Report Overview
Visitedpublic
2025-05-04 04:52:40
Tags
Submit Tags
URL
bandisoft.app/bandiview/BANDIVIEW-SETUP-X64.EXE?20250504125509
Finishing URL
about:privatebrowsing
IP / ASN
104.21.32.1
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
bandisoft.app 1 alert(s) on this Host | unknown | unknown | 2025-04-30 | 2025-04-30 | 530 B | 15 MB | 104.21.64.1 |
Related reports
Threat Detection Systems
Public InfoSec YARA rules
| Scan Date | Severity | Indicator | Alert |
|---|---|---|---|
| 2025-05-04 | medium | bandisoft.app/bandiview/BANDIVIEW-SETUP-X64.EXE?20250504125509 | Detect pe file that no import table |
OpenPhish
No alerts detected
PhishTank
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
bandisoft.app/bandiview/BANDIVIEW-SETUP-X64.EXE?20250504125509
IP / ASN
104.21.64.1
File Overview
File TypePE32 executable (GUI) Intel 80386, for MS Windows, 7 sections
Size15 MB (14939904 bytes)
MD5a177fa3f6d5ec1985153b00896229c27
SHA164de2c90cf791e558741c17790e89026bd7c62e8
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| YARAhub by abuse.ch | malware | Detect pe file that no import table |
JavaScript (0)
No JavaScripts
HTTP Transactions (1)
| URL | IP | Response | Size |
|---|