File name: | KPortScan 3.0.zip |
Full analysis: | https://app.any.run/tasks/69709c2c-f476-406f-9e53-0270a1adf0d3 |
Verdict: | Malicious activity |
Analysis date: | September 29, 2018, 11:52:03 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/zip |
File info: | Zip archive data, at least v2.0 to extract |
MD5: | 526D9C307802E127F8926140FE7DBBE6 |
SHA1: | 811B1F629DD27DDA7732ECA192A64DD2BC1F9391 |
SHA256: | FEC01FB731D1C3E00229436E40D35C7BFCACC14A43A767DB364C855541FC1274 |
SSDEEP: | 98304:2dIJm0FNxRIAcz8pB0pQ8psDTefd4Txg+QFMbWCKVue4tCgW:hY0J5Np2pXs2fd4rQK8ghW |
.zip | | | ZIP compressed archive (100) |
---|
ZipFileName: | KPortScan 3.0/KPortScan3.exe |
---|---|
ZipUncompressedSize: | 196096 |
ZipCompressedSize: | 130650 |
ZipCRC: | 0xfbfde589 |
ZipModifyDate: | 2014:01:19 03:30:19 |
ZipCompression: | Deflated |
ZipBitFlag: | - |
ZipRequiredVersion: | 20 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
3196 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\KPortScan 3.0.zip" | C:\Program Files\WinRAR\WinRAR.exe | explorer.exe | |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Exit code: 0 Version: 5.60.0 | ||||
2124 | "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe13_ Global\UsGthrCtrlFltPipeMssGthrPipe13 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" | C:\Windows\System32\SearchProtocolHost.exe | — | SearchIndexer.exe |
User: SYSTEM Company: Microsoft Corporation Integrity Level: SYSTEM Description: Microsoft Windows Search Protocol Host Version: 7.00.7600.16385 (win7_rtm.090713-1255) | ||||
3284 | "C:\Users\admin\Desktop\KPortScan 3.0\KPortScan3.exe" | C:\Users\admin\Desktop\KPortScan 3.0\KPortScan3.exe | explorer.exe | |
User: admin Integrity Level: MEDIUM |
PID | Process | Filename | Type | |
---|---|---|---|---|
3196 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3196.12716\KPortScan 3.0\results.txt | text | |
MD5:58B565C6DBBAACA2CBEA27DAC695872C | SHA256:8709320F4E124390ACA73981D82A191BB5F3E17735A34E9D79FCDFF863704209 | |||
3196 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3196.12716\KPortScan 3.0\QtNetwork4.dll | executable | |
MD5:5C6AFAE60414546CEF0A9B759DA93912 | SHA256:99757EC661FD7DE3B22FB641F25CF1565AAE13DAF8D31C6686C6C7CBD2BE6FC9 | |||
3196 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3196.12716\KPortScan 3.0\KPortScan3.exe | executable | |
MD5:47E24BB0723A41606259B71C34B2E5E2 | SHA256:476C5A362A758BCA9AC441B673CD0777982EA3A6CA13B4299C3FF15C780262A4 | |||
3196 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3196.12716\KPortScan 3.0\QtCore4.dll | executable | |
MD5:438717377B9DF0F53F283C9E4AA722CC | SHA256:A679CF46E128D028DE22FB9ED8432E5107E53F8E7E6FB7F5E169B3EEAB8F000A | |||
3196 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3196.12716\KPortScan 3.0\QtGui4.dll | executable | |
MD5:37957FACC9AFBDFBD119C8372C9CF0E3 | SHA256:BF52FEC00B4F640D07BEA3850096CC77983FCA518BBEC8122997B7CA561205F1 |
Process | Message |
---|---|
KPortScan3.exe | QMetaObject::connectSlotsByName: No matching signal for on_result(QStri¾ |
KPortScan3.exe | QMetaObject::connectSlotsByName: No matching signal for on_result(QString,int,bool)
|
KPortScan3.exe | QMetaObject::connectSlotsByName: No matching signal for on_timeout()
|
KPortScan3.exe | QMetaObject::connectSlotsByName: No matching signal for on_scanFinished()
|
KPortScan3.exe | QMetaObject::connectSlotsByName: No matching signal for on_scanDiapFinished()
|
KPortScan3.exe | QMetaObject::connectSlotsByName: No matching signal for on_stop()
|
KPortScan3.exe | QMetaObject::connectSlotsByName: No matching signal for on_loadFinished(QNetworkReply*)
|