Report - download1925.sfile.mobi/downloadfile/1951809/2/2321f30454ee2a19a9d81225765158ab/beatrix-inventor-ea-mt5-v1.5.zip&k=3735ed1407f04f410933bd0b4a462699

Report Overview

Visited public
2025-05-06 23:27:36
Tags
URL
download1925.sfile.mobi/downloadfile/1951809/2/2321f30454ee2a19a9d81225765158ab/beatrix-inventor-ea-mt5-v1.5.zip&k=3735ed1407f04f410933bd0b4a462699
Finishing URL
about:privatebrowsing
IP / ASN
104.26.5.191
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
download1925.sfile.mobi	unknown	unknown	No data	No data	615 B	1.2 MB	172.67.69.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
download1925.sfile.mobi/downloadfile/1951809/2/2321f30454ee2a19a9d81225765158ab/beatrix-inventor-ea-mt5-v1.5.zip&k=3735ed1407f04f410933bd0b4a462699
IP
172.67.69.138
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.2 MB (1220885 bytes)
Hash
de269b83924cc0fade8c8431ea2d4a60
d827dd5445f3dd505a9580b7b7ca10c6610c1f7b
5e3d0f1e5334ad1e960d8f9dfbc7aaa0e73dd02ba37e5edc072859d20d13fe2f

Archive (1)

Filename

Md5

File type

Beatrix Inventor EA MT5 v1.5.exe

1b798dd4c95451fb6c20a408db4718cc

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
Public Nextron YARA rules	malware	Detects QuasarRAT malware

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	download1925.sfile.mobi/downloadfile/1951809/2/2321f30454ee2a19a9d81225765158ab/beatrix-inventor-ea-mt5-v1.5.zip&k=3735ed1407f04f410933bd0b4a462699	172.67.69.138	200 OK	1.2 MB
URL User Request GET download1925.sfile.mobi/downloadfile/1951809/2/2321f30454ee2a19a9d81225765158ab/beatrix-inventor-ea-mt5-v1.5.zip&k=3735ed1407f04f410933bd0b4a462699 IP 172.67.69.138:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectsfile.mobi Fingerprint09:87:D1:34:88:F5:D1:16:12:B4:74:A3:4B:A0:A0:5A:68:55:44:D6 ValidityMon, 10 Mar 2025 10:29:24 GMT - Sun, 08 Jun 2025 11:29:13 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 1.2 MB (1220885 bytes) Hash de269b83924cc0fade8c8431ea2d4a60 d827dd5445f3dd505a9580b7b7ca10c6610c1f7b 5e3d0f1e5334ad1e960d8f9dfbc7aaa0e73dd02ba37e5edc072859d20d13fe2f HTTP Headers GET /downloadfile/1951809/2/2321f30454ee2a19a9d81225765158ab/beatrix-inventor-ea-mt5-v1.5.zip&k=3735ed1407f04f410933bd0b4a462699 HTTP/1.1 Host: download1925.sfile.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Tue, 06 May 2025 23:27:03 GMT content-type: application/zip content-length: 1220885 expires: Wed, 07 May 2025 23:27:03 GMT cache-control: public, max-age=86400 pragma: no-cache content-description: File Transfer content-disposition: attachment; filename=Beatrix Inventor EA MT5 v1.5 (SFILE.MOBI).zip x-frame-options: DENY vary: User-Agent, Accept-Encoding last-modified: Tue, 06 May 2025 22:26:32 GMT cf-cache-status: HIT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rfq%2Fxc9N%2FIFfVyJVVVE81M72U2hPPwbsa%2FIkq9zrKXUnK5V1ivqkf8OjmAGwUZr2QXzMPByCSuobjmGgzlbm9jCew%2FkCs%2FYtmG854SsLP0B%2FnPIdXeCRJHrljLysjj%2BeLiGy5ltF9QiB"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 93bc3efce9f37130-OSL server-timing: cfL4;desc="?proto=TCP&rtt=6171&min_rtt=469&rtt_var=11028&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3271&recv_bytes=1355&delivery_rate=2798969&cwnd=254&unsent_bytes=0&cid=5b25ab20305c5343&ts=85&x=0" X-Firefox-Spdy: h2

download1925.sfile.mobi/downloadfile/1951809/2/2321f30454ee2a19a9d81225765158ab/beatrix-inventor-ea-mt5-v1.5.zip&k=3735ed1407f04f410933bd0b4a462699

172.67.69.138

200 OK

1.2 MB

URL User Request GET
download1925.sfile.mobi/downloadfile/1951809/2/2321f30454ee2a19a9d81225765158ab/beatrix-inventor-ea-mt5-v1.5.zip&k=3735ed1407f04f410933bd0b4a462699
IP
172.67.69.138:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectsfile.mobi
Fingerprint09:87:D1:34:88:F5:D1:16:12:B4:74:A3:4B:A0:A0:5A:68:55:44:D6
ValidityMon, 10 Mar 2025 10:29:24 GMT - Sun, 08 Jun 2025 11:29:13 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.2 MB (1220885 bytes)
Hash
de269b83924cc0fade8c8431ea2d4a60
d827dd5445f3dd505a9580b7b7ca10c6610c1f7b
5e3d0f1e5334ad1e960d8f9dfbc7aaa0e73dd02ba37e5edc072859d20d13fe2f

HTTP Headers

GET /downloadfile/1951809/2/2321f30454ee2a19a9d81225765158ab/beatrix-inventor-ea-mt5-v1.5.zip&k=3735ed1407f04f410933bd0b4a462699 HTTP/1.1
Host: download1925.sfile.mobi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 23:27:03 GMT
content-type: application/zip
content-length: 1220885
expires: Wed, 07 May 2025 23:27:03 GMT
cache-control: public, max-age=86400
pragma: no-cache
content-description: File Transfer
content-disposition: attachment; filename=Beatrix Inventor EA MT5 v1.5 (SFILE.MOBI).zip
x-frame-options: DENY
vary: User-Agent, Accept-Encoding
last-modified: Tue, 06 May 2025 22:26:32 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rfq%2Fxc9N%2FIFfVyJVVVE81M72U2hPPwbsa%2FIkq9zrKXUnK5V1ivqkf8OjmAGwUZr2QXzMPByCSuobjmGgzlbm9jCew%2FkCs%2FYtmG854SsLP0B%2FnPIdXeCRJHrljLysjj%2BeLiGy5ltF9QiB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93bc3efce9f37130-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=6171&min_rtt=469&rtt_var=11028&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3271&recv_bytes=1355&delivery_rate=2798969&cwnd=254&unsent_bytes=0&cid=5b25ab20305c5343&ts=85&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (1)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers