home

vknt.exe

The executable vknt.exe has been detected as malware by 27 anti-virus scanners.
MD5:
07bfdd85ee836fa45eece790671a6858

SHA-1:
7a85da798fd55a8205c35fc7fd5318d6cadf77e3

SHA-256:
14c2b1b1be41654986956e4150ae3039d2dedda10545ee474b40adaa1af4aac5

Scanner detections:
27 / 68

Status:
Malware

Analysis date:
4/16/2024 9:53:38 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Zusy.5761
868

Agnitum Outpost
Win32.Virut.Y.Gen
7.1.1

avast!
Win32:Vitro
140908-2

AVG
Win32/Vitru
2014.0.4015

Baidu Antivirus
Virus.Win32.Virut
4.0.3.14920

Bitdefender
Gen:Variant.Zusy.5761
1.0.20.1315

Bkav FE
HW32.Paked
1.3.0.4959

Comodo Security
Virus.Win32.Virut.Ce
19563

Emsisoft Anti-Malware
Gen:Variant.Zusy.5761
14.09.19

ESET NOD32
Win32/Virut.NBP virus
7.0.302.0

Fortinet FortiGate
W32/Virut.CE
9/20/2014

F-Secure
Gen:Variant.Zusy.5761
11.2014-20-09_7

G Data
Gen:Variant.Zusy.5761
14.9.24

IKARUS anti.virus
Trojan-PWS.SuspectCRC
t3scan.1.7.8.0

K7 AntiVirus
Backdoor
13.183.13432

MicroWorld eScan
Gen:Variant.Zusy.5761
15.0.0.789

NANO AntiVirus
Trojan.Win32.Siggen2.cnioew
0.28.2.62151

Norman
Virut.B[gs]
11.20140920

Panda Antivirus
W32/Sality.AO
14.09.20.01

Qihoo 360 Security
HEUR/Malware.QVM17.Gen
1.0.0.1015

Rising Antivirus
PE:Win32.Virut.cy!1556235
23.00.65.14918

Total Defense
Win32/Virut.17408!corrupt
37.0.11189

Trend Micro House Call
PE_VIRUX.A-3
7.2.263

Trend Micro
PE_VIRUX.A-3
10.465.20

Vba32 AntiVirus
TrojanSpy.Montp
3.12.26.3

ViRobot
Trojan.Win32.A.Montp.117519
2011.4.7.4223

Zillya! Antivirus
Trojan.Genome.Win32.30699
2.0.0.1927

File size:
94 KB (96,282 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\vietkey2000\vknt.exe

File PE Metadata
Compilation timestamp:
8/23/2000 11:46:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.10

CTPH (ssdeep):
1536:x/neRC5/wmroN04LYWC1CblMCn5uDI6tlRh7gZVv2MAH6+gJEvZtpinRAwZ:Z5omrPkounIsYRhcGMz2vZ/iRAA

Entry address:
0x27000

Entry point:
EB, 06, 68, 50, 6F, 00, 00, C3, 9C, 60, E8, 02, 00, 00, 00, 33, C0, 8B, C4, 83, C0, 04, 93, 8B, E3, 8B, 5B, FC, 81, EB, 0F, 80, 40, 00, 87, DD, 8B, 85, A6, 80, 40, 00, 01, 85, 03, 80, 40, 00, 66, C7, 85, 00, 80, 40, 00, 90, 90, 01, 85, 9E, 80, 40, 00, BB, E8, 0E, 00, 00, 03, 9D, AA, 80, 40, 00, 03, 9D, A6, 80, 40, 00, 53, 53, 53, 53, 58, 2D, 70, 80, 40, 00, 89, 85, 71, 80, 40, 00, 5F, 8D, B5, 70, 80, 40, 00, B9, 9F, 03, 00, 00, F3, A5, 5F, C3, BD, 00, 00, 00, 00, 57, 5E, 83, C6, 42, 81, C7, 78, 0E, 00, 00...
 
[+]

Entropy:
7.7094

Packer / compiler:
PECompact v1.33

Code size:
29 KB (29,696 bytes)

Remove vknt.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.