Report - s3.amazonaws.com/ec2-windows-drivers-downloads/ENA/Latest/AwsEnaNetworkDriver.zip

Report Overview

Submitted URL
s3.amazonaws.com/ec2-windows-drivers-downloads/ENA/Latest/AwsEnaNetworkDriver.zip
IP
52.217.229.168
ASN
#16509 AMAZON-02
Submitted
2024-04-23 15:13:19
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
s3.amazonaws.com	unknown	2005-08-18	2020-05-13	2024-03-23	535 B	308 kB	52.216.49.136

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

Files detected

URL
s3.amazonaws.com/ec2-windows-drivers-downloads/ENA/Latest/AwsEnaNetworkDriver.zip
IP
52.216.49.136
ASN
#16509 AMAZON-02

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
307 kB (307226 bytes)
Hash
e3802cf5d7fb618e10e11cdf6c766b25
f250d4db54282ce76f14c9787e91f40804b4e3c8
e55dca6a56d88d5e9b627d2187ef0e340d7184cbb0a2440b78394c90a3807af1

Archive (9)

Filename

Md5

File type

ena.cat

ddff82da1232e5c8c742e1c1d190f8a9

DER Encoded PKCS#7 Signed Data

ena.inf

4f30d508f378fbfc979b5178a00a6ec0

Windows setup INFormation

ena100.sys

f1aa8d10e5d7846b53a39f5264b231c8

PE32+ executable (native) x86-64, for MS Windows, 8 sections

ena62.sys

48dcfd67a1aaf9ca55a1297ff2e24c53

PE32+ executable (native) x86-64, for MS Windows, 8 sections

ena63.sys

3e17582d859380320ea7a7158026ff73

PE32+ executable (native) x86-64, for MS Windows, 8 sections

EnaPerfCounters.man

2b9287abfa48675159502e7ba510f399

ASCII text

install.ps1

13dcbb68443b57b6f690af18d28bf5ae

ASCII text, with CRLF, LF line terminators

license.txt

42889ae1e5dba7d9ae12b314a6fea4ae

Non-ISO extended-ASCII text, with very long lines (1261), with CRLF, LF line terminators

Readme.txt

ac691e9ea7044f882e6186c9e87339fc

ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	s3.amazonaws.com/ec2-windows-drivers-downloads/ENA/Latest/AwsEnaNetworkDriver.zip	52.216.49.136	200 OK	307 kB
URL User Request GET HTTP/1.1 s3.amazonaws.com/ec2-windows-drivers-downloads/ENA/Latest/AwsEnaNetworkDriver.zip IP 52.216.49.136:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 307 kB (307226 bytes) Hash e3802cf5d7fb618e10e11cdf6c766b25 f250d4db54282ce76f14c9787e91f40804b4e3c8 e55dca6a56d88d5e9b627d2187ef0e340d7184cbb0a2440b78394c90a3807af1 HTTP Headers GET /ec2-windows-drivers-downloads/ENA/Latest/AwsEnaNetworkDriver.zip HTTP/1.1 Host: s3.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK x-amz-id-2: DFKB3k+1CwzVMGuV2d06ontR8cQjxufqlBwWPgoOsx6PjN7v5uqV6vyJstia8KcS0+GsB8p8jmw= x-amz-request-id: 14W0N7T6A8QZ950G Date: Tue, 23 Apr 2024 15:12:54 GMT Last-Modified: Sun, 02 Jul 2023 15:50:40 GMT ETag: "e3802cf5d7fb618e10e11cdf6c766b25" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/zip Server: AmazonS3 Content-Length: 307226`

s3.amazonaws.com/ec2-windows-drivers-downloads/ENA/Latest/AwsEnaNetworkDriver.zip

52.216.49.136

200 OK

307 kB

URL User Request GET HTTP/1.1
s3.amazonaws.com/ec2-windows-drivers-downloads/ENA/Latest/AwsEnaNetworkDriver.zip
IP
52.216.49.136:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
307 kB (307226 bytes)
Hash
e3802cf5d7fb618e10e11cdf6c766b25
f250d4db54282ce76f14c9787e91f40804b4e3c8
e55dca6a56d88d5e9b627d2187ef0e340d7184cbb0a2440b78394c90a3807af1

HTTP Headers

GET /ec2-windows-drivers-downloads/ENA/Latest/AwsEnaNetworkDriver.zip HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: DFKB3k+1CwzVMGuV2d06ontR8cQjxufqlBwWPgoOsx6PjN7v5uqV6vyJstia8KcS0+GsB8p8jmw=
x-amz-request-id: 14W0N7T6A8QZ950G
Date: Tue, 23 Apr 2024 15:12:54 GMT
Last-Modified: Sun, 02 Jul 2023 15:50:40 GMT
ETag: "e3802cf5d7fb618e10e11cdf6c766b25"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/zip
Server: AmazonS3
Content-Length: 307226

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (9)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers