Report - dl-t1.wmzhe.com/33/33567/Windows7Loader2.2.2.zip

Report Overview

Visitedpublic

2025-05-27 18:29:18

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
dl-t1.wmzhe.com	unknown	2007-06-23	2013-08-19	2025-05-27	516 B	1.7 MB	61.164.113.250

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

dl-t1.wmzhe.com/33/33567/Windows7Loader2.2.2.zip

IP / ASN

61.164.113.250

#134771 WENZHOU, ZHEJIANG Province, P.R.China.

File Overview

File TypeZip archive data, at least v2.0 to extract, compression method=deflate

Size1.7 MB (1740527 bytes)

MD5d33e0e187673647db882bcaedaafd765

SHA17236e872f69b9c14e3980c9da629e5aabfe8b33f

SHA256d28fecf096f5be29f521e434c3e61aca3ce66ca7d9cfa399a49450b4e672c879

Archive (2)

Modified	Filename	Size	MD5	File type
2014-04-03 02:43	Windows Loader.exe	4.0 MB	323c0fd51071400b51eedb1be90a8188	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections
2014-04-03 02:43	Keys.ini	16 kB	3ba4950bcf43b1c7b714a1d93b57ea86	ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 39/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET dl-t1.wmzhe.com/33/33567/Windows7Loader2.2.2.zip

61.164.113.250

200 OK

1.7 MB

URL

dl-t1.wmzhe.com/33/33567/Windows7Loader2.2.2.zip

IP / ASN

61.164.113.250

#134771 WENZHOU, ZHEJIANG Province, P.R.China.

Requested byN/A

Resource Info

File typeZip archive data, at least v2.0 to extract, compression method=deflate

First Seen2025-05-27

Last Seen2025-05-27

Times Seen2

Size1.7 MB (1740527 bytes)

MD5d33e0e187673647db882bcaedaafd765

SHA17236e872f69b9c14e3980c9da629e5aabfe8b33f

SHA256d28fecf096f5be29f521e434c3e61aca3ce66ca7d9cfa399a49450b4e672c879

Certificate Info

IssuerDigiCert, Inc.

Subject*.wmzhe.com

Fingerprint68:93:D4:1D:B5:F6:76:94:0A:B6:D9:3D:81:12:41:A8:18:AC:56:58

ValidityTue, 02 Jul 2024 00:00:00 GMT - Thu, 17 Jul 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 39/66

HTTP Headers

GET /33/33567/Windows7Loader2.2.2.zip HTTP/1.1
Host: dl-t1.wmzhe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Tue, 27 May 2025 18:28:45 GMT
Content-Type: application/zip
Content-Length: 1740527
Last-Modified: Thu, 25 Feb 2016 05:08:28 GMT
Connection: keep-alive
ETag: "56ce8c4c-1a8eef"
Accept-Ranges: bytes