home

ktp.exe

Kurupira NT Protocol

KURUPIRA.NET

Publisher:
KURUPIRA.NET  (signed and verified)

Product:
Kurupira NT Protocol

Version:
1.00

MD5:
5b8c89e139f18ed18ef3c6f2fced93d9

SHA-1:
dd430123361a68bf9cee2a81ba2d3941fa9ead79

SHA-256:
05b9b87d045b3db59211311ff0e422133559f0085f131e1356a0d8e2c94552d8

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/19/2024 12:20:47 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.VBInject!1.64FA
23.00.65.15930

Trend Micro House Call
Suspicious_GEN.F47V1111
7.2.275

File size:
138.2 KB (141,496 bytes)

Product version:
1.00

Copyright:
Kurupira.NET (c)

Trademarks:
Kurupira.NET (c)

Original file name:
ktp.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\ProgramData\application data\appdata\application data\appdata\application data\appdata\application data\appdata\application data\appdata\application data\kurupira\webfilter\ktp.exe

Digital Signature
Signed by:
KURUPIRA.NET

Authority:
COMODO CA Limited

Valid from:
5/21/2012 9:00:00 PM

Valid to:
5/22/2015 8:59:59 PM

Subject:
CN=KURUPIRA.NET, O=KURUPIRA.NET, STREET="R. CRISTIANO OTONI, 275, SL 113", L=PEDRO LEOPOLDO, S=MG, PostalCode=33600-000, C=BR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
05F4AEE4F7D8C03989A29984E7DA6B83

File PE Metadata
Compilation timestamp:
5/17/2011 11:17:07 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:eNnBk/y6fmI7JwTEuWuwh069RKv56rwv55NV18sliAFJpFmhYJ3:eNnBgySzk5I0sE5HhHnvlhrP9

Entry address:
0x2F74

Entry point:
68, 5C, 35, 40, 00, E8, EE, FF, FF, FF, 00, 00, 40, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, C4, 6D, 6C, A0, FA, AC, B4, 45, B7, BF, 75, 13, AC, A5, B3, 5D, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 69, 6F, 6E, 20, 20, 20, 6B, 6E, 74, 70, 00, 3D, 20, 20, 00, 33, 39, 33, 32, 31, 36, 0D, 00, 00, 00, 00, 88, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 01, 00, 00, 00, 02, 01, 7F, 95, 28, C3, 0E, 44, 86, BA, 6E, 82, DF, 1B, B3, 92, 01, 00, 00, 00, 98, 00, 00, 00, A8, 00, 00, 00, 01, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
120 KB (122,880 bytes)

Scan ktp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.