Report - download.mediaweb.co.kr/download/pica/Client_Unite/PRGInstallInfoDB.zip

Report Overview

Submitted URL
download.mediaweb.co.kr/download/pica/Client_Unite/PRGInstallInfoDB.zip
IP
121.78.33.182
ASN
#9286 KINX
Submitted
2024-05-06 20:51:37
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
download.mediaweb.co.kr	unknown	1999-10-21	2012-05-21	2023-07-14	525 B	5.0 kB	121.78.33.182
status.thawte.com	5123	1996-02-10	2017-11-27	2024-05-05	329 B	732 B	192.229.221.95

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
download.mediaweb.co.kr/download/pica/Client_Unite/PRGInstallInfoDB.zip
IP
121.78.33.182
ASN
#9286 KINX

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.7 kB (4699 bytes)
Hash
5e20b126aaf7503951b7b2a6e0f5812d
b5f043190ee87044d817fc421d6222ebe121fed4
6be7a7edb7eead6eea3e8d757eba11461cc8b371dc281737e02d96b0824116a7

Archive (1)

Filename

Md5

File type

PRGInstallInfoDB.ini

4b7d6496a104016692971658239d3ade

Generic INItialization configuration [1]

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	status.thawte.com/	192.229.221.95		471 B
URL status.thawte.com/ IP 192.229.221.95:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash 8f1a2de6fb65f15c5e6e7efecfbf601a 25e44ae6301e7c5f9028a8d2423c12d0f977e5bd 12b89ece0f21c1cadb4c0fd8035943071422b569e460c1212436ab798a309657 HTTP Headers `POST / HTTP/1.1 Host: status.thawte.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 9 Cache-Control: max-age=7200 Content-Type: application/ocsp-response Date: Mon, 06 May 2024 20:51:13 GMT Last-Modified: Mon, 06 May 2024 20:51:04 GMT Server: ECAcc (ska/F775) X-Cache: HIT Content-Length: 471`

	download.mediaweb.co.kr/download/pica/Client_Unite/PRGInstallInfoDB.zip	121.78.33.182	200 OK	4.7 kB
URL User Request GET HTTP/1.1 download.mediaweb.co.kr/download/pica/Client_Unite/PRGInstallInfoDB.zip IP 121.78.33.182:443 ASN #9286 KINX Certificate IssuerDigiCert Inc Subject.mediaweb.co.kr FingerprintA8:D0:94:54:4C:53:64:95:50:4C:61:C5:A3:2C:AD:6C:6C:74:19:CE ValidityTue, 09 Jan 2024 00:00:00 GMT - Wed, 08 Jan 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 4.7 kB (4699 bytes) Hash 5e20b126aaf7503951b7b2a6e0f5812d b5f043190ee87044d817fc421d6222ebe121fed4 6be7a7edb7eead6eea3e8d757eba11461cc8b371dc281737e02d96b0824116a7 HTTP Headers GET /download/pica/Client_Unite/PRGInstallInfoDB.zip HTTP/1.1 Host: download.mediaweb.co.kr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Mon, 06 May 2024 20:51:13 GMT Content-Length: 4699 Accept-Ranges: bytes ETag: "646ace89:125b" Last-Modified: Mon, 22 May 2023 02:08:09 GMT Content-Type: application/x-zip-compressed Server: Microsoft-IIS/10.0 Connection: Keep-Alive Keep-Alive: timeout=10`