Report - files-downloader-and-warrenty-checker-pricing-pages.pages.dev/files/MS%20Cleaner.exe

Report Overview

Visitedpublic

2025-02-12 19:49:04

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
files-downloader-and-warrenty-checker-pricing-pages.pages.dev	unknown	2020-09-02	2025-02-12	2025-02-12	550 B	23 MB	172.66.44.111

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

files-downloader-and-warrenty-checker-pricing-pages.pages.dev/files/MS%20Cleaner.exe

IP / ASN

172.66.44.111

#13335 CLOUDFLARENET

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections

Size23 MB (22550016 bytes)

MD577b53716d7002ef3f68a582b43439baf

SHA16a22062714655868ae7b5988bb2f1c477f452c9a

SHA256a6c7b3dc90f7c0f838a9aa4b3a03b2dcf11d1d94eec4a261f7a593ea44ea5a66

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 33/71

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET files-downloader-and-warrenty-checker-pricing-pages.pages.dev/files/MS%20Cleaner.exe

172.66.44.111

200 OK

23 MB

URL

files-downloader-and-warrenty-checker-pricing-pages.pages.dev/files/MS%20Cleaner.exe

IP / ASN

172.66.44.111

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections

First Seen2024-11-22

Last Seen2025-02-12

Times Seen4

Size23 MB (22550016 bytes)

MD577b53716d7002ef3f68a582b43439baf

SHA16a22062714655868ae7b5988bb2f1c477f452c9a

SHA256a6c7b3dc90f7c0f838a9aa4b3a03b2dcf11d1d94eec4a261f7a593ea44ea5a66

Certificate Info

IssuerGoogle Trust Services

Subjectfiles-downloader-and-warrenty-checker-pricing-pages.pages.dev

Fingerprint98:CA:F7:23:2C:5B:C8:2F:60:23:F4:AF:45:05:AC:41:70:D3:A3:32

ValidityTue, 11 Feb 2025 17:23:49 GMT - Mon, 12 May 2025 18:17:25 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 33/71

HTTP Headers

GET /files/MS%20Cleaner.exe HTTP/1.1
Host: files-downloader-and-warrenty-checker-pricing-pages.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 12 Feb 2025 19:48:36 GMT
content-type: application/x-msdownload
content-length: 22550016
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "74160b2cbcf5b3b8730af9438d23a5b7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iQ7C26lCoJAz%2FbNJQYTPnTn0PQLJz9BWWQE7nNBM8vtBtiIbJqMANYzg56udSUR2iZnWgVz67%2FYPD%2F3RnfT%2BQv3%2ByF9UL6xPO35ib2C%2FFORW4ElvbDa95mLDmKn2IYteIULJ4NKEezDfA0QVbWB11Ka0i8P6xPhF1CNAKIDNuSJ0hv5148j6R4XRxWzCzc7O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 910f18d2bc7656bd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5849&min_rtt=584&rtt_var=10522&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3351&recv_bytes=1174&delivery_rate=6369501&cwnd=253&unsent_bytes=0&cid=c7007870c29aabb4&ts=2308&x=0"
X-Firefox-Spdy: h2