Protocols List -> Wechat recv file

Wechat recv file ports range, how to block Wechat recv file in network?

Wechat recv file
Support: WFilter zh.4.1, WFilter en.4.1, WFilter Free 1.0, WFilter ROS 1.0
  Author: Bruce ModifyTime: 2020-03-16 02:31:24  
      This protocol can identify wechat receiving files.  

This protocol is official supported. You can install it in "System Settings"->"Protocols" of WFilter.


     User name:
     Number of comments:0
200 characters remaining. 

"Wechat recv file" uses TCP protocol for communication.

TCP traffic analysis

Ports Range

Remote tcp port(s): 80,443,8080.

HTTP traffic analysis

HTTP traffic is found in Wechat recv file's traffic.

Host(s) being connected(regular expression): ^(res\.wx\.qq\.com)|(wx\.qlogo\.cn).

TLS traffic analysis

TLS connections are found in Wechat recv file's traffic.

TLS Host(s) being connected(regular expression): ^(file|res)\.wx\.qq\.com.

How to block Wechat recv file?

  • Block the listed ports to block Wechat recv file.
  • Block the listed http and tls domains to block Wechat recv file.
  • Setup a content filter(ie: WFilter), which can block Wechat recv file via signature matching.

Wechat recv file v4.0(2020-03-16 02:31:24)

● Modify patterns

Wechat recv file v3.0(2019-08-09 04:38:19)

● Seperate pc and mobile wechat.

Wechat recv file v2.0(2018-12-18 21:45:29)

● Add new pattern

Wechat recv file v1.0(2018-12-14 04:25:17)

● First release