Report - download.fosshub.com/Protected/expiretime=1746826664;badurl=aHR0cHM6Ly93d3cuZm9zc2h1Yi5jb20vcUJpdHRvcnJlbnQuaHRtbA==/99fda93d20d09a8c88e7d6a8fb61f12a685ab4b15dd205055f8908f6cd00d47b/5b8793a7f9ee5a5c3e97a3b2/680e9d7530835604261a8fee/qbittorrent_5.1.0_x64

Report Overview

Visitedpublic

2025-05-09 08:17:26

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
download.fosshub.com	497859	2013-07-15	2014-12-08	2025-05-07	731 B	41 MB	205.234.175.175

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-05-09	medium	download.fosshub.com/Protected/expiretime=1746826664;badurl=aHR0cHM6Ly93d3cuZm9zc2h1Yi5jb20vcUJpdHRvcnJlbnQuaHRtbA==/99fda93d20d09a8c88e7d6a8fb61f12a685ab4b15dd205055f8908f6cd00d47b/5b8793a7f9ee5a5c3e97a3b2/680e9d7530835604261a8fee/qbittorrent_5.1.0_x64_setup.exe	Detect pe file that no import table

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

IP / ASN

205.234.175.175

#30081 CACHENETWORKS

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

Size41 MB (41318799 bytes)

MD540eca376cd104c1ae7d366f8c69f6240

SHA1994ee209a8174a83ff77c19205f4cd59f8b52402

SHA25613b68b9c18acc62b9faae67865f0e5670337abe9c3ffd9e25293b99aade9d830

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET download.fosshub.com/Protected/expiretime=1746826664;badurl=aHR0cHM6Ly93d3cuZm9zc2h1Yi5jb20vcUJpdHRvcnJlbnQuaHRtbA==/99fda93d20d09a8c88e7d6a8fb61f12a685ab4b15dd205055f8908f6cd00d47b/5b8793a7f9ee5a5c3e97a3b2/680e9d7530835604261a8fee/qbittorrent_5.1.0_x64_setup.exe

205.234.175.175

200 OK

41 MB

URL User Request GET HTTP

IP / ASN

205.234.175.175

#30081 CACHENETWORKS

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

First Seen2025-04-27

Last Seen2025-05-28

Times Seen46

Size41 MB (41318799 bytes)

MD540eca376cd104c1ae7d366f8c69f6240

SHA1994ee209a8174a83ff77c19205f4cd59f8b52402

SHA25613b68b9c18acc62b9faae67865f0e5670337abe9c3ffd9e25293b99aade9d830

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

HTTP Headers

GET /Protected/expiretime=1746826664;badurl=aHR0cHM6Ly93d3cuZm9zc2h1Yi5jb20vcUJpdHRvcnJlbnQuaHRtbA==/99fda93d20d09a8c88e7d6a8fb61f12a685ab4b15dd205055f8908f6cd00d47b/5b8793a7f9ee5a5c3e97a3b2/680e9d7530835604261a8fee/qbittorrent_5.1.0_x64_setup.exe HTTP/1.1
Host: download.fosshub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 09 May 2025 08:16:53 GMT
content-type: application/octet-stream
content-length: 41318799
content-disposition: filename="qbittorrent_5.1.0_x64_setup.exe"
x-cff: B
last-modified: Sun, 27 Apr 2025 21:20:16 GMT
etag: "680e9f90-276798f"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
feature-policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'
x-cf3: M
cf4age: 0
x-cf-tsc: 1745788825
cf4ttl: 604800.000
x-cf2: H
server: CFS 1124
x-cf1: 16189:fB.arn1:co:1538407112:cacheN.arn1-01:H
x-cf-reqid: b3018feca040bdb292fa765473cf27e6
accept-ranges: bytes
X-Firefox-Spdy: h2