Report - www.sessosesso.it/assets/aw/uc.exe

Report Overview

Submitted URL
www.sessosesso.it/assets/aw/uc.exe
IP
89.46.106.29
ASN
#31034 Aruba S.p.A.
Submitted
2024-04-23 12:33:02
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp06.actalis.it	190155	2001-12-18	2017-01-31	2024-04-19	341 B	4.2 kB	109.70.240.114
www.sessosesso.it	unknown	unknown	No data	No data	488 B	1.6 MB	89.46.106.29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

Files detected

URL
www.sessosesso.it/assets/aw/uc.exe
IP
89.46.106.29
ASN
#31034 Aruba S.p.A.

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 9 sections
Size
1.6 MB (1646592 bytes)
Hash
e6ac6ca27aa2d60dc59a21af1ffdb086
9f847e34521e8917c8b22eca53b71306bc19af18
a5b3ce892d48757df98fea906dff92e0210dcbd8d1832e43dfbd2a5ece61fba1

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 21/71

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

ocsp06.actalis.it/VA/AUTHDV-G3

109.70.240.114

3.9 kB

URL
ocsp06.actalis.it/VA/AUTHDV-G3
IP
109.70.240.114:0
ASN
#31034 Aruba S.p.A.

File type
data
Size
3.9 kB (3926 bytes)
Hash
16c87848b17240fbc9d53b184e6ab5c1
903f3c804051c069fb581722a582b4a47eb5fc9a
9081a2ad081ae788d5323497ae06659736fea3e4ce1a434376b7e8c6fa1b1126

HTTP Headers

POST /VA/AUTHDV-G3 HTTP/1.1
Host: ocsp06.actalis.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx
Date: Tue, 23 Apr 2024 12:32:37 GMT
Content-Type: application/ocsp-response
Content-Length: 3926
Connection: keep-alive
Last-Modified: Tue, 23 Apr 2024 08:59:54 GMT
Expires: Wed, 24 Apr 2024 08:59:53 GMT
ETag: "903f3c804051c069fb581722a582b4a47eb5fc9a"

www.sessosesso.it/assets/aw/uc.exe

89.46.106.29

200 OK

1.6 MB

URL User Request GET HTTP/2
www.sessosesso.it/assets/aw/uc.exe
IP
89.46.106.29:443
ASN
#31034 Aruba S.p.A.

Certificate
IssuerActalis S.p.A.
Subject*.sessosesso.it
Fingerprint7B:72:7D:8C:CD:9F:32:22:51:60:C9:C0:49:DE:1E:27:DB:86:8E:57
ValiditySun, 14 Apr 2024 03:56:39 GMT - Thu, 15 May 2025 03:56:38 GMT

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 9 sections
Size
1.6 MB (1646592 bytes)
Hash
e6ac6ca27aa2d60dc59a21af1ffdb086
9f847e34521e8917c8b22eca53b71306bc19af18
a5b3ce892d48757df98fea906dff92e0210dcbd8d1832e43dfbd2a5ece61fba1

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 21/71

HTTP Headers

GET /assets/aw/uc.exe HTTP/1.1
Host: www.sessosesso.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: aruba-proxy
date: Tue, 23 Apr 2024 12:32:37 GMT
content-type: application/x-msdownload
content-length: 1646592
last-modified: Tue, 23 Apr 2024 08:40:32 GMT
accept-ranges: bytes
x-servername: ipvsproxy74.ad.aruba.it
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers