Report - www.kls-soft.com/downloads/wscc

Report Overview

Submitted URL
www.kls-soft.com/downloads/wscc_x64.zip
IP
93.115.113.34
ASN
#34358 H88 Web Hosting S.r.l.
Submitted
2024-04-23 16:56:41
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.kls-soft.com	unknown	2005-02-09	2012-05-24	2024-04-14	493 B	4.5 MB	93.115.113.34

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

Files detected

URL
www.kls-soft.com/downloads/wscc_x64.zip
IP
93.115.113.34
ASN
#34358 H88 Web Hosting S.r.l.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.5 MB (4536661 bytes)
Hash
b7ddac9f532f765c20a114f9216a91c4
540a1977628f81c4d3ed994ce2cd62c55f962ae8
d145ea4314c7d07965f8768fd9daf258f44bae660eb78790f57ab959c8fb5652

Archive (6)

Filename

Md5

File type

wscc.exe

230336a59bb7ff6b7d85f47cbc926dce

PE32+ executable (GUI) x86-64, for MS Windows, 9 sections

wscc.license.txt

efc6d91f0791f95aa779743d3c8db420

ASCII text, with very long lines (875), with CRLF line terminators

wscc.readme.txt

cc4908cfaa4d4554a8cd824dec46e927

ASCII text, with CRLF line terminators

libcrypto-1_1-x64.dll

f4dad727b1a0067463da5ca8b0af3f28

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

libssl-1_1-x64.dll

9749fcf353a6ff4d9eaaffdb6d5b5766

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

LICENSE

d343e62fc9c833710bbbed25f27364c8

ASCII text

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	www.kls-soft.com/downloads/wscc_x64.zip	93.115.113.34	200 OK	4.5 MB
URL User Request GET HTTP/2 www.kls-soft.com/downloads/wscc_x64.zip IP 93.115.113.34:443 ASN #34358 H88 Web Hosting S.r.l. Certificate IssuerLet's Encrypt Subject.kls-soft.com Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9 ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 4.5 MB (4536661 bytes) Hash b7ddac9f532f765c20a114f9216a91c4 540a1977628f81c4d3ed994ce2cd62c55f962ae8 d145ea4314c7d07965f8768fd9daf258f44bae660eb78790f57ab959c8fb5652 HTTP Headers `GET /downloads/wscc_x64.zip HTTP/1.1 Host: www.kls-soft.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: application/zip last-modified: Tue, 16 Apr 2024 12:58:07 GMT accept-ranges: bytes content-length: 4536661 date: Tue, 23 Apr 2024 16:56:12 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Firefox-Spdy: h2`

www.kls-soft.com/downloads/wscc_x64.zip

93.115.113.34

200 OK

4.5 MB

URL User Request GET HTTP/2
www.kls-soft.com/downloads/wscc_x64.zip
IP
93.115.113.34:443
ASN
#34358 H88 Web Hosting S.r.l.

Certificate
IssuerLet's Encrypt
Subject*.kls-soft.com
Fingerprint44:ED:1B:22:ED:FF:B0:15:99:1B:C0:90:0A:CB:6C:F5:7C:CC:4D:E9
ValidityTue, 19 Mar 2024 03:01:59 GMT - Mon, 17 Jun 2024 03:01:58 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.5 MB (4536661 bytes)
Hash
b7ddac9f532f765c20a114f9216a91c4
540a1977628f81c4d3ed994ce2cd62c55f962ae8
d145ea4314c7d07965f8768fd9daf258f44bae660eb78790f57ab959c8fb5652

HTTP Headers

GET /downloads/wscc_x64.zip HTTP/1.1
Host: www.kls-soft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/zip
last-modified: Tue, 16 Apr 2024 12:58:07 GMT
accept-ranges: bytes
content-length: 4536661
date: Tue, 23 Apr 2024 16:56:12 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (6)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers