Report - downloads.wisecleaner.com/soft/WDCFree

Report Overview

Visitedpublic

2024-08-20 08:19:18

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-08-19 18:12:02	654 B	1.8 kB	23.33.119.57
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-08-19 18:12:03	1.3 kB	3.6 kB	23.33.119.27
downloads.wisecleaner.com	unknown	2006-11-12	2014-05-22 14:06:51	2021-08-30 08:51:12	507 B	6.6 MB	142.171.175.146

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

downloads.wisecleaner.com/soft/WDCFree_11.1.4.830.exe

IP / ASN

142.171.175.146

#35916 MULTA-ASN1

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 10 sections

Size6.6 MB (6590928 bytes)

MD525fc9d31add616fd57b169c62e65fbe0

SHA18433e518366e31758b36b81d7a9ce36e991909f3

SHA25603def06dacb0e3a049fec722200bdafb875294bde4c31a2467df013000ad3abd

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/75

JavaScript (0)

HTTP Transactions (7)

URL IP Response Size

r11.o.lencr.org/

23.33.119.57

504 B

URL

r11.o.lencr.org/

IP / ASN

23.33.119.57

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-19

Last Seen2024-08-22

Times Seen40825

Size504 B (504 bytes)

MD550a89b39234eb6cc4eda70d7e27be17f

SHA1306340eb26b6817fd8851a085563a88eed7e2b6b

SHA256eaabd011ed0722deeee97e566b8318b17d8e993d31db4c2cc31cf0e3cd8191f5

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EAABD011ED0722DEEEE97E566B8318B17D8E993D31DB4C2CC31CF0E3CD8191F5"
Last-Modified: Mon, 19 Aug 2024 12:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4408
Expires: Tue, 20 Aug 2024 09:32:20 GMT
Date: Tue, 20 Aug 2024 08:18:52 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL

r10.o.lencr.org/

IP / ASN

23.33.119.27

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-18

Last Seen2024-08-21

Times Seen19240

Size504 B (504 bytes)

MD518cce98073c1bf25df62a3ca026dedbf

SHA126ea37fc15ead14ac2047d074f6c4153d57775d0

SHA256c5fdde15e0dc09e045c2df21c77d2c87e6c7d4abe86048426f468fcd696054e0

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C5FDDE15E0DC09E045C2DF21C77D2C87E6C7D4ABE86048426F468FCD696054E0"
Last-Modified: Sun, 18 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14062
Expires: Tue, 20 Aug 2024 12:13:14 GMT
Date: Tue, 20 Aug 2024 08:18:52 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL

r10.o.lencr.org/

IP / ASN

23.33.119.27

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-20

Last Seen2024-08-22

Times Seen38938

Size504 B (504 bytes)

MD55d0dd93e6a07253100201a9c8a3e15a5

SHA130adbd52887825ae2779d7fb12276bed8b1d8178

SHA25607bb496669af2e33765f0ad730934dad6f8ad79a628c6b21cd545505335471c6

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "07BB496669AF2E33765F0AD730934DAD6F8AD79A628C6B21CD545505335471C6"
Last-Modified: Mon, 19 Aug 2024 21:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19174
Expires: Tue, 20 Aug 2024 13:38:26 GMT
Date: Tue, 20 Aug 2024 08:18:52 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL

r10.o.lencr.org/

IP / ASN

23.33.119.27

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-18

Last Seen2024-08-21

Times Seen40508

Size504 B (504 bytes)

MD518f75729f3e25e2eb7f12b70dfce3849

SHA1479177b92dda7c4e8763c80a15cbc71c3386d06c

SHA2560b7da2da1fcba23c5118479e14828f87a605a32af15d0962f216115a9ff1d02a

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0B7DA2DA1FCBA23C5118479E14828F87A605A32AF15D0962F216115A9FF1D02A"
Last-Modified: Sun, 18 Aug 2024 15:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10171
Expires: Tue, 20 Aug 2024 11:08:23 GMT
Date: Tue, 20 Aug 2024 08:18:52 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL

r10.o.lencr.org/

IP / ASN

23.33.119.27

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-21

Last Seen2024-08-21

Times Seen1

Size504 B (504 bytes)

MD528867cb5cc7cb5a25684692507848b3f

SHA1e57d4fd6fcd100044bdccaa31ac7b37b0dbc7422

SHA256f84809c8a270e0d87298c690dc418d2816db66f1a6a4de83e6f5645076108eba

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F84809C8A270E0D87298C690DC418D2816DB66F1A6A4DE83E6F5645076108EBA"
Last-Modified: Tue, 20 Aug 2024 03:51:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14561
Expires: Tue, 20 Aug 2024 12:21:33 GMT
Date: Tue, 20 Aug 2024 08:18:52 GMT
Connection: keep-alive

r11.o.lencr.org/

23.33.119.57

504 B

URL

r11.o.lencr.org/

IP / ASN

23.33.119.57

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-18

Last Seen2024-08-21

Times Seen37247

Size504 B (504 bytes)

MD57944981bcac427aa8d0aa016ec63764d

SHA148bf925b10dc02afa8f597af8d26f5bf5efc0b7e

SHA25626bde594c33cd3386f4e65e3eaf0fc048fca46ed4a185f5c2aa70e8deeaffb0a

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "26BDE594C33CD3386F4E65E3EAF0FC048FCA46ED4A185F5C2AA70E8DEEAFFB0A"
Last-Modified: Sat, 17 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12888
Expires: Tue, 20 Aug 2024 11:53:42 GMT
Date: Tue, 20 Aug 2024 08:18:54 GMT
Connection: keep-alive

GET downloads.wisecleaner.com/soft/WDCFree_11.1.4.830.exe

142.171.175.146

200 OK

6.6 MB

URL

downloads.wisecleaner.com/soft/WDCFree_11.1.4.830.exe

IP / ASN

142.171.175.146

#35916 MULTA-ASN1

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 10 sections

First Seen2024-08-06

Last Seen2024-08-21

Times Seen5

Size6.6 MB (6590928 bytes)

MD525fc9d31add616fd57b169c62e65fbe0

SHA18433e518366e31758b36b81d7a9ce36e991909f3

SHA25603def06dacb0e3a049fec722200bdafb875294bde4c31a2467df013000ad3abd

Certificate Info

IssuerLet's Encrypt

Subjectdownload.wisecleaner.com

FingerprintEF:BE:56:6C:EF:52:94:2C:1D:88:8D:03:38:B3:24:5C:C7:19:ED:E3

ValidityMon, 05 Aug 2024 01:02:50 GMT - Sun, 03 Nov 2024 01:02:49 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/75

HTTP Headers

GET /soft/WDCFree_11.1.4.830.exe HTTP/1.1
Host: downloads.wisecleaner.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 20 Aug 2024 07:05:07 GMT
content-type: application/octet-stream
content-length: 6590928
last-modified: Wed, 31 Jul 2024 05:47:36 GMT
etag: "66a9cff8-6491d0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2