Report - www.apple2works.com/marklim/compressiix.zip

Report Overview

Submitted URL
www.apple2works.com/marklim/compressiix.zip
IP
129.121.31.190
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2024-04-24 17:03:06
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.apple2works.com	unknown	2020-06-10	2022-07-18	2023-09-02	413 B	429 kB	129.121.31.190

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.apple2works.com/marklim/compressiix.zip
IP
129.121.31.190
ASN
#46606 UNIFIEDLAYER-AS-1

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
429 kB (428628 bytes)
Hash
3ae9ac0d53b47dac35a5fa30c3572485
3affac2d03aa0140f3b61a44512ed59cddccce90
47ccffed6797ccad2da8e5f4842b591ca024c73b97d0924a0d7f0cb69029885d

Archive (36)

Filename

Md5

File type

Info.plist

7fc7b6fb9cab2cccce90325d9ff6b7df

XML 1.0 document, ASCII text

._Info.plist

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

CompressIIX

dbf120c8b8b6bd843285a6a609158ca5

Mach-O universal binary with 3 architectures: [i386: - Mach-O i386 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - ppc_7400: - Mach-O ppc_7400 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - x86_64: - Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>]

._CompressIIX

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._MacOS

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

PkgInfo

23b7d7d024abb0f558420e098800bf27

ASCII text, with no line terminators

._PkgInfo

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

CompressIIX.icns

f3ec2325309ef67ceae03a463479d703

Mac OS X icon, 218677 bytes, "is32" type

._CompressIIX.icns

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

Credits.rtf

6ee05f031aa6d2d9c33b92d0c37a7c9a

Rich Text Format data, version 1, ANSI, code page 1252

._Credits.rtf

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

fig1.png

0fb903d36fb71a27a87e312eec8c29b4

PNG image data, 520 x 341, 8-bit/color RGBA, non-interlaced

._fig1.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

fig2.png

3c086041a9d245eea36c8ff22996b64a

PNG image data, 520 x 341, 8-bit/color RGBA, non-interlaced

._fig2.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

fig3.png

062251bca112ae793031f62c9f60aeee

PNG image data, 604 x 425, 8-bit/color RGBA, non-interlaced

._fig3.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

TXT.rtf

dfa95f21e2189763b92e33386868b6e2

Rich Text Format data, version 1, ANSI, code page 1252

._TXT.rtf

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Documentation.rtfd

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

DropView.nib

215cb6e10c0307d0c97c79dc24161352

Apple binary property list

._DropView.nib

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

InfoPlist.strings

d72878bb656f235c73b049056cd30dba

Unicode text, UTF-16, big-endian text

._InfoPlist.strings

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

MainMenu.nib

76e4b10519905cd4fbf804333fa31c0c

Apple binary property list

._MainMenu.nib

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

MainWindow.nib

f1ea9440734d780917972e2f29fb374c

Apple binary property list

._MainWindow.nib

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

ProgressPanel.nib

f13075ae546f9e8319512fead71f496f

Apple binary property list

._ProgressPanel.nib

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

TaskView.nib

90597f7c72c92cbdecb413bda44a36f6

Apple binary property list

._TaskView.nib

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._English.lproj

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Resources

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Contents

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._CompressIIX.app

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

www.apple2works.com/marklim/compressiix.zip

129.121.31.190

200 OK

429 kB

URL User Request GET HTTP/1.1
www.apple2works.com/marklim/compressiix.zip
IP
129.121.31.190:80
ASN
#46606 UNIFIEDLAYER-AS-1

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
429 kB (428628 bytes)
Hash
3ae9ac0d53b47dac35a5fa30c3572485
3affac2d03aa0140f3b61a44512ed59cddccce90
47ccffed6797ccad2da8e5f4842b591ca024c73b97d0924a0d7f0cb69029885d

HTTP Headers

GET /marklim/compressiix.zip HTTP/1.1
Host: www.apple2works.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 17:02:41 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 22 Jan 2024 17:42:55 GMT
Accept-Ranges: bytes
Content-Length: 428628
Keep-Alive: timeout=5, max=75
Content-Type: application/zip