Report - www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip

Report Overview

Submitted URL
www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip
IP
93.115.113.34
ASN
#34358 H88 Web Hosting S.r.l.
Submitted
2024-05-04 20:50:20
Access
public
Website Title
WSCC - Windows System Control Center - Downloads
Final URL
www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.kls-soft.com	unknown	2005-02-09	2012-05-24	2021-12-28	7.3 kB	3.9 MB	93.115.113.34

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.kls-soft.com/downloads/wscc.zip
IP
93.115.113.34
ASN
#34358 H88 Web Hosting S.r.l.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.8 MB (3796155 bytes)
Hash
7ab5ebb5d239044c20a4bb2beaa7634e
e47841eb714b59b179987e4232a90d1b2266ddde
1771d66e4ede09410aa8062952f88f22881bd915542db86e6e0a1681a7b88c61

Archive (6)

Filename

Md5

File type

wscc.exe

940ac02ebfa433b010e1822755dd8705

PE32 executable (GUI) Intel 80386, for MS Windows, 10 sections

wscc.license.txt

efc6d91f0791f95aa779743d3c8db420

ASCII text, with very long lines (875), with CRLF line terminators

wscc.readme.txt

cc4908cfaa4d4554a8cd824dec46e927

ASCII text, with CRLF line terminators

libcrypto-1_1.dll

fcba77357f0c89e11b4dfe4ef0b26d0e

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

libssl-1_1.dll

384017b6acdf7875c758370be447a7d7

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

LICENSE

d343e62fc9c833710bbbed25f27364c8

ASCII text

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

JavaScript (3)

	URL	Size	First Seen	Last Seen
	www.kls-soft.com/js/menu/dropdown-menu.min.js	2.8 kB	2024-02-06	2024-05-04
Pretty URL www.kls-soft.com/js/menu/dropdown-menu.min.js IP 93.115.113.34 ASN #34358 H88 Web Hosting S.r.l. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-06 07:02:02 Last Seen2024-05-04 22:50:22 Times Seen14 Hash 9091b60a65d9782ee150ec425fa35e36 be483b37eb3fb5ba576fe867d450577f69caca3e 36f7f3855e6185c769637124662d946bdfb93c68cd8cb8ae895dfbbf23ce821e Loading...

	www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip	0 B	2023-03-07	2024-05-18
Pretty URL www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip IP 93.115.113.34 ASN #34358 H88 Web Hosting S.r.l. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-18 12:46:48 Times Seen37785250 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.kls-soft.com/js/jquery/jquery.min.js	90 kB	2023-03-26	2024-05-18
Pretty URL www.kls-soft.com/js/jquery/jquery.min.js IP 93.115.113.34 ASN #34358 H88 Web Hosting S.r.l. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 04:59:07 Last Seen2024-05-18 10:07:04 Times Seen8730 Hash 641dd14370106e992d352166f5a07e99 eda46747c71d38a880bee44f9a439c3858bb8f99 a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af Loading...

HTTP Transactions (15)

	URL	IP	Response	Size
	www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip	93.115.113.34	200 OK	2.7 kB
URL User Request GET HTTP/2 www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type HTML document, ASCII text, with very long lines (308), with CRLF, LF line terminators Size 2.7 kB (2662 bytes) Hash df8eeeeae88f5366cf68d98156a9efcd 662283dc120f57ee0fa1f309be1577d66dfd7c49 e8b4f9831f4a4ee0ac5b12bfeadec4383f298638892bbbe719a105ff0cd2ee6d HTTP Headers `GET /wscc/downloads.php?dlf=wscc.zip HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: text/html; charset=UTF-8 content-length: 2662 content-encoding: br vary: Accept-Encoding date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Firefox-Spdy: h2`

	www.kls-soft.com/js/menu/dropdown-menu.css	93.115.113.34	200 OK	918 B
URL GET HTTP/3 www.kls-soft.com/js/menu/dropdown-menu.css IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type ASCII text, with CRLF line terminators Size 918 B (918 bytes) Hash 0a9fae389342a09ef43c34ce30c27dad ca6fc213a838759d2c6509eb4350a72946fb37ab b61da9ec8179c3f31994449854e4405e7b3ec4f9cebfab61c193d16ea031bfd8 HTTP Headers `GET /js/menu/dropdown-menu.css HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: text/css last-modified: Tue, 17 Jan 2023 23:56:39 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 918 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"`

	www.kls-soft.com/js/jquery/jquery.min.js	93.115.113.34	200 OK	30 kB
URL GET HTTP/3 www.kls-soft.com/js/jquery/jquery.min.js IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type JavaScript source, ASCII text, with very long lines (65447) Size 30 kB (30369 bytes) Hash 641dd14370106e992d352166f5a07e99 eda46747c71d38a880bee44f9a439c3858bb8f99 a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af HTTP Headers `GET /js/jquery/jquery.min.js HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: application/javascript last-modified: Sat, 25 Mar 2023 22:40:40 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 30369 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/js/menu/dropdown-menu.min.js	93.115.113.34	200 OK	961 B
URL GET HTTP/3 www.kls-soft.com/js/menu/dropdown-menu.min.js IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type JavaScript source, ASCII text, with very long lines (2703), with CRLF line terminators Size 961 B (961 bytes) Hash 9091b60a65d9782ee150ec425fa35e36 be483b37eb3fb5ba576fe867d450577f69caca3e 36f7f3855e6185c769637124662d946bdfb93c68cd8cb8ae895dfbbf23ce821e HTTP Headers `GET /js/menu/dropdown-menu.min.js HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: application/javascript last-modified: Sat, 06 Aug 2022 12:16:14 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 961 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/common/basestyle.css	93.115.113.34	200 OK	3.9 kB
URL GET HTTP/3 www.kls-soft.com/common/basestyle.css IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type Unicode text, UTF-8 text Size 3.9 kB (3874 bytes) Hash 2533ed5fa3f94437cd4f169eb7c5ca69 2940566c7c7dd03591653f5a3e28147ca5b1b711 ead72b359103212e5d99fbb2ae191b46a94a1b338103931c03cf4439b2b8fef2 HTTP Headers `GET /common/basestyle.css HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: text/css last-modified: Wed, 24 Apr 2024 15:44:27 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 3874 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/wscc/style.css	93.115.113.34	200 OK	90 B
URL GET HTTP/3 www.kls-soft.com/wscc/style.css IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type ASCII text, with CRLF line terminators Size 90 B (90 bytes) Hash a4ee9572e3cf41bfc63ece52eb38e4ad 24d70afc2c0587242ba96c8d1876ee51c653f815 212e52607cf93fc18c8f2b9c6fd80f9de44016563b988062c457c3be7f1f5c5e HTTP Headers `GET /wscc/style.css HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: text/css last-modified: Wed, 29 May 2019 16:00:41 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 90 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/images/main/siteheader.jpg	93.115.113.34	200 OK	21 kB
URL GET HTTP/3 www.kls-soft.com/images/main/siteheader.jpg IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type JPEG image data, baseline, precision 8, 1000x107, components 3 Size 21 kB (21439 bytes) Hash 02a7b1bc015d931afae462104548396d 971736b422d9ce743ef9b4a16695f6f1b7191321 da85cc2168ffaf7968fde968c32df88d265f7f031a561118b18f69b78b48d589 HTTP Headers `GET /images/main/siteheader.jpg HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: image/jpeg last-modified: Fri, 08 Jul 2022 16:13:47 GMT accept-ranges: bytes content-length: 21439 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/images/main/siteheader_m.jpg	93.115.113.34	200 OK	5.0 kB
URL GET HTTP/3 www.kls-soft.com/images/main/siteheader_m.jpg IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 78x40, components 3 Size 5.0 kB (5017 bytes) Hash 8008fc16e9597f9081bbad8ac56f7d8a 5ed8b7e1f188d48bba4418279340664186b7cd56 a3e28480f32a808ccc7de6f5fab518c1406ad12dc8981a906d63cbc23d5e9cea HTTP Headers `GET /images/main/siteheader_m.jpg HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: image/jpeg last-modified: Tue, 08 Mar 2022 20:49:46 GMT accept-ranges: bytes content-length: 5017 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/images/mmenu_store.gif	93.115.113.34	200 OK	118 B
URL GET HTTP/3 www.kls-soft.com/images/mmenu_store.gif IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type GIF image data, version 89a, 19 x 16 Size 118 B (118 bytes) Hash 31f73be0ce60caa5b25fb08752fcd5c3 be3b88249b2ae3f5d9d94e05c5d15741417c4631 ccef9eaebab765a39dc7be6c9ac4562ee173f29a0230f0b894f5c21214d5dcd2 HTTP Headers `GET /images/mmenu_store.gif HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: image/gif last-modified: Wed, 21 Oct 2015 14:43:11 GMT accept-ranges: bytes content-length: 118 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/images/hmenu.png	93.115.113.34	200 OK	454 B
URL GET HTTP/3 www.kls-soft.com/images/hmenu.png IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced Size 454 B (454 bytes) Hash 611c9fc515b2321bd79cda27ba349b3e 0b01ae8ddb2b65ce3ff0bb21c8856fa7a9541beb f5582c9783e2bd632352571ad64364e100fdb66d7e6ecb86c6fbb9c111cc3fa5 HTTP Headers `GET /images/hmenu.png HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: image/png last-modified: Fri, 30 Mar 2018 18:00:43 GMT accept-ranges: bytes content-length: 454 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/images/wscc/siteheader.jpg	93.115.113.34	200 OK	16 kB
URL GET HTTP/3 www.kls-soft.com/images/wscc/siteheader.jpg IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type JPEG image data, baseline, precision 8, 1000x107, components 3 Size 16 kB (15863 bytes) Hash b9ed61d442cf44548b3ad496b738e299 9ac6e8d07041e0addc729ad51cfd0932c506e084 8c3108def2f9a046ad438e7fc2c03d0f12babdb82da6261632062e84eb276c8e HTTP Headers `GET /images/wscc/siteheader.jpg HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: image/jpeg last-modified: Wed, 21 Oct 2015 14:43:08 GMT accept-ranges: bytes content-length: 15863 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/images/copytoclipboard.png	93.115.113.34	200 OK	503 B
URL GET HTTP/3 www.kls-soft.com/images/copytoclipboard.png IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type PNG image data, 20 x 20, 8-bit/color RGB, non-interlaced Size 503 B (503 bytes) Hash 48621055bf9d3a94d67bd3825ff1afb0 fa963b223160688379c0666f3a76a13c2ee3b9e9 84ac3f7f447354ce7a5fffb766af28612e2d9e2068d2595fdfad837e84a57b2f HTTP Headers `GET /images/copytoclipboard.png HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: image/png last-modified: Thu, 15 Feb 2024 21:54:15 GMT accept-ranges: bytes content-length: 503 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/images/main_bg_easter.jpg	93.115.113.34	200 OK	10 kB
URL GET HTTP/3 www.kls-soft.com/images/main_bg_easter.jpg IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type JPEG image data, baseline, precision 8, 1220x150, components 3 Size 10 kB (10286 bytes) Hash f497a0684d132486d8faa7189ceabaa4 29930c5fbf6a1bbddb2e9fc9dd08d27cbfacc9dc a4bc375128b6bae2fb1991e34eea66a90e1b05f8740fe05f60e613c4134a80c9 HTTP Headers `GET /images/main_bg_easter.jpg HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/common/basestyle.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: image/jpeg last-modified: Fri, 30 Mar 2018 18:00:43 GMT accept-ranges: bytes content-length: 10286 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/images/favicon.ico	93.115.113.34	200 OK	9.2 kB
URL GET HTTP/3 www.kls-soft.com/images/favicon.ico IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Requested by https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 24x24, 8 bits/pixel Size 9.2 kB (9158 bytes) Hash 9775a5617e7dce58481f81e8cfb3b5b8 e564f977ae7e1bc9e0bfd35f38ae94b39faf67dc 951a6cc6ae224292b753325ccf9dc5aa20251e5eaae3453bc50f484184ac517d HTTP Headers `GET /images/favicon.ico HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Sat, 11 May 2024 20:49:53 GMT content-type: image/x-icon last-modified: Fri, 30 Mar 2018 18:00:43 GMT accept-ranges: bytes content-length: 9158 date: Sat, 04 May 2024 20:49:53 GMT server: LiteSpeed`

	www.kls-soft.com/downloads/wscc.zip	93.115.113.34	200 OK	3.8 MB
URL User Request GET HTTP/3 www.kls-soft.com/downloads/wscc.zip IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 3.8 MB (3796155 bytes) Hash 7ab5ebb5d239044c20a4bb2beaa7634e e47841eb714b59b179987e4232a90d1b2266ddde 1771d66e4ede09410aa8062952f88f22881bd915542db86e6e0a1681a7b88c61 HTTP Headers GET /downloads/wscc.zip HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.kls-soft.com/wscc/downloads.php?dlf=wscc.zip Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK content-type: application/zip last-modified: Tue, 16 Apr 2024 12:57:53 GMT accept-ranges: bytes content-length: 3796155 date: Sat, 04 May 2024 20:49:54 GMT server: LiteSpeed`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (6)

Detections

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type