Report Overview
Visitedpublic
2025-04-15 13:21:51
Tags
Submit Tags
URL
raw.githubusercontent.com/d4rrrk/winspect/main/winspect.exe
Finishing URL
about:privatebrowsing
IP / ASN
185.199.108.133
#54113 FASTLY
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
raw.githubusercontent.com
358022014-02-062014-03-012025-04-09

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumraw.githubusercontent.com/d4rrrk/winspect/main/winspect.exeDetects imphash often found in malware samples (Zero hits with with search for 'imphash:x p:0' on Virustotal)
mediumraw.githubusercontent.com/d4rrrk/winspect/main/winspect.exeHunting_Rule_ShikataGaNai

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
raw.githubusercontent.com/d4rrrk/winspect/main/winspect.exe
IP / ASN
185.199.111.133
#54113 FASTLY
File Overview
File TypePE32 executable (GUI) Intel 80386, for MS Windows, 4 sections
Size74 kB (73802 bytes)
MD52c23ab842caef4066b08b63c72bb2923
SHA1d583041e97f72f605a95ea7397d6e579fd572153

Detections

AnalyzerVerdictAlert
Public Nextron YARA rulesmalware
Detects imphash often found in malware samples (Zero hits with with search for 'imphash:x p:0' on Virustotal)
Public Nextron YARA rulesmalware
Hunting_Rule_ShikataGaNai
VirusTotalmalicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize