home

activador.exe

Keymaker

BetaMaster

This is a setup program which is used to install the application. The file has been seen being downloaded from s10572.chomikuj.pl.
Publisher:
BetaMaster

Product:
Keymaker

Version:
3.9.3.0

MD5:
fa8b0c616eaa8ace931e6c72e4da018f

SHA-1:
8c1d3c5d66dee42a1f2082138e0cf73d83426411

SHA-256:
bc8786758283523b6121cbd71609cb54fd53c8ff47bf46eb77356c6b9f16e0c6

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/19/2024 8:57:26 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

IKARUS anti.virus
not-a-virus.Patch.Alcohol
t3scan.1.8.3.0

Malwarebytes
RiskWare.Tool.CK
v2015.01.27.09

File size:
1.1 MB (1,200,640 bytes)

Product version:
1.0.0.0

Copyright:
VDOWN 2008

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programas\teu 2009\autoplay\docs\alcohol 120% 1.9.8.7117\activador\activador.exe

File PE Metadata
Compilation timestamp:
8/13/2008 6:48:53 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:42JhoYeO5/m2SvCN6CsXCNkjCLJTaQ5jfq:2Y//m2xNiC+It

Entry address:
0xB202C

Entry point:
B8, 68, 22, 5C, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, BF, BE, C5, 03, 51, 97, EE, 0D, 52, 65, 09, 61, A0, 07, 66, 6D, B7, 8D, B5, FC, 86, F9, 8F, D0, 5C, 00, BA, 6D, AD, 4F, 17, A7, 35, 6D, A7, 82, 2C, 16, 16, 58, 8D, DF, 41, FC, 40, DC, 08, 3E, 6E, 0D, 74, CD, 81, 60, AF, DE, 5E, D5, A1, 43, 3D, B6, 89, D2, 62, 3E, D8, 6B, 05, 03, 62, 0A, 96, 9C, 50, DF, 01, FC, 81, CA, 48, B7, D7, 13, AE, 47, D7, C3, 67, AB, 0B, 43, 73...
 
[+]

Entropy:
7.9662

Packer / compiler:
PECompact v2

Code size:
707.5 KB (724,480 bytes)

The file activador.exe has been seen being distributed by the following URL.

http://s10572.chomikuj.pl/File.aspx?e=cVq8YXYSGMdrEEoAsIbxR4e-RpmKz_cj5F4nQhS5Q7YZvS-3SV3bjmXXqcd50QCwrE_QtWn5muGEN-RZV66des3oiKIuK5ghWIFpMd27FMomE4Ga6KAbJebsXfhOzXJ0IBMyczg1N6QzAibdxzI9fA&pv=2

Scan activador.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.