Report - www.lge.co.kr/upload/SW_PDS/LGPowerManagerW8_64b

Report Overview

Visited public
2025-05-08 10:38:02
Tags
URL
www.lge.co.kr/upload/SW_PDS/LGPowerManagerW8_64b_v1208[4].zip
Finishing URL
about:privatebrowsing
IP / ASN
23.44.40.78
#16625 AKAMAI-AS
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.lge.co.kr	445031	1996-06-12	2014-10-14	2025-05-04	529 B	1.7 MB	23.44.40.78

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.lge.co.kr/upload/SW_PDS/LGPowerManagerW8_64b_v1208[4].zip
IP
23.44.40.78
ASN
#16625 AKAMAI-AS

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.7 MB (1688008 bytes)
Hash
72c23df437a896adba62271cfe0c3f25
f23ed406792afaa6a2beb84bb6495f6ade9aa9ed
c26285bf47b73c7cbc6ef4f708b9edb31dfcad77ccb4665580e5c4cee04f74a2

Archive (4)

Filename

Md5

File type

fwi.inf

88c5a490358af937a279bba2d18e3025

Windows setup INFormation

PowerManagerSetup.msi

38b6ef47336cc34d67ec2331e6e0ffa7

Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, MSI Installer, Create Time/Date: Mon Jun 21 07:00:00 1999, Name of Creating Application: Windows Installer, Code page: 1252, Last Printed: Wed Aug 22 05:13:33 2012, Title: LG Power Manager Setup, Author: LG Electronics Inc., Template: x64;0, Last Saved By: Dayoung, Revision Number: {47747F4B-6CA0-4A36-A3B1-D0ACD80DBDFC}, Last Saved Time/Date: Wed Aug 22 05:16:27 2012, Number of Pages: 200, Number of Words: 2, Security: 1

Setup.exe

079eae72eccb990fe6995aaa0989afc0

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

WmiInf.exe

28caa2de11e93ad40a7397bbe160fb02

PE32+ executable (console) x86-64, for MS Windows, 5 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 6/63

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

www.lge.co.kr/upload/SW_PDS/LGPowerManagerW8_64b_v1208[4].zip

23.44.40.78

200 OK

1.7 MB

URL User Request GET
www.lge.co.kr/upload/SW_PDS/LGPowerManagerW8_64b_v1208[4].zip
IP
23.44.40.78:443
ASN
#16625 AKAMAI-AS

Certificate
IssuerDigiCert Inc
Subject*.lge.co.kr
FingerprintE2:7D:1C:A7:88:77:97:B0:04:37:CA:AD:43:C4:C6:AB:E4:38:1A:05
ValidityFri, 03 Jan 2025 00:00:00 GMT - Sat, 03 Jan 2026 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.7 MB (1688008 bytes)
Hash
72c23df437a896adba62271cfe0c3f25
f23ed406792afaa6a2beb84bb6495f6ade9aa9ed
c26285bf47b73c7cbc6ef4f708b9edb31dfcad77ccb4665580e5c4cee04f74a2

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 6/63

HTTP Headers

GET /upload/SW_PDS/LGPowerManagerW8_64b_v1208[4].zip HTTP/1.1
Host: www.lge.co.kr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-length: 1688008
content-type: application/zip
p3p: CP="ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC OTC"
last-modified: Thu, 30 Aug 2012 13:29:45 GMT
etag: "19c1c8-503f6ac9"
accept-ranges: bytes
date: Thu, 08 May 2025 10:37:30 GMT
set-cookie: A_ROUTEID=.3; path=/
ROUTEID=.3; path=/
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (4)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers