Report - www.supermicro.org.cn/wftp/driver/SATA/Intel_PCH_RAID_Romley

Report Overview

Submitted URL
www.supermicro.org.cn/wftp/driver/SATA/Intel_PCH_RAID_Romley_RSTE/Windows/4.6.0.1048/Win.zip
IP
104.69.222.216
ASN
#20940 Akamai International B.V.
Submitted
2024-03-28 10:27:03
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.supermicro.org.cn	unknown	unknown	No data	No data	546 B	757 B	104.69.222.194
www.supermicro.com	468610	1996-04-23	2012-06-22	2024-03-26	542 B	3.9 MB	104.69.222.216

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.supermicro.com/wdl/driver/SATA/Intel_PCH_RAID_Romley_RSTE/Windows/4.6.0.1048/Win.zip
IP
104.69.222.216
ASN
#20940 Akamai International B.V.

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
3.9 MB (3884571 bytes)
Hash
a50a95589b3e2860141b3cb1399a9aee
441d680ed39257318685174b5162039e5507d70f
00e7bae7aebfcd15b8439f36c542e4b904643a61fa2af603d8284db2a5784841

Archive (64)

Filename

Md5

File type

iaahci.cat

2c1cdc93ed6474afcd50ea2af6385eb8

DER Encoded PKCS#7 Signed Data

iaAHCI.inf

2c899cad7b75efb1088c5372b79c90bc

Windows setup INFormation

iaahcib.cat

3cc2bf1d0f3fd8bc9bdf0d6f918f4ad0

DER Encoded PKCS#7 Signed Data

iaAHCIB.inf

8fdf051d6e57654698da6fea98d2305c

Windows setup INFormation

iastora.cat

d1151591b73ee9c5b5bddcac26070e5d

DER Encoded PKCS#7 Signed Data

iaStorA.inf

300137958cebec5b035d85d65c1b7a8d

Windows setup INFormation

iaStorA.sys

e9cfa1f4451eb6198d2fb63327e53c32

PE32+ executable (native) x86-64, for MS Windows, 8 sections

iastorb.cat

57e75b506e2e0720feceefe2eba45968

DER Encoded PKCS#7 Signed Data

iaStorB.inf

d6102c33ae05410d3b7693f52961ee4f

Windows setup INFormation

iaStorB.sys

10c86cd6e5d19911c5e7313bca28ab06

PE32+ executable (native) x86-64, for MS Windows, 8 sections

iaStorF.sys

91cd1b8e21ae3feb2b8533c480aef2a1

PE32+ executable (native) x86-64, for MS Windows, 8 sections

txtsetup.oem

433e5dd06349989a360c1e5eefb8f1b0

ASCII text, with CRLF line terminators

iaahci.cat

369a9ec1651e89b705104855ab6804e0

DER Encoded PKCS#7 Signed Data

iaAHCI.inf

879f1edb5b06300502222481df5cebb9

Windows setup INFormation

iaahcib.cat

f6549a4dac5fa92c9dc1221869020434

DER Encoded PKCS#7 Signed Data

iaAHCIB.inf

031bcef631aa0313d448cdf5681958f0

Windows setup INFormation

iastora.cat

cc4fa823fc5138babe8d7e18ef14a814

DER Encoded PKCS#7 Signed Data

iaStorA.inf

b870513dc1bd8af129eb2a02ba29e3a7

Windows setup INFormation

iaStorA.sys

3a9d5f6999f2058c8226a440bdfdac52

PE32 executable (native) Intel 80386, for MS Windows, 7 sections

iastorb.cat

21ad2a4dbc1821590d4f8927dbd137d6

DER Encoded PKCS#7 Signed Data

iaStorB.inf

ce998a825a505b6d6a9d4728fc89f8bf

Windows setup INFormation

iaStorB.sys

2504de3a027bbb2ed4b20629e631bcc7

PE32 executable (native) Intel 80386, for MS Windows, 7 sections

txtsetup.oem

80156b1dca3060b53ef6e046d7882dfc

ASCII text

iaahci.cat

7554dcd9ff6147b8ed67f69484452032

DER Encoded PKCS#7 Signed Data

iaAHCI.inf

9cd191ff07d069184a8f8a3fd99a9339

Windows setup INFormation

iaahcib.cat

86c4e5c49c1e24d18d85b52298c3c3e3

DER Encoded PKCS#7 Signed Data

iaAHCIB.inf

36761fa0d785f5f4dcc8760068eec978

Windows setup INFormation

iastora.cat

f6ade3e84301669ca9224fad2a696a98

DER Encoded PKCS#7 Signed Data

iaStorA.inf

fb0021ea13f966c72e7f532c8deb5187

Windows setup INFormation

iaStorA.sys

90277a9f9eb5f94df37a653be32791ec

PE32+ executable (native) x86-64, for MS Windows, 8 sections

iastorb.cat

ac743283120dbbecb30e40ce4d6c9910

DER Encoded PKCS#7 Signed Data

iaStorB.inf

9d9451c902a4a705a13ff4ddbdc8d09a

Windows setup INFormation

iaStorB.sys

ba6d13ec429d8671115d982fd2baf938

PE32+ executable (native) x86-64, for MS Windows, 8 sections

txtsetup.oem

80156b1dca3060b53ef6e046d7882dfc

ASCII text

iaahci.cat

07242ad93c8d9abdba4583a5684f3ec7

DER Encoded PKCS#7 Signed Data

iaAHCI.inf

8bf3771cddcad2769073571df0b69fdc

Windows setup INFormation

iaahcib.cat

57de61c1526432e35c25b354931b4905

DER Encoded PKCS#7 Signed Data

iaAHCIB.inf

b18f2bbb88b22425e2afec34c97d614b

Windows setup INFormation

iastora.cat

b44527770a85a1c076971317f2ab47f3

DER Encoded PKCS#7 Signed Data

iaStorA.inf

427fe69cd6169fa213f78cf2a0caf8f2

Windows setup INFormation

iaStorA.sys

1cd83efa7db7887feeb8ee9afa16d4c5

PE32 executable (native) Intel 80386, for MS Windows, 7 sections

iastorb.cat

2291c1114913e8c8ca224a5866f5ff68

DER Encoded PKCS#7 Signed Data

iaStorB.inf

ff31c212715a1d592396b4c46324fa6f

Windows setup INFormation

iaStorB.sys

13393b4d43b83b2b3d8a1fec114b3197

PE32 executable (native) Intel 80386, for MS Windows, 7 sections

iaStorF.sys

cf3949f56946b490e654649532c696d9

PE32 executable (native) Intel 80386, for MS Windows, 7 sections

txtsetup.oem

433e5dd06349989a360c1e5eefb8f1b0

ASCII text, with CRLF line terminators

iastors.cat

2365803f5484438682dae3f66c1cb970

DER Encoded PKCS#7 Signed Data

iaStorS.inf

75703c158970a497a809f1b39e0ff65d

Windows setup INFormation

iaStorS.sys

2f948145e7597f7840ad220096699b86

PE32+ executable (native) x86-64, for MS Windows, 8 sections

txtsetup.oem

123bcae2089982e25aaebdcbb284c1e0

ASCII text

iaStorF.sys

161bcabac5d8c8db9b89ac66a650935b

PE32 executable (native) Intel 80386, for MS Windows, 7 sections

iastors.cat

19c8c501feaa9d6ac1148d4cac2bb5ad

DER Encoded PKCS#7 Signed Data

iaStorS.inf

4dcd53c9ee743657b564b862d575fbcc

Windows setup INFormation

iaStorS.sys

4f05a7a9c46cabf10b001f35c94f3bdc

PE32 executable (native) Intel 80386, for MS Windows, 7 sections

txtsetup.oem

433e5dd06349989a360c1e5eefb8f1b0

ASCII text, with CRLF line terminators

iaStorF.sys

fd7da8dc7536734af6fb84d2e896e6ff

PE32+ executable (native) x86-64, for MS Windows, 8 sections

iastors.cat

6267be339575296d2ccb0d1e6962aff1

DER Encoded PKCS#7 Signed Data

iaStorS.inf

71571c04f0450a85f8fb31cd960d9441

Windows setup INFormation

iaStorS.sys

a5a41e8bd29854072aa0b3cbc88edebe

PE32+ executable (native) x86-64, for MS Windows, 8 sections

txtsetup.oem

433e5dd06349989a360c1e5eefb8f1b0

ASCII text, with CRLF line terminators

iastors.cat

6b8e59d83d44f56304d51e0e965e5d49

DER Encoded PKCS#7 Signed Data

iaStorS.inf

fc95237236e94bea0de4f9740e5ccd0a

Windows setup INFormation

iaStorS.sys

20e3dcbbeec08dfa545cbf5e9b156a75

PE32 executable (native) Intel 80386, for MS Windows, 7 sections

txtsetup.oem

123bcae2089982e25aaebdcbb284c1e0

ASCII text

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	www.supermicro.org.cn/wftp/driver/SATA/Intel_PCH_RAID_Romley_RSTE/Windows/4.6.0.1048/Win.zip	104.69.222.194	301 Moved Permanently	219 B
URL User Request GET HTTP/2 www.supermicro.org.cn/wftp/driver/SATA/Intel_PCH_RAID_Romley_RSTE/Windows/4.6.0.1048/Win.zip IP 104.69.222.194:443 ASN #20940 Akamai International B.V. Certificate IssuerDigiCert Inc Subjectwww.supermicro.com FingerprintBC:96:D5:26:16:A6:2F:7E:89:CD:85:39:AC:7E:59:FD:44:A7:E4:F9 ValidityThu, 14 Sep 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT File type HTML document, ASCII text Size 219 B (219 bytes) Hash 7565a15f0506828b7efa6622aae05159 f5171205fd28fc419a6106c6db50fe8c9f5b6013 dadcc945d4c4761d6a38f90d380f2cba7024e20be8c72aaec763457725472e5c HTTP Headers GET /wftp/driver/SATA/Intel_PCH_RAID_Romley_RSTE/Windows/4.6.0.1048/Win.zip HTTP/1.1 Host: www.supermicro.org.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 301 Moved Permanently content-type: text/html; charset=UTF-8 location: https://www.supermicro.com/wdl/driver/SATA/Intel_PCH_RAID_Romley_RSTE/Windows/4.6.0.1048/Win.zip strict-transport-security: max-age=31536010; includeSubDomains; preload content-length: 219 cache-control: no-cache expires: Thu, 28 Mar 2024 10:26:36 GMT date: Thu, 28 Mar 2024 10:26:36 GMT server-timing: cdn-cache; desc=MISS, edge; dur=126, origin; dur=577, ak_p; desc="1711621595552_1749409470_1932031870_70288_6499_8_12_41";dur=1 X-Firefox-Spdy: h2

	www.supermicro.com/wdl/driver/SATA/Intel_PCH_RAID_Romley_RSTE/Windows/4.6.0.1048/Win.zip	104.69.222.216	200 OK	3.9 MB
URL User Request GET HTTP/2 www.supermicro.com/wdl/driver/SATA/Intel_PCH_RAID_Romley_RSTE/Windows/4.6.0.1048/Win.zip IP 104.69.222.216:443 ASN #20940 Akamai International B.V. Certificate IssuerDigiCert Inc Subjectwww.supermicro.com FingerprintBC:96:D5:26:16:A6:2F:7E:89:CD:85:39:AC:7E:59:FD:44:A7:E4:F9 ValidityThu, 14 Sep 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT File type Zip archive data, at least v1.0 to extract, compression method=store Size 3.9 MB (3884571 bytes) Hash a50a95589b3e2860141b3cb1399a9aee 441d680ed39257318685174b5162039e5507d70f 00e7bae7aebfcd15b8439f36c542e4b904643a61fa2af603d8284db2a5784841 HTTP Headers GET /wdl/driver/SATA/Intel_PCH_RAID_Romley_RSTE/Windows/4.6.0.1048/Win.zip HTTP/1.1 Host: www.supermicro.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: application/x-zip-compressed last-modified: Fri, 13 Apr 2018 21:15:48 GMT accept-ranges: bytes etag: "ba831e986cd3d31:0" x-robots-tag: none strict-transport-security: max-age=31536010; includeSubDomains; preload content-length: 3884571 cache-control: max-age=421468 expires: Tue, 02 Apr 2024 07:31:04 GMT date: Thu, 28 Mar 2024 10:26:36 GMT set-cookie: AKA_A2=A; expires=Thu, 28-Mar-2024 11:26:36 GMT; path=/; domain=supermicro.com; secure; HttpOnly server-timing: cdn-cache; desc=HIT, edge; dur=52, origin; dur=0, ak_p; desc="1711621596300_1749409492_3519034228_5224_6703_8_15_41";dur=1 X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (64)

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers