Report - www.kilews.com.tw/Upload/download/Kilews-ProductVer1.0.0.9.7z

Report Overview

Submitted URL
www.kilews.com.tw/Upload/download/Kilews-ProductVer1.0.0.9.7z
IP
61.63.128.111
ASN
#9676 SaveCom Internation Inc.
Submitted
2024-05-08 18:47:03
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.kilews.com.tw	unknown	unknown	2014-05-07	2023-10-19	515 B	6.1 MB	61.63.128.111

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.kilews.com.tw/Upload/download/Kilews-ProductVer1.0.0.9.7z
IP
61.63.128.111
ASN
#9676 SaveCom Internation Inc.

File type
7-zip archive data, version 0.4
Size
6.1 MB (6132633 bytes)
Hash
f665370c8e1bd09de17df1aaede70a23
bb7fb4b0c48116b67977606f1385b420f0d1568c
165922b270a7e897f74faa44dbe000d0caaf096f3c9dbde6dedb39ff802b4595

Archive (5)

Filename

Md5

File type

INI.ini

d4a8e1808d754b4a0b3bf9bf3311c198

ASCII text, with CRLF line terminators

Setup.ini

1fe5f337003ab9a25748d114db26ba69

ASCII text, with CRLF line terminators

Data_Acquisition_System.exe

832d01e654ff6c26f5092d69a1420f10

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevComponents.DotNetBar.Charts.dll

055eac2726cb2abcc98f80bda6e77a86

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevComponents.DotNetBar2.dll

09dd4ce922b27796c06b4e440edece7c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 5 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/60

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

www.kilews.com.tw/Upload/download/Kilews-ProductVer1.0.0.9.7z

61.63.128.111

200 OK

6.1 MB

URL User Request GET HTTP/2
www.kilews.com.tw/Upload/download/Kilews-ProductVer1.0.0.9.7z
IP
61.63.128.111:443
ASN
#9676 SaveCom Internation Inc.

Certificate
IssuerSectigo Limited
Subjectwww.kilews.com.tw
Fingerprint78:F7:D3:B2:11:BC:FF:34:87:72:4B:D9:02:8C:7F:27:2D:24:E3:46
ValidityTue, 07 Nov 2023 00:00:00 GMT - Wed, 06 Nov 2024 23:59:59 GMT

File type
7-zip archive data, version 0.4
Size
6.1 MB (6132633 bytes)
Hash
f665370c8e1bd09de17df1aaede70a23
bb7fb4b0c48116b67977606f1385b420f0d1568c
165922b270a7e897f74faa44dbe000d0caaf096f3c9dbde6dedb39ff802b4595

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/60

HTTP Headers

GET /Upload/download/Kilews-ProductVer1.0.0.9.7z HTTP/1.1
Host: www.kilews.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 18:46:32 GMT
content-type: application/x-7z-compressed
content-length: 6132633
last-modified: Mon, 07 Feb 2022 06:40:36 GMT
cache-control: max-age=604800
expires: Wed, 15 May 2024 18:46:32 GMT
etag: "6200bee4-5d9399"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (5)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers