Report - member.ipmu.jp/yuji.tachikawa/spires/zips/spires

Report Overview

Submitted URL
member.ipmu.jp/yuji.tachikawa/spires/zips/spires_1.7.1.zip
IP
157.82.236.62
ASN
#2501 The University of Tokyo
Submitted
2024-04-18 11:40:06
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
member.ipmu.jp	731065	2007-11-04	2017-02-16	2023-12-23	512 B	864 kB	157.82.236.62

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
member.ipmu.jp/yuji.tachikawa/spires/zips/spires_1.7.1.zip
IP
157.82.236.62
ASN
#2501 The University of Tokyo

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
864 kB (863786 bytes)
Hash
a68e903044bf6784a8eb210ca037171b
2a2ef6fdc3254db4493b1548b5bc05d66c870999
017364bb8eb9f55c0d5bf64913cf701b4874972a0855acdc3d8392b2bd9dd071

Archive (84)

Filename

Md5

File type

CodeResources

3565dc7df321aadca56db6be1ef4d520

XML 1.0 document, ASCII text

Headers

86c63de7bd8775780ac77380b5c049c4

ASCII text, with no line terminators

Resources

e58c4cf10cc7c8ef7d7167ccb641aeb4

ASCII text, with no line terminators

Sparkle

078cd5564ff6fd5418ddc4d9179fca8c

ASCII text, with no line terminators

CodeResources

738df1b74a568309a212b89a4084d078

XML 1.0 document, ASCII text

Sparkle.strings

8053722e4e9c6e169e36406e3f86861f

Unicode text, UTF-16, little-endian text, with very long lines (368)

SUAutomaticUpdateAlert.nib

3a31e8a550eae52e10394e25aa8891b6

Apple binary property list

SUUpdateAlert.nib

608b891acf10a137a63615d6b6c43823

Apple binary property list

SUUpdatePermissionPrompt.nib

e1dc70a8e650793c2319b26991e68392

Apple binary property list

CodeResources

8787192490481924e4ff4797edeee06b

XML 1.0 document, ASCII text

Info.plist

7ca4d1f9070d54342c3e201ec4de656a

XML 1.0 document, ASCII text

finish_installation

48c375d96b7df35afe11a996cc380c40

PkgInfo

23b7d7d024abb0f558420e098800bf27

ASCII text, with no line terminators

Sparkle.strings

724f5117126291f1f8ad60433da7c95f

Unicode text, UTF-16, little-endian text, with very long lines (432)

Sparkle.strings

6df3a4937b99abeed2f341779eca561c

Unicode text, UTF-16, little-endian text, with very long lines (378)

Sparkle.strings

fe70775c0a2b7cd26587bfa089368afa

Unicode text, UTF-16, little-endian text, with very long lines (391)

Sparkle.strings

8053722e4e9c6e169e36406e3f86861f

Unicode text, UTF-16, little-endian text, with very long lines (368)

Sparkle.strings

23b178968b73100676e3cbdeb6c403cd

Unicode text, UTF-16, little-endian text, with very long lines (376)

Sparkle.strings

d27013d5dd3e1224f8ccf1ce06cf275d

Unicode text, UTF-16, little-endian text, with very long lines (413)

Sparkle.strings

3d021fdefb90c34ee08d7734455e3e21

Unicode text, UTF-16, little-endian text

Sparkle.strings

19ad8fa17ff17202c09f014a6366d5d5

Unicode text, UTF-16, little-endian text, with very long lines (375)

Sparkle.strings

2c53dfa48e5cb192bd7004e610c21e66

Unicode text, UTF-16, little-endian text

Sparkle.strings

a1d223a1c329b8c87a78135aafbbfbba

Unicode text, UTF-16, little-endian text, with very long lines (376)

Sparkle.strings

396cea7800521bc97bd06b99a5bc7bd8

Unicode text, UTF-16, little-endian text, with very long lines (394)

Sparkle.strings

a87fcb2d7a1fcd3208ae4e6439ffb516

Unicode text, UTF-16, little-endian text, with very long lines (392)

Sparkle.strings

6ca71bf8e3cb85c2c74fe7cfc362fdb6

Unicode text, UTF-16, little-endian text, with very long lines (406)

Sparkle.strings

d27a1e4eced8a976ed77647eb3f61ec9

Unicode text, UTF-16, little-endian text, with very long lines (388)

Sparkle.strings

2e23ce0b1fe81013644a63f9ed02de93

Unicode text, UTF-16, little-endian text, with very long lines (424)

Sparkle.strings

9372ec2190b57c9f96109d760b6c246f

Unicode text, UTF-16, little-endian text, with very long lines (445)

Sparkle.icns

a835ab0d1534bf724d598583cbebe7d3

Mac OS X icon, 50219 bytes, "ics#" type

SUStatus.nib

3cf1b596baafe61d59ca8cc2b225e64b

Apple binary property list

Sparkle.strings

a8a846b7020c1629e8242c1921586534

Unicode text, UTF-16, little-endian text, with very long lines (367)

Sparkle.strings

0267d813d7f617186c98a49a6fc141c4

Unicode text, UTF-16, little-endian text

Sparkle.strings

9ee1803dffccd1e2de0b1a516759a2d7

Unicode text, UTF-16, little-endian text, with very long lines (404)

Sparkle.strings

1bebb6fdd2a465fde2883d8430997b3a

Unicode text, UTF-16, little-endian text

Sparkle.strings

525dfc12835311086684638c67b9b21a

Unicode text, UTF-16, little-endian text

Info.plist

97bc9dd7e6a542b24ca83a66b97f954a

XML 1.0 document, ASCII text

License.txt

a95b27511029996d8c4a9ce01d2456cd

ASCII text, with very long lines (460)

SUModelTranslation.plist

7d0d84a1983ed9a191d00ede11816e3d

XML 1.0 document, ASCII text

SUStatus.nib

3cf1b596baafe61d59ca8cc2b225e64b

Apple binary property list

Sparkle

eb15873714016701eac21df1c1a39d45

Mach-O universal binary with 2 architectures: [i386: - Mach-O i386 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - x86_64: - Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>]

Current

7fc56270e7a70fa81a5935b72eacbe29

very short file (no magic)

Info.plist

71de1876235735a2316c03b191b896db

XML 1.0 document, ASCII text

spires

75fe70b0191a19a54dd7d6c6c2edfa27

Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|PIE>

PkgInfo

23b7d7d024abb0f558420e098800bf27

ASCII text, with no line terminators

Acknowledgments.html

cf8db625f96069e9579968822f00be83

HTML document, ASCII text

ActivityMonitor.nib

9178cb6b6c5acc4c8c87e3c20d522f98

Apple binary property list

arxiv.tiff

d3a1c2044ff2e37ec5b3501e42717561

TIFF image data, big-endian, direntries=20, height=32, bps=0, compression=LZW, PhotometricInterpretation=RGB, description=arxiv@2x.png, orientation=upper-left, width=32

ArxivNewCreateSheet.nib

878cb85530264e92bc4137c2ef3ac602

Apple binary property list

BibView.nib

396ee28b226526d35d7c74e6ae8d840d

Apple binary property list

blackOut.pdf

c417fc89216af5f730ba2bd2bac201e3

PDF document, version 1.3, 1 pages

ButtonBarPullDownArrow.pdf

a3e21e098edbc5fba4bd2bf689f8192b

PDF document, version 1.7, 1 pages

canned-search.tiff

71010e34630f886a1dc755e3a2663ee3

TIFF image data, big-endian, direntries=21, height=32, bps=0, compression=LZW, PhotometricInterpretation=RGB, description=canned-search@2x.png, orientation=upper-left, width=32

defaults.plist

7de5685f2ccc7cbc5b5025b4a5dabada

XML 1.0 document, ASCII text

drop.png

ceeb19004e55c8c49e3f93dde6aafa95

PNG image data, 91 x 91, 8-bit/color RGBA, non-interlaced

dsa_pub.pem

c491fa208a0ff99498dedfd2592a55fa

ASCII text

InfoPlist.strings

0b32a3ba7b88548d0f7efc144a991f49

Unicode text, UTF-16, little-endian text

MainMenu.nib

4fb0e7cab29349e793097280d293270b

Apple binary property list

flagged.png

5325ddf732780e2dd3eefbb0e9318160

PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced

hasPDF.tiff

02dc8610714d4605d80310f42041f5aa

TIFF image data, big-endian, direntries=20, height=32, bps=0, compression=LZW, PhotometricInterpretation=RGB, description=hasPDF@2x.png, orientation=upper-left, width=32

Localizable.strings

80144a694cf0ce44f73e9bc39be9bd1d

Unicode text, UTF-16, little-endian text

magicRegExps.perl

d571ff38b02507933753cb66212357ca

ASCII text

MessageViewer.nib

e8b12bf391646aebc44f11502ca70379

Apple binary property list

MigrationProgress.nib

8f04b8d4e993335d356b320bd6bde0e3

Apple binary property list

parseTeXandEmitPlist.perl

5ae34ab8022034950935117b06498410

Perl script text executable

PrefPane.nib

45f92da929c083ef140e0521b0c5f2e1

Apple binary property list

Release Notes.html

1f959cfd66d41d2da0064ae4db08e9ae

HTML document, ASCII text, with very long lines (310)

spires-blue.tiff

d7d66a2837051c3ff8c405a9759c2cd6

TIFF image data, big-endian, direntries=20, height=32, bps=0, compression=LZW, PhotometricInterpretation=RGB, description=spires-blue@2x.png, orientation=upper-left, width=32

spires-red.tiff

9e8c09b2f3d538a0fbf751c323d197f3

TIFF image data, big-endian, direntries=20, height=32, bps=0, compression=LZW, PhotometricInterpretation=RGB, description=spires-red@2x.png, orientation=upper-left, width=32

spires.icns

499cdb8df675b16b7cc88ffba45a755d

Mac OS X icon, 90832 bytes, "is32" type

spires.sdef

2f11eac3255608d2f4766635f03fdd51

XML 1.0 document, ASCII text

spires_DataModel 5.mom

ed3cd0fa5c874efe0354c028cd07a815

Apple binary property list

spires_DataModel 6.mom

a3b611bb8d801cae3845908b4c89cbc6

Apple binary property list

spires_DataModel 7.mom

6d6cbb5afc193a8d538c78ad41d0e390

Apple binary property list

spires_DataModel 7.omo

35b9d8d87b6b5ff6d913530ab1602824

data

VersionInfo.plist

ea036088c1151ad712436e2269462f1c

Apple binary property list

template.html

8191bafb053ab080995c3e03c2f6b0b8

HTML document, ASCII text

tex.js

513fdf385c02e93cc90a175128660c97

Unicode text, UTF-8 text

TeXWatcher.nib

f04925a86eae7ecf6faeccb789ea1c32

Apple binary property list

unread-hasPDF.tiff

609fb457857e36a7a69b711a0739c201

TIFF image data, big-endian, direntries=20, height=32, bps=0, compression=LZW, PhotometricInterpretation=RGB, description=unread-hasPDF@2x.png, orientation=upper-left, width=32

unread.tiff

f8cb71f77d479f7077bf1396e33a42f2

TIFF image data, big-endian, direntries=20, height=32, bps=0, compression=LZW, PhotometricInterpretation=RGB, description=unread@2x.png, orientation=upper-left, width=32

v1.7.0alert.rtf

3f3e38449c6926583ffec23d83e7e79e

Rich Text Format data, version 1, ANSI, code page 932

whiteIn.pdf

f39471fc051b4824ff0ff6ae7fb72dd4

PDF document, version 1.3, 1 pages

whiteOut.pdf

588cbaa67435cc5ad2cbcd11f8a86d86

PDF document, version 1.3, 1 pages

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	member.ipmu.jp/yuji.tachikawa/spires/zips/spires_1.7.1.zip	157.82.236.62	200 OK	864 kB
URL User Request GET HTTP/1.1 member.ipmu.jp/yuji.tachikawa/spires/zips/spires_1.7.1.zip IP 157.82.236.62:443 ASN #2501 The University of Tokyo Certificate IssuerSECOM Trust Systems CO.,LTD. Subjectmember.ipmu.jp Fingerprint5B:E0:C7:08:21:01:9F:F5:02:22:CC:73:A6:69:76:47:E8:67:61:44 ValidityMon, 01 May 2023 23:58:16 GMT - Fri, 31 May 2024 23:58:16 GMT File type Zip archive data, at least v1.0 to extract, compression method=store Size 864 kB (863786 bytes) Hash a68e903044bf6784a8eb210ca037171b 2a2ef6fdc3254db4493b1548b5bc05d66c870999 017364bb8eb9f55c0d5bf64913cf701b4874972a0855acdc3d8392b2bd9dd071 HTTP Headers `GET /yuji.tachikawa/spires/zips/spires_1.7.1.zip HTTP/1.1 Host: member.ipmu.jp User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 11:39:40 GMT Server: Apache Strict-Transport-Security: max-age=63072000 Last-Modified: Fri, 10 Feb 2017 14:23:00 GMT ETag: "d2e2a-5482dd5b9b900" Accept-Ranges: bytes Content-Length: 863786 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/zip`

member.ipmu.jp/yuji.tachikawa/spires/zips/spires_1.7.1.zip

157.82.236.62

200 OK

864 kB

URL User Request GET HTTP/1.1
member.ipmu.jp/yuji.tachikawa/spires/zips/spires_1.7.1.zip
IP
157.82.236.62:443
ASN
#2501 The University of Tokyo

Certificate
IssuerSECOM Trust Systems CO.,LTD.
Subjectmember.ipmu.jp
Fingerprint5B:E0:C7:08:21:01:9F:F5:02:22:CC:73:A6:69:76:47:E8:67:61:44
ValidityMon, 01 May 2023 23:58:16 GMT - Fri, 31 May 2024 23:58:16 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
864 kB (863786 bytes)
Hash
a68e903044bf6784a8eb210ca037171b
2a2ef6fdc3254db4493b1548b5bc05d66c870999
017364bb8eb9f55c0d5bf64913cf701b4874972a0855acdc3d8392b2bd9dd071

HTTP Headers

GET /yuji.tachikawa/spires/zips/spires_1.7.1.zip HTTP/1.1
Host: member.ipmu.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 11:39:40 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000
Last-Modified: Fri, 10 Feb 2017 14:23:00 GMT
ETag: "d2e2a-5482dd5b9b900"
Accept-Ranges: bytes
Content-Length: 863786
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/zip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (84)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers