psping64.exe

  • File Path: C:\SysinternalsSuite\psping64.exe
  • Description: PsPing - ping, latency, bandwidth measurement utility

Hashes

Type Hash
MD5 508657CC1D8EC7FB2155085A5691F301
SHA1 EF8CD0F9EF1E20B119F1908978D2E74B587C275E
SHA256 6330FD6B82B3A1C91D2396C1AC096CD2E3775CA50BAF8D223FA25A0258361126
SHA384 4DEF7BD4B3DE240646204695560ADF978B691CF63CBA83F603EA8B453A2353A929E9C2F43D0CB079851255CD969FD296
SHA512 12F793EADD7AB039F469E3AEF3255963304F2BD3822F9BE03E4468AC01F4BE161C1A7AACEE7AE75612B62AB2CB3E745C7DCA8B5633DC7920EF38FAC064159F32
SSDEEP 6144:GuOIYXphzO/LIOEP8eD0JDorHwT3yQa35Ak9MduyaueFLalr:CHphzO/LbA9KVeAayau
IMP 8B276F4187D986D845FBECA4606978E5
PESHA1 9F3E6A5D83F45D592D18442EBA9B0044E7301616
PE256 4C35103DB74DFF1D2BECB1C04F66792611811EA308B5D45E777B3A80C702E697

Runtime Data

Usage (stdout):


PsPing v2.10 - PsPing - ping, latency, bandwidth measurement utility
Copyright (C) 2012-2016 Mark Russinovich
Sysinternals - www.sysinternals.com

PsPing implements Ping functionality, TCP ping, UDP/TCP latency, and UDP / TCP
bandwidth measurement.

Help usage: psping -? [i|t|l|b]
   -? i   Usage for ICMP ping.
   -? t   Usage for TCP ping.
   -? l   Usage for latency test.
   -? b   Usage for bandwidth test.
  -nobanner   Do not display the startup banner and copyright message.

Usage (stderr):

The parameter is incorrect.
Invalid destination address:

Loaded Modules:

Path
C:\SysinternalsSuite\psping64.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 330000010A2C79AED7797BA6AC00010000010A
  • Thumbprint: 3BDA323E552DB1FDE5F4FBEE75D6D5B2B187EEDC
  • Issuer: CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: psping.exe
  • Product Name: Sysinternals PsPing
  • Company Name: Sysinternals - www.sysinternals.com
  • File Version: 2.10
  • Product Version: 2.10
  • Language: English (United States)
  • Legal Copyright: Copyright (C) 2012-2016 Mark Russinovich
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/6330fd6b82b3a1c91d2396c1ac096cd2e3775ca50baf8d223fa25a0258361126/detection/

Possible Misuse

The following table contains possible examples of psping64.exe being misused. While psping64.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_false_sysinternalsuite.yml - '\psping64.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.