Report Overview

  1. Visited public
    2025-05-06 22:59:23
    Tags
  2. URL

    whynotwin11.org/releases/latest/download/WhyNotWin11.exe

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    104.21.18.51

    #13335 CLOUDFLARENET

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
whynotwin11.orgunknownunknownNo dataNo data
github.com1423unknownNo dataNo data
objects.githubusercontent.com134060unknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumobjects.githubusercontent.com/github-production-release-asset-2e65be/380026512/c61d0a41-fa1f-4b22-8dba-62b8acda309b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250506%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250506T225851Z&X-Amz-Expires=300&X-Amz-Signature=1b1fdadb7cb00e25ee6a22698e7337aa6374ce2fb638beed84c72de2a59cbf88&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DWhyNotWin11.exe&response-content-type=application%2Foctet-streamIdentifies compiled AutoIT script (as EXE).

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    objects.githubusercontent.com/github-production-release-asset-2e65be/380026512/c61d0a41-fa1f-4b22-8dba-62b8acda309b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250506%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250506T225851Z&X-Amz-Expires=300&X-Amz-Signature=1b1fdadb7cb00e25ee6a22698e7337aa6374ce2fb638beed84c72de2a59cbf88&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DWhyNotWin11.exe&response-content-type=application%2Foctet-stream

  2. IP

    185.199.109.133

  3. ASN

    #54113 FASTLY

  1. File type

    PE32+ executable (GUI) x86-64, for MS Windows, 6 sections

    Size

    2.5 MB (2534400 bytes)

  2. Hash

    72d3c67b35eb043b9c7672646581e3a4

    c07dfa503c5289b4ecd57c6c5dceffa7d56dfbb4

    Detections

    AnalyzerVerdictAlert
    Public InfoSec YARA rulesmalware
    Identifies compiled AutoIT script (as EXE).

JavaScript (0)

HTTP Transactions (4)

URLIPResponseSize
objects.githubusercontent.com/github-production-release-asset-2e65be/380026512/c61d0a41-fa1f-4b22-8dba-62b8acda309b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250506%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250506T225851Z&X-Amz-Expires=300&X-Amz-Signature=1b1fdadb7cb00e25ee6a22698e7337aa6374ce2fb638beed84c72de2a59cbf88&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DWhyNotWin11.exe&response-content-type=application%2Foctet-stream
185.199.109.133200 OK2.5 MB
whynotwin11.org/releases/latest/download/WhyNotWin11.exe
104.21.18.51301 Moved Permanently2.5 MB
github.com/rcmaehl/WhyNotWin11/releases/latest/download/WhyNotWin11.exe
140.82.121.3302 Found2.5 MB
github.com/rcmaehl/WhyNotWin11/releases/download/2.6.1.1/WhyNotWin11.exe
140.82.121.3302 Found2.5 MB