Report - olarila.com/files/OPENCORE.MOD1/EFI.OpenCore.NoteBook.Coffee.Lake.Plus.Comet.Lake.MOD.zip

Report Overview

Submitted URL
olarila.com/files/OPENCORE.MOD1/EFI.OpenCore.NoteBook.Coffee.Lake.Plus.Comet.Lake.MOD.zip
IP
104.21.80.53
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 21:49:08
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
7

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
olarila.com	302578	2009-02-19	2012-08-04	2024-03-28	543 B	4.1 MB	104.21.80.53

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
olarila.com/files/OPENCORE.MOD1/EFI.OpenCore.NoteBook.Coffee.Lake.Plus.Comet.Lake.MOD.zip
IP
104.21.80.53
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
4.1 MB (4143059 bytes)
Hash
123add635b4f1fa1346756b26adc53b9
6a6697cb22ea35c4057e4fc444f6bc407c13926e
18b3cecfd14f33f85b1093ff1ac5ea7c0bff4a6f325535cf9f51bcba2f9e5568

Archive (266)

Filename

Md5

File type

.DS_Store

8e3a90a37995de71482edb9d7a0b9665

Apple Desktop Services Store

._.DS_Store

b9a94cc8f4aac450fb21641eaf065c6d

AppleDouble encoded Macintosh file

BOOTx64.efi

42d4652b13d77c088f12f344c36be758

PE32+ executable (EFI application) x86-64, for MS Windows, 3 sections

.contentFlavour

122456533d9480ba948dbdd12709d4ea

ASCII text, with no line terminators

.contentVisibility

b9f5c797ebbf55adccdd8539a65a0241

ASCII text, with no line terminators

.DS_Store

d2033c432b522807492bbb4a00fc8f26

Apple Desktop Services Store

._.DS_Store

b9a94cc8f4aac450fb21641eaf065c6d

AppleDouble encoded Macintosh file

._Drivers

7e74f4d29d0ec173fe2c7227f5ebf4d1

AppleDouble encoded Macintosh file

.contentFlavour

122456533d9480ba948dbdd12709d4ea

ASCII text, with no line terminators

OpenCore.efi

49074d0c5a2c45cdebf694ce801c2544

PE32+ executable (EFI application) x86-64, for MS Windows, 4 sections

config.plist

2ccff4514202412a2011122cdbdeafba

XML 1.0 document, ASCII text

.DS_Store

194577a7e20bdcc7afbb718f502c134c

Apple Desktop Services Store

._.DS_Store

b9a94cc8f4aac450fb21641eaf065c6d

AppleDouble encoded Macintosh file

MaLd0n.aml

49378a79feb5fddcc1cc3f70c992a599

ACPI Machine Language file 'SSDT' Mobile 1000 by Apple, revision 2, 1216 bytes, created by INTL 20200925

._MaLd0n.aml

045e2c4756b68340d71d31ab76fe8a88

AppleDouble encoded Macintosh file

OpenRuntime.efi

45acf4c85629aff3b837e0e1ff3f6e1c

PE32+ executable (EFI runtime driver) x86-64, for MS Windows, 4 sections

.DS_Store

194577a7e20bdcc7afbb718f502c134c

Apple Desktop Services Store

._.DS_Store

2a30e3165e317f59f873daccc1dc3a08

AppleDouble encoded Macintosh file

ResetNvramEntry.efi

55a6db1638d4e7af2f3ec4542173af17

PE32+ executable (EFI boot service driver) x86-64, for MS Windows, 4 sections

HfsPlus.efi

8eb3146fe88e67b020bcf00ed6863b82

PE32+ executable (EFI boot service driver) x86-64 (stripped to external PDB), for MS Windows, 4 sections

._HfsPlus.efi

ad97b3ded698edcbe52ca9d25019cd73

AppleDouble encoded Macintosh file

OpenCanopy.efi

efcbd3610a9d33f3fb50721d73ae5b34

PE32+ executable (EFI boot service driver) x86-64, for MS Windows, 4 sections

._Lilu.kext

aa894cf6522acc1fde24ec2aa6623e88

AppleDouble encoded Macintosh file

.DS_Store

6e24ee0bbe31ac6698095cbed7309d46

Apple Desktop Services Store

._.DS_Store

b9a94cc8f4aac450fb21641eaf065c6d

AppleDouble encoded Macintosh file

._AirportBrcmFixup.kext

ecd90adba6b0b879bc102522cce4a44c

AppleDouble encoded Macintosh file

._ECEnabler.kext

ecd90adba6b0b879bc102522cce4a44c

AppleDouble encoded Macintosh file

._AppleALC.kext

60053ce0875247c242f72ba9ef0f5304

AppleDouble encoded Macintosh file

._AtherosE2200Ethernet.kext

7b64c970a4c50061c6ee02b9507444c9

AppleDouble encoded Macintosh file

._IntelMausi.kext

cf08c34e10860c3f7ee2de4acf8d630f

AppleDouble encoded Macintosh file

._RestrictEvents.kext

ecd90adba6b0b879bc102522cce4a44c

AppleDouble encoded Macintosh file

._WhateverGreen.kext

aa894cf6522acc1fde24ec2aa6623e88

AppleDouble encoded Macintosh file

._SMCBatteryManager.kext

3d62012fe77739048f015ffd1c31075d

AppleDouble encoded Macintosh file

._RealtekRTL8111.kext

7b64c970a4c50061c6ee02b9507444c9

AppleDouble encoded Macintosh file

._SMCProcessor.kext

3d62012fe77739048f015ffd1c31075d

AppleDouble encoded Macintosh file

._USBInjectAll.kext

df42a198fb189f2f3b374f30cade3ae2

AppleDouble encoded Macintosh file

._BrightnessKeys.kext

fc9b1cb7f2f43cb11c8d2a3d3eaa8110

AppleDouble encoded Macintosh file

._VoodooI2CHID.kext

ecd90adba6b0b879bc102522cce4a44c

AppleDouble encoded Macintosh file

._CpuTscSync.kext

ecd90adba6b0b879bc102522cce4a44c

AppleDouble encoded Macintosh file

._VirtualSMC.kext

6342732c5c6809e56197bc9bdb45a374

AppleDouble encoded Macintosh file

._VoodooPS2Controller.kext

75b868a079ead0f4808d8f165d7bafac

AppleDouble encoded Macintosh file

._SMCLightSensor.kext

3d62012fe77739048f015ffd1c31075d

AppleDouble encoded Macintosh file

._VoodooI2C.kext

ecd90adba6b0b879bc102522cce4a44c

AppleDouble encoded Macintosh file

._XHCI-unsupported.kext

59102abe61019be8c5bf63961baa3af0

AppleDouble encoded Macintosh file

.DS_Store

c5002edcbfe5fcb0048497495b944855

Apple Desktop Services Store

._.DS_Store

f0d9d90674bab5908378533975df5a01

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._Contents

d3207552d530d8e19c84a3acbc52c292

AppleDouble encoded Macintosh file

._Contents

01bcd62ffca5756c9c90a37f9abef00f

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._Contents

2e2d29fcaaf40183035ad0134f45cb2b

AppleDouble encoded Macintosh file

._Contents

71e72332ce594d974da13ed917632ad0

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._Contents

d1d17d3b6289f6335fddb62ec55d8ecd

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._Contents

2e2d29fcaaf40183035ad0134f45cb2b

AppleDouble encoded Macintosh file

Shell.lbl

460fec2d0dbe50b3727d1fbfa62e1a6c

data

._Shell.lbl

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Windows.l2x

46393c3afcbcbf26bca41fce15356b1b

data

._Windows.l2x

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

ResetNVRAM.l2x

228d70f0dc05a4e8e3a6537aea1d2979

data

._ResetNVRAM.l2x

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Tool.lbl

8e79d2f1c7d8fb53229addebf94cca3b

data

._Tool.lbl

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

SIPDisabled.lbl

979f9fee640dc4bdcdd9a0cbe4e7a5b1

data

._SIPDisabled.lbl

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

AppleTM.l2x

b84cb3723859e51e1f83d4149345f74c

data

._AppleTM.l2x

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

EFIBoot.l2x

26c0f08aa8b863dce29dbd41254c2aec

data

._EFIBoot.l2x

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Other.l2x

3944d54a22010d74cb294bc8816aa57d

data

._Other.l2x

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

AppleRecv.l2x

17f9f138ac245d6c29205f4b3d7528c3

data

._AppleRecv.l2x

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

SIPEnabled.lbl

ed83c7b5a3c37fce578385ac5fcdf3a5

data

._SIPEnabled.lbl

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Apple.l2x

17424abb5f31ce555826c6fd5d8d2f25

data

._Apple.l2x

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

AppleTM.lbl

80b4411f478273be7d612374d5a8ecfd

data

._AppleTM.lbl

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

EFIBoot.lbl

75bfaf597c7325589da4e2e19b14680a

data

._EFIBoot.lbl

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Other.lbl

37647cb32eb36f6755589b722a3ddd82

data

._Other.lbl

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

AppleRecv.lbl

62099a1edce02c9e71842c589f2e3c32

data

._AppleRecv.lbl

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

SIPEnabled.l2x

3296e13c0d17dc626361ac23e7214b99

data

._SIPEnabled.l2x

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Apple.lbl

e54b64c184079b672ffc5bfba2dd1bf2

data

._Apple.lbl

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Shell.l2x

b470fc6e3206e8533f530b36e9aad3d6

data

._Shell.l2x

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Windows.lbl

18213cae678bf645722c03e9d0eaf8aa

data

._Windows.lbl

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

ResetNVRAM.lbl

5d9292a7334943088a15086d62f7652e

data

._ResetNVRAM.lbl

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Tool.l2x

10b1211abf6111a129846bc556b5b8dd

dBase III DBT, version number 0, next free block index 2818049, 1st item "��"

._Tool.l2x

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

SIPDisabled.l2x

66faf663dd997034058fe73a363b42b9

data

._SIPDisabled.l2x

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

.DS_Store

6a45b8d9a60722489d9bf18832c760fe

Apple Desktop Services Store

._.DS_Store

f0d9d90674bab5908378533975df5a01

AppleDouble encoded Macintosh file

.DS_Store

194577a7e20bdcc7afbb718f502c134c

Apple Desktop Services Store

._.DS_Store

f0d9d90674bab5908378533975df5a01

AppleDouble encoded Macintosh file

OCEFIAudio_VoiceOver_Boot.wav

d5c29b38953c09edd30708e11cbc9e97

RIFF (little-endian) data, WAVE audio

._OCEFIAudio_VoiceOver_Boot.wav

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Font_2x.bin

642c2135f2ed64cb24080cc097ab4f8a

data

._Font_2x.bin

2be4176a09dc231a63b5daf04b943459

AppleDouble encoded Macintosh file

Font_2x.png

b88f0cff0f645de45e114c58a7e1a125

PNG image data, 156 x 154, 8-bit grayscale, non-interlaced

._Font_2x.png

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Font.png

0fa23bdeaaa05c7d0fdac8e683fbce04

PNG image data, 90 x 86, 8-bit grayscale, non-interlaced

Font_1x.png

d3222949cbbdc28369ec305347c64cee

PNG image data, 90 x 86, 8-bit grayscale, non-interlaced

._Font_1x.png

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Font.bin

64a0fc00206846f6297a51eafaeed504

data

Font_1x.bin

7c0ed619765f912bb2208a8681efbbbe

data

._Font_1x.bin

2be4176a09dc231a63b5daf04b943459

AppleDouble encoded Macintosh file

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

7955747323027816e7731ee28a148aa2

XML 1.0 document, Unicode text, UTF-8 text

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

80862e8ef8d8c8676937ae3b4c85c142

XML 1.0 document, Unicode text, UTF-8 text

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

723de5ed1a7e9167ec092db1bb63be08

XML 1.0 document, ASCII text

._MacOS

d3207552d530d8e19c84a3acbc52c292

AppleDouble encoded Macintosh file

Info.plist

f7de7ea75b596b3d48b1f61f003704d1

XML 1.0 document, Unicode text, UTF-8 text

Info.plist

15b81ee6d28ac8e0a410e3d5634bc9de

XML 1.0 document, Unicode text, UTF-8 text

._MacOS

01bcd62ffca5756c9c90a37f9abef00f

AppleDouble encoded Macintosh file

Info.plist

c0df6f12d5d7fadacff404ab3d0662a5

XML 1.0 document, Unicode text, UTF-8 text, with very long lines (580)

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

3af24738322c734034628f92957f83cc

XML 1.0 document, Unicode text, UTF-8 text

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

88a1926b2fbd60a2eb652572f5881e8c

XML 1.0 document, Unicode text, UTF-8 text

Info.plist

b38d1913b335fe2e0184c236be2356c1

XML 1.0 document, Unicode text, UTF-8 text

Info.plist

d4d5ba6551903c6d2a78fd44ae1a39a1

XML 1.0 document, Unicode text, UTF-8 text

Info.plist

9b79d0cd88cf973862093792563b2fe1

XML 1.0 document, Unicode text, UTF-8 text

.__CodeSignature

2e2d29fcaaf40183035ad0134f45cb2b

AppleDouble encoded Macintosh file

._MacOS

2e2d29fcaaf40183035ad0134f45cb2b

AppleDouble encoded Macintosh file

Info.plist

b952f4c1207cc8264c609c384b67fa7c

XML 1.0 document, Unicode text, UTF-8 text

._Info.plist

aa43067358baaf325701b7518716f886

AppleDouble encoded Macintosh file

._MacOS

71e72332ce594d974da13ed917632ad0

AppleDouble encoded Macintosh file

Info.plist

ac46bc1eecf963bc84f739c873ef574f

XML 1.0 document, ASCII text

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

3d90fd85e10fba337bd2830c03fd3f9b

XML 1.0 document, Unicode text, UTF-8 text

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

b3d7df5f122246b039915351b3d1eca5

XML 1.0 document, Unicode text, UTF-8 text

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

11c3b6b41e67b119c2ff75e30d2f7245

XML 1.0 document, Unicode text, UTF-8 text

._MacOS

d1d17d3b6289f6335fddb62ec55d8ecd

AppleDouble encoded Macintosh file

._PlugIns

d1d17d3b6289f6335fddb62ec55d8ecd

AppleDouble encoded Macintosh file

Info.plist

8304885ac952ea1bf96d8dc143943cdf

XML 1.0 document, ASCII text

Info.plist

e5c65abcdd8ba3c7fd16f0fd834c78dc

XML 1.0 document, Unicode text, UTF-8 text

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._PlugIns

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

1ac88b60e4cf5564274e1cc86be7a149

XML 1.0 document, Unicode text, UTF-8 text

Info.plist

b0eed8c948a864233591766fe9502924

XML 1.0 document, ASCII text

._Info.plist

428159c4c69062aa1228cd79fd562aee

AppleDouble encoded Macintosh file

.DS_Store

c24d6f65ad2ad7a9d2d8e232d9159d55

Apple Desktop Services Store

._.DS_Store

f0d9d90674bab5908378533975df5a01

AppleDouble encoded Macintosh file

.gitkeep

d784fa8b6d98d27699781bd9a7cf19f0

ASCII text

Lilu

ccb3b17035a961b00f2377771c178102

Mach-O universal binary with 2 architectures: [x86_64: - Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - i386: - Mach-O i386 object]

AirportBrcmFixup

d5bb28e06f527ff1eb1e9ffa894fe187

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

ECEnabler

e76d0dcec1ebaa27130ccb37f4f5457e

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

AppleALC

e2116de2103a49a640c731c81ac8e216

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

AtherosE2200Ethernet

c04dc8fbc1ecd9dc25741c808b49b60e

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

IntelMausi

7a847a785117d661965393b9d2fc37af

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

RestrictEvents

b8b2de7205b48bce9f519b1bb5b42698

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

WhateverGreen

0668801bb1c12fb93c05c805fc084c93

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

SMCBatteryManager

26238d4e94614caa902ae097d737412b

Mach-O universal binary with 2 architectures: [x86_64: - Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - i386: - Mach-O i386 object, flags:<|SUBSECTIONS_VIA_SYMBOLS>]

SSDT-BATC.dsl

99c1bb84dd3a103fcabc5155a8e42268

ASCII text

RealtekRTL8111

b02e2a0b2a971fe8ffe33e2e548f539d

Mach-O universal binary with 2 architectures: [x86_64: - Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - arm64e (caps: 0x2): - Mach-O 64-bit arm64e (caps: PAK00) kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>]

SMCProcessor

607ef92ea40bc3725167825f0c60c9d2

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

CodeResources

c48c1d9c6cf982c32580a9c58b0cce51

XML 1.0 document, ASCII text

._CodeResources

2e2d29fcaaf40183035ad0134f45cb2b

AppleDouble encoded Macintosh file

USBInjectAll

268055d31cec0b2fa842fb6b0b8a8be2

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

._USBInjectAll

2e2d29fcaaf40183035ad0134f45cb2b

AppleDouble encoded Macintosh file

BrightnessKeys

441e27dbc978cd3133e62769f21fd00c

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

CodeResources

c48c1d9c6cf982c32580a9c58b0cce51

XML 1.0 document, ASCII text

VoodooI2CHID

d7e637d66ee25a5d9dc97856e87fc679

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

CpuTscSync

4bb638ba0c375a8230e7176370c5ef9c

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

VirtualSMC

ad4a360630b64562e9c8e6b4e2db452e

Mach-O universal binary with 2 architectures: [x86_64: - Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ - i386: - Mach-O i386 object]

VoodooPS2Controller

3d7e9f143f84de71b199f68af703d53e

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

._VoodooPS2Keyboard.kext

d1d17d3b6289f6335fddb62ec55d8ecd

AppleDouble encoded Macintosh file

SMCLightSensor

a9c80e093bebd3cdf55b663e9c4625da

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

CodeResources

ff538137741770a46362a96a9dd537d4

XML 1.0 document, ASCII text

VoodooI2C

90281c9e8b4a39698314fcdf06ac025d

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

._VoodooGPIO.kext

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._VoodooI2CServices.kext

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._VoodooInput.kext

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Shell.icns

99ff7f25e73777607d2688ceabb0f151

Mac OS X icon, 12072 bytes, "ic07" type

._Shell.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Right.icns

2db940332673392f9e50eb86813fa5cd

Mac OS X icon, 3019 bytes, "ic07" type

._Right.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Restart.icns

7d24c74e962771aa3d390917dc251529

Mac OS X icon, 5790 bytes, "ic07" type

._Restart.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

.DS_Store

cf6192926f279ecb963b0ddaf0647429

Apple Desktop Services Store

._.DS_Store

f0d9d90674bab5908378533975df5a01

AppleDouble encoded Macintosh file

Enter.icns

a518ab0afdefdfc26066a8999d52f754

Mac OS X icon, 1651 bytes, "ic07" type

._Enter.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

SetDefault.icns

b63a5237ba05848d3f5a81b2ca041133

Mac OS X icon, 3415 bytes, "ic07" type

._SetDefault.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Windows.icns

055b6f764b0a3587c7e4b05af2e8bdad

Mac OS X icon, 63399 bytes, "ic07" type

._Windows.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

AppleTM.icns

d678f34acf4bd6badffbbef5fac8a47a

Mac OS X icon, 66217 bytes, "ic07" type

._AppleTM.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

BtnFocus.icns

6a878424e7c0e1a69f3031c93f19f8f2

Mac OS X icon, 2650 bytes, "ic07" type

._BtnFocus.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Lock.icns

c510cd3d051cc881c35dd23185c12570

Mac OS X icon, 2622 bytes, "ic07" type

._Lock.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

ResetNVRAM.icns

6569d5237a3fd77d62c4031faf5a5015

Mac OS X icon, 10133 bytes, "ic07" type

._ResetNVRAM.icns

4f26917005941f1fb096d24ab4bb867f

AppleDouble encoded Macintosh file

ShutDown.icns

85547237cca7ed0f0af18ab986e26468

Mac OS X icon, 6168 bytes, "ic07" type

._ShutDown.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Cursor.icns

a7c51e6b2476aa8eb501c3db6741acd3

Mac OS X icon, 1262 bytes, "ic07" type

._Cursor.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Password.icns

c22dc91afb4e926f8efd223b40c3a105

Mac OS X icon, 808 bytes, "ic07" type

._Password.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

HardDrive.icns

9912c0864ef1a226c72720187f922710

Mac OS X icon, 83952 bytes, "ic07" type

._HardDrive.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

ExtAppleTM.icns

00eb0f8024bf932e70d0e1cd8e3eefe1

Mac OS X icon, 76078 bytes, "ic07" type

._ExtAppleTM.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

ExtHardDrive.icns

ee215550714f7183ade49ff774fc4857

Mac OS X icon, 65723 bytes, "ic07" type

._ExtHardDrive.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Apple.icns

acdaefe03cd744806a3c4d8dc46d4864

Mac OS X icon, 8788 bytes, "ic07" type

._Apple.icns

4f26917005941f1fb096d24ab4bb867f

AppleDouble encoded Macintosh file

Selected.icns

ff36ad0ef776117ae0b35ee422e4558b

Mac OS X icon, 1348 bytes, "ic07" type

._Selected.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Tool.icns

ae20ba26841ac62b513b4e351b82621a

Mac OS X icon, 15342 bytes, "ic07" type

._Tool.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Dot.icns

849812d66e31941cf95ef8ec3a37ef32

Mac OS X icon, 293 bytes, "ic07" type

._Dot.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Selector.icns

72b30068c12bad5220e78b83dda9a9df

Mac OS X icon, 3010 bytes, "ic07" type

._Selector.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

ExtAppleRecv.icns

f108f81ceeb1aa5d78b05d79956038c1

Mac OS X icon, 94546 bytes, "ic07" type

._ExtAppleRecv.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Linux.icns

ed1f11e421e533a015b7fa730d79a71a

Mac OS X icon, 9847 bytes, "ic07" type

._Linux.icns

4f26917005941f1fb096d24ab4bb867f

AppleDouble encoded Macintosh file

AppleRecv.icns

69983b854c1c511a5a66fe06eb354ec2

Mac OS X icon, 98171 bytes, "ic07" type

._AppleRecv.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

Left.icns

7cf57ee63f0a29238a67160a4fa17f0e

Mac OS X icon, 3048 bytes, "ic07" type

._Left.icns

33916a31f285a8f7d3936ad7b0c326da

AppleDouble encoded Macintosh file

InfoPlist.strings

51ef59b60e5b41b91519cc662a9fe886

Unicode text, UTF-16, little-endian text

InfoPlist.strings

51ef59b60e5b41b91519cc662a9fe886

Unicode text, UTF-16, little-endian text

._Contents

d1d17d3b6289f6335fddb62ec55d8ecd

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._Contents

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._MacOS

d1d17d3b6289f6335fddb62ec55d8ecd

AppleDouble encoded Macintosh file

Info.plist

d27acdb12837aac0b8d48a59e25ce03f

XML 1.0 document, ASCII text

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

20d1f61bb98e94242bc28c1d75360c3b

XML 1.0 document, Unicode text, UTF-8 text

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

a17291913939d801d44791ac221b47d0

XML 1.0 document, Unicode text, UTF-8 text

.__CodeSignature

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

._MacOS

94a76f224cf995adaa1f0038d9a92418

AppleDouble encoded Macintosh file

Info.plist

2fdbd5bb04858f6d88ae1bca04ba7658

XML 1.0 document, Unicode text, UTF-8 text

VoodooPS2Keyboard

b7a4e911b9849a508942aa41703ca5bb

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

CodeResources

c48c1d9c6cf982c32580a9c58b0cce51

XML 1.0 document, ASCII text

VoodooGPIO

0e73d5893775a80d512ca9515bbc5f87

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

CodeResources

c48c1d9c6cf982c32580a9c58b0cce51

XML 1.0 document, ASCII text

VoodooI2CServices

69e7d92401efc06bcaaf85ad8ca3fb69

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

CodeResources

c48c1d9c6cf982c32580a9c58b0cce51

XML 1.0 document, ASCII text

VoodooInput

05c8b4ce540e9e489d0a7a0619a056a4

Mach-O 64-bit x86_64 kext bundle, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	olarila.com/files/OPENCORE.MOD1/EFI.OpenCore.NoteBook.Coffee.Lake.Plus.Comet.Lake.MOD.zip	104.21.80.53	200 OK	4.1 MB
URL User Request GET HTTP/2 olarila.com/files/OPENCORE.MOD1/EFI.OpenCore.NoteBook.Coffee.Lake.Plus.Comet.Lake.MOD.zip IP 104.21.80.53:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjectolarila.com FingerprintD8:36:9A:E1:00:32:F2:25:EB:35:78:59:59:7D:D3:C7:16:CA:F6:89 ValidityWed, 06 Mar 2024 09:51:13 GMT - Tue, 04 Jun 2024 09:51:12 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 4.1 MB (4143059 bytes) Hash 123add635b4f1fa1346756b26adc53b9 6a6697cb22ea35c4057e4fc444f6bc407c13926e 18b3cecfd14f33f85b1093ff1ac5ea7c0bff4a6f325535cf9f51bcba2f9e5568 HTTP Headers GET /files/OPENCORE.MOD1/EFI.OpenCore.NoteBook.Coffee.Lake.Plus.Comet.Lake.MOD.zip HTTP/1.1 Host: olarila.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Fri, 19 Apr 2024 21:48:39 GMT content-type: application/zip content-length: 4143059 last-modified: Thu, 09 Nov 2023 14:28:19 GMT etag: "654cec83-3f37d3" x-powered-by: centminmod expires: Mon, 22 Apr 2024 02:15:21 GMT cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800 access-control-allow-origin: * cf-cache-status: HIT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KORrFzUJDe%2FZ9vn9%2BleFEf3yR3zvvyFCnIQMR9uwei9lVZcVZ5qC8GJHHW%2Fed1epRgEi5ev%2BjG9BC94qmYbgUQVVmp384MR467%2F9mq3MX6pntDxw4EFTk%2Bwy9NbMzw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding strict-transport-security: max-age=0 server: cloudflare cf-ray: 87701998babbb518-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

olarila.com/files/OPENCORE.MOD1/EFI.OpenCore.NoteBook.Coffee.Lake.Plus.Comet.Lake.MOD.zip

104.21.80.53

200 OK

4.1 MB

URL User Request GET HTTP/2
olarila.com/files/OPENCORE.MOD1/EFI.OpenCore.NoteBook.Coffee.Lake.Plus.Comet.Lake.MOD.zip
IP
104.21.80.53:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectolarila.com
FingerprintD8:36:9A:E1:00:32:F2:25:EB:35:78:59:59:7D:D3:C7:16:CA:F6:89
ValidityWed, 06 Mar 2024 09:51:13 GMT - Tue, 04 Jun 2024 09:51:12 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
4.1 MB (4143059 bytes)
Hash
123add635b4f1fa1346756b26adc53b9
6a6697cb22ea35c4057e4fc444f6bc407c13926e
18b3cecfd14f33f85b1093ff1ac5ea7c0bff4a6f325535cf9f51bcba2f9e5568

HTTP Headers

GET /files/OPENCORE.MOD1/EFI.OpenCore.NoteBook.Coffee.Lake.Plus.Comet.Lake.MOD.zip HTTP/1.1
Host: olarila.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 21:48:39 GMT
content-type: application/zip
content-length: 4143059
last-modified: Thu, 09 Nov 2023 14:28:19 GMT
etag: "654cec83-3f37d3"
x-powered-by: centminmod
expires: Mon, 22 Apr 2024 02:15:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
access-control-allow-origin: *
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KORrFzUJDe%2FZ9vn9%2BleFEf3yR3zvvyFCnIQMR9uwei9lVZcVZ5qC8GJHHW%2Fed1epRgEi5ev%2BjG9BC94qmYbgUQVVmp384MR467%2F9mq3MX6pntDxw4EFTk%2Bwy9NbMzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 87701998babbb518-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (266)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers