Report - freecommander.com/downloads/FreeCommanderXE-32-public

Report Overview

Submitted URL
freecommander.com/downloads/FreeCommanderXE-32-public_portable.zip
IP
92.205.50.98
ASN
#21499 Host Europe GmbH
Submitted
2024-04-25 09:37:23
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
freecommander.com	unknown	2003-12-10	2012-05-25	2024-04-18	520 B	20 MB	92.205.50.98

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
freecommander.com/downloads/FreeCommanderXE-32-public_portable.zip
IP
92.205.50.98
ASN
#21499 Host Europe GmbH

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
20 MB (19979640 bytes)
Hash
35054c41e8fab2fd5a456cd6e337e9d3
16d34258ebc4ea6e76a8203535f9289adffa1e6b
970e0d90f72516f8b64124bafe8a423e2d24525c2867974b4cd30e1fdd33267c

Archive (64)

Filename

Md5

File type

Basque.lng

ba717d27ee4bdca8bc65202cc0535448

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Bulgarian.lng

ce41851983213ce6eade5113348c6047

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Catalan.lng

5885534c65799172ba2fdbb68a634989

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Chinese_s.lng

fbaadc0e65a99032dd4acbfad8d4d971

Unicode text, UTF-8 text, with CRLF line terminators

Chinese_t.lng

e1e3fdccbbe1c6d39ef2bace4ba4583a

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Croatian.lng

43d13f7107899daa1c79a21a83562f1e

Unicode text, UTF-8 text, with CRLF line terminators

Czech.lng

e5c926789967e3097ff98d7eb15b8356

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Danish.lng

d74b12a5571aa962bf9e3ed97b8c32ff

Unicode text, UTF-8 text, with CRLF line terminators

Deutsch.lng

a147058946beca64b3bc1647263424b4

Unicode text, UTF-8 text, with CRLF line terminators

Dutch.lng

82a4316a7d3839f22529db857351c52d

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

English.lng

906ef47e636c0731afc40ce47b1dd84a

Unicode text, UTF-8 text, with CRLF line terminators

Finnish.lng

e6eb13d422804552e4cbdb707b6ae619

Unicode text, UTF-8 text, with CRLF line terminators

French.lng

6d2947965271df91fc27bdd5e638ba3f

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Greek.lng

5d99193c587c9788a599ef0689753d15

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Hungarian.lng

baaaee6c41c13a82e498a5f2777433b5

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Italian.lng

fdeb5402e5a4c17fa2860af1b700177c

Unicode text, UTF-8 text, with CRLF line terminators

Japanese.lng

0826c902fd3c79b0fbbc76d0b96c51d7

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Korean.lng

35ed4e52df05620f5cb25de8ff9f988a

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Norwegian.lng

c7b1e9e3bfd061d444769f017db18a5a

Unicode text, UTF-8 text, with CRLF line terminators

Polski.lng

9d193c58d8b216056da5ee08f89b79e8

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Portuguese-Brazil.lng

66ccdfdeba32bec6f1765dced5811d96

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Portuguese.lng

56d1bdce861245eff7a89289eca8729a

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Romanian.lng

597b0aec55e8114329b136d8809e304e

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Russian.lng

5bbe3a8a9f4192d1757d73cc2e4dab96

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Serbian.lng

e33701807f7ecf44d6dc6eab1bafbd08

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Slovak.lng

7209dcf946458c943b18ea2131f154c0

Unicode text, UTF-8 text, with CRLF line terminators

Slovenian.lng

d3e56599796a80ffe332ddd687b0c65d

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Spanish-Argentina.lng

3dda7d8460e9bb76c022ad028a1df681

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Spanish-Colombia.lng

be6876e94b1e69944855305ef7e70d87

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Spanish-Spain.lng

b772147cbdb43bb76a524859e00bac51

Unicode text, UTF-8 (with BOM) text, with CRLF, CR, LF line terminators

Swedish.lng

ba8d62401aed19a09f3e4987d8b260c5

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Tatar.lng

4c96c7fe8089f9288dbed32938a32cee

Unicode text, UTF-8 text, with CRLF line terminators

Turkish.lng

7f95780d16c942e5a30e4d3f59f7eb90

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Ukrainian.lng

0781f0fcf6f83ae25d25837208dba637

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

FcCs_Dark_Blue_&_Light_Blue_by_Dreamer.colors

64d5bc6ef6f2b70457addbfa43f538bd

Generic INItialization configuration [ColorPickerCustomColors]

FcCs_Dark_Blue_&_Light_Blue_by_Dreamer.png

dd44dfcee07f38dbce7e78c930e8430a

PNG image data, 20 x 20, 8-bit/color RGBA, interlaced

FcCs_Dark_Grey_&_Silver_No_Colors_by_Dreamer.colors

ebe4820b846c654fffe6771013a95a7f

Generic INItialization configuration [ColorPickerCustomColors]

FcCs_Dark_Grey_&_Silver_No_Colors_by_Dreamer.png

5c8d0a6c193cbe6fc8fe99bed2d02505

PNG image data, 20 x 20, 8-bit/color RGBA, interlaced

FcCs_Dark_Grey_Flat_Default.colors

436f5a55405d4916c9ae5d2b0081de30

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

FcCs_Dark_Grey_Flat_Default.png

fe85a3a59ca239f0c02330738a3950d1

PNG image data, 20 x 20, 8-bit/color RGBA, interlaced

FcCs_Light_Beige_Flat_by_Dreamer.colors

49ef69c2f039e184b3c033acd3b8cde1

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

FcCs_Light_Beige_Flat_by_Dreamer.png

a1b4c4a809eabb1d829a8eb7850f614c

PNG image data, 20 x 20, 8-bit/color RGBA, interlaced

FcCs_Solarized_Dark_Flat_by_Dreamer.colors

cc1f89f549668a30916dd90f0ffbe0ba

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

FcCs_Solarized_Dark_Flat_by_Dreamer.png

31c270459f1ce9530fff5fd5b8989245

PNG image data, 20 x 20, 8-bit/color RGBA, interlaced

FcCs_White_Default.colors

7359481c848d7cb146cf593c2d548dd8

Generic INItialization configuration [ColorPickerCustomColors]

FcCs_White_Default.png

ec310f7d23dc2e3952b483c420f294a4

PNG image data, 20 x 20, 8-bit/color RGBA, interlaced

fc_info.dat

787aee85c9187dbe67697e4907a4b295

Zip archive data, at least v2.0 to extract, compression method=deflate

fc_ShortCuts_en.htm

da313f512b846631ff0204f23020b2df

HTML document, ASCII text, with very long lines (310), with CRLF line terminators

FcContextMenu64.exe

b0b338eb1c0989250552d726e276681a

PE32+ executable (GUI) x86-64, for MS Windows, 10 sections

FCIcons.dll

9f3bfc5924a4dde87379c68cc7e37e15

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 10 sections

FCSFXStub.exe

01fe0f8b2484fa3995c192d660befdb1

PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections

FCWinERedirect.exe

23d6588980de6624be6e5ff3bc9327c5

PE32 executable (GUI) Intel 80386, for MS Windows, 11 sections

FreeCommander.exe

6896f1c849c7f0e88d6d64c35c818bcb

PE32 executable (GUI) Intel 80386, for MS Windows, 11 sections

FreeCommander.exe.manifest

24f5db5ce34cd4bd6e641d690783503a

XML 1.0 document, ASCII text, with CRLF line terminators

FreeCommander.sha256

4bf95e7caf0d80917dc85f494e4e6ffd

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

ielang32.dll

02d368e54f4cc11c386a2a3bd41d1af9

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 10 sections

ielib32.dll

3bceb10a15ef034db5976bdfca4a9842

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

ijl15.dll

4fc074c3c6cf290bb2c11e5c31c97b27

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

licence_eng.rtf

f1b6f2edc28012be7f1906e78a69b316

Rich Text Format data, version 1, ANSI, code page 1252, default middle east language ID 1025

ReadMe_XE.txt

ec96b14afc167e7d9b1388e36258e2cd

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

unrar.dll

e224eda7b8897e87dd0bccd29161e59e

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections

what_is_fcStart_ini.txt

77c545953d691a900e8cf8fcfbcff3e6

ASCII text, with CRLF line terminators

Abkhazian.lng

f90223936176730dd0a9b1ff0ebc28c9

Unicode text, UTF-8 text, with CRLF line terminators

Dutch_forHelpFile.lng

3caea364005b9b70c93aa751ff6c9680

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	freecommander.com/downloads/FreeCommanderXE-32-public_portable.zip	92.205.50.98	200 OK	20 MB
URL User Request GET HTTP/2 freecommander.com/downloads/FreeCommanderXE-32-public_portable.zip IP 92.205.50.98:443 ASN #21499 Host Europe GmbH Certificate IssuerStarfield Technologies, Inc. Subjectwww.freecommander.com Fingerprint00:2C:C1:30:1A:69:E6:0C:90:8D:76:31:60:D8:4F:02:4D:50:A1:B2 ValidityThu, 11 Jan 2024 18:29:32 GMT - Tue, 21 Jan 2025 09:43:12 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 20 MB (19979640 bytes) Hash 35054c41e8fab2fd5a456cd6e337e9d3 16d34258ebc4ea6e76a8203535f9289adffa1e6b 970e0d90f72516f8b64124bafe8a423e2d24525c2867974b4cd30e1fdd33267c HTTP Headers GET /downloads/FreeCommanderXE-32-public_portable.zip HTTP/1.1 Host: freecommander.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Thu, 25 Apr 2024 09:36:47 GMT content-type: application/zip content-length: 19979640 last-modified: Fri, 02 Feb 2024 20:57:10 GMT etag: "130dd78-6106c5b079580" cache-control: max-age=172800 expires: Sat, 27 Apr 2024 09:36:47 GMT referrer-policy: x-cache-status: BYPASS accept-ranges: bytes X-Firefox-Spdy: h2`

freecommander.com/downloads/FreeCommanderXE-32-public_portable.zip

92.205.50.98

200 OK

20 MB

URL User Request GET HTTP/2
freecommander.com/downloads/FreeCommanderXE-32-public_portable.zip
IP
92.205.50.98:443
ASN
#21499 Host Europe GmbH

Certificate
IssuerStarfield Technologies, Inc.
Subjectwww.freecommander.com
Fingerprint00:2C:C1:30:1A:69:E6:0C:90:8D:76:31:60:D8:4F:02:4D:50:A1:B2
ValidityThu, 11 Jan 2024 18:29:32 GMT - Tue, 21 Jan 2025 09:43:12 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
20 MB (19979640 bytes)
Hash
35054c41e8fab2fd5a456cd6e337e9d3
16d34258ebc4ea6e76a8203535f9289adffa1e6b
970e0d90f72516f8b64124bafe8a423e2d24525c2867974b4cd30e1fdd33267c

HTTP Headers

GET /downloads/FreeCommanderXE-32-public_portable.zip HTTP/1.1
Host: freecommander.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 09:36:47 GMT
content-type: application/zip
content-length: 19979640
last-modified: Fri, 02 Feb 2024 20:57:10 GMT
etag: "130dd78-6106c5b079580"
cache-control: max-age=172800
expires: Sat, 27 Apr 2024 09:36:47 GMT
referrer-policy: 
x-cache-status: BYPASS
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (64)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers