Report Overview
-
Submitted URL
github.com/S1lentHashhh/WinRing/raw/main/WinRing0x64.sys
-
IP
140.82.121.3
ASN
#36459 GITHUB
-
Submitted
2023-10-03T08:39:29Z
Access
public
-
Website Title
about:privatebrowsing
-
Final URL
about:privatebrowsing
-
Tags
None
-
urlquery detections
No alerts detected
Detections
-
urlquery
0
-
Network Intrusion Detection
0
-
Threat Detection Systems
2
Domain Summary
Domain | Rank | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|
github.com (1) | 1423 | 2016-07-13 12:28:22 | 2023-09-20 18:48:10 | 512 | 3104 | ![]() |
raw.githubusercontent.com (1) | 35802 | 2014-03-01 08:08:08 | 2023-10-02 18:32:49 | 523 | 15434 | ![]() |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2023-10-03 | medium | raw.githubusercontent.com/S1lentHashhh/WinRing/main/WinRing0x64.sys | Detects vulnerable driver mentioned in LOLDrivers project using VersionInfo values from the PE header - WinRing0x64.sys |
2023-10-03 | medium | raw.githubusercontent.com/S1lentHashhh/WinRing/main/WinRing0x64.sys | signed_sys_with_vulnerablity |
OpenPhish
No alerts detected
PhishTank
No alerts detected
Fortinet's Web Filter
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
-
URL
raw.githubusercontent.com/S1lentHashhh/WinRing/main/WinRing0x64.sys
-
IP
185.199.110.133
-
ASN
#54113 FASTLY
-
File type
PE32+ executable (native) x86-64, for MS Windows\012- data
Size
14544
-
Hash
0c0195c48b6b8582fa6f6373032118da
d25340ae8e92a6d29f599fef426a2bc1b5217299
11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5
Detections
Analyzer | Verdict | Alert |
---|---|---|
Public Nextron YARA rules | malware |
Detects vulnerable driver mentioned in LOLDrivers project using VersionInfo values from the PE header - WinRing0x64.sys
|
YARAhub by abuse.ch | malware |
signed_sys_with_vulnerablity
|
VirusTotal | suspicious |
JavaScript (0)
HTTP Transactions (2)
URL | IP | Response | Size | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
github.com/S1lentHashhh/WinRing/raw/main/WinRing0x64.sys |
![]() |
302 Found | 0 | |||||||||||||
HTTP Headers
|
||||||||||||||||
raw.githubusercontent.com/S1lentHashhh/WinRing/main/WinRing0x64.sys |
![]() |
200 OK | 14544 | |||||||||||||
Detections
HTTP Headers
|
||||||||||||||||