Report - share.sysgen.de/index.php/s/CADXmJqdnS9Kr4b/download/server_driver_intel_rste_f6

Report Overview

Submitted URL
share.sysgen.de/index.php/s/CADXmJqdnS9Kr4b/download/server_driver_intel_rste_f6_7.5.0.1991.zip
IP
194.55.12.23
ASN
#197540 netcup GmbH
Submitted
2024-04-24 05:38:15
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
share.sysgen.de	unknown	unknown	2020-01-14	2024-02-23	549 B	4.4 MB	194.55.12.23

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
share.sysgen.de/index.php/s/CADXmJqdnS9Kr4b/download/server_driver_intel_rste_f6_7.5.0.1991.zip
IP
194.55.12.23
ASN
#197540 netcup GmbH

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
4.4 MB (4376206 bytes)
Hash
6054b94f3549dd7603529587f99eb553
d757fc93af41e140477de1cc9a4cc7f5396d8a41
00b6b83e37b90821cb09a2d6ffa452fcca68c5e5a93bbb519863a3fb199e4a4f

Archive (31)

Filename

Md5

File type

iarnvme.cat

eefcd2ed7fe8f6b5dfa09a0281db9ac0

DER Encoded PKCS#7 Signed Data

iaRNVMe.inf

b3e1cccd08ff31381d03d9894acb4bc4

Windows setup INFormation

iaRNVMe.sys

d43c3587572e58baad52d91a30840db6

PE32+ executable (native) x86-64, for MS Windows, 8 sections

iarnvmevirt.cat

180d82a63e4d74314a35603a0cab037d

DER Encoded PKCS#7 Signed Data

iaRNVMeVirt.inf

612c1d5d288c65b865fdf7b5051d56b7

Windows setup INFormation

iastorb.cat

a0aa480d542f0a1191d3114f404cf231

DER Encoded PKCS#7 Signed Data

iaStorB.inf

6d250ae8c540baef00921232acf61f47

Windows setup INFormation

iaStorB.sys

31412be39280ffa6f20d9495daf4c8d6

PE32+ executable (native) x86-64, for MS Windows, 8 sections

iastore.cat

ab6e0a71542cb2d63e17496867b12e17

DER Encoded PKCS#7 Signed Data

iaStorE.inf

37d46935fa62b216e0a25307d316947f

Windows setup INFormation

iaStorE.sys

d767872fef40d45fba23e8f9b774dc7e

PE32+ executable (native) x86-64, for MS Windows, 8 sections

iavroc.cat

6bf35517c434a79e51d198403bcf2542

DER Encoded PKCS#7 Signed Data

iaVROC.inf

c33b41fe4505ff749c2e2279a55a1dc1

Windows setup INFormation

iaVROC.sys

23daf3f12a17bd42e12ba0c46d22e1cf

PE32+ executable (native) x86-64, for MS Windows, 8 sections

iarnvme.cat

eefcd2ed7fe8f6b5dfa09a0281db9ac0

DER Encoded PKCS#7 Signed Data

iaRNVMe.inf

b3e1cccd08ff31381d03d9894acb4bc4

Windows setup INFormation

iaRNVMe.sys

d43c3587572e58baad52d91a30840db6

PE32+ executable (native) x86-64, for MS Windows, 8 sections

iarnvmevirt.cat

180d82a63e4d74314a35603a0cab037d

DER Encoded PKCS#7 Signed Data

iaRNVMeVirt.inf

612c1d5d288c65b865fdf7b5051d56b7

Windows setup INFormation

txtsetup.oem

8dea7090d725359528b40f0adcd9083f

ASCII text

iastorb.cat

a0aa480d542f0a1191d3114f404cf231

DER Encoded PKCS#7 Signed Data

iaStorB.inf

6d250ae8c540baef00921232acf61f47

Windows setup INFormation

iaStorB.sys

31412be39280ffa6f20d9495daf4c8d6

PE32+ executable (native) x86-64, for MS Windows, 8 sections

iastore.cat

ab6e0a71542cb2d63e17496867b12e17

DER Encoded PKCS#7 Signed Data

iaStorE.inf

37d46935fa62b216e0a25307d316947f

Windows setup INFormation

iaStorE.sys

d767872fef40d45fba23e8f9b774dc7e

PE32+ executable (native) x86-64, for MS Windows, 8 sections

txtsetup.oem

42060068cdb0c15f101e0d18d3ae8536

ASCII text

iavroc.cat

6bf35517c434a79e51d198403bcf2542

DER Encoded PKCS#7 Signed Data

iaVROC.inf

c33b41fe4505ff749c2e2279a55a1dc1

Windows setup INFormation

iaVROC.sys

23daf3f12a17bd42e12ba0c46d22e1cf

PE32+ executable (native) x86-64, for MS Windows, 8 sections

txtsetup.oem

093e2f0e38036c1bfe51418fa5f533a7

ASCII text

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity
YARAhub by abuse.ch	malware	signed_sys_with_vulnerablity

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	share.sysgen.de/index.php/s/CADXmJqdnS9Kr4b/download/server_driver_intel_rste_f6_7.5.0.1991.zip	194.55.12.23	200 OK	4.4 MB
URL User Request GET HTTP/2 share.sysgen.de/index.php/s/CADXmJqdnS9Kr4b/download/server_driver_intel_rste_f6_7.5.0.1991.zip IP 194.55.12.23:443 ASN #197540 netcup GmbH Certificate IssuerLet's Encrypt Subjectshare.sysgen.de Fingerprint96:A6:BB:42:A1:98:EF:1E:CD:E0:A2:97:9F:1F:63:D5:17:48:91:39 ValidityMon, 22 Apr 2024 10:37:11 GMT - Sun, 21 Jul 2024 10:37:10 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 4.4 MB (4376206 bytes) Hash 6054b94f3549dd7603529587f99eb553 d757fc93af41e140477de1cc9a4cc7f5396d8a41 00b6b83e37b90821cb09a2d6ffa452fcca68c5e5a93bbb519863a3fb199e4a4f HTTP Headers GET /index.php/s/CADXmJqdnS9Kr4b/download/server_driver_intel_rste_f6_7.5.0.1991.zip HTTP/1.1 Host: share.sysgen.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: nginx date: Wed, 24 Apr 2024 05:37:47 GMT content-type: application/zip content-length: 4376206 content-security-policy: default-src 'self'; script-src 'self' 'nonce-eU5zRE4waVdDWEc1NllxWVVVRDJXQXhqcERUOEsrWUlBVVJmd0dhWlh5MD06aTVSMEJETGdlUkR2cTc3ck0zU1FBa3RYelhLS1NxSlNNQ2R1OHpMYk1HOD0='; style-src 'self' 'unsafe-inline'; frame-src ; img-src data: blob:; font-src 'self' data:; media-src ; connect-src ; object-src 'none'; base-uri 'self'; content-disposition: attachment; filename*=UTF-8''server_driver_intel_rste_f6_7.5.0.1991.zip; filename="server_driver_intel_rste_f6_7.5.0.1991.zip" content-transfer-encoding: binary pragma: public expires: 0 cache-control: must-revalidate, post-check=0, pre-check=0 set-cookie: oc_sessionPassphrase=t3Q6h54jBONyfLif%2BN2LFMByvcUqim4m1Eynh01q6M6DDue%2FBCC9oLLKG7KcznXyLtlT%2Fu6ou%2FgvYhnqT4yoLNPJrYYQJyLmPbG94Wtq0gxVeocZK0emKYu9bqPKeKH5; path=/; secure; HttpOnly; SameSite=Lax __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict ocrwvkr60nsb=f31taht6q7hjm0cp3v9dok7qe7; path=/; secure; HttpOnly; SameSite=Lax strict-transport-security: max-age=15552000; includeSubDomains referrer-policy: no-referrer x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-robots-tag: noindex, nofollow x-xss-protection: 1; mode=block x-cache-status: BYPASS x-powered-by: PHP/8.2.18, PleskLin X-Firefox-Spdy: h2

share.sysgen.de/index.php/s/CADXmJqdnS9Kr4b/download/server_driver_intel_rste_f6_7.5.0.1991.zip

194.55.12.23

200 OK

4.4 MB

URL User Request GET HTTP/2
share.sysgen.de/index.php/s/CADXmJqdnS9Kr4b/download/server_driver_intel_rste_f6_7.5.0.1991.zip
IP
194.55.12.23:443
ASN
#197540 netcup GmbH

Certificate
IssuerLet's Encrypt
Subjectshare.sysgen.de
Fingerprint96:A6:BB:42:A1:98:EF:1E:CD:E0:A2:97:9F:1F:63:D5:17:48:91:39
ValidityMon, 22 Apr 2024 10:37:11 GMT - Sun, 21 Jul 2024 10:37:10 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
4.4 MB (4376206 bytes)
Hash
6054b94f3549dd7603529587f99eb553
d757fc93af41e140477de1cc9a4cc7f5396d8a41
00b6b83e37b90821cb09a2d6ffa452fcca68c5e5a93bbb519863a3fb199e4a4f

HTTP Headers

GET /index.php/s/CADXmJqdnS9Kr4b/download/server_driver_intel_rste_f6_7.5.0.1991.zip HTTP/1.1
Host: share.sysgen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 05:37:47 GMT
content-type: application/zip
content-length: 4376206
content-security-policy: default-src 'self'; script-src 'self' 'nonce-eU5zRE4waVdDWEc1NllxWVVVRDJXQXhqcERUOEsrWUlBVVJmd0dhWlh5MD06aTVSMEJETGdlUkR2cTc3ck0zU1FBa3RYelhLS1NxSlNNQ2R1OHpMYk1HOD0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
content-disposition: attachment; filename*=UTF-8''server_driver_intel_rste_f6_7.5.0.1991.zip; filename="server_driver_intel_rste_f6_7.5.0.1991.zip"
content-transfer-encoding: binary
pragma: public
expires: 0
cache-control: must-revalidate, post-check=0, pre-check=0
set-cookie: oc_sessionPassphrase=t3Q6h54jBONyfLif%2BN2LFMByvcUqim4m1Eynh01q6M6DDue%2FBCC9oLLKG7KcznXyLtlT%2Fu6ou%2FgvYhnqT4yoLNPJrYYQJyLmPbG94Wtq0gxVeocZK0emKYu9bqPKeKH5; path=/; secure; HttpOnly; SameSite=Lax
__Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
__Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
ocrwvkr60nsb=f31taht6q7hjm0cp3v9dok7qe7; path=/; secure; HttpOnly; SameSite=Lax
strict-transport-security: max-age=15552000; includeSubDomains
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
x-cache-status: BYPASS
x-powered-by: PHP/8.2.18, PleskLin
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (31)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers