium | totalsolucao.com | NetSupportManager RAT |
File detected
URL
totalsolucao.com/wp-content/tebu.zip?899d81b9670e2973e854
IP / ASN
195.179.236.158
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=deflate
Size3.3 MB (3276293 bytes)
MD598ace448199a861e0ed81f061eb35d0c
SHA1a98fbd3b59433db670571d3e0d058756498481d0
Archive (24)
| Filename | MD5 | File type |
|---|---|---|
| HTCTL32.DLL | 2d3b207c8a48148296156e5725426c7f | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections |
| NSM.LIC | 390c964070626a64888d385c514f568e | ASCII text, with CRLF line terminators |
| NSM.ini | 88b1dab8f4fd1ae879685995c90bd902 | Generic INItialization configuration [Features] |
| PCICHEK.DLL | a0b9388c5f18e27266a31f8c5765b263 | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections |
| PCICL32.DLL | 00587238d16012152c2e951a087f2cc9 | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections |
| TCCTL32.DLL | eab603d12705752e3d268d86dff74ed4 | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections |
| client32.exe | ee75b57b9300aab96530503bfae8a2f2 | PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections |
| client32.ini | f15b35f362cca01302d44a90e8bc559c | ASCII text, with CRLF line terminators |
| msvcr100.dll | 0e37fbfa79d349d672456923ec5fbbe3 | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections |
| nskbfltr.inf | 26e28c01461f7e65c402bdf09923d435 | Windows setup INFormation |
| pcicapi.dll | dcde2248d19c778a41aa165866dd52d0 | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections |
| remcmdstub.exe | 1768c9971cea4cc10c7dd45a5f8f022a | PE32 executable (console) Intel 80386, for MS Windows, 5 sections |
| InitialDUState V24_4.dat | bc8a46d2aa23bad9cba0ffa52ea8fa4f | JSON text data |
| Mss32.dll | 18a082ad2c18df2556feac3e1055423f | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections |
| 800_arrowright.tga | f7035af9a5f4f627998433e6a063e76d | Targa image data - RGBA 16 x 16 x 32 - 8-bit alpha - author " " - comment " " - job " " - Paint Shop Pro 12.80 |
| msvcp120.dll | 101fe64acfe08e1137cafc5a91166b3c | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections |
| InitialDUState V24_4.dat | bc8a46d2aa23bad9cba0ffa52ea8fa4f | JSON text data |
| Mss32.dll | 18a082ad2c18df2556feac3e1055423f | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections |
| 800_arrowright.tga | f7035af9a5f4f627998433e6a063e76d | Targa image data - RGBA 16 x 16 x 32 - 8-bit alpha - author " " - comment " " - job " " - Paint Shop Pro 12.80 |
| msvcp120.dll | 101fe64acfe08e1137cafc5a91166b3c | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections |
| InitialDUState V24_4.dat | bc8a46d2aa23bad9cba0ffa52ea8fa4f | JSON text data |
| Mss32.dll | 18a082ad2c18df2556feac3e1055423f | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections |
| 800_arrowright.tga | f7035af9a5f4f627998433e6a063e76d | Targa image data - RGBA 16 x 16 x 32 - 8-bit alpha - author " " - comment " " - job " " - Paint Shop Pro 12.80 |
| msvcp120.dll | 101fe64acfe08e1137cafc5a91166b3c | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections |
JavaScript (0)
No JavaScripts
HTTP Transactions (1)
| URL | IP | Response | Size |
|---|