Report - www.giovaneinformatica.com.br/app/SGI-Plus.zip

Report Overview

Submitted URL
www.giovaneinformatica.com.br/app/SGI-Plus.zip
IP
186.202.153.108
ASN
#27715 Locaweb Servicos de Internet SA
Submitted
2024-03-29 11:41:42
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.giovaneinformatica.com.br	unknown	2009-02-11	2013-05-03	2023-08-18	416 B	8.1 MB	186.202.153.108

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.giovaneinformatica.com.br/app/SGI-Plus.zip
IP
186.202.153.108
ASN
#27715 Locaweb Servicos de Internet SA

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
8.1 MB (8065951 bytes)
Hash
165521fc1e3c9434ad3dd07715dcbb3d
1f5f9917708ca7312a0be06fbc071b2dce3efe78
b0eebafdd11073f79a3c0fa3add1275566c8d25eda0653151789d652f70fb59b

Archive (1)

Filename

Md5

File type

sgidemo.exe

97b803704513210da6eeae8dc0d318be

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/54

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

www.giovaneinformatica.com.br/app/SGI-Plus.zip

186.202.153.108

200 OK

8.1 MB

URL User Request GET HTTP/1.1
www.giovaneinformatica.com.br/app/SGI-Plus.zip
IP
186.202.153.108:80
ASN
#27715 Locaweb Servicos de Internet SA

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
8.1 MB (8065951 bytes)
Hash
165521fc1e3c9434ad3dd07715dcbb3d
1f5f9917708ca7312a0be06fbc071b2dce3efe78
b0eebafdd11073f79a3c0fa3add1275566c8d25eda0653151789d652f70fb59b

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/54

HTTP Headers

GET /app/SGI-Plus.zip HTTP/1.1
Host: www.giovaneinformatica.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:39:28 GMT
Server: Apache
Last-Modified: Wed, 13 Dec 2017 13:44:04 GMT
Content-Length: 8065951
Content-Type: application/zip
Cache-Control: No-Cache
Pragma: no-cache
X-Varnish: 46623251 47345206
Age: 109
Via: 1.1 varnish-v4
Accept-Ranges: bytes
Connection: keep-alive

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (1)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers