Report - freecodecs.net/download_8640d9a1a0d3f2c0e081c5e088795e09/WMEncoder64.exe

Report Overview

Visitedpublic

2025-05-15 00:23:34

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
freecodecs.net	unknown	2004-06-01	2012-07-08	2025-05-03	540 B	13 MB	85.17.4.234

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-05-15	medium	freecodecs.net/download_8640d9a1a0d3f2c0e081c5e088795e09/WMEncoder64.exe	detect_Redline_Stealer

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

freecodecs.net/download_8640d9a1a0d3f2c0e081c5e088795e09/WMEncoder64.exe

IP / ASN

85.17.4.234

#60781 LeaseWeb Netherlands B.V.

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 3 sections

Size13 MB (13042504 bytes)

MD578378629418a50e456569e7422ce1d51

SHA17c9d934d62585b50fe8f8afa91a068c87e5f7388

SHA256cb3d952bc5162d4166719d492efd2cfe74fc64d57350d234c6c2f22c7bb09af2

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	detect_Redline_Stealer

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET freecodecs.net/download_8640d9a1a0d3f2c0e081c5e088795e09/WMEncoder64.exe

85.17.4.234

200 OK

13 MB

URL

freecodecs.net/download_8640d9a1a0d3f2c0e081c5e088795e09/WMEncoder64.exe

IP / ASN

85.17.4.234

#60781 LeaseWeb Netherlands B.V.

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 3 sections

First Seen2024-01-10

Last Seen2025-05-15

Times Seen4

Size13 MB (13042504 bytes)

MD578378629418a50e456569e7422ce1d51

SHA17c9d934d62585b50fe8f8afa91a068c87e5f7388

SHA256cb3d952bc5162d4166719d492efd2cfe74fc64d57350d234c6c2f22c7bb09af2

Certificate Info

IssuerLet's Encrypt

Subjectcpcontacts.freecodecs.net

Fingerprint73:D1:E3:60:32:7B:DF:FD:EA:A1:63:7B:24:80:8D:93:96:33:72:2A

ValidityMon, 17 Mar 2025 16:03:42 GMT - Sun, 15 Jun 2025 16:03:41 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	detect_Redline_Stealer

HTTP Headers

GET /download_8640d9a1a0d3f2c0e081c5e088795e09/WMEncoder64.exe HTTP/1.1
Host: freecodecs.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Sun, 07 Mar 2021 10:22:54 GMT
accept-ranges: bytes
content-length: 13042504
content-type: application/x-msdownload
date: Thu, 15 May 2025 00:23:00 GMT
server: Apache
X-Firefox-Spdy: h2