| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Malware-gen | 20191017 | 18.4.3895.0 |
| Baidu | Win32.Trojan.Kryptik.bcp | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20191017 | 2013.8.14.323 |
| McAfee | Packed-KS!741C95340010 | 20191017 | 6.0.6.653 |
| Tencent | None | 20191017 | 1.0.0.1 |
| file | C:\Windows\win32dc\Silent Hill 4_cdfix.exe |
| file | C:\Windows\win32dc\BattleField 1942(fix).exe |
| file | C:\Windows\win32dc\Counter-Strike_nocd.exe |
| file | C:\Windows\win32dc\Doom 3 hack.exe |
| file | C:\Windows\win32dc\Counter-Strike_crack.exe |
| file | C:\Windows\win32dc\Sims 2 codes.exe |
| section | {'name': 'UPX1', 'virtual_address': '0x0000f000', 'virtual_size': '0x00013000', 'size_of_data': '0x00012a00', 'entropy': 7.963038258348486} | entropy | 7.963038258348486 | description | 发现高熵的节 | |||||||||
| entropy | 0.9738562091503268 | description | 此PE文件的整体熵值较高 | |||||||||||
| section | UPX0 | description | 节名称指示UPX | ||||||
| section | UPX1 | description | 节名称指示UPX | ||||||
| host | 114.114.114.114 | |||
| host | 8.8.8.8 | |||
| dead_host | 199.71.214.87:6667 |
| ALYac | GenPack:Generic.Malware.Sdld.FD559172 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| Acronis | suspicious |
| Ad-Aware | GenPack:Generic.Malware.Sdld.FD559172 |
| AhnLab-V3 | Malware/Win32.Upantix.C2168224 |
| Antiy-AVL | Trojan[Packed]/Win32.Upantix.gen |
| Arcabit | GenPack:Generic.Malware.Sdld.FDD88844 |
| Avast | Win32:Malware-gen |
| Avira | TR/Dldr.Delphi.Gen |
| Baidu | Win32.Trojan.Kryptik.bcp |
| BitDefender | GenPack:Generic.Malware.Sdld.FD559172 |
| CAT-QuickHeal | Trojan.Upantix.AL3 |
| Comodo | Packed.Win32.MUPX.Gen@24tbus |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.400103 |
| Cylance | Unsafe |
| Cyren | W32/NewMalware-LSU-based!Maximu |
| DrWeb | Trojan.Packed2.39727 |
| ESET-NOD32 | Win32/Kryptik.FKSZ.Gen |
| Emsisoft | GenPack:Generic.Malware.Sdld.FD559172 (B) |
| Endgame | malicious (moderate confidence) |
| F-Prot | W32/NewMalware-LSU-based!Maximu |
| F-Secure | Trojan.TR/Dldr.Delphi.Gen |
| FireEye | Generic.mg.741c953400103b22 |
| Fortinet | W32/Bundpil.72F8!tr |
| GData | GenPack:Generic.Malware.Sdld.FD559172 |
| Ikarus | Trojan.Win32.Dynamer |
| Invincea | heuristic |
| Jiangmin | Packed.Upantix.adgw |
| K7AntiVirus | Trojan ( 0050a9591 ) |
| K7GW | Trojan ( 0050a9591 ) |
| Kaspersky | HEUR:Packed.Win32.Upantix.gen |
| MAX | malware (ai score=87) |
| McAfee | Packed-KS!741C95340010 |
| McAfee-GW-Edition | BehavesLike.Win32.Dropper.dc |
| MicroWorld-eScan | GenPack:Generic.Malware.Sdld.FD559172 |
| Microsoft | Backdoor:MSIL/Bladabindi.AJ!bit |
| NANO-Antivirus | Trojan.Win32.Upantix.ekofiv |
| Panda | Trj/Genetic.gen |
| Qihoo-360 | HEUR/QVM19.1.9C31.Malware.Gen |
| Rising | Trojan.Kryptik!1.A862 (CLASSIC) |
| SentinelOne | DFI - Malicious PE |
| Sophos | Mal/EncPk-ANQ |
| Symantec | SMG.Heur!gen |
| Trapmine | malicious.moderate.ml.score |
| VBA32 | Malware-Cryptor.General.3 |
| Yandex | Trojan.Kryptik!rrMJZq4zV/U |
| Zillya | Trojan.Kryptik.Win32.1046502 |
| ZoneAlarm | HEUR:Packed.Win32.Upantix.gen |
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| UPX0 | 0x00001000 | 0x0000e000 | 0x00000000 | 0.0 |
| UPX1 | 0x0000f000 | 0x00013000 | 0x00012a00 | 7.963038258348486 |
| .rsrc | 0x00022000 | 0x00001000 | 0x00000800 | 3.8057924052084515 |
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_ICON | 0x00022154 | 0x000002e8 | LANG_SPANISH | SUBLANG_SPANISH_MODERN | None |
| RT_RCDATA | 0x00012448 | 0x000000a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_RCDATA | 0x00012448 | 0x000000a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_ICON | 0x00022440 | 0x00000014 | LANG_SPANISH | SUBLANG_SPANISH_MODERN | None |
| IP |
|---|
| 114.114.114.114 |
| 8.8.8.8 |
| 199.71.214.87 |
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 | 131.107.255.255 |
| us.undernet.org |
A 199.71.214.87
A 45.58.183.18 A 186.233.185.155 |
45.58.183.18 |
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 49163 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49164 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49165 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49166 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49167 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49168 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49169 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49170 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49171 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49172 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49173 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49174 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49175 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49176 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49177 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49178 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49179 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49180 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49181 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49182 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49183 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49184 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49185 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49186 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49187 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49188 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49189 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49191 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49192 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49194 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49195 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49196 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49197 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49198 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49199 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49200 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49201 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49202 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49203 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49204 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49205 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49206 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49207 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49208 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49209 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49210 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49211 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49212 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49213 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49214 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49215 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49216 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49217 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49218 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49219 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49220 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49221 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49222 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49223 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49224 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49225 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49226 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49227 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49228 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49229 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49230 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49231 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49232 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49233 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49234 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49235 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49236 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49237 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49238 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49239 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49240 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49241 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49242 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49245 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49246 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49247 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49248 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49249 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49250 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49251 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49252 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49253 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49254 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49255 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49256 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49257 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49258 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49259 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49260 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49261 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49262 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49263 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49264 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49265 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49266 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49267 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49268 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49269 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49270 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49271 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49272 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49273 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49274 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49275 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49276 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49277 | 199.71.214.87 us.undernet.org | 6667 |
| 192.168.56.101 | 49278 | 199.71.214.87 us.undernet.org | 6667 |
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
| 192.168.56.101 | 58485 | 114.114.114.114 | 53 |
| 192.168.56.101 | 58485 | 8.8.8.8 | 53 |
No HTTP requests performed.
No ICMP traffic performed.
No IRC requests performed.
No Suricata Alerts
No Suricata TLS
No Snort Alerts
| Name | a99b743cc594ef48_sims 2 codes.exe |
|---|---|
| Filepath | C:\Windows\win32dc\Sims 2 codes.exe |
| Size | 254.5KB |
| Processes | 600 (0a377551edbe1d5e5c70dca9c4c4b08e0f455ccc5d31ff8ec0000f389d88a835.exe) |
| Type | PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed |
| MD5 | 7aa74634fdf844ecdb5f78dca1353bec |
| SHA1 | 13818197f7c7be74c53b03c096ad6618dee215ea |
| SHA256 | a99b743cc594ef485ee06b0f0b2393f8b1d97334674613fce63d1e70130b6f29 |
| CRC32 | DE2EB059 |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 9fdc790844d767d5_battlefield 1942(fix).exe |
|---|---|
| Filepath | C:\Windows\win32dc\BattleField 1942(fix).exe |
| Size | 255.5KB |
| Processes | 600 (0a377551edbe1d5e5c70dca9c4c4b08e0f455ccc5d31ff8ec0000f389d88a835.exe) |
| Type | PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed |
| MD5 | 700025adb07b73d7e639f738d2b4f809 |
| SHA1 | c4c5603905daee08e38784eaeeee1346b0bfbf82 |
| SHA256 | 9fdc790844d767d5a79272b48372bd875b55f0e130b972f585184b36e3f996a9 |
| CRC32 | 15F2A300 |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | d3e41dc7ac293e68_doom 3 hack.exe |
|---|---|
| Filepath | C:\Windows\win32dc\Doom 3 hack.exe |
| Size | 254.5KB |
| Processes | 600 (0a377551edbe1d5e5c70dca9c4c4b08e0f455ccc5d31ff8ec0000f389d88a835.exe) |
| Type | PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed |
| MD5 | cd077677b72e60c62475edb0991b481e |
| SHA1 | c8ea4793ae517e72d13de48fffe6bea5e622fd60 |
| SHA256 | d3e41dc7ac293e6852f16e8974b62e66e554a7fbc76b441d57789a2849663cc8 |
| CRC32 | 969C8612 |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | bd52a780bef1cb81_counter-strike_nocd.exe |
|---|---|
| Filepath | C:\Windows\win32dc\Counter-Strike_nocd.exe |
| Size | 256.5KB |
| Processes | 600 (0a377551edbe1d5e5c70dca9c4c4b08e0f455ccc5d31ff8ec0000f389d88a835.exe) |
| Type | PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed |
| MD5 | 07c011e8835c3d4e1ce1c609f98b9513 |
| SHA1 | c7206e54da8a966434899b56337f13ea55597d83 |
| SHA256 | bd52a780bef1cb818c83d4b1b7a724169a7d1ac0e1c4b700cf7b70c9d3723c4e |
| CRC32 | 2E8202B6 |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 3c3b61176c709209_silent hill 4_cdfix.exe |
|---|---|
| Filepath | C:\Windows\win32dc\Silent Hill 4_cdfix.exe |
| Size | 256.5KB |
| Processes | 600 (0a377551edbe1d5e5c70dca9c4c4b08e0f455ccc5d31ff8ec0000f389d88a835.exe) |
| Type | PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed |
| MD5 | 3d1552ae84ecd88b7d0ed1c63f514978 |
| SHA1 | 5e17433dd21f21f849d8bb6f2cddf08b84800a3c |
| SHA256 | 3c3b61176c7092098d93f74f3cdaa9b057f738ca372078eaf111b669c4ae8d66 |
| CRC32 | 143F50A1 |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 9c9513ea4f99b84c_counter-strike_crack.exe |
|---|---|
| Filepath | C:\Windows\win32dc\Counter-Strike_crack.exe |
| Size | 258.5KB |
| Processes | 600 (0a377551edbe1d5e5c70dca9c4c4b08e0f455ccc5d31ff8ec0000f389d88a835.exe) |
| Type | PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed |
| MD5 | 90bab4ad6c97d85d41622d992e2f0f9d |
| SHA1 | ac60a1a58f133fca59d2e67a3c50e2a73ce99aa2 |
| SHA256 | 9c9513ea4f99b84c7e8d9d8a321c5142b2fef2f8c1c55e21cdd5019b1e2079e2 |
| CRC32 | C1D5C3BE |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |