Report Overview

  1. Submitted URL

    github.com/S1lentHashhh/WinRing/raw/main/WinRing0x64.sys

  2. IP

    140.82.121.3

    ASN

    #36459 GITHUB

  3. Submitted

    2023-10-03T08:39:29Z

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain Rank First Seen Last Seen
github.com (1) 1423 2016-07-13 12:28:22 2023-09-20 18:48:10
raw.githubusercontent.com (1) 35802 2014-03-01 08:08:08 2023-10-02 18:32:49

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
Severity Indicator Alert
medium raw.githubusercontent.com/S1lentHashhh/WinRing/main/WinRing0x64.sys Detects vulnerable driver mentioned in LOLDrivers project using VersionInfo values from the PE header - WinRing0x64.sys
medium raw.githubusercontent.com/S1lentHashhh/WinRing/main/WinRing0x64.sys signed_sys_with_vulnerablity

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    raw.githubusercontent.com/S1lentHashhh/WinRing/main/WinRing0x64.sys

  2. IP

    185.199.110.133

  3. ASN

    #54113 FASTLY

  1. File type

    PE32+ executable (native) x86-64, for MS Windows\012- data

    Size

    14544

  2. Hash

    0c0195c48b6b8582fa6f6373032118da

    d25340ae8e92a6d29f599fef426a2bc1b5217299

    11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5

    Detections

    Analyzer Verdict Alert
    Public Nextron YARA rules malware
    Detects vulnerable driver mentioned in LOLDrivers project using VersionInfo values from the PE header - WinRing0x64.sys
    YARAhub by abuse.ch malware
    signed_sys_with_vulnerablity
    VirusTotal suspicious

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size
github.com/S1lentHashhh/WinRing/raw/main/WinRing0x64.sys
140.82.121.3 302 Found 0
raw.githubusercontent.com/S1lentHashhh/WinRing/main/WinRing0x64.sys
185.199.110.133 200 OK 14544