Report - downloads.sandisk.com/downloads/SanDiskSecurity

Report Overview

Visited public
2024-10-25 23:19:14
Tags
URL
downloads.sandisk.com/downloads/SanDiskSecurity_WIN.zip
Finishing URL
about:privatebrowsing
IP / ASN
3.164.230.78
#16509 AMAZON-02
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
downloads.sandisk.com	unknown	1995-08-30	2013-09-16	2024-10-13	509 B	9.4 MB	3.164.230.78

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
downloads.sandisk.com/downloads/SanDiskSecurity_WIN.zip
IP
3.164.230.78
ASN
#0

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
9.4 MB (9359193 bytes)
Hash
da291c987b5aac226d0ede5a74349c5b
d4e6a887c374a2a465c1edee9aefca26ed70f20e
3f2883071e721cb0252a189038539ef91ab1835017ef08a459baa9391ac8e3cd

Archive (2)

Filename

Md5

File type

manifest.json

dbca397b3a955e508e6dac5ba327916d

JSON text data

SanDiskSecuritySetup.exe

917de5d49020796e6afd7f389464d5f4

PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	pe_detect_tls_callbacks

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	downloads.sandisk.com/downloads/SanDiskSecurity_WIN.zip	3.164.230.78	200 OK	9.4 MB
URL User Request GET HTTP/1.1 downloads.sandisk.com/downloads/SanDiskSecurity_WIN.zip IP 3.164.230.78:443 ASN #0 Certificate IssuerAmazon Subjectwddashboarddownloads.wdc.com Fingerprint87:1C:5E:2C:B6:19:B2:6A:A4:DF:19:A3:B4:AD:20:34:C6:DA:08:9A ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 01 Jun 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 9.4 MB (9359193 bytes) Hash da291c987b5aac226d0ede5a74349c5b d4e6a887c374a2a465c1edee9aefca26ed70f20e 3f2883071e721cb0252a189038539ef91ab1835017ef08a459baa9391ac8e3cd HTTP Headers `GET /downloads/SanDiskSecurity_WIN.zip HTTP/1.1 Host: downloads.sandisk.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Content-Type: application/zip Content-Length: 9359193 Connection: keep-alive x-amz-replication-status: COMPLETED Last-Modified: Wed, 09 Oct 2024 02:56:53 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: GAUF2wO1QtSi5WD.aOpgSqcFfxDdmDf4 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 25 Oct 2024 23:18:47 GMT ETag: "da291c987b5aac226d0ede5a74349c5b" X-Cache: Hit from cloudfront Via: 1.1 7146458eabc0c79851363d3a7ad4d72c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ARN53-P1 X-Amz-Cf-Id: LofVOyVfiKr9SvFoNWvygeclKHVZfDsz-40YRiAkqzGiNVZdt64PSg== Age: 57205

downloads.sandisk.com/downloads/SanDiskSecurity_WIN.zip

3.164.230.78

200 OK

9.4 MB

URL User Request GET HTTP/1.1
downloads.sandisk.com/downloads/SanDiskSecurity_WIN.zip
IP
3.164.230.78:443
ASN
#0

Certificate
IssuerAmazon
Subjectwddashboarddownloads.wdc.com
Fingerprint87:1C:5E:2C:B6:19:B2:6A:A4:DF:19:A3:B4:AD:20:34:C6:DA:08:9A
ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 01 Jun 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
9.4 MB (9359193 bytes)
Hash
da291c987b5aac226d0ede5a74349c5b
d4e6a887c374a2a465c1edee9aefca26ed70f20e
3f2883071e721cb0252a189038539ef91ab1835017ef08a459baa9391ac8e3cd

HTTP Headers

GET /downloads/SanDiskSecurity_WIN.zip HTTP/1.1
Host: downloads.sandisk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/zip
Content-Length: 9359193
Connection: keep-alive
x-amz-replication-status: COMPLETED
Last-Modified: Wed, 09 Oct 2024 02:56:53 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: GAUF2wO1QtSi5WD.aOpgSqcFfxDdmDf4
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 25 Oct 2024 23:18:47 GMT
ETag: "da291c987b5aac226d0ede5a74349c5b"
X-Cache: Hit from cloudfront
Via: 1.1 7146458eabc0c79851363d3a7ad4d72c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN53-P1
X-Amz-Cf-Id: LofVOyVfiKr9SvFoNWvygeclKHVZfDsz-40YRiAkqzGiNVZdt64PSg==
Age: 57205

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (2)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers