Report - docushare.lps.org/docushare/dsweb/Get/Document-2158200/Minecraft.app.zip

Report Overview

Submitted URL
docushare.lps.org/docushare/dsweb/Get/Document-2158200/Minecraft.app.zip
IP
204.137.66.243
ASN
#11714 NETWORK NEBRASKA
Submitted
2024-03-28 15:45:07
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
docushare.lps.org	unknown	1997-10-10	2013-08-07	2024-03-24	526 B	1.4 MB	204.137.66.243

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
docushare.lps.org/docushare/dsweb/Get/Document-2158200/Minecraft.app.zip
IP
204.137.66.243
ASN
#11714 NETWORK NEBRASKA

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.4 MB (1377154 bytes)
Hash
5bbd593e4e44340684d624d9c7efa731
469fd9a3959dc4d28da7d1ffc7962c894866222e
2c7bc1da1297af2863488afdbc5e52d18cc45641b6b58eb1e540482bb6483b50

Archive (27)

Filename

Md5

File type

Info.plist

db3c77cb6ab98d825822cd77a00582a6

XML 1.0 document, ASCII text

PkgInfo

f86c4190c919ad776828a3789f6b95b1

ASCII text, with no line terminators

128A1.icns

060425f0f18f6ec3c63e8c6730c3d3cd

Mac OS X icon, 40450 bytes, "it32" type

128A2.icns

262dfff5fa55234c50a9fddd347429ae

Mac OS X icon, 48643 bytes, "it32" type

CartA1.icns

a06cecd01ad06ab175dfe8b4ed3d0033

Mac OS X icon, 36757 bytes, "it32" type

CartA2.icns

87441a5ca4ede58e28f199b31c6f6e40

Mac OS X icon, 44539 bytes, "it32" type

docA1.icns

d7424d7e35a2754e4be83f21b9ec2407

Mac OS X icon, 52796 bytes, "ICN#" type

docA2.icns

843936be3bf8e26cd153547507d222e1

Mac OS X icon, 55150 bytes, "ICN#" type

keyedobjects.nib

b47ced556fb7c85ab77ac6c33c851602

Apple binary property list

objects.nib

f2ba75f83abebbe6aa2fa238f9aa1cb0

NeXT/Apple typedstream data, little endian, version 4, system 1000

InfoPlist.strings

52ec3d008d545798aaa52f178210d89c

Unicode text, UTF-16, little-endian text

Mupen64

f9e96e7172fd357ecf3457a2cea2ba86

SDL

70508b9deaec896db10885d78ae2c14a

Mach-O i386 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|SUBSECTIONS_VIA_SYMBOLS>

SDL

70508b9deaec896db10885d78ae2c14a

Mach-O i386 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|SUBSECTIONS_VIA_SYMBOLS>

Info.plist

0888173d76961f68f51fd99d67d3782f

XML 1.0 document, ASCII text

objects.nib

e67dca3646354f66774a2e5f50bcb01d

NeXT/Apple typedstream data, big endian, version 4, system 1000

SDL

70508b9deaec896db10885d78ae2c14a

Mach-O i386 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|SUBSECTIONS_VIA_SYMBOLS>

Info.plist

0888173d76961f68f51fd99d67d3782f

XML 1.0 document, ASCII text

objects.nib

e67dca3646354f66774a2e5f50bcb01d

NeXT/Apple typedstream data, big endian, version 4, system 1000

Info.plist

0888173d76961f68f51fd99d67d3782f

XML 1.0 document, ASCII text

objects.nib

e67dca3646354f66774a2e5f50bcb01d

NeXT/Apple typedstream data, big endian, version 4, system 1000

Info.plist

4855dc4625366c333ed66d7c6c97c6c7

XML 1.0 document, ASCII text

PkgInfo

23b7d7d024abb0f558420e098800bf27

ASCII text, with no line terminators

favicon.icns

18774b51ba292fd457bdd2182928dfc1

Mac OS X icon, 81221 bytes, "is32" type

MinecraftSP.jar

4eca7879ff514cdd79c290701443eedd

Java archive data (JAR)

InfoPlist.strings

09bc7fba9dd512b1ad11cbdbd6754f53

Unicode text, UTF-16, little-endian text

JavaApplicationStub

d58b8bd9e28d3a7b963c2f6f13231af6

Mach-O i386 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	docushare.lps.org/docushare/dsweb/Get/Document-2158200/Minecraft.app.zip	204.137.66.243	200 OK	1.4 MB
URL User Request GET HTTP/1.1 docushare.lps.org/docushare/dsweb/Get/Document-2158200/Minecraft.app.zip IP 204.137.66.243:443 ASN #11714 NETWORK NEBRASKA Certificate IssuerGoDaddy.com, Inc. Subject.lps.org FingerprintAD:0C:DC:4C:9B:AB:E1:D2:48:26:9F:7B:75:3F:00:2E:CD:73:C8:C7 ValidityMon, 12 Jun 2023 14:05:38 GMT - Wed, 10 Jul 2024 15:19:01 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 1.4 MB (1377154 bytes) Hash 5bbd593e4e44340684d624d9c7efa731 469fd9a3959dc4d28da7d1ffc7962c894866222e 2c7bc1da1297af2863488afdbc5e52d18cc45641b6b58eb1e540482bb6483b50 HTTP Headers GET /docushare/dsweb/Get/Document-2158200/Minecraft.app.zip HTTP/1.1 Host: docushare.lps.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 15:44:41 GMT Server: Apache/2.4.18 (Ubuntu) Cache-Control: private Expires: -1 Set-Cookie: AmberUser=32.93574D5959130B7A2332E878E8719C7D21.-dmy5vjli1xlblubeo1tf; Path=/docushare; Secure Accept-ranges: bytes Content-Length: 1377154 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-zip`

docushare.lps.org/docushare/dsweb/Get/Document-2158200/Minecraft.app.zip

204.137.66.243

200 OK

1.4 MB

URL User Request GET HTTP/1.1
docushare.lps.org/docushare/dsweb/Get/Document-2158200/Minecraft.app.zip
IP
204.137.66.243:443
ASN
#11714 NETWORK NEBRASKA

Certificate
IssuerGoDaddy.com, Inc.
Subject*.lps.org
FingerprintAD:0C:DC:4C:9B:AB:E1:D2:48:26:9F:7B:75:3F:00:2E:CD:73:C8:C7
ValidityMon, 12 Jun 2023 14:05:38 GMT - Wed, 10 Jul 2024 15:19:01 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.4 MB (1377154 bytes)
Hash
5bbd593e4e44340684d624d9c7efa731
469fd9a3959dc4d28da7d1ffc7962c894866222e
2c7bc1da1297af2863488afdbc5e52d18cc45641b6b58eb1e540482bb6483b50

HTTP Headers

GET /docushare/dsweb/Get/Document-2158200/Minecraft.app.zip HTTP/1.1
Host: docushare.lps.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 15:44:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Cache-Control: private
Expires: -1
Set-Cookie: AmberUser=32.93574D5959130B7A2332E878E8719C7D21.-dmy5vjli1xlblubeo1tf; Path=/docushare; Secure
Accept-ranges: bytes
Content-Length: 1377154
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-zip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (27)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers