{ "type": "URL", "indicator": "https://raw.githubusercontent.com/microsoftstorage/vsto/master/winhost.ver", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://raw.githubusercontent.com/microsoftstorage/vsto/master/winhost.ver", "type": "url", "type_title": "URL", "validation": [ { "source": "whitelist", "message": "Whitelisted domain githubusercontent.com", "name": "Whitelisted domain" }, { "source": "majestic", "message": "Whitelisted domain githubusercontent.com", "name": "Whitelisted domain" } ], "base_indicator": { "id": 2121403606, "indicator": "https://raw.githubusercontent.com/microsoftstorage/vsto/master/winhost.ver", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 23, "pulses": [ { "id": "68d3370d65a96c0748ec6880", "name": "InQuest - 23-09-2025", "description": "", "modified": "2025-10-24T00:04:37.296000", "created": "2025-09-24T00:10:53.400000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 66, "URL": 259, "FileHash-SHA256": 224, "FileHash-SHA1": 10, "domain": 65, "FileHash-MD5": 1 }, "indicator_count": 625, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "177 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68cf51e3b271cc64409972bf", "name": "InQuest - 20-09-2025", "description": "", "modified": "2025-10-21T01:01:14.281000", "created": "2025-09-21T01:16:19.455000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 75, "URL": 295, "FileHash-SHA256": 283, "domain": 84, "FileHash-SHA1": 9 }, "indicator_count": 746, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "180 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68c57516085248829533f7c8", "name": "InQuest - 12-09-2025", "description": "", "modified": "2025-10-13T13:27:11.277000", "created": "2025-09-13T13:43:50.865000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 35, "URL": 198, "FileHash-SHA256": 327, "domain": 42, "FileHash-SHA1": 19, "FileHash-MD5": 6 }, "indicator_count": 627, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "188 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "689541d6d786d497d52465f9", "name": "InQuest - 07-08-2025", "description": "", "modified": "2025-09-07T00:04:22.130000", "created": "2025-08-08T00:16:22.536000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 29, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 78, "URL": 304, "FileHash-SHA256": 476, "FileHash-SHA1": 11, "domain": 50, "FileHash-MD5": 7 }, "indicator_count": 926, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "224 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "684cbbe413030759cdeea980", "name": "InQuest - 13-06-2025", "description": "", "modified": "2025-07-14T00:03:10.889000", "created": "2025-06-14T00:01:40.334000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 27, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 21, "URL": 163, "domain": 18, "FileHash-SHA256": 260, "FileHash-MD5": 41, "FileHash-SHA1": 12 }, "indicator_count": 515, "is_author": false, "is_subscribing": null, "subscriber_count": 1604, "modified_text": "279 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "684b62b6723e01c872e10869", "name": "InQuest - 12-06-2025", "description": "", "modified": "2025-07-12T23:00:05.227000", "created": "2025-06-12T23:28:54.424000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 69, "URL": 199, "domain": 28, "FileHash-SHA256": 305, "FileHash-SHA1": 11, "FileHash-MD5": 13 }, "indicator_count": 625, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "281 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6833ad1fee54654504fdb8c5", "name": "InQuest - 25-05-2025", "description": "", "modified": "2025-06-24T23:00:32.355000", "created": "2025-05-25T23:51:59.855000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 75, "URL": 283, "domain": 57, "FileHash-SHA256": 298, "FileHash-SHA1": 18, "FileHash-MD5": 53 }, "indicator_count": 784, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "299 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68325eb386672c5c249ca6ea", "name": "InQuest - 24-05-2025", "description": "", "modified": "2025-06-24T00:00:59.539000", "created": "2025-05-25T00:05:07.728000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 69, "URL": 266, "domain": 60, "FileHash-SHA256": 271, "FileHash-MD5": 52, "FileHash-SHA1": 19 }, "indicator_count": 737, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "299 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "682d1325210b351ffa10b9c3", "name": "InQuest - 20-05-2025", "description": "", "modified": "2025-06-19T23:05:50.087000", "created": "2025-05-20T23:41:25.279000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 22, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 24, "URL": 197, "domain": 22, "FileHash-SHA256": 123, "FileHash-SHA1": 15, "FileHash-MD5": 1 }, "indicator_count": 382, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "304 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "682bc17040d2e2df4ad3dfb7", "name": "InQuest - 19-05-2025", "description": "", "modified": "2025-06-18T23:01:28.998000", "created": "2025-05-19T23:40:32.600000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 25, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 27, "URL": 229, "domain": 25, "FileHash-MD5": 1, "FileHash-SHA256": 150, "FileHash-SHA1": 16 }, "indicator_count": 448, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "305 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "681407e55a4e4fb5dcfa96bc", "name": "InQuest - 01-05-2025", "description": "", "modified": "2025-05-31T23:01:47.796000", "created": "2025-05-01T23:46:45.605000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 136, "URL": 639, "domain": 218, "FileHash-SHA256": 898, "FileHash-SHA1": 36, "FileHash-MD5": 1 }, "indicator_count": 1928, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "323 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68018ec0d07bce6af1ad2c0d", "name": "InQuest - 17-04-2025", "description": "", "modified": "2025-05-17T23:00:53.793000", "created": "2025-04-17T23:29:04.810000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 16, "domain": 109, "URL": 474, "hostname": 107, "FileHash-SHA256": 463, "FileHash-MD5": 20 }, "indicator_count": 1189, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "337 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68003f65380d5b54e3cd7580", "name": "InQuest - 16-04-2025", "description": "", "modified": "2025-05-16T23:04:47.236000", "created": "2025-04-16T23:38:13.521000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 540, "FileHash-MD5": 8, "FileHash-SHA256": 503, "hostname": 109, "domain": 142, "FileHash-SHA1": 19 }, "indicator_count": 1321, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "338 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67feed521c3dc814c01f8642", "name": "InQuest - 15-04-2025", "description": "", "modified": "2025-05-15T23:00:16.595000", "created": "2025-04-15T23:35:46.230000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 544, "FileHash-SHA256": 505, "FileHash-MD5": 59, "hostname": 120, "domain": 141, "FileHash-SHA1": 26 }, "indicator_count": 1395, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "339 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67a3fd629f5e95a4627e22a2", "name": "InQuest - 05-02-2025", "description": "", "modified": "2025-03-08T00:02:41.697000", "created": "2025-02-06T00:08:02.301000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 573, "hostname": 91, "URL": 599, "domain": 107, "FileHash-MD5": 20, "FileHash-SHA1": 12 }, "indicator_count": 1402, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "407 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67a37917b2aa684c4020ea7a", "name": "InQuest - 04-02-2025", "description": "", "modified": "2025-03-07T14:05:09.660000", "created": "2025-02-05T14:43:35.315000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 78, "URL": 550, "FileHash-SHA256": 544, "FileHash-SHA1": 12, "domain": 87, "FileHash-MD5": 19 }, "indicator_count": 1290, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "408 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "676b4cc20646d55cf5087563", "name": "InQuest - 24-12-2024", "description": "", "modified": "2025-01-24T00:00:38.344000", "created": "2024-12-25T00:07:28.562000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 574, "FileHash-SHA256": 773, "FileHash-MD5": 26, "domain": 113, "hostname": 120, "FileHash-SHA1": 22 }, "indicator_count": 1628, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "450 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6769fb2762335b75a85bb003", "name": "InQuest - 23-12-2024", "description": "", "modified": "2025-01-23T00:01:07.834000", "created": "2024-12-24T00:07:03.253000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 597, "FileHash-SHA1": 35, "FileHash-SHA256": 799, "domain": 109, "FileHash-MD5": 66, "hostname": 111 }, "indicator_count": 1717, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "451 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6768a9a6d57ea872427cbd92", "name": "InQuest - 22-12-2024", "description": "", "modified": "2025-01-22T00:02:37.485000", "created": "2024-12-23T00:07:02.715000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 631, "hostname": 86, "FileHash-SHA256": 679, "domain": 111, "FileHash-SHA1": 40, "FileHash-MD5": 49 }, "indicator_count": 1596, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "452 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "676758437d54e8d82a97ddab", "name": "InQuest - 21-12-2024", "description": "", "modified": "2025-01-21T00:02:39.764000", "created": "2024-12-22T00:07:31.816000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 599, "FileHash-SHA256": 636, "domain": 94, "hostname": 78, "FileHash-MD5": 47, "FileHash-SHA1": 43 }, "indicator_count": 1497, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "453 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "66da397022e85e70133cc25c", "name": "InQuest - 05-09-2024", "description": "", "modified": "2024-10-05T23:04:08.318000", "created": "2024-09-05T23:06:24.493000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 605, "FileHash-SHA256": 673, "FileHash-MD5": 203, "domain": 156, "FileHash-SHA1": 22, "hostname": 109 }, "indicator_count": 1768, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "561 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "66d8e809f5f21591e5ff8aa9", "name": "InQuest - 04-09-2024", "description": "", "modified": "2024-10-04T23:01:13.782000", "created": "2024-09-04T23:06:49.702000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 702, "FileHash-SHA1": 20, "hostname": 125, "domain": 197, "FileHash-SHA256": 873, "FileHash-MD5": 7 }, "indicator_count": 1924, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "562 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "66d250b5dcf88c775f929828", "name": "InQuest - 30-08-2024", "description": "", "modified": "2024-09-29T23:03:12.335000", "created": "2024-08-30T23:07:33.575000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 716, "FileHash-SHA256": 890, "hostname": 133, "FileHash-SHA1": 18, "domain": 197, "FileHash-MD5": 7 }, "indicator_count": 1961, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "567 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://labs.inquest.net/iocdb" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 6207 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/githubusercontent.com", "whois": "http://whois.domaintools.com/githubusercontent.com", "domain": "githubusercontent.com", "hostname": "raw.githubusercontent.com" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 23, "pulses": [ { "id": "68d3370d65a96c0748ec6880", "name": "InQuest - 23-09-2025", "description": "", "modified": "2025-10-24T00:04:37.296000", "created": "2025-09-24T00:10:53.400000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 66, "URL": 259, "FileHash-SHA256": 224, "FileHash-SHA1": 10, "domain": 65, "FileHash-MD5": 1 }, "indicator_count": 625, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "177 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68cf51e3b271cc64409972bf", "name": "InQuest - 20-09-2025", "description": "", "modified": "2025-10-21T01:01:14.281000", "created": "2025-09-21T01:16:19.455000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 75, "URL": 295, "FileHash-SHA256": 283, "domain": 84, "FileHash-SHA1": 9 }, "indicator_count": 746, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "180 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68c57516085248829533f7c8", "name": "InQuest - 12-09-2025", "description": "", "modified": "2025-10-13T13:27:11.277000", "created": "2025-09-13T13:43:50.865000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 35, "URL": 198, "FileHash-SHA256": 327, "domain": 42, "FileHash-SHA1": 19, "FileHash-MD5": 6 }, "indicator_count": 627, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "188 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "689541d6d786d497d52465f9", "name": "InQuest - 07-08-2025", "description": "", "modified": "2025-09-07T00:04:22.130000", "created": "2025-08-08T00:16:22.536000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 29, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 78, "URL": 304, "FileHash-SHA256": 476, "FileHash-SHA1": 11, "domain": 50, "FileHash-MD5": 7 }, "indicator_count": 926, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "224 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "684cbbe413030759cdeea980", "name": "InQuest - 13-06-2025", "description": "", "modified": "2025-07-14T00:03:10.889000", "created": "2025-06-14T00:01:40.334000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 27, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 21, "URL": 163, "domain": 18, "FileHash-SHA256": 260, "FileHash-MD5": 41, "FileHash-SHA1": 12 }, "indicator_count": 515, "is_author": false, "is_subscribing": null, "subscriber_count": 1604, "modified_text": "279 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "684b62b6723e01c872e10869", "name": "InQuest - 12-06-2025", "description": "", "modified": "2025-07-12T23:00:05.227000", "created": "2025-06-12T23:28:54.424000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 69, "URL": 199, "domain": 28, "FileHash-SHA256": 305, "FileHash-SHA1": 11, "FileHash-MD5": 13 }, "indicator_count": 625, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "281 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6833ad1fee54654504fdb8c5", "name": "InQuest - 25-05-2025", "description": "", "modified": "2025-06-24T23:00:32.355000", "created": "2025-05-25T23:51:59.855000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 75, "URL": 283, "domain": 57, "FileHash-SHA256": 298, "FileHash-SHA1": 18, "FileHash-MD5": 53 }, "indicator_count": 784, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "299 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68325eb386672c5c249ca6ea", "name": "InQuest - 24-05-2025", "description": "", "modified": "2025-06-24T00:00:59.539000", "created": "2025-05-25T00:05:07.728000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 69, "URL": 266, "domain": 60, "FileHash-SHA256": 271, "FileHash-MD5": 52, "FileHash-SHA1": 19 }, "indicator_count": 737, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "299 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "682d1325210b351ffa10b9c3", "name": "InQuest - 20-05-2025", "description": "", "modified": "2025-06-19T23:05:50.087000", "created": "2025-05-20T23:41:25.279000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 22, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 24, "URL": 197, "domain": 22, "FileHash-SHA256": 123, "FileHash-SHA1": 15, "FileHash-MD5": 1 }, "indicator_count": 382, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "304 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "682bc17040d2e2df4ad3dfb7", "name": "InQuest - 19-05-2025", "description": "", "modified": "2025-06-18T23:01:28.998000", "created": "2025-05-19T23:40:32.600000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 25, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 27, "URL": 229, "domain": 25, "FileHash-MD5": 1, "FileHash-SHA256": 150, "FileHash-SHA1": 16 }, "indicator_count": 448, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "305 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://raw.githubusercontent.com/microsoftstorage/vsto/master/winhost.ver", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://raw.githubusercontent.com/microsoftstorage/vsto/master/winhost.ver", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1776642442.8757336 }