Report - hide.me/downloads/Hide.me-Setup-3.17.4.exe

Report Overview

Visitedpublic

2025-04-14 18:05:34

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
hide.me	66573	2008-04-29	2014-02-15	2025-04-10	510 B	16 MB	51.195.100.161

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-04-14	medium	hide.me/downloads/Hide.me-Setup-3.17.4.exe	Detect pe file that no import table

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

hide.me/downloads/Hide.me-Setup-3.17.4.exe

IP / ASN

51.195.100.161

#16276 OVH SAS

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 11 sections

Size16 MB (15695488 bytes)

MD56a467795286bc697330d8eb328e9c1a0

SHA15d0a4179635e89c2271cb4b9b9b0adff84001786

SHA256523d6c16558e4b2eb5c0a13a0d85f97ef158f1beeab9ed99c4b76c00b2ba9f18

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET hide.me/downloads/Hide.me-Setup-3.17.4.exe

51.195.100.161

200 OK

16 MB

URL User Request GET HTTPS

hide.me/downloads/Hide.me-Setup-3.17.4.exe

IP / ASN

51.195.100.161

#16276 OVH SAS

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 11 sections

First Seen2025-04-14

Last Seen2025-07-01

Times Seen2

Size16 MB (15695488 bytes)

MD56a467795286bc697330d8eb328e9c1a0

SHA15d0a4179635e89c2271cb4b9b9b0adff84001786

SHA256523d6c16558e4b2eb5c0a13a0d85f97ef158f1beeab9ed99c4b76c00b2ba9f18

Certificate Info

IssuerDigiCert Inc

Subjecthide.me

Fingerprint1F:4F:33:82:21:B6:D1:27:9D:95:E3:21:D9:17:3D:12:05:6B:51:64

ValidityTue, 13 Aug 2024 00:00:00 GMT - Sat, 13 Sep 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

HTTP Headers

GET /downloads/Hide.me-Setup-3.17.4.exe HTTP/1.1
Host: hide.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 14 Apr 2025 18:05:12 GMT
content-type: application/octet-stream
content-length: 15695488
last-modified: Mon, 17 Mar 2025 04:18:39 GMT
etag: "67d7a29f-ef7e80"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2