Report Overview
Submitted URL
download.sysinternals.com/files/Sigcheck.zip
IP
152.199.19.160
ASN
#15133 EDGECAST
Submitted
2024-04-23 06:04:00
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
5
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
download.sysinternals.com | 317209 | 1998-04-12 | 2012-05-21 | 2024-04-19 | 498 B | 680 kB | 152.199.19.160 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
download.sysinternals.com/files/Sigcheck.zip
IP
152.199.19.160
ASN
#15133 EDGECAST
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
680 kB (680079 bytes)
Hash
ec79fdd634d75309329bd4b6a92afa9c
aaed1983cf36b3d2eb8355a696d4bf2a18cb3ed3
Archive (4)
Filename | Md5 | File type | ||||||
---|---|---|---|---|---|---|---|---|
sigcheck.exe | e1abd0c9e37d96346de222176c4fd2ae
| PE32 executable (console) Intel 80386, for MS Windows, 5 sections | ||||||
sigcheck64.exe | 32fee0aff79cce5f14a9e6b03c08c019
| PE32+ executable (console) x86-64, for MS Windows, 7 sections | ||||||
sigcheck64a.exe | c2bb71ee6b838142c789033fa6431092
| PE32+ executable (console) Aarch64, for MS Windows, 6 sections | ||||||
Eula.txt | 8c24c4084cdc3b7e7f7a88444a012bfc | Unicode text, UTF-8 (with BOM) text, with very long lines (518), with CRLF line terminators |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
VirusTotal | suspicious |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
download.sysinternals.com/files/Sigcheck.zip | 152.199.19.160 | 200 OK | 680 kB | |||||||
Detections
HTTP Headers
| ||||||||||