Report - www.apple2works.com/marklim/quickviewdhgr.zip

Report Overview

Submitted URL
www.apple2works.com/marklim/quickviewdhgr.zip
IP
129.121.31.190
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2024-04-24 17:02:59
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
5

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.apple2works.com	unknown	2020-06-10	2022-07-18	2023-09-02	415 B	787 kB	129.121.31.190

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.apple2works.com/marklim/quickviewdhgr.zip
IP
129.121.31.190
ASN
#46606 UNIFIEDLAYER-AS-1

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
787 kB (786993 bytes)
Hash
cefcaed5f62fb8946ac5ddc6fd8a63f8
2f3315ab42716ee04e7b69dba78dce4ea120cc96
2d76e343fe83e2c2623fbf3e02cdf1542f682d03b6ea26db5ad4140ef0458c59

Archive (69)

Filename

Md5

File type

Info.plist

859c74262353d3f031ef56411d946050

XML 1.0 document, ASCII text

._Info.plist

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

Info.plist

3561b7c18e1bebbaffeec3fe0cbeeb36

XML 1.0 document, ASCII text

._Info.plist

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

QuickLookDHGR

e0c4d9d61893abb3c3a4ab9ca6efc331

Mach-O universal binary with 3 architectures: [i386: - Mach-O i386 bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - ppc_7400: - Mach-O ppc_7400 bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - x86_64: - Mach-O 64-bit x86_64 bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>]

._QuickLookDHGR

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._MacOS

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

InfoPlist.strings

019cdf67d3539933bdd577deabedc50d

Unicode text, UTF-16, big-endian text

._InfoPlist.strings

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._English.lproj

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Resources

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Contents

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._QuickLookDHGR.qlgenerator

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._QuickLook

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

Info.plist

ee3d3fb8302def24c6a62cfc3d4cf28b

XML 1.0 document, ASCII text

._Info.plist

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

SpotlightDHGR

e1b8fb6d394438b1d2168ae5f17d82cb

Mach-O universal binary with 3 architectures: [i386: - Mach-O i386 bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - ppc_7400: - Mach-O ppc_7400 bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - x86_64: - Mach-O 64-bit x86_64 bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>]

._SpotlightDHGR

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._MacOS

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

InfoPlist.strings

30f9a0a4a7f17bb10e25ed600f9992a2

Unicode text, UTF-16, big-endian text

._InfoPlist.strings

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._English.lproj

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Resources

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Contents

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._SpotlightDHGR.mdimporter

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Spotlight

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Library

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

QuickViewDHGR

891dd2e8b2c0965c3eac45edc4c4bff4

Mach-O universal binary with 3 architectures: [i386: - Mach-O i386 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - ppc_7400: - Mach-O ppc_7400 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - x86_64: - Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>]

._QuickViewDHGR

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._MacOS

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

PkgInfo

23b7d7d024abb0f558420e098800bf27

ASCII text, with no line terminators

._PkgInfo

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

Credits.rtf

e5dccdf8ca5e2094aae2da134d2b7ab5

Rich Text Format data, version 1, ANSI, code page 1252

._Credits.rtf

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

DropImage.png

1b03e7c7c5e4571025366704280e946f

PNG image data, 280 x 192, 8-bit/color RGBA, non-interlaced

._DropImage.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

DropImage2x.png

69bd2901900bd216f61e81318edf61b6

PNG image data, 560 x 384, 8-bit/color RGBA, non-interlaced

._DropImage2x.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

InfoPlist.strings

d72878bb656f235c73b049056cd30dba

Unicode text, UTF-16, big-endian text

._InfoPlist.strings

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

MainMenu.nib

bf68210c30ee46d6d7e650a9acb128f6

Apple binary property list

._MainMenu.nib

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

MainWindow.nib

ecf06138240498b544a1e90a3f737ebd

Apple binary property list

._MainWindow.nib

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

NoPic.png

fce0c72c0cdf0fe45efcda9f07513ed5

PNG image data, 280 x 192, 8-bit/color RGBA, non-interlaced

._NoPic.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

OpenFolder.png

ce73cbc5765295ffedd024290dc0ab05

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

._OpenFolder.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

QuickViewDHGR.icns

34b155e90d02c456ca0c3516dfd3d533

Mac OS X icon, 207576 bytes, "is32" type

._QuickViewDHGR.icns

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

Fig1.png

9fe7e57be8cbf518df00a4e843ba2281

PNG image data, 438 x 422, 8-bit/color RGBA, non-interlaced

._Fig1.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

Fig2.png

319cd656e80ba3f951a59d7798b76d37

PNG image data, 713 x 610, 8-bit/color RGBA, non-interlaced

._Fig2.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

fig3.png

55f5bb371b0eb24e89c5d022044d947e

PNG image data, 661 x 560, 8-bit/color RGBA, non-interlaced

._fig3.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

Fig4.png

4679e5866f6b8e189feeaf36877daf73

PNG image data, 404 x 403, 8-bit/color RGBA, non-interlaced

._Fig4.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

Fig5.png

fcaf18e81a9b9af83d29b20d02c418d6

PNG image data, 788 x 655, 8-bit/color RGBA, non-interlaced

._Fig5.png

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

TXT.rtf

2154dbed903e12d241584894a68e1862

Rich Text Format data, version 1, ANSI, code page 1252

._TXT.rtf

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Readme.rtfd

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

SlideshowWindow.nib

b414496a98170d7bccec8dc29ca89397

Apple binary property list

._SlideshowWindow.nib

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._English.lproj

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Resources

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._Contents

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

._QuickViewDHGR.app

32e9969fc329aaf54b022c5cac3f08f6

AppleDouble encoded Macintosh file

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_stackstrings
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_stackstrings
YARAhub by abuse.ch	malware	meth_stackstrings

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

www.apple2works.com/marklim/quickviewdhgr.zip

129.121.31.190

787 kB

URL
www.apple2works.com/marklim/quickviewdhgr.zip
IP
129.121.31.190:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
787 kB (786993 bytes)
Hash
cefcaed5f62fb8946ac5ddc6fd8a63f8
2f3315ab42716ee04e7b69dba78dce4ea120cc96
2d76e343fe83e2c2623fbf3e02cdf1542f682d03b6ea26db5ad4140ef0458c59

HTTP Headers

GET /marklim/quickviewdhgr.zip HTTP/1.1
Host: www.apple2works.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 17:02:34 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 05 Feb 2024 17:06:32 GMT
Accept-Ranges: bytes
Content-Length: 786993
Keep-Alive: timeout=5, max=75
Content-Type: application/zip