URLhaus Database

You are currently viewing the URLhaus database entry for http://himalayansaltexporters.com/photo-gallery/QWtpsvaVR/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	288114
URL:	http://himalayansaltexporters.com/photo-gallery/QWtpsvaVR/
URL Status:	Offline
Host:	himalayansaltexporters.com
Date added:	2020-01-14 15:29:15 UTC
Last online:	2020-01-27 17:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (Ticket DCU002244586 created on 2020-01-14 15:30:05 UTC)
Takedown time:	13 days, 2 hours, 25 minutes (down since 2020-01-27 17:55:53 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-20	yvy2wkx45905506.exe	exe	60d8175e0a4a6e115ed79800717cc27bd3e8d8b88af2f81823623c1b3fead089	61.97%	Heodo
2020-01-16	7660zdjsl83848.exe	exe	e40c8129d918aa360b36644f2b74640443f60c0bc3e4029c1a57a767ab6431a6	5.63%	Heodo
2020-01-16	rjr544190705.exe	exe	aad8ed58a735dfbc1d3b25531f8941882ddb97b29c2ca66d698ef554473848ae	22.54%	Heodo
2020-01-16	cucemph5u01069882.exe	exe	f2ae96a761c4bda5db63c06bb71bb0c1249bf81a5243fae1e037a5029405bf98	7.04%	Heodo
2020-01-15	6o358764595432.exe	exe	8af22dbae21ef24749b527ea23c8efa0acd3830f65c0f58b8ae980909094c376	2.78%	Heodo
2020-01-15	5s73612520.exe	exe	0a9b06b95b2d00b1b6c4c2f691937bcbe52a826b2e17fcb6fd0c355483622e4c	12.68%	Heodo
2020-01-15	dfyvq6pl317018.exe	exe	438a9776c74380d9828530575c7d9af224842d7b35e24e2d76fd35a9622b8248	29.58%	Heodo
2020-01-15	9t38.exe	exe	5896012fdbd6280c6f4f30c2a5d5429aa175fd3570e1f7fc615a99e05ca8c5e5	20.83%	Heodo
2020-01-15	87g78268194.exe	exe	e8ab38e56796caf4020112ededb40e092353e26c38e8142f19b1af9a0a4d36d8	22.22%	Heodo
2020-01-15	1gynx529z75932.exe	exe	df702efe3278aef7629f5e411084a8360b18c9666d37f8c0854dbe0640a51f75	n/a	Heodo
2020-01-15	mror399063.exe	exe	77e4ff4c6959d605d4f2ea9e9e3c107d1bcbb481e7aef788abf2cbac98abfebe	n/a	Heodo
2020-01-15	fwj56939766.exe	exe	e81015d996de95980d2cf710659e7350d33afd73ae843bc4587c7ae581a6919f	n/a	Heodo
2020-01-15	bzkjagduk3.exe	exe	94eb27f76ac065504d5e6412f5711030a2ad1dcb913b58313088f708ceeba812	n/a	Heodo
2020-01-15	re0c68419.exe	exe	fb7669bdc32501ec840a785e820735a460a53aa99e0fe8b193ec8d6b20f428f3	24.64%	Heodo
2020-01-15	u1q53hi6.exe	exe	500407302680487e6a8aa44c221b5f5dca9a6b77feacbe30f5d1fd441633ad3c	23.29%	Heodo
2020-01-15	m03cqfx643936.exe	exe	23b34d238610db6686755a470e24ce2de3a12f640413092f56fbba1bb6615fb4	32.88%	Heodo
2020-01-15	61z45adff355250.exe	exe	855fab1f523dd047f98f3cde8c69ce9748d90ba3668480c2e48d97759692c960	32.88%	Heodo
2020-01-15	q55211907.exe	exe	8307b9abb9c8ee6769faa4639fc5d8ca524328d56e48ab8288e47d2095e667d1	30.56%	Heodo
2020-01-15	od43hcz71.exe	exe	e0e7a946cc8710c4d50388932b9207f50644bed3456856ca55934989dc2f3747	30.56%	Heodo
2020-01-15	1vnvy03.exe	exe	5886ff51331f78c2f1d16017f9a0a45928198a6602e2ed46eafb9e18f1a9e37c	27.78%	Heodo
2020-01-14	jwt9a86.exe	exe	85cffa7299b26efe25d352a992ac60382440947c6815882661f0049b2446710c	n/a	Heodo
2020-01-14	lyzv07.exe	exe	97a113e1d47f52beb1f8c6b76be5e0a02c75ac90d486e8b5883a6ebdf39c6172	n/a	Heodo
2020-01-14	aty7h4zn358477.exe	exe	043ebecb992c949f92aab7839468b721b409cdbe1d7af96cbd223af186907f83	n/a	Heodo
2020-01-14	4f4c654599027889.exe	exe	1d3201a9c232954429e69408949d4b583e490bb18a02c67f1264fe5e8906adfa	n/a	Heodo
2020-01-14	oaeb5jdlk520137821.exe	exe	3411b358cf2fe429528c8cbbbc7e464a7ecd36a481cffe1850d907d36eb4e43a	n/a	Heodo
2020-01-14	5rx0uzz8xj5435.exe	exe	da08a98a2bbb13f37284dbe3691a231f7ba79e032902d8ce75ea7987e28de593	n/a	Heodo
2020-01-14	6bllavl9l517.exe	exe	256505510b0f3953c40939ab2e6313d6dd0a610949fe8cd09a5cdb12acb82bd0	n/a	Heodo
2020-01-14	d3qun8101024.exe	exe	4775195701f6604aed9d93f712feb5548d7b4d829d2fb99e74389d84b3f7d5b3	n/a	Heodo