Report Overview
Visitedpublic
2025-03-11 13:42:31
Tags
Submit Tags
URL
download.sysinternals.com/Files/Sigcheck.zip
Finishing URL
about:privatebrowsing
IP / ASN
13.107.253.53
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
download.sysinternals.com | 317209 | 1998-04-12 | 2012-05-21 | 2025-03-08 | 512 B | 681 kB | 13.107.246.53 |
Related reports
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
download.sysinternals.com/Files/Sigcheck.zip
IP / ASN
13.107.246.53
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=deflate
Size680 kB (680079 bytes)
MD5ec79fdd634d75309329bd4b6a92afa9c
SHA1aaed1983cf36b3d2eb8355a696d4bf2a18cb3ed3
Archive (4)
| Filename | MD5 | File type |
|---|---|---|
| sigcheck.exe | e1abd0c9e37d96346de222176c4fd2ae | PE32 executable (console) Intel 80386, for MS Windows, 5 sections |
| sigcheck64.exe | 32fee0aff79cce5f14a9e6b03c08c019 | PE32+ executable (console) x86-64, for MS Windows, 7 sections |
| sigcheck64a.exe | c2bb71ee6b838142c789033fa6431092 | PE32+ executable (console) Aarch64, for MS Windows, 6 sections |
| Eula.txt | 8c24c4084cdc3b7e7f7a88444a012bfc | Unicode text, UTF-8 (with BOM) text, with very long lines (518), with CRLF line terminators |
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
| YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
| YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
JavaScript (0)
No JavaScripts
HTTP Transactions (1)
| URL | IP | Response | Size |
|---|