Report - kawasaki-tech.co.jp/SOL2.00.00.zip

Report Overview

Visited public
2025-05-14 01:05:35
Tags
URL
kawasaki-tech.co.jp/SOL2.00.00.zip
Finishing URL
about:privatebrowsing
IP / ASN
163.44.185.189
#7506 GMO Internet,Inc
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kawasaki-tech.co.jp	unknown	2024-02-01	2025-05-14	2025-05-14	502 B	1.4 MB	163.44.185.189

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
kawasaki-tech.co.jp/SOL2.00.00.zip
IP
163.44.185.189
ASN
#7506 GMO Internet,Inc

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.4 MB (1437549 bytes)
Hash
d80558e2a6941c03b80cd87658466ad7
04b7d657c5ef5cf516c305bdb343d2958375d89b
382a55f14c58760a786669765e07d101ca93fc038f08afc4e55c3afc13bd7a9d

Archive (18)

Filename

Md5

File type

00_Readme_1st.txt

2fe5de889fec4144deb38087dcaad23b

Non-ISO extended-ASCII text, with CRLF, NEL line terminators

01_��҃}�j��A��.pdf

fb0252a9375a6ba7ee17534cff10d3af

PDF document, version 1.7, 3 page(s)

02_��҃}�j��A��.pdf

83962b9d342ca15d37261860e3946a64

PDF document, version 1.7, 3 page(s)

99_��.txt

af32a2e40dc6fb580240cb05bda776b8

Non-ISO extended-ASCII text, with CRLF line terminators

hspext.dll

1cd79d0459dedeb884cd2fa5c66d576d

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

hspinet.dll

6c45e126caedbfc575df11f9337a68ab

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

index.csv

a7c7eff4efaaee0f1ad90a65297421da

CSV Non-ISO extended-ASCII text

SoftOwnedList.exe

385b01d286bb6cb124ebc72b296a8cf9

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

FamilyComputer.csv

78e2aec62b5b876811a3ed845a395b22

ASCII text, with CRLF line terminators

FamilyComputer_List.csv

f3186fd9a82be9d0f18bbcd2435071c0

CSV Non-ISO extended-ASCII text

GameGear.csv

7710975b0fee68ec12af8fd46257f1af

ASCII text, with CRLF line terminators

GameGear_List.csv

dff0233406fb8e68a9d4409e4cfa5b49

CSV Non-ISO extended-ASCII text

MegaDrive.csv

a40aee2846f35ba020418f2797968b93

ASCII text, with CRLF line terminators

MegaDrive_List.csv

44294a9471b44a75513b003097c161d0

CSV Non-ISO extended-ASCII text

PC-Engine.csv

38ca29aeafc2aa3eb55dbc982c26ac14

ASCII text, with CRLF line terminators

PC-Engine_List.csv

cb04484c33eb7cba5437c74cd2eb3549

CSV Non-ISO extended-ASCII text

SuperFamicom.csv

7568e2b486ce4c7cb0766263d345d25f

ASCII text, with CRLF line terminators

SuperFamicom_List.csv

f3305121f62e8cde40b5763374937840

CSV Non-ISO extended-ASCII text

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 4/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

kawasaki-tech.co.jp/SOL2.00.00.zip

163.44.185.189

200 OK

1.4 MB

URL User Request GET
kawasaki-tech.co.jp/SOL2.00.00.zip
IP
163.44.185.189:443
ASN
#7506 GMO Internet,Inc

Certificate
IssuerLet's Encrypt
Subjectkawasaki-tech.co.jp
FingerprintBC:BC:45:00:A8:33:0E:14:4C:1F:59:9E:F0:FC:A6:8B:5D:29:19:68
ValidityTue, 15 Apr 2025 18:03:22 GMT - Mon, 14 Jul 2025 18:03:21 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.4 MB (1437549 bytes)
Hash
d80558e2a6941c03b80cd87658466ad7
04b7d657c5ef5cf516c305bdb343d2958375d89b
382a55f14c58760a786669765e07d101ca93fc038f08afc4e55c3afc13bd7a9d

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 4/66

HTTP Headers

GET /SOL2.00.00.zip HTTP/1.1
Host: kawasaki-tech.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 14 May 2025 01:05:02 GMT
content-type: application/zip
content-length: 1437549
server: LiteSpeed
last-modified: Tue, 13 May 2025 02:19:12 GMT
etag: "15ef6d-6822ac20-e0dd08cf6f21b0b;;;"
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (18)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers