home

keygen.exe

The application keygen.exe has been detected as a potentially unwanted program by 22 anti-malware scanners.
MD5:
f1bd9a19a4c2db30465e50f6cd0dd4af

SHA-1:
80116dac475efb173b643ce3f372a69162ce07e8

SHA-256:
a30786f0a5635247fe299c609e2939cb8f2be46c9fadc99caf91a1d49311f584

Scanner detections:
22 / 68

Status:
Potentially unwanted

Analysis date:
4/23/2024 11:43:31 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Agnitum Outpost
Riskware.Keygen
7.1.1

AhnLab V3 Security
Win-Trojan/Xpack.114176.B
2014.10.15

AVG
Crack
2015.0.3279

Bkav FE
HW32.Packed
1.3.0.4959

ESET NOD32
Win32/Keygen.AG (variant)
8.10563

Fortinet FortiGate
W32/Malware_fam.NB
11/26/2014

F-Prot
W32/MalwareF.QTOH
v6.4.7.1.166

G Data
Win32.Trojan.Agent.S2LQDJ
14.11.24

IKARUS anti.virus
not-a-virus.Keygen.DFX
t3scan.1.7.8.0

K7 AntiVirus
Trojan
13.183.13676

Malwarebytes
Trojan.Dropper.PGen
v2014.11.26.09

McAfee
generic!bg.clt
5600.6935

Microsoft Security Essentials
HackTool:Win32/Keygen
1.11005

NANO AntiVirus
Trojan.Win32.Patched.cqxodz
0.28.2.62671

Norman
keygen.W
11.20141126

nProtect
Trojan/W32.Agent.121344.AZC
14.10.14.01

Rising Antivirus
PE:Trojan.Win32.Generic.12539C08!307469320
23.00.65.141124

Sophos
Mal/Behav-053
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-StartPage
10214

Trend Micro House Call
CRCK_KEYGEN
7.2.330

Trend Micro
CRCK_KEYGEN
10.465.26

VIPRE Antivirus
Trojan-Spy.Win32.Banker.ovo
33920

File size:
118.5 KB (121,344 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\put back after scan\done\winamp\winamp5.5 + keygen and patch\plugins\dfx audio enhancer v8.349\keygen.exe

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3072:3wy2D7+wiPbcWyLEikNGUV+EPusi4jVcp6vJ:ATDCTPwWyLEik8tlD4jBv

Entry address:
0x111B8

Entry point:
B8, 1C, EB, 49, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 75, 3F, 2F, 91, EC, 90, E1, 3F, 90, DD, 2A, 38, 99, 80, 6D, 4F, 4E, 90, 80, 79, D0, 4C, AA, 75, 92, 3B, 20, 87, 91, 6B, 86, 88, 4D, 0C, 53, CC, 90, B0, 6E, 2A, D6, A4, BE, 01, 9F, 7B, FB, DF, DB, CF, 99, 7E, F9, 92, 40, 0C, CA, 44, EC, E6, 56, 8C, E2, 55, 4A, CD, 20, FA, E0, 3C, A4, A9, 88, AE, 3E, DB, 53, F2, 1F, B2, 10, 8C, 25, E6, 8C, 63, 76, B7, 2C, 6B, 68, 11, E9...
 
[+]

Entropy:
7.9482

Packer / compiler:
PECompact v2

Code size:
65.5 KB (67,072 bytes)

Remove keygen.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.