Report - ftp.vector.co.jp/76/72/2526/a5m2_2.19.1

Report Overview

Submitted URL
ftp.vector.co.jp/76/72/2526/a5m2_2.19.1_x64.zip
IP
180.214.37.164
ASN
#23637 Equinix Japan Enterprise K.K.
Submitted
2024-03-29 07:43:17
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ssocsp.cybertrust.ne.jp	21077	2005-09-14	2019-10-07	2024-03-28	690 B	3.3 kB	157.112.103.148
ftp.vector.co.jp	unknown	1994-01-18	2012-05-23	2024-03-28	501 B	20 MB	180.214.37.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
ftp.vector.co.jp/76/72/2526/a5m2_2.19.1_x64.zip
IP
180.214.37.164
ASN
#23637 Equinix Japan Enterprise K.K.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
20 MB (20486764 bytes)
Hash
4ec24fd681da21a9d98b44cec5c493ce
ae39ce92271cff66d586a28ff77bf04712eef6a9
55cc2b2a82cc98a557f4a6d8a9317d1940146fc1045539e793544df8ff4e01fa

Archive (40)

Filename

Md5

File type

scripts\Tool\SqlEmbededStr.dms

c6f974f2acc0c946aa926818d291652f

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

scripts\TreeDB\FavoritesExport.dms

8f56c4468828c047c574a840c3fbd9e3

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

scripts\TreeDB\FavoritesImport.dms

4a463390d5e58f3f11068ad19b41223e

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

scripts\TreeDB\OpenSchemaTable.dms

72b74ee790bbd9f295b12a85237ca1a9

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

scripts\TreeDB\oracle_procedureSources.dms

e906f8bfecebb1ae80a16770d64b9067

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

scripts\TreeDB\oracle_viewSources.dms

1d9f1284dc2c214a5fad0790edb76850

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

scripts\TreeDB\reccount_query.dms

cdd28d642fd95e049d8d4c7bd7078ea5

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

scripts\TreeTB\CsvCopy.dms

a1fc37cddcb72f456f8dc6c802fab683

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

scripts\TreeTB\InsertStatements.dms

6cb7bd33333e58789ac76b141a28be08

C source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

scripts\TreeTB\TableInfo.dms

5af74553020e2063c7846be489b7b52a

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

sampledb\ShoppingSite.a5er

fa55257b02374f89b9e3cc38c10db83d

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

sampledb\ShoppingSite.mdb

b12a09a78bcb410d58d5e5bde2883617

Microsoft Access Database

sample\CreateTableDefinition.xls

2773b1f7d6869f4d3e00a9f92f72ebe9

Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 932, Author: matsubara, Last Saved By: matsubara, Name of Creating Application: Microsoft Excel, Create Time/Date: Sun Nov 22 14:12:46 2009, Last Saved Time/Date: Sun Nov 29 09:46:01 2009, Security: 0

geom_js\leaflet.css

5c761a156eea82263d8bacf1718fe04d

ASCII text, with CRLF line terminators

geom_js\leaflet.js

08e30a34fcdae2c8fe72c891b6e7013f

JavaScript source, ASCII text, with very long lines (65380), with CRLF line terminators

geom_js\wkx.js

ab20cc20ff9c5a99f54d269e10aa0355

JavaScript source, ASCII text, with very long lines (505), with CRLF line terminators

geom_js\wkx.min.js

b1ec299b241057ba04f809eb13995ffb

JavaScript source, ASCII text, with very long lines (64795), with CRLF line terminators, with escape sequences

geom_js\images\layers-2x.png

4f0283c6ce28e888000e978e537a6a56

PNG image data, 52 x 52, 8-bit gray+alpha, non-interlaced

geom_js\images\layers.png

a6137456ed160d7606981aa57c559898

PNG image data, 26 x 26, 8-bit gray+alpha, non-interlaced

geom_js\images\marker-icon-2x.png

401d815dc206b8dc1b17cd0e37695975

PNG image data, 50 x 82, 8-bit colormap, non-interlaced

geom_js\images\marker-icon.png

2273e3d8ad9264b7daa5bdbf8e6b47f8

PNG image data, 25 x 41, 8-bit/color RGBA, non-interlaced

geom_js\images\marker-shadow.png

44a526eed258222515aa21eaffd14a96

PNG image data, 41 x 41, 8-bit gray+alpha, non-interlaced

A5M2.exe

cb4080563d46e2dc2bb3f80911700a96

PE32+ executable (GUI) x86-64, for MS Windows, 11 sections

A5M2.ENU

5f640794b092ab0951e570a3fea1202d

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 10 sections

libmongoc-1.0.dll

85694283be25e7d7a95136bbc758b71f

PE32+ executable (DLL) (console) x86-64, for MS Windows, 7 sections

libbson-1.0.dll

d25dd201fbfb6d11583305e319cfadba

PE32+ executable (DLL) (console) x86-64, for MS Windows, 7 sections

vcruntime140.dll

edf9d5c18111d82cf10ec99f6afa6b47

PE32+ executable (DLL) (console) x86-64, for MS Windows, 7 sections

msvcp140.dll

9ff712c25312821b8aec84c4f8782a34

PE32+ executable (DLL) (console) x86-64, for MS Windows, 7 sections

concrt140.dll

14b7a99127ca18df05dd1f5be3ac0245

PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections

sqlite3.dll

65c8dd5cc0288705223d701218b4c18b

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 9 sections

WebView2Loader.dll

ce56b43664a56d9b9ec9c0c9507995e8

PE32+ executable (DLL) (console) x86-64, for MS Windows, 9 sections

history.txt

2e384bb82c1faab919cb7de7a431f1f8

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

license.txt

1a4fd94a47d511dc11f25db5d02bf1d3

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

readme.txt

1525c77fcaaea77748745ed740771c6a

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

license_en.txt

7533287d0020904d6805307c9c899b24

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

readme_en.txt

6b04c2829478399bcc5e72a58d11dd24

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

TileServerList.txt

36de1a879bc32e847f62a768a34c8272

CSV text

build_info.txt

9db7fc44f67be9d0553010e1f5dca7a3

ASCII text, with CRLF line terminators

picture.zip

0058970b84955cc4dd0c36c32e4d31be

Zip archive data, at least v2.0 to extract, compression method=deflate

VirusCheck.txt

c02cb11a009f5c8934299b0c923b19f3

Non-ISO extended-ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	ssocsp.cybertrust.ne.jp/OcspServer	157.112.103.148		1.5 kB
URL ssocsp.cybertrust.ne.jp/OcspServer IP 157.112.103.148:0 ASN #58793 FUJITSU CLOUD TECHNOLOGIES LIMITED File type data Size 1.5 kB (1480 bytes) Hash 1c151986946ee5f6f2e14aeb437c3a2d f816b7d9add9b999bb444503a554c32027a88d68 ba4ce50381e7689498675d2baebdee7f6a850c5c0b5060b4f2941f068daa1519 HTTP Headers `POST /OcspServer HTTP/1.1 Host: ssocsp.cybertrust.ne.jp User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 87 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 07:42:42 GMT Content-Type: application/ocsp-response Content-Length: 1480 Connection: keep-alive Keep-Alive: timeout=2`

	ssocsp.cybertrust.ne.jp/OcspServer	157.112.103.148		1.5 kB
URL ssocsp.cybertrust.ne.jp/OcspServer IP 157.112.103.148:0 ASN #58793 FUJITSU CLOUD TECHNOLOGIES LIMITED File type data Size 1.5 kB (1480 bytes) Hash 1c151986946ee5f6f2e14aeb437c3a2d f816b7d9add9b999bb444503a554c32027a88d68 ba4ce50381e7689498675d2baebdee7f6a850c5c0b5060b4f2941f068daa1519 HTTP Headers `POST /OcspServer HTTP/1.1 Host: ssocsp.cybertrust.ne.jp User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 87 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 07:42:42 GMT Content-Type: application/ocsp-response Content-Length: 1480 Connection: keep-alive Keep-Alive: timeout=2`

	ftp.vector.co.jp/76/72/2526/a5m2_2.19.1_x64.zip	180.214.37.164	200 OK	20 MB
URL User Request GET HTTP/1.1 ftp.vector.co.jp/76/72/2526/a5m2_2.19.1_x64.zip IP 180.214.37.164:443 ASN #23637 Equinix Japan Enterprise K.K. Certificate IssuerCybertrust Japan Co., Ltd. Subject.vector.co.jp FingerprintC1:35:21:DA:4A:69:8A:3D:F9:00:D9:97:2C:78:D0:6B:42:63:A0:E6 ValidityThu, 07 Dec 2023 06:13:11 GMT - Thu, 02 Jan 2025 14:59:00 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 20 MB (20486764 bytes) Hash 4ec24fd681da21a9d98b44cec5c493ce ae39ce92271cff66d586a28ff77bf04712eef6a9 55cc2b2a82cc98a557f4a6d8a9317d1940146fc1045539e793544df8ff4e01fa HTTP Headers `GET /76/72/2526/a5m2_2.19.1_x64.zip HTTP/1.1 Host: ftp.vector.co.jp User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 07:42:42 GMT Server: Apache Last-Modified: Sun, 25 Feb 2024 07:14:46 GMT ETag: "3f00080-1389a6c-6122f8c3f8580" Accept-Ranges: bytes Content-Length: 20486764 Content-Disposition: filename=a5m2_2.19.1_x64.zip Connection: close Content-Type: application/zip`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (40)

Detections

JavaScript (0)

HTTP Transactions (3)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers