Report Overview

  1. Visited public
    2025-04-15 13:21:51
    Tags
  2. URL

    raw.githubusercontent.com/d4rrrk/winspect/main/winspect.exe

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    185.199.108.133

    #54113 FASTLY

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
5

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
raw.githubusercontent.com358022014-02-062014-03-012025-04-09

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumraw.githubusercontent.com/d4rrrk/winspect/main/winspect.exeDetects imphash often found in malware samples (Zero hits with with search for 'imphash:x p:0' on Virustotal)
mediumraw.githubusercontent.com/d4rrrk/winspect/main/winspect.exeHunting_Rule_ShikataGaNai

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    raw.githubusercontent.com/d4rrrk/winspect/main/winspect.exe

  2. IP

    185.199.111.133

  3. ASN

    #54113 FASTLY

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

    Size

    74 kB (73802 bytes)

  2. Hash

    2c23ab842caef4066b08b63c72bb2923

    d583041e97f72f605a95ea7397d6e579fd572153

    Detections

    AnalyzerVerdictAlert
    Public Nextron YARA rulesmalware
    Detects imphash often found in malware samples (Zero hits with with search for 'imphash:x p:0' on Virustotal)
    Public Nextron YARA rulesmalware
    Hunting_Rule_ShikataGaNai
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
raw.githubusercontent.com/d4rrrk/winspect/main/winspect.exe
185.199.111.133200 OK74 kB