Report - www.sidiary.org/download/driver/LifescanVerioPro.zip

Report Overview

Submitted URL
www.sidiary.org/download/driver/LifescanVerioPro.zip
IP
52.169.206.2
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2024-04-16 16:40:01
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
status.geotrust.com	3662	1999-04-04	2017-12-01	2024-04-16	662 B	1.5 kB	192.229.221.95
www.sidiary.org	unknown	2004-01-05	2012-07-22	2024-04-16	1.1 kB	3.3 MB	52.169.206.2
diabetes.sinovo.net	unknown	2002-06-06	2012-12-19	2024-04-15	580 B	600 B	52.169.206.2

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.sidiary.org/DownloadM/driver/LifescanVerioPro.zip
IP
52.169.206.2
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.3 MB (3264284 bytes)
Hash
990e4ed50173f7ccb93a65f8a9a5f45f
bbe101cf4c5fba5cf4c6fb510524b1ffc2594550
765d1fee333008ff8aa202c2bca502595aa85942a2561ef3ed06f4a886e48183

Archive (10)

Filename

Md5

File type

lfsvcp.inf

f3191dc8e55dc2e1e89933594977686b

Windows setup INFormation

setup.ini

4b7c9e461b6c378b510f2b095973dd45

Generic INItialization configuration [Driver Version]

silabenm.sys

7799106fee728b907a86d9c9751e02d5

PE32+ executable (native) x86-64, for MS Windows, 8 sections

silabser.sys

3c356beaa55339d7ce7a9509e22166cc

PE32+ executable (native) x86-64, for MS Windows, 10 sections

WdfCoInstaller01009.dll

4da5da193e0e4f86f6f8fd43ef25329a

PE32+ executable (DLL) (console) x86-64, for MS Windows, 5 sections

silabenm.sys

3ead8e1668ce42a0afe41d56e7157bcf

PE32 executable (native) Intel 80386, for MS Windows, 8 sections

silabser.sys

5ec84546635d8f6e306f9c80fe09433d

PE32 executable (native) Intel 80386, for MS Windows, 9 sections

WdfCoInstaller01009.dll

a9970042be512c7981b36e689c5f3f9f

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 4 sections

CP210xVCPInstaller.exe

b5f62090d1ebf37ba59073bd572912e8

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

lfsvcp.cat

dd598e06cd399aee3d7566c51917d6ed

DER Encoded PKCS#7 Signed Data

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	status.geotrust.com/	192.229.221.95		471 B
URL status.geotrust.com/ IP 192.229.221.95:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash 2465654677465fd0c603951675b04d5b cd53cd533e2c8346632e56c880f69daf84f48d16 95e2d146d654cfb9ad902067ee4e55883b640004c83c231e6e33b432322b7095 HTTP Headers `POST / HTTP/1.1 Host: status.geotrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 60 Cache-Control: max-age=7200 Content-Type: application/ocsp-response Date: Tue, 16 Apr 2024 16:39:35 GMT Last-Modified: Tue, 16 Apr 2024 16:38:35 GMT Server: ECAcc (ska/F775) X-Cache: HIT Content-Length: 471`

	www.sidiary.org/download/driver/LifescanVerioPro.zip	52.169.206.2	302 Object moved	263 B
URL User Request GET HTTP/1.1 www.sidiary.org/download/driver/LifescanVerioPro.zip IP 52.169.206.2:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerDigiCert Inc Subjectsidiary.org Fingerprint44:98:77:34:FE:AD:BA:26:A4:90:FF:44:97:CE:2F:E5:D9:21:D8:A8 ValidityMon, 06 Nov 2023 00:00:00 GMT - Fri, 22 Nov 2024 23:59:59 GMT File type HTML document, ASCII text Size 263 B (263 bytes) Hash 6924bbda992ebfc113150d445b494c63 4e285cbb5b4d2f9de442755359cc8db024f64704 65198203b76fbf0b4dc25ace101bfe73933ff57aa3a84a8e7f65416d9b01e992 HTTP Headers `GET /download/driver/LifescanVerioPro.zip HTTP/1.1 Host: www.sidiary.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Object moved Cache-Control: private Content-Type: text/html Location: https://diabetes.sinovo.net/dlc.aspx?s=https://www.sidiary.org/DownloadM/driver/LifescanVerioPro.zip&dk=driver/LifescanVerioPro.zip&r= Server: Microsoft-IIS/8.5 Set-Cookie: ASPSESSIONIDSCUCRCTD=EAGBHGADFDOGOINODOGFALKA; secure; path=/ X-Powered-By: Hello World X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Tue, 16 Apr 2024 16:39:35 GMT Content-Length: 263

	status.geotrust.com/	192.229.221.95		471 B
URL status.geotrust.com/ IP 192.229.221.95:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash 4905fc61fd9c17e4630b12158736bdf6 dd4b6c835c400c0c42f90bdd0a69533144e03510 9b6c14ec7cfbeffe006f67a200f6fd6dcf946592de157aec00a1931fa27764c8 HTTP Headers `POST / HTTP/1.1 Host: status.geotrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 60 Cache-Control: max-age=7200 Content-Type: application/ocsp-response Date: Tue, 16 Apr 2024 16:39:35 GMT Last-Modified: Tue, 16 Apr 2024 16:38:36 GMT Server: ECAcc (ska/F775) X-Cache: HIT Content-Length: 471`

	diabetes.sinovo.net/dlc.aspx?s=https://www.sidiary.org/DownloadM/driver/LifescanVerioPro.zip&dk=driver/LifescanVerioPro.zip&r=	52.169.206.2	302 Found	178 B
URL User Request GET HTTP/1.1 diabetes.sinovo.net/dlc.aspx?s=https://www.sidiary.org/DownloadM/driver/LifescanVerioPro.zip&dk=driver/LifescanVerioPro.zip&r= IP 52.169.206.2:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerDigiCert Inc Subjectsinovo.net FingerprintE1:C2:BB:68:0C:00:13:C4:10:52:BA:74:50:80:49:63:1B:06:C4:DE ValidityMon, 13 Nov 2023 00:00:00 GMT - Tue, 26 Nov 2024 23:59:59 GMT File type HTML document, ASCII text, with CRLF line terminators Size 178 B (178 bytes) Hash d8be2763ec0f975de0cf36615be1d967 43a2809565deb5670657ddd97ef4085631fe0725 ee24a882446a8ce7b9a7d5af7ba68f34ec55527e2953d0178c6afca145c90663 HTTP Headers GET /dlc.aspx?s=https://www.sidiary.org/DownloadM/driver/LifescanVerioPro.zip&dk=driver/LifescanVerioPro.zip&r= HTTP/1.1 Host: diabetes.sinovo.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://www.sidiary.org/DownloadM/driver/LifescanVerioPro.zip Server: Microsoft-IIS/8.5 X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Tue, 16 Apr 2024 16:39:35 GMT Content-Length: 178`

	www.sidiary.org/DownloadM/driver/LifescanVerioPro.zip	52.169.206.2	200 OK	3.3 MB
URL User Request GET HTTP/1.1 www.sidiary.org/DownloadM/driver/LifescanVerioPro.zip IP 52.169.206.2:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerDigiCert Inc Subjectsidiary.org Fingerprint44:98:77:34:FE:AD:BA:26:A4:90:FF:44:97:CE:2F:E5:D9:21:D8:A8 ValidityMon, 06 Nov 2023 00:00:00 GMT - Fri, 22 Nov 2024 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 3.3 MB (3264284 bytes) Hash 990e4ed50173f7ccb93a65f8a9a5f45f bbe101cf4c5fba5cf4c6fb510524b1ffc2594550 765d1fee333008ff8aa202c2bca502595aa85942a2561ef3ed06f4a886e48183 HTTP Headers GET /DownloadM/driver/LifescanVerioPro.zip HTTP/1.1 Host: www.sidiary.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: ASPSESSIONIDSCUCRCTD=EAGBHGADFDOGOINODOGFALKA Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: application/x-zip-compressed Last-Modified: Wed, 30 Jan 2013 11:28:58 GMT Accept-Ranges: bytes ETag: "a184e2fedcfecd1:0" Server: Microsoft-IIS/8.5 X-Powered-By: Hello World X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Tue, 16 Apr 2024 16:39:35 GMT Content-Length: 3264284`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (10)

JavaScript (0)

HTTP Transactions (5)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers