Report - ftdichip.com/wp-content/uploads/2025/03/CDM-v2.12.36.20-WHQL-Certified.zip

Report Overview

Visited public
2025-04-26 04:12:52
Tags
URL
ftdichip.com/wp-content/uploads/2025/03/CDM-v2.12.36.20-WHQL-Certified.zip
Finishing URL
about:privatebrowsing
IP / ASN
35.213.176.217
#15169 GOOGLE
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ftdichip.com	420314	2001-05-09	2012-08-20	2025-04-18	542 B	1.6 MB	35.213.176.217

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
ftdichip.com/wp-content/uploads/2025/03/CDM-v2.12.36.20-WHQL-Certified.zip
IP
35.213.176.217
ASN
#15169 GOOGLE

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.6 MB (1628167 bytes)
Hash
40a9e1792f10c1062206ea6d9254bc5a
be15acd8692769e74255bceb063a846da422d869
e8ebf401d06994183694d78e5855ed5ab026bdfa8c3d4e4ccde09ec238a0eaf1

Archive (23)

Filename

Md5

File type

ftbusui.dll

b63f0b80a56d96aa2188b32af0a64171

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

ftcserco.dll

4a9b0e8b5d5ec584ee605d2880c15a26

PE32+ executable (DLL) (console) x86-64, for MS Windows, 5 sections

ftd2xx.lib

7d7af16c4639f233a2308d094b1e830a

current ar archive

FTD2XX64.dll

27a29f8c3e98867ebc4a3c66b8113420

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 9 sections

ftdibus.sys

8dd61161069b883473fc063eaba701eb

PE32+ executable (native) x86-64, for MS Windows, 8 sections

ftlang.dll

1cbd948d8f3f0638ae49cc0e6db96a9e

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

ftser2k.sys

3e5c03dd5818593e12b120a568aaaa1e

PE32+ executable (native) x86-64, for MS Windows, 10 sections

ftserui2.dll

46812e7e50138777c07ef9545b807389

PE32+ executable (DLL) (console) x86-64, for MS Windows, 5 sections

ftd2xx.h

85b65264bd4595be68c15d9ead88f4bd

C source, ASCII text, with CRLF line terminators

ftdibus.cat

ed5185e9ce271fbbb4d7884fde30d1d2

DER Encoded PKCS#7 Signed Data

ftdibus.inf

ae5fac869c953a436eff7be6b3032a68

ISO-8859 text, with CRLF line terminators

ftdiport.cat

4e32a6ef5f06e809d5da2d386122328e

DER Encoded PKCS#7 Signed Data

ftdiport.inf

f57a5f61b0f6ac67deb92aa180d616b1

ISO-8859 text, with CRLF line terminators

ftbusui.dll

e7857ea9ab0aecb74ad27a4c135b75f5

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

ftcserco.dll

c16f9719bbf97c041d6bd0356a1960af

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 4 sections

ftd2xx.dll

461399c0ec8adb3b42a65145ce763d01

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

ftd2xx.lib

e05e0c12652bcf691b9d725869fbc617

current ar archive

ftdibus.sys

25f0b61f2f54897ff8b0fa40092a2af7

PE32 executable (native) Intel 80386, for MS Windows, 7 sections

ftlang.dll

d23064e95351e47c21888cdb46edb5c0

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

ftser2k.sys

5812a8b73ebc5352e2245540fa6423fe

PE32 executable (native) Intel 80386, for MS Windows, 9 sections

ftserui2.dll

f698ed5e0ee8d16ef7d219d41d163d7d

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections

FTD2XX.lib

76b80034349272f4bb0144a1c585b3ed

current ar archive

ftd2xx.lib

73305921df25a7bf8ed82a6be0dbae7e

current ar archive

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	ftdichip.com/wp-content/uploads/2025/03/CDM-v2.12.36.20-WHQL-Certified.zip	35.213.176.217	200 OK	1.6 MB
URL User Request GET ftdichip.com/wp-content/uploads/2025/03/CDM-v2.12.36.20-WHQL-Certified.zip IP 35.213.176.217:443 ASN #15169 GOOGLE Certificate IssuerLet's Encrypt Subjectftdichip.com Fingerprint8F:41:9E:A1:E5:1B:4F:FD:B3:87:A0:AE:74:79:83:CF:BE:DE:86:92 ValidityFri, 11 Apr 2025 07:22:32 GMT - Thu, 10 Jul 2025 07:22:31 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 1.6 MB (1628167 bytes) Hash 40a9e1792f10c1062206ea6d9254bc5a be15acd8692769e74255bceb063a846da422d869 e8ebf401d06994183694d78e5855ed5ab026bdfa8c3d4e4ccde09ec238a0eaf1 HTTP Headers GET /wp-content/uploads/2025/03/CDM-v2.12.36.20-WHQL-Certified.zip HTTP/1.1 Host: ftdichip.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Sat, 26 Apr 2025 04:12:19 GMT content-type: application/zip content-length: 1628167 last-modified: Tue, 04 Mar 2025 05:25:01 GMT etag: "18d807-62f7d7e910da1" x-httpd-modphp: 1 host-header: 8441280b0c35cbc1147f8ba998a563a7 x-proxy-cache: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

ftdichip.com/wp-content/uploads/2025/03/CDM-v2.12.36.20-WHQL-Certified.zip

35.213.176.217

200 OK

1.6 MB

URL User Request GET
ftdichip.com/wp-content/uploads/2025/03/CDM-v2.12.36.20-WHQL-Certified.zip
IP
35.213.176.217:443
ASN
#15169 GOOGLE

Certificate
IssuerLet's Encrypt
Subjectftdichip.com
Fingerprint8F:41:9E:A1:E5:1B:4F:FD:B3:87:A0:AE:74:79:83:CF:BE:DE:86:92
ValidityFri, 11 Apr 2025 07:22:32 GMT - Thu, 10 Jul 2025 07:22:31 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.6 MB (1628167 bytes)
Hash
40a9e1792f10c1062206ea6d9254bc5a
be15acd8692769e74255bceb063a846da422d869
e8ebf401d06994183694d78e5855ed5ab026bdfa8c3d4e4ccde09ec238a0eaf1

HTTP Headers

GET /wp-content/uploads/2025/03/CDM-v2.12.36.20-WHQL-Certified.zip HTTP/1.1
Host: ftdichip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 26 Apr 2025 04:12:19 GMT
content-type: application/zip
content-length: 1628167
last-modified: Tue, 04 Mar 2025 05:25:01 GMT
etag: "18d807-62f7d7e910da1"
x-httpd-modphp: 1
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (23)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers