home

nmapscripts.exe

MD5:
89eae44352d985904c1b1e2ab14a2c85

SHA-1:
5139572a1e68edda05706ff4587e7ce76c6e13fe

SHA-256:
4438571c2230581f95f98151def68e983101373d6260d484a7f67e9b7d4935c4

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
5/8/2024 8:40:38 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
BAT/Kryptik.B trojan
6.3.12010.0

File size:
202.5 KB (207,360 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
1/18/2017 11:10:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.50

Entry address:
0x1000

Entry point:
68, 2C, 01, 00, 00, 68, 00, 00, 00, 00, 68, C8, 34, 41, 00, E8, 5C, 40, 00, 00, 83, C4, 0C, 68, 00, 00, 00, 00, E8, 55, 40, 00, 00, A3, CC, 34, 41, 00, 68, 00, 00, 00, 00, 68, 00, 10, 00, 00, 68, 00, 00, 00, 00, E8, 42, 40, 00, 00, A3, C8, 34, 41, 00, E8, BC, 3F, 00, 00, B8, 0A, 23, 41, 00, A3, FC, 34, 41, 00, E8, 4D, E4, 00, 00, E8, 34, E2, 00, 00, E8, 36, C7, 00, 00, E8, 61, C2, 00, 00, E8, 09, BC, 00, 00, E8, 8F, B8, 00, 00, E8, CF, B5, 00, 00, E8, AB, B5, 00, 00, E8, 1D, B5, 00, 00, E8, 80, AC, 00, 00...
 
[+]

Entropy:
7.5018

Packer / compiler:
PKLITE32, 0x1.1

Code size:
60 KB (61,440 bytes)

Scan nmapscripts.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.