It is the urlquery.
also this file seem to come with urlquery site
https://www.virustotal.com/en/file/9953feaa930b2c2d3cdd4af2b565b29db23022edf43cd7f93a797be4cbe638f3/analysis/1399724415/