Report - www.ms.u-tokyo.ac.jp/~abenori/soft/bin/TeX2img

Report Overview

Submitted URL
www.ms.u-tokyo.ac.jp/~abenori/soft/bin/TeX2img_2.1.0.zip
IP
157.82.16.27
ASN
#2501 The University of Tokyo
Submitted
2024-03-28 09:44:21
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
niig7rsa.ocsp.secom-cert.jp	unknown	2020-06-26	2021-01-11	2024-03-27	678 B	3.6 kB	113.52.156.18
www.ms.u-tokyo.ac.jp	unknown	unknown	2017-05-10	2023-10-14	510 B	6.6 MB	157.82.16.27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.ms.u-tokyo.ac.jp/~abenori/soft/bin/TeX2img_2.1.0.zip
IP
157.82.16.27
ASN
#2501 The University of Tokyo

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
6.6 MB (6613964 bytes)
Hash
12008ecf5c22011ba6f0c86f8337be6b
40b011fcb5311942300cbfe730fe187678bc10e5
330347b0883066390edf5949e4de07ec47aa264f83c3f4f634426bb92e86692b

Archive (13)

Filename

Md5

File type

Azuki.dll

4bc5a89404f806edea93cb03557c3bd5

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

hist_old.txt

1bc27f495e394fcf98e79067e9eff347

Unicode text, UTF-8 text, with CRLF line terminators

TeX2img.resources.dll

fdb4d2b191b3009d2f724304b0d77be0

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

license.txt

fd79522ae78b59c91f5d8bfa1a20a3f2

ASCII text, with very long lines (755), with CRLF line terminators

mudraw.exe

54c96264aabf16463d262c2b7273a25a

PE32 executable (console) Intel 80386, for MS Windows, 8 sections

pdfiumdraw.exe

2932671c8a66b9f21937d92358623c43

PE32 executable (console) Intel 80386, for MS Windows, 6 sections

pdfiumdraw.txt

9998ecf6f1f6ad3b7ef73d0dc98ff2e7

ASCII text, with very long lines (755), with CRLF line terminators

TeX2img-ja.txt

a8f53318fb63d9d07f4cd0ffb2385737

Unicode text, UTF-8 text, with CRLF line terminators

TeX2img.exe

d150ae58bf251faf875ab3497265aa83

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

TeX2img.exe.config

ff76c8b6142b7bbe28417d4b65917c11

XML 1.0 document, ASCII text, with CRLF line terminators

TeX2img.txt

eeea29dd3366b71f9699a11cc68365a5

Unicode text, UTF-8 text, with CRLF line terminators

TeX2imgc.exe

f711586915291e7c63bb3d22fdd8104a

PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

TeX2imgc.exe.config

6b33ec4b2c88d3576b2f188d81385c70

XML 1.0 document, ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/62

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

niig7rsa.ocsp.secom-cert.jp/

113.52.156.18

1.4 kB

URL
niig7rsa.ocsp.secom-cert.jp/
IP
113.52.156.18:0
ASN
#10006 SECOM Trust Systems Co.,Ltd.

File type
data
Size
1.4 kB (1448 bytes)
Hash
b6dcd4930c945a0a245cfd746b79818c
98cb50e891be583edab5589b4151714d75a16066
25c70336557d2ef15d3b71492b9eff3ca7183b0742c04745d6f0b141f7b5495d

HTTP Headers

POST / HTTP/1.1
Host: niig7rsa.ocsp.secom-cert.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:43:51 GMT
Server: Microsoft-IIS/8.5
Cache-Control: max-age=86400
Content-Type: application/ocsp-response
Expires: Mon, 01 Apr 2024 09:16:16 GMT
Last-Modified: Thu, 28 Mar 2024 09:16:16 GMT
ETag: "b6dcd4930c945a0a245cfd746b79818c"
X-Powered-By: ASP.NET
Content-Length: 1448
Connection: close

niig7rsa.ocsp.secom-cert.jp/

113.52.156.18

1.4 kB

URL
niig7rsa.ocsp.secom-cert.jp/
IP
113.52.156.18:0
ASN
#10006 SECOM Trust Systems Co.,Ltd.

File type
data
Size
1.4 kB (1448 bytes)
Hash
1ecf880523fc821136d6e88e75113066
a96fe2a3e4cec6f45c15f461de3d2dc2a8436a13
74de1d87a26ef121be08c9711414c89ddf8e9293754507070d712724edd84594

HTTP Headers

POST / HTTP/1.1
Host: niig7rsa.ocsp.secom-cert.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:43:49 GMT
Server: Microsoft-IIS/8.5
Cache-Control: max-age=86400
Content-Type: application/ocsp-response
Expires: Mon, 01 Apr 2024 09:16:16 GMT
Last-Modified: Thu, 28 Mar 2024 09:16:16 GMT
ETag: "1ecf880523fc821136d6e88e75113066"
X-Powered-By: ASP.NET
Content-Length: 1448
Connection: close

www.ms.u-tokyo.ac.jp/~abenori/soft/bin/TeX2img_2.1.0.zip

157.82.16.27

200 OK

6.6 MB

URL User Request GET HTTP/1.1
www.ms.u-tokyo.ac.jp/~abenori/soft/bin/TeX2img_2.1.0.zip
IP
157.82.16.27:443
ASN
#2501 The University of Tokyo

Certificate
IssuerSECOM Trust Systems CO.,LTD.
Subjectwww.ms.u-tokyo.ac.jp
FingerprintA0:BD:BC:53:CE:25:5A:49:78:41:B2:12:02:3C:DB:AD:6C:72:A4:E9
ValidityThu, 13 Apr 2023 09:03:24 GMT - Mon, 13 May 2024 09:03:24 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
6.6 MB (6613964 bytes)
Hash
12008ecf5c22011ba6f0c86f8337be6b
40b011fcb5311942300cbfe730fe187678bc10e5
330347b0883066390edf5949e4de07ec47aa264f83c3f4f634426bb92e86692b

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/62

HTTP Headers

GET /~abenori/soft/bin/TeX2img_2.1.0.zip HTTP/1.1
Host: www.ms.u-tokyo.ac.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:43:54 GMT
Server: Apache
Last-Modified: Tue, 15 May 2018 14:43:26 GMT
ETag: "64ebcc-56c3f9ff61f80"
Accept-Ranges: bytes
Content-Length: 6613964
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/zip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (13)

Detections

JavaScript (0)

HTTP Transactions (3)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers