home

ford m series.exe

KeyCode

dIGITAL MalevolencE

This is a setup program which is used to install the application. The file has been seen being downloaded from s6678.chomikuj.pl and multiple other hosts.
Publisher:
dIGITAL MalevolencE

Product:
KeyCode

Version:
1.00

MD5:
52fefa93b73ac386aeadaf6cf6878efb

SHA-1:
f0632229bc3134a02e3ad46c9c65e08f21403ae0

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 2:13:18 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.CDB
1.3.0.4959

File size:
52 KB (53,248 bytes)

Product version:
1.00

Original file name:
KeyCode.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
8/24/1999 4:33:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.20

CTPH (ssdeep):
1536:EvKhoD8wmRRbP9+7MEuo51ZHIu2P5lG3P65lemm5lwoS5l2E6qRg0t6p:EvywmRJ1+hu21U5lG3P65lemm5lwoS5s

Entry address:
0x1208

Entry point:
68, EC, 87, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 5C, A9, 5B, 70, 38, 5A, D3, 11, BB, 90, 00, 00, E8, 54, 68, DA, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 4B, 45, 59, 43, 4F, 44, 45, 00, 00, 00, 00, 00, FF, CC, 31, 00, 08, 02, A9, 5B, 70, 38, 5A, D3, 11, BB, 90, 00, 00, E8, 54, 68, DA, 03, A9, 5B, 70, 38, 5A, D3, 11, BB, 90, 00, 00, E8, 54, 68, DA, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00, AA, 00, 60, D3, 93, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
44 KB (45,056 bytes)

The file ford m series.exe has been seen being distributed by the following 13 URLs.

http://s6678.chomikuj.pl/File.aspx?e=rISysO7yi4EhFKezP2BHh6oJVCLA-AhkVhC2hpea-_lkimv7HdSwIDz0j8_KTndLpbm7NKdLcUxAPFbrVeHjTlukmchRg8bi1SakqaHpj1AHqHqQDk3m_D40_Vpp92rsDjJ1-tpFveuoFJxivVC8wA&pv=2

http://s10093.chomikuj.pl/File.aspx?e=rISysO7yi4EhFKezP2BHh_hJYPopLic278c9PGcKEhd8rGZgv1wXkQdqdUuBErs7iZ3yQ3OYarNoXfRwoA7r9Fsz1SqZKxt3owEm95M7lZ1Qs8PBDr2ikTsXNatZFi-A0PQTgChL6kd7z2HjcvGXZg&pv=2

http://www.eserviceinfo.com/download.php?downloadstart=1&fileid=5368

http://s10093.chomikuj.pl/File.aspx?e=rISysO7yi4EhFKezP2BHh35XkeKoeCYpzVs4jjV84d3Kz-iyZMhzsQT5FByHUAqSbo77YWZKkeC6Gsp8kKKgCWzIr9JDqsM_ShF6t4YVHPQ3FDVHehYi4FyUFqBV5RoLBTQKEzu8XYAAuG-MvSIwLw&pv=2

http://s6678.chomikuj.pl/File.aspx?e=rISysO7yi4EhFKezP2BHh4hOd6u_vPCvpPF6lPFXhlPR7Fczbpcii5wx9Rt1dmnTYIpA5J_JlFjyQzsP59Bp4q-h4zymRuReJGYY_Pwg7VAO5Q1QNLuFl3ZPuVacMaXfP_zPLrC5TXvVn522WHtdBQ&pv=2

http://s6678.chomikuj.pl/File.aspx?e=rISysO7yi4EhFKezP2BHhzyGlrUFaiowB_rYZyELrpJxS8l0y9zzn__yBab-tvqGlmrrlvkyzH6kT4mPwvoqPPmmyFO6egYpAQA8AvN39acEeRi8_pV7ja13ubBrClT63tHGa4Kb2u3-CVvCnBPSUQ&pv=2

http://s10093.chomikuj.pl/File.aspx?e=rISysO7yi4EhFKezP2BHhxc9pzWZVz2Gnbji40vZ72mlgyIDSnbwN0EOkg554bb_5I3yTs0h5bhQeRkuOYE34BrgTW2nl3VSYoG6RgTTpsmN_IcvkZPQZHCZHFN1s2eLlmkSVQ08868NOl28ElDXag&pv=2

http://www.eerojaaskelainen.com/.../FordM.EXE

http://s10093.chomikuj.pl/File.aspx?e=rISysO7yi4EhFKezP2BHh9AXau6v8mjRrfK6Rg3-jvKIrAiSGpswvs_MxdEfUhoKwS6IlRIWcnUHvF1tgMAfpK-Ue03RY6vAzWlcNX5rdnOwyRQmdP_q5ZLSNlTIyUriigSwNn9r9NIWkW_ru6c14g&pv=2

http://s10093.chomikuj.pl/File.aspx?e=rISysO7yi4EhFKezP2BHh7rW74DkJgxAhD8t_2zkVsVI00gyk-KryUXccneZOtLoBnROzK5lN7r5sTwwAhkJBRUvCzpA6kirVSrPHHAf9YP997Ff93SgKCW3EeHbrAft_31t05-zZVVPG3tyMaay1Q&pv=2

http://s10093.chomikuj.pl/File.aspx?e=rISysO7yi4EhFKezP2BHh_iyTc4vkmD6fPFFU362CP2JnRnkRqROEkeqkgKw17hAnN9xlTlDlmG9rumclzcnA5c31rbUjo9dqmUZlbBdGkcMmF2SF7awMmnx4n_ynLWkaX0qMpCczCg1hGHCP7SvPQ&pv=2

https://www.dropbox.com/sh/tggu4nvu31yfeq7/.../Ford M Series.EXE

http://fileshare3340.dfiles.eu/auth-1373238153134bedbf1f97304c7dc8a4-94.2.11.133-591110178-107073741-guest/.../Ford M Series.EXE

Scan ford m series.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.