mal2zip is a command line utility that downloads a remote file (or files) to memory, adds them to a password-protected zip file (again in memory) and finally writes that protected zip file to disk. This allows (assumed) malware files to be more safely handled by never committing the original file(s) to disk in their raw form. This uses the .NET WebClient class, so it should support 'https:', 'http:', 'ftp:' and 'file:' URI schemes. Syntax: mal2zip [-n] [-p password] [-f filename] [-s] [-m] [-n] uri [uri2 uri3...etc] Zip Options: -f, --filename : Specify an output filename when downloading multiple files. Default is 'sample'. The zip is silent. -n, --nolog : Do not include the 'log.txt' or 'md5sum.txt' in the zip file. -p, --password : Specify an alternate password. Default is 'infected' Other Functionality: (doesn't create zip file) -m, --md5sum : Calculate the md5sum for the file(s) -d, --dump : Dump the bytes from the file(s) to the console -s, --strings : Dump the ASCII characters from the file(s) to the console -vt, --virustotal : Upload the samples to the VirusTotal Public API -a, --apikey : Specify your VirusTotal Public API key. Overrides value in 'virustotal.api' text file. General Options: -h, --help : Show this help file. -v, --version : Display version information. All other arguments are interpreted as URIs. If multiple URIs are specified they will all be downloaded and added to the zip file. Windows versions of the flags (e.g. /f, /filename) will also work if that is your muscle memory. Malware is dangerous - USE THIS TOOL AT YOUR OWN RISK.