Report Overview

  1. Visited public
    2025-05-06 20:20:06
    Tags
    Submit Tags
  2. URL

    github.com/dokan-dev/dokany/releases/download/v2.0.6.1000/DokanSetup.exe

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    4.225.11.194

    #8075 MICROSOFT-CORP-MSN-AS-BLOCK

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
github.com1423unknownNo dataNo data
objects.githubusercontent.com134060unknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumobjects.githubusercontent.com/github-production-release-asset-2e65be/27818365/8c619bf8-d989-49a4-8907-07a910da30b9?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250506%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250506T201934Z&X-Amz-Expires=300&X-Amz-Signature=eedfca0cb01372df5097b74931f915648e616cb66e9b713376e6b1d1bfeffc18&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DDokanSetup.exe&response-content-type=application%2Foctet-streamDetect pe file that no import table

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    objects.githubusercontent.com/github-production-release-asset-2e65be/27818365/8c619bf8-d989-49a4-8907-07a910da30b9?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250506%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250506T201934Z&X-Amz-Expires=300&X-Amz-Signature=eedfca0cb01372df5097b74931f915648e616cb66e9b713376e6b1d1bfeffc18&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DDokanSetup.exe&response-content-type=application%2Foctet-stream

  2. IP

    185.199.109.133

  3. ASN

    #54113 FASTLY

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

    Size

    19 MB (18605144 bytes)

  2. Hash

    9fb1a7f5bc3caefccfa58bdef13a1828

    984791954250032899e3da14f1e51d8ddeb05d69

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    Detect pe file that no import table

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
GET github.com/dokan-dev/dokany/releases/download/v2.0.6.1000/DokanSetup.exe
140.82.121.4302 Found19 MB
GET objects.githubusercontent.com/github-production-release-asset-2e65be/27818365/8c619bf8-d989-49a4-8907-07a910da30b9?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250506%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250506T201934Z&X-Amz-Expires=300&X-Amz-Signature=eedfca0cb01372df5097b74931f915648e616cb66e9b713376e6b1d1bfeffc18&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DDokanSetup.exe&response-content-type=application%2Foctet-stream
185.199.109.133200 OK19 MB