Report - altushost-swe.dl.sourceforge.net/project/keepass/KeePass%202.x/2.59/KeePass-2.59.zip?viasf=1

Report Overview

Visited public
2025-07-17 10:21:54
Tags
Submit Tags
URL
altushost-swe.dl.sourceforge.net/project/keepass/KeePass%202.x/2.59/KeePass-2.59.zip?viasf=1
Finishing URL
about:privatebrowsing
IP / ASN
79.142.76.130
#51430 AltusHost B.V.
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
altushost-swe.dl.sourceforge.net	820484	1999-08-08	2021-01-12	2025-06-21	560 B	2.9 MB	79.142.76.130

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
altushost-swe.dl.sourceforge.net/project/keepass/KeePass%202.x/2.59/KeePass-2.59.zip?viasf=1
IP
79.142.76.130
ASN
#51430 AltusHost B.V.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
2.9 MB (2863467 bytes)
Hash
4ebe6799e167745d99b66ba0e27f1a09
826a61ea6898457ffe9b6456a66655943b0b5646
40f68b004cac6c32a5383d5abe91aa8f477922762e67d814410d852e4bc3556f

Archive (14)

Filename

Md5

File type

KeePass.chm

2362fddb298947a3f837b5dd749ab829

MS Windows HtmlHelp Data

KeePass.exe

8c4f4780112d4dcbda031d9a18958738

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

KeePass.exe.config

cd57fae74e9ddd0f13549cd1884f4ed6

XML 1.0 document, ASCII text, with CRLF line terminators

KeePass.XmlSerializers.dll

217da41121c6822dfbe3a03defaee958

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

KeePassLibN.a64.dll

d5ea3c7802657df2d11d595ee9f511bc

PE32+ executable (DLL) (GUI) Aarch64, for MS Windows, 7 sections

KeePassLibN.x32.dll

919af5e974e67735c2405032c342cbc8

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

KeePassLibN.x64.dll

f1aa2e0429b92cd9bedc63b64177952e

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections

License.txt

c65c1ee1a2a4aa581e35eb6dc82595cb

ASCII text, with CRLF line terminators

ShInstUtil.exe

1f388cc78a658ba3490b7cc52a8174ff

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

KDBX_Common.xsl

0eac922786a85aac30cac1c898b3a0bd

XML 1.0 document, ASCII text, with CRLF line terminators

KDBX_DetailsFull_HTML.xsl

2f7a50ccad0d083e2c04d18ef8448e12

XML 1.0 document, ASCII text, with CRLF line terminators

KDBX_DetailsLight_HTML.xsl

e25e217094d308d87f52d65a119e55a8

XML 1.0 document, ASCII text, with CRLF line terminators

KDBX_PasswordsOnly_TXT.xsl

4b62ee7c2f7e976aa75419bf08a023d3

XML 1.0 document, ASCII text, with CRLF line terminators

KDBX_Tabular_HTML.xsl

536e2b66b8ef42506ea17e132afbdc20

XML 1.0 document, ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 1/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET altushost-swe.dl.sourceforge.net/project/keepass/KeePass%202.x/2.59/KeePass-2.59.zip?viasf=1

79.142.76.130

200 OK

2.9 MB

URL User Request GET
altushost-swe.dl.sourceforge.net/project/keepass/KeePass%202.x/2.59/KeePass-2.59.zip?viasf=1
IP
79.142.76.130:443
ASN
#51430 AltusHost B.V.

Certificate
IssuerLet's Encrypt
Subjectaltushost-swe.dl.sourceforge.net
Fingerprint36:BF:0F:7F:9F:3E:17:02:E1:0D:FC:94:DE:98:81:9C:D3:B6:22:51
ValiditySat, 17 May 2025 01:17:07 GMT - Fri, 15 Aug 2025 01:17:06 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
2.9 MB (2863467 bytes)
Hash
4ebe6799e167745d99b66ba0e27f1a09
826a61ea6898457ffe9b6456a66655943b0b5646
40f68b004cac6c32a5383d5abe91aa8f477922762e67d814410d852e4bc3556f

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/66

HTTP Headers

GET /project/keepass/KeePass%202.x/2.59/KeePass-2.59.zip?viasf=1 HTTP/1.1
Host: altushost-swe.dl.sourceforge.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Jul 2025 10:21:31 GMT
Content-Type: application/octet-stream
Content-Length: 2863467
Connection: close
last-modified: Wed, 09 Jul 2025 12:46:36 GMT
etag: "686e64ac-2bb16b"
X-Cache-Status: HIT

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (14)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers