» keeperid.exe
Overview
Analysis
File Details
Programs (1)

keeperid.exe

KeeperID

CJSC Computing Forces

File name:

keeperid.exe

Publisher:

CJSC "Computing Forces" (signed by CJSC Computing Forces)

Product:

KeeperID

Description:

KeeperID Object

Version:

2, 4, 0, 1

MD5:

c7655bfe6f65f3a577b5c0867c1e48f4

SHA-1:

3df002cb49e8ce60f8e021a79a65e7cf66ed31a7

SHA-256:

8b013051da22db7dc3060290872700f35b2a03a85d924581be30b22b3a640d03

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/18/2025 5:24:29 AM UTC (today)

File size:

284.3 KB (291,080 bytes)

Product version:

2, 4, 0, 1

Original file name:

KeeperID.dll

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\webmoney\keeperid.exe

Digital Signature

Signed by:

CJSC Computing Forces

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

9/30/2005 6:15:56 PM

Valid to:

10/20/2007 7:28:30 PM

Subject:

CN=CJSC Computing Forces, OU=IT, O=CJSC Computing Forces, L=Moscow, S=Moscow, C=RU

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

21DFC6

File PE Metadata

Compilation timestamp:

10/27/2005 9:31:31 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

6144:mLHC6+3A8+xPK6MdNlswI88JRMlJpaOIsFqRgPvSCsDr3rTw:mWF+PK6MdNLI87zIsFqRSHsDrw

Entry address:

0x1000

Entry point:

68, 01, 60, 47, 00, E8, 01, 00, 00, 00, C3, C3, 1A, 67, 4B, B9, 02, 98, 16, 30, 4A, 83, A2, A6, A4, 06, 58, 4E, 2C, E3, 27, 64, 87, BA, 8B, 61, D8, 1E, FA, CA, FA, 4F, 02, CB, 7F, 9A, C4, 97, 02, FB, CD, 9D, 4C, EA, 8E, 21, 91, 67, 1B, B6, 3E, E0, F8, 62, 19, 9D, 8A, CF, 80, C4, C7, 5B, 08, 98, EE, 2C, 59, 31, DF, 1A, 49, BC, 56, F4, 22, 33, 22, 8E, DE, 1F, 75, 05, 9F, 68, A4, 9A, 95, 28, E9, 01, A4, D1, BC, A3, BD, 9D, 37, A7, 0A, 50, 1F, 02, 2C, ED, 46, 64, FD, 92, 5B, B7, 16, 5E, 6C, 46, EA, 76, F4, CD... 
[+]

Entropy:

7.8617

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

348 KB (356,352 bytes)

The file keeperid.exe has been discovered within the following program.

WebMoney Keeper Classic 3.9.9.1 by WM Transfer Ltd.

www.webmoney.ru

About 1% of users remove it

Scan keeperid.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.