Report - www.retrogames.cz/dos/av.zip

Report Overview

Visitedpublic

2024-01-02 03:30:53

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
www.retrogames.cz	400426	2010-09-20	2012-11-03 17:16:30	2023-12-27 23:12:02	494 B	29 kB	37.9.175.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

www.retrogames.cz/dos/av.zip

IP / ASN

37.9.175.164

#51013 WebSupport s.r.o.

File Overview

File TypeZip archive data, at least v2.0 to extract, compression method=deflate

Size28 kB (28437 bytes)

MD52d0bcf1807c48e2550c74e601ebd66b5

SHA1ad44f850d5ba64d6445c27316aaaf720c0cc0975

SHA2561213f97ba9e9d9dd7b45f1dd5f60efa521918d7047c6bb735fb76857682045c5

Archive (1)

Modified	Filename	Size	MD5	File type
2011-12-03 11:08	av.img	3.1 MB	8abf70475edc28ba659f503301caa3f1	DOS/MBR boot sector, FREE-DOS MBR; partition 1 : ID=0x6, active, start-CHS (0x0,1,1), end-CHS (0x180,1,8), startsector 8, 6136 sectors

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/58

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET www.retrogames.cz/dos/av.zip

37.9.175.164

200 OK

28 kB

URL

www.retrogames.cz/dos/av.zip

IP / ASN

37.9.175.164

#51013 WebSupport s.r.o.

Requested byN/A

Resource Info

File typeZip archive data, at least v2.0 to extract, compression method=deflate

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size28 kB (28437 bytes)

MD52d0bcf1807c48e2550c74e601ebd66b5

SHA1ad44f850d5ba64d6445c27316aaaf720c0cc0975

SHA2561213f97ba9e9d9dd7b45f1dd5f60efa521918d7047c6bb735fb76857682045c5

Certificate Info

IssuerSectigo Limited

Subjectretrogames.cz

FingerprintFC:E4:A8:0F:39:79:7D:1D:F9:E0:48:D3:01:63:2D:B1:50:E2:93:A8

ValiditySun, 02 Apr 2023 00:00:00 GMT - Thu, 02 May 2024 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/58

HTTP Headers

GET /dos/av.zip HTTP/1.1
Host: www.retrogames.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Tue, 02 Jan 2024 03:30:26 GMT
content-type: application/zip
content-length: 28437
last-modified: Wed, 10 Oct 2012 13:57:31 GMT
etag: "6f15-4cbb4d5f508c0"
cache-control: max-age=600
expires: Tue, 02 Jan 2024 03:39:43 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2