Report - www.csie.ntu.edu.tw/~cjlin/liblinear/liblinear-2.47.zip

Report Overview

Submitted URL
www.csie.ntu.edu.tw/~cjlin/liblinear/liblinear-2.47.zip
IP
140.112.30.26
ASN
#17716 National Taiwan University
Submitted
2024-03-29 01:46:37
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
twcasslocsp.twca.com.tw	159223	2000-02-23	2017-02-01	2024-03-27	670 B	3.5 kB	219.87.64.165
www.csie.ntu.edu.tw	755659	unknown	2012-06-28	2024-02-24	509 B	590 kB	140.112.30.26

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.csie.ntu.edu.tw/~cjlin/liblinear/liblinear-2.47.zip
IP
140.112.30.26
ASN
#17716 National Taiwan University

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
590 kB (590210 bytes)
Hash
35e3b01cd9c27fdd2cecb1b7a0387028
e7c4a31520470957fa3ea9b92c7c832d5593bb3a
64dcc1a48c54b55c7a14e688b83963ddfd1f7e4c8cb89f546f4ac9d1c89caee3

Archive (45)

Filename

Md5

File type

newton.h

7825f08b2580196b83c3a99550dd20cf

C++ source, ASCII text

linear.def

c7248e14b6b9e9501a8ce2e3ce490487

ASCII text

linear.cpp

cd0f637ea39641a5bf507e5ccf6f2c75

C++ source, ASCII text

linear.h

d30fa718d2c51b14a80008e94ed3c23f

C source, ASCII text

README

ecc1bbf666ce06b6ed2ca17b136bcf7e

ASCII text

heart_scale

8d29846f56e4b9ea0f4bf9b8083ecef8

ASCII text

make.m

9029f5dba1f70bb97f665df3b03c21c3

ASCII text

README

131db886da4a86fbca4c2ae62952441d

ASCII text

Makefile

8e082d0e56300d2605a877bc482f75af

makefile script, ASCII text

linear_model_matlab.c

aae145cbfe8dc0d1fbc455d4a0f983d2

C source, ASCII text

linear_model_matlab.h

79971870e948a0e52ad672ae5d30e49c

ASCII text

libsvmwrite.c

17b5f558406f407ae396babfc196eed2

C source, ASCII text

predict.c

63d33c6a830f73fd98f8bda2373517f5

C source, ASCII text

train.c

88797b5d6c89e61c04a20045ff778838

C source, ASCII text

libsvmread.c

492ea2af8a965ea4efb69ce88d16cb1c

C source, ASCII text

Makefile

d23b71ec3bdda9dab036714181436c96

makefile script, ASCII text

README

0ffa9b33ec64199781e665cc578c2b72

ASCII text

setup.py

f2416817571b32456486a6c1ee2753ed

Python script, ASCII text executable

Makefile

5c6275f9af9b3bd051ca284fcfb41c30

ASCII text

MANIFEST.in

52556feafd702f7b079aa0e9b43824de

ASCII text

liblinearutil.py

7ac4ca43cfd366833382eb54f49eb1d9

Python script, ASCII text executable

commonutil.py

25cdb638aa5b8a20153284c22f9e7dce

Python script, ASCII text executable

liblinear.py

28dfe45b1c62cb573ad5928ab9d3fd62

Python script, ASCII text executable

__init__.py

d41d8cd98f00b204e9800998ecf8427e

newton.cpp

7757753612f40a8ed7ebf353b9f44979

C source, ASCII text

81e269956e492fd8b59f8f5728f579a9

ASCII text

wheel.yml

cc05fd6d48e45e241cdb10a293ddb073

ASCII text

svm-scale.c

6b18c347e55edd2576084375fce99901

C source, ASCII text

predict.c

e1e603e675bf16c69e400ad54458550a

C source, ASCII text

liblinear.dll

a2bccb2b192ff6181ff58d26c9277983

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

libsvmwrite.mexw64

8553584943b15e09d9f56ee2c99d8a8b

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

predict.exe

38e71063af18a42f53f20ceb4855e93c

PE32+ executable (console) x86-64, for MS Windows, 6 sections

train.exe

f858bead5da8ef76b22ce88f1ee0d899

PE32+ executable (console) x86-64, for MS Windows, 6 sections

train.mexw64

6f3116fbbeb4b8d457c71b3ca86e94d4

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

libsvmread.mexw64

b5ef9fcc58cc0485d34c09f99c1e4e78

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

predict.mexw64

1dc86692d63833af5da9757ade8fa7d0

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

train.c

eb37acac4556060ab7248cba9e081c11

C source, ASCII text

Makefile.win

80d6445c51d5b5bd16ee9d2aadea3df8

makefile script, ASCII text

dscal.c

3bd680dca83471f540e48ce88cc026cb

C source, ASCII text

blasp.h

bb7e0a0cc334c177461d4fc138c25ab7

C source, ASCII text

blas.h

7b8e9a2f36d775b53615f928644a30e5

C source, ASCII text

Makefile

26537201be923c01b2a8b193cc20c156

makefile script, ASCII text

dnrm2.c

b9afc9b71c9c60fd5dc5d070b245d6d1

C source, ASCII text

daxpy.c

aa5e2f4178ae42cc8881e5d4504b8764

C source, ASCII text

ddot.c

516c9b97e4f50de5d7440f03b456373d

C source, ASCII text

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 1/64

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

twcasslocsp.twca.com.tw/

219.87.64.165

1.5 kB

URL
twcasslocsp.twca.com.tw/
IP
219.87.64.165:0
ASN
#9924 Taiwan Fixed Network, Telco and Network Service Provider.

File type
data
Size
1.5 kB (1518 bytes)
Hash
a69f02e39705034253ef9f4ecfad857e
098443118c007d3306fd0b3934c63077163e0059
04866e9586c8acc0d577fd4236bec53d66b6e13ee068af9b8dc31c27bdd97734

HTTP Headers

POST / HTTP/1.1
Host: twcasslocsp.twca.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Date: Fri, 29 Mar 2024 01:46:12 GMT
Server: TWCA
X-Frame-Options: SAMEORIGIN
Content-Type: application/ocsp-response
Content-Length: 1518
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

twcasslocsp.twca.com.tw/

219.87.64.165

1.5 kB

URL
twcasslocsp.twca.com.tw/
IP
219.87.64.165:0
ASN
#9924 Taiwan Fixed Network, Telco and Network Service Provider.

File type
data
Size
1.5 kB (1518 bytes)
Hash
a69f02e39705034253ef9f4ecfad857e
098443118c007d3306fd0b3934c63077163e0059
04866e9586c8acc0d577fd4236bec53d66b6e13ee068af9b8dc31c27bdd97734

HTTP Headers

POST / HTTP/1.1
Host: twcasslocsp.twca.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Date: Fri, 29 Mar 2024 01:46:12 GMT
Server: TWCA
X-Frame-Options: SAMEORIGIN
Content-Type: application/ocsp-response
Content-Length: 1518
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

www.csie.ntu.edu.tw/~cjlin/liblinear/liblinear-2.47.zip

140.112.30.26

200 OK

590 kB

URL User Request GET HTTP/1.1
www.csie.ntu.edu.tw/~cjlin/liblinear/liblinear-2.47.zip
IP
140.112.30.26:443
ASN
#17716 National Taiwan University

Certificate
IssuerTAIWAN-CA
Subject*.csie.ntu.edu.tw
Fingerprint97:B6:50:37:11:93:93:94:CC:E5:78:1B:3D:00:6C:60:59:9F:72:53
ValidityMon, 11 Mar 2024 04:07:21 GMT - Sun, 03 Nov 2024 15:59:59 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
590 kB (590210 bytes)
Hash
35e3b01cd9c27fdd2cecb1b7a0387028
e7c4a31520470957fa3ea9b92c7c832d5593bb3a
64dcc1a48c54b55c7a14e688b83963ddfd1f7e4c8cb89f546f4ac9d1c89caee3

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/64

HTTP Headers

GET /~cjlin/liblinear/liblinear-2.47.zip HTTP/1.1
Host: www.csie.ntu.edu.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 01:46:13 GMT
Server: Apache/2.4.57 (Debian)
Last-Modified: Sun, 09 Jul 2023 12:47:34 GMT
ETag: "90182-6000d45176580"
Accept-Ranges: bytes
Content-Length: 590210
Content-Type: application/zip
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (45)

Detections

JavaScript (0)

HTTP Transactions (3)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers