Report Overview
Visitedpublic
2025-03-23 06:29:16
Tags
Submit Tags
URL
parallels.ltd/downloads/Installer.zip
Finishing URL
about:privatebrowsing
IP / ASN
47.239.224.235
#45102 Alibaba US Technology Co., Ltd.
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
parallels.ltd
unknown2024-10-182022-11-172025-03-07

Related reports

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
parallels.ltd/downloads/Installer.zip
IP / ASN
47.239.224.235
#45102 Alibaba US Technology Co., Ltd.
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=store
Size2.3 MB (2282395 bytes)
MD5a2927963b5cec70063379a1c3fd63212
SHA1b823727a37b754f00cc2e52bed04bed505c0764b
Archive (35)
FilenameMD5File type
._Installer.app471319847cdf2c2e950877a65b32d68dAppleDouble encoded Macintosh file
._Contentsd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
.__CodeSignatured4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
._MacOSd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
._Resourcesd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
Info.plistb5945f52235a974506e35daa99b94a2eXML 1.0 document, Unicode text, UTF-8 text
._Info.plistd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
PkgInfo23b7d7d024abb0f558420e098800bf27ASCII text, with no line terminators
._PkgInfod4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
CodeResources820319baadb6b86369d161ae5a3ecbdcXML 1.0 document, ASCII text
._CodeResourcesd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
Installer6da072725b1aba88443bdf2c01738623Mach-O universal binary with 2 architectures: [x86_64: - Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|BINDS_TO_WEAK|PIE|HAS_TLV_DESCRIPTORS>] [ - arm64: - Mach-O 64-bit arm64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|BINDS_TO_WEAK|PIE|HAS_TLV_DESCRIPTORS>]
._Installerd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
._zh-Hans.lprojd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
._en.lprojd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
resource.rsc202ef5645f3995f344f9079ab03648f5data
._resource.rscd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
AppIcon.icns02c7efa3e668098eaa8197818a63f69bMac OS X icon, 70213 bytes, "ic13" type
._AppIcon.icnsd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
._Base.lprojd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
._zh-Hant.lprojd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
Assets.car6d19bd0e3630f1c25b1fe1393f3de0c2Mac OS X bill of materials (BOM) file
._Assets.card4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
MainMenu.strings44d6d33c9674d26f9c9ef32fe02851c3Unicode text, UTF-8 text
._MainMenu.stringsd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
Localizable.stringsddc0cf875d8d70ad127ebc06eb571403XML 1.0 document, Unicode text, UTF-16, little-endian text
._Localizable.stringsd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
InfoPlist.stringscb21419798a591c61ea35eca795b49a1Unicode text, UTF-16, little-endian text
._InfoPlist.stringsd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
MainMenu.nibe874d99ca4a0ba25536578697b303503data
._MainMenu.nibd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
MainMenu.strings1060876e600845d66a5eec8ef7170d3bUnicode text, UTF-8 text
._MainMenu.stringsd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file
Localizable.stringsc4e7300687dc92ea50e3df72f2f027d1XML 1.0 document, Unicode text, UTF-16, little-endian text
._Localizable.stringsd4338a28148f067987f9ef7afdce6a04AppleDouble encoded Macintosh file

Detections

AnalyzerVerdictAlert
VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize