Report - sunsite.informatik.rwth-aachen.de/ftp/pub/publications/CEUR-WS/Vol-1072.zip

Report Overview

Submitted URL
sunsite.informatik.rwth-aachen.de/ftp/pub/publications/CEUR-WS/Vol-1072.zip
IP
137.226.34.227
ASN
#47610 RWTH Aachen University
Submitted
2024-05-05 05:45:01
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
sunsite.informatik.rwth-aachen.de	unknown	unknown	2014-04-14	2024-03-25	445 B	19 MB	137.226.34.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
sunsite.informatik.rwth-aachen.de/ftp/pub/publications/CEUR-WS/Vol-1072.zip
IP
137.226.34.227
ASN
#47610 RWTH Aachen University

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
19 MB (18658514 bytes)
Hash
35fce4dfdbaf224f70c53aa594afb2af
a2ce27c7a75069b3ff0fe5cf0c41a68cff24bec0
02274ef036ccd2ddcce116a8baa1c98afe2ceda3afb04b174c9431bab0257f41

Archive (46)

Filename

Md5

File type

index.html.orig

da2709903dc77b11dd83e88e7f4284ce

HTML document, ASCII text, with very long lines (344), with CRLF line terminators

onsoz.pdf

09f8aebcd1157e4208632da66ccd007a

PDF document, version 1.4, 1 pages

submission44.pdf

6484fd981ac24d21ed50370bfb3d3735

PDF document, version 1.5, 16 pages

submission5.pdf

8731b113e54fec404d61e78cb03131f5

PDF document, version 1.5, 8 pages

submission2.pdf

dcfc8ca8c6bf7767266ff9edced58db0

PDF document, version 1.5, 10 pages

submission29.pdf

807136b3dd011dcf6475f7207d714070

PDF document, version 1.7, 10 pages

submission60.pdf

c78d87b6abb9140086c2e13e2921ec25

PDF document, version 1.5, 15 pages

submission15.pdf

c3a0fed82eaabf54792327fc118cfbe0

PDF document, version 1.5, 14 pages

submission12.pdf

bddaec3ea1b8d49ee3e6665b1e94310e

PDF document, version 1.4, 3 pages

submission37.pdf

759817569aa97d484b8f042bbed5fc48

PDF document, version 1.7, 10 pages

submission45.pdf

a5a70c50e1ac52be727c6251489015b0

PDF document, version 1.5, 15 pages

submission39.pdf

33227f179ae272b8ca2a8250f2ab9296

PDF document, version 1.5, 9 pages

UYMS.jpg

0d3c70aefd03214cbe6ed062be440664

JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Macintosh, datetime=2013:07:31 12:00:07], baseline, precision 8, 800x200, components 3

submission13.pdf

7517d579e3e2c00ce8513603f0cecefb

PDF document, version 1.5, 18 pages

submission14.pdf

887dfe18d7fef2de98a61dc4c5c89997

PDF document, version 1.5, 13 pages

submission54.pdf

edb362786f2ca227202365c96df62b28

PDF document, version 1.5, 8 pages

submission53.pdf

ae13e12fef011a5f281b10ec6d25bcd9

PDF document, version 1.5, 14 pages

submission21.pdf

dbf9a861ab79e54144bb0a6cd264b29e

PDF document, version 1.5, 9 pages

submission3.pdf

876ad5599a0405a7c1fcced102fa644d

PDF document, version 1.7, 8 pages

submission4.pdf

aa621d311c83ec6bf15825a9c251fe62

PDF document, version 1.7, 6 pages

submission26.pdf

5448340bb99e6274885d7bc332090aa6

PDF document, version 1.5, 9 pages

submission17.pdf

e40620cc19f6d804c69c220e1b74f332

PDF document, version 1.5, 10 pages

submission10.pdf

ebaa5e376cac9b1e9682e238968ffb60

PDF document, version 1.5, 11 pages

submission62.pdf

304ef55b5f9d1e4ecdb448197884c637

PDF document, version 1.5, 32 pages

submission19.pdf

f4ba8707aa6d4d6350ae9d55ecc455c4

PDF document, version 1.5, 14 pages

submission50.pdf

33a4f67d40a04f0dd8136ca68f522d17

PDF document, version 1.5, 6 pages

submission57.pdf

7d5e66745096949f2dcf766ea2a9d31b

PDF document, version 1.7, 7 pages

submission9.pdf

4a194989758d2d7e407e218a29a70dd9

PDF document, version 1.4, 12 pages

submission25.pdf

dfff2add22305b6c3391ef49d3bd3c9c

PDF document, version 1.5, 10 pages

submission22.pdf

e30f11feb94e5134b096c96368058589

PDF document, version 1.5

submission33.pdf

02b4d475ed1e2675d40713cc14a8e090

PDF document, version 1.5

submission48.pdf

72a91b52ce97c4bfdd467f10d594725a

PDF document, version 1.5, 9 pages

submission34.pdf

2148da3164ac5ec328a3472b92182d6b

PDF document, version 1.7, 10 pages

submission46.pdf

e5543e8068c6367239ccdd2fe347c343

PDF document, version 1.5, 12 pages

submission41.pdf

96b9873b55c85f9ab235b12705326082

PDF document, version 1.5, 11 pages

index.html

b941e347662584635de18a4f9dd8d802

HTML document, ASCII text, with very long lines (344), with CRLF line terminators

submission23.pdf

4ab84bdf8294e777a506ddcf6896a82e

PDF document, version 1.7, 12 pages

submission6.pdf

17791b8569385a41f1eda5b4b8fec9bb

PDF document, version 1.5, 9 pages

submission58.pdf

d2dee8dba97f82fe1ef84486afe00161

PDF document, version 1.5, 10 pages

submission24.pdf

bee0a32fe4a91be3c2d4c650238bcf61

PDF document, version 1.5, 12 pages

submission56.pdf

5d1b2c948aa408c8463775357eb56268

PDF document, version 1.5, 15 pages

submission8.pdf

0ee551bca74cd737498cc8091d7cfde3

PDF document, version 1.5, 12 pages

submission11.pdf

177d4a3e9292db6975049501c0d31af7

PDF document, version 1.5, 16 pages

submission16.pdf

544d6b3c04e7750bcd419be63034682c

PDF document, version 1.5, 9 pages

submission35.pdf

8d120b3a7329d98e89847d74523f5d0c

PDF document, version 1.7, 13 pages

submission32.pdf

5ca53de867fdc60a1f4f9d7c8a4b4ffa

PDF document, version 1.7, 19 pages

Detections

Analyzer	Verdict	Alert
Public InfoSec YARA rules	malware	Identifies generic phishing PDFs.

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	sunsite.informatik.rwth-aachen.de/ftp/pub/publications/CEUR-WS/Vol-1072.zip	137.226.34.227	200 OK	19 MB
URL User Request GET HTTP/1.1 sunsite.informatik.rwth-aachen.de/ftp/pub/publications/CEUR-WS/Vol-1072.zip IP 137.226.34.227:80 ASN #47610 RWTH Aachen University File type Zip archive data, at least v1.0 to extract, compression method=store Size 19 MB (18658514 bytes) Hash 35fce4dfdbaf224f70c53aa594afb2af a2ce27c7a75069b3ff0fe5cf0c41a68cff24bec0 02274ef036ccd2ddcce116a8baa1c98afe2ceda3afb04b174c9431bab0257f41 HTTP Headers `GET /ftp/pub/publications/CEUR-WS/Vol-1072.zip HTTP/1.1 Host: sunsite.informatik.rwth-aachen.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sun, 05 May 2024 05:44:37 GMT Server: Apache/2.0.63 (Unix) Last-Modified: Tue, 30 Sep 2014 15:01:22 GMT ETag: "31a1a24-11cb4d2-a80b7480" Accept-Ranges: bytes Content-Length: 18658514 Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: application/zip`

sunsite.informatik.rwth-aachen.de/ftp/pub/publications/CEUR-WS/Vol-1072.zip

137.226.34.227

200 OK

19 MB

URL User Request GET HTTP/1.1
sunsite.informatik.rwth-aachen.de/ftp/pub/publications/CEUR-WS/Vol-1072.zip
IP
137.226.34.227:80
ASN
#47610 RWTH Aachen University

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
19 MB (18658514 bytes)
Hash
35fce4dfdbaf224f70c53aa594afb2af
a2ce27c7a75069b3ff0fe5cf0c41a68cff24bec0
02274ef036ccd2ddcce116a8baa1c98afe2ceda3afb04b174c9431bab0257f41

HTTP Headers

GET /ftp/pub/publications/CEUR-WS/Vol-1072.zip HTTP/1.1
Host: sunsite.informatik.rwth-aachen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 05 May 2024 05:44:37 GMT
Server: Apache/2.0.63 (Unix)
Last-Modified: Tue, 30 Sep 2014 15:01:22 GMT
ETag: "31a1a24-11cb4d2-a80b7480"
Accept-Ranges: bytes
Content-Length: 18658514
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/zip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (46)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers