Report Overview
Submitted URL
sadownload.mcafee.com/products/sa/website/WebAdvisorInstaller.exe?csrc=vanity&culture=de-ch&pkgid=358&moguid=EDD0D402-7FA9-488E-A9CD-13BD001AB474&affid=0&osn=/content/ecommerce/personalization/offer-segment-names/de-de/organic_site/msc/new-plans/mcafee_safe_connect1&pkgCode=msc_558&pt=1yp&fp=39.95&curCode=EUR&btnSec=none&cctype=&ccstype=&cseg=default&cexp=&ccta=msc_558:1yp:39.95:eur:none&ccpubn=de-ch:store:article:vpn:vpn@:default@msc_558:1yp:39.95:eur:none&ccpun=de-ch:store:article:vpn:vpn@:default&ccpn=de-ch:store:article:vpn:vpn&csrcl2=other&cls=0&cupf=0&cafcat=&ccoe=&ccoel2=&ak_culture=&ipst=&ipcon=&tm_local_lp_ab_test_variant=
IP
95.101.10.48
ASN
#20940 Akamai International B.V.
Submitted
2024-04-18 01:02:34
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
sadownload.mcafee.com | unknown | 1992-08-05 | 2012-05-20 | 2024-04-17 | 1.1 kB | 787 kB | 95.101.10.48 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-04-18 | medium | sadownload.mcafee.com/products/sa/website/WebAdvisorInstaller.exe?csrc=vanity&culture=de-ch&pkgid=358&moguid=EDD0D402-7FA9-488E-A9CD-13BD001AB474&affid=0&osn=/content/ecommerce/personalization/offer-segment-names/de-de/organic_site/msc/new-plans/mcafee_safe_connect1&pkgCode=msc_558&pt=1yp&fp=39.95&curCode=EUR&btnSec=none&cctype=&ccstype=&cseg=default&cexp=&ccta=msc_558:1yp:39.95:eur:none&ccpubn=de-ch:store:article:vpn:vpn@:default@msc_558:1yp:39.95:eur:none&ccpun=de-ch:store:article:vpn:vpn@:default&ccpn=de-ch:store:article:vpn:vpn&csrcl2=other&cls=0&cupf=0&cafcat=&ccoe=&ccoel2=&ak_culture=&ipst=&ipcon=&tm_local_lp_ab_test_variant= | files - file ~tmp01925d3f.exe |
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
sadownload.mcafee.com/products/sa/website/WebAdvisorInstaller.exe?csrc=vanity&culture=de-ch&pkgid=358&moguid=EDD0D402-7FA9-488E-A9CD-13BD001AB474&affid=0&osn=/content/ecommerce/personalization/offer-segment-names/de-de/organic_site/msc/new-plans/mcafee_safe_connect1&pkgCode=msc_558&pt=1yp&fp=39.95&curCode=EUR&btnSec=none&cctype=&ccstype=&cseg=default&cexp=&ccta=msc_558:1yp:39.95:eur:none&ccpubn=de-ch:store:article:vpn:vpn@:default@msc_558:1yp:39.95:eur:none&ccpun=de-ch:store:article:vpn:vpn@:default&ccpn=de-ch:store:article:vpn:vpn&csrcl2=other&cls=0&cupf=0&cafcat=&ccoe=&ccoel2=&ak_culture=&ipst=&ipcon=&tm_local_lp_ab_test_variant=
IP
95.101.10.48
ASN
#20940 Akamai International B.V.
File type
PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections
Size
786 kB (786432 bytes)
Hash
59b787f11f102af43cda6283ac6f64ca
cb58fdb119b559478c0740c9db2e8ae63778ac6c
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
sadownload.mcafee.com/products/sa/website/WebAdvisorInstaller.exe?csrc=vanity&culture=de-ch&pkgid=358&moguid=EDD0D402-7FA9-488E-A9CD-13BD001AB474&affid=0&osn=/content/ecommerce/personalization/offer-segment-names/de-de/organic_site/msc/new-plans/mcafee_safe_connect1&pkgCode=msc_558&pt=1yp&fp=39.95&curCode=EUR&btnSec=none&cctype=&ccstype=&cseg=default&cexp=&ccta=msc_558:1yp:39.95:eur:none&ccpubn=de-ch:store:article:vpn:vpn@:default@msc_558:1yp:39.95:eur:none&ccpun=de-ch:store:article:vpn:vpn@:default&ccpn=de-ch:store:article:vpn:vpn&csrcl2=other&cls=0&cupf=0&cafcat=&ccoe=&ccoel2=&ak_culture=&ipst=&ipcon=&tm_local_lp_ab_test_variant= | 95.101.10.48 | 200 OK | 786 kB | |||||||
Detections
HTTP Headers
| ||||||||||