URLhaus Database

You are currently viewing the URLhaus database entry for http://cdn-10049480.file.myqcloud.com/qcoin/qcoin142.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	105999
URL:	http://cdn-10049480.file.myqcloud.com/qcoin/qcoin142.exe
URL Status:	Online (spreading malware for 7 years, 5 months, 14 days, 17 hours, 35 minutes)
Host:	cdn-10049480.file.myqcloud.com
Date added:	2019-01-19 21:43:05 UTC
Threat:	Malware download
URLhaus blocklist:	Blocked
Spamhaus DBL :	Abused domain (malware)
SURBL :	Blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Reporter:	zbetcheckin
Abuse complaint sent (?):	Yes (2026-05-20 13:36:17 UTC to zhaoyz3{at}chinaunicom[dot]cn)
Tags:	exe

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Bazaar	Signature
2019-07-30	n/a	exe	be2410a1e86f3a291b03a6e11d385cd610a94695d72d1c06f9992b81ba32436d	n/a
2019-07-22	n/a	exe	d4b2dd128c001fea1044f86a4893c96f516effff66b117a099a55121d183a5d5	n/a
2019-06-19	n/a	exe	64ac6d8df091d81fccd482cedb923e8ce40d1b6a1b15d2c5de4bd9151daad6d4	n/a
2019-06-19	n/a	exe	e808aba863e4f41f2a00cf7f4c2909bbbc9cfee1676df7bed2e3d114154942de	n/a
2019-06-15	n/a	exe	c0c43c29466698cd873aa591ef3383782a156aa63e4da1164f7b417bfb0ea5d2	n/a
2019-06-15	n/a	exe	8a12d85aadcb7d6c910fc77f31781ab190d3933f0cea013ebed26de4b6dfad67	n/a
2019-06-14	n/a	exe	9aa4f734f075b67f01f8363bd4ef4ea27912d6c4f23628dedf710e54fc1d12cd	n/a
2019-01-19	n/a	exe	52803e20675f8a827d186b55a0bdd4cbdf2031d30e89e99e16a2422b84f9add4	57.35%