Report Overview
Submitted URL
download.sysinternals.com/files/Handle.zip
IP
152.199.19.160
ASN
#15133 EDGECAST
Submitted
2024-04-23 17:29:22
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
download.sysinternals.com | 317209 | 1998-04-12 | 2012-05-21 | 2024-04-19 | 496 B | 748 kB | 152.199.19.160 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
download.sysinternals.com/files/Handle.zip
IP
152.199.19.160
ASN
#15133 EDGECAST
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
747 kB (747331 bytes)
Hash
16f9948cb1ddf8ca3c958ad2f1407d09
5022a9f0160b3ad187417ff3ea6cb7c2ac0b68f9
Archive (4)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
handle.exe | 9f637fba2d680e23da0266c1507f870f
| PE32 executable (console) Intel 80386, for MS Windows, 5 sections | |||
handle64.exe | 89f845fc4898f2d47a3a81f0b57c60f1
| PE32+ executable (console) x86-64, for MS Windows, 7 sections | |||
handle64a.exe | bfdd14e1bc093b4c73f65e32842f541b
| PE32+ executable (console) Aarch64, for MS Windows, 6 sections | |||
Eula.txt | 8c24c4084cdc3b7e7f7a88444a012bfc | Unicode text, UTF-8 (with BOM) text, with very long lines (518), with CRLF line terminators |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |
---|---|---|---|---|
download.sysinternals.com/files/Handle.zip | 152.199.19.160 | 200 OK | 747 kB | |
HTTP Headers
| ||||