home

keygen.exe

Lz0 Keygen

The executable keygen.exe has been detected as malware by 29 anti-virus scanners.
Product:
Lz0 Keygen

Version:
1.0.0.0

MD5:
77e641198b2fdf9d31c30f06e83e54c5

SHA-1:
d87b10b513195ce5d902296e14c8af21a3d8f2cb

SHA-256:
31745ae3edfe5fa7f6850d55b06b018adf0679fab68026d71e1f8ac6c474e0df

Scanner detections:
29 / 68

Status:
Malware

Analysis date:
4/25/2024 3:26:35 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.KDV.390319
827

Agnitum Outpost
Trojan.Shakblades
7.1.1

AVG
PSW.MSIL
2015.0.3305

Baidu Antivirus
Trojan.Win32.Shakblades
4.0.3.141031

Bitdefender
Trojan.Generic.KDV.390319
1.0.20.1520

Bkav FE
W32.Clod758.Trojan
1.3.0.6185

Comodo Security
UnclassifiedMalware
19950

Dr.Web
BackDoor.Bifrost.20804
9.0.1.0304

Emsisoft Anti-Malware
Trojan.Generic.KDV.390319
8.14.10.31.07

Fortinet FortiGate
W32/Jorik_Shakblades.CNH!tr
10/31/2014

F-Secure
Trojan.Generic.KDV.390319
11.2014-31-10_6

G Data
Trojan.Generic.KDV.390319
14.10.24

IKARUS anti.virus
Trojan.Win32.Jorik
t3scan.1.8.3.0

Kaspersky
Trojan.Win32.Jorik.Shakblades
14.0.0.3018

McAfee
Artemis!77E641198B2F
5600.6961

Microsoft Security Essentials
HackTool:Win32/Keygen
1.11104

MicroWorld eScan
Trojan.Generic.KDV.390319
15.0.0.912

NANO AntiVirus
Trojan.Win32.Agent2.cytbux
0.28.6.62995

Norman
Suspicious_Gen2.SPEJS
11.20141031

nProtect
Trojan/W32.Agent.276992.DZ
14.10.30.01

Qihoo 360 Security
Win32/Trojan.a35
1.0.0.1015

Quick Heal
Trojan.Jorik.r2
10.14.14.00

Rising Antivirus
PE:Trojan.Win32.Generic.12A262A5!312631973
23.00.65.141029

Sophos
Mal/Generic-S
4.98

Trend Micro House Call
TROJ_SPNR.08F414
7.2.304

Trend Micro
TROJ_SPNR.08F414
10.465.31

Vba32 AntiVirus
Trojan.Jorik.Shakblades
3.12.26.3

VIPRE Antivirus
Trojan.Win32.Generic
34388

Zillya! Antivirus
Trojan.Jorik.Win32.23413
2.0.0.1973

File size:
270.5 KB (276,992 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Lz0

Original file name:
keygen.exe

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/12/2010 1:58:00 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:31ysbcc5S2RWkmXnR96zVJpOUikig0jaeV+1PreMwgw7USrv:31JbcQSsWkmXR+VJoeiJjaec1PKtBUSr

Entry address:
0xFFEF

Entry point:
B8, 0C, BD, 45, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 32, 00, 0C, F5, 0C, 17, 87, FE, 6B, 8D, 70, E7, A1, 84, F6, 50, E0, 6F, D5, DC, 3D, F3, F5, 9F, 18, 39, 34, FF, F2, C0, C0, 19, 97, 75, 16, EB, 27, 2A, 94, AF, F8, F7, EB, 6D, 92, 6B, 06, 4F, 7F, CA, D1, B7, D5, 89, F6, F0, 64, 2C, 5D, FC, 41, B1, 61, DE, 7B, 19, 18, A4, AC, 46, C6, C8, A0, F6, 3E, 1B, 5C, 2E, C2, 9C, B4, 28, 35, 6F, F3, A1, FD, E4, 96, 07, D3, DE, E8, CE, 12, EF, 9E, F1, D0, 15, DA...
 
[+]

Packer / compiler:
PeCompact 2.xx (Slim Loader)

Code size:
102 KB (104,448 bytes)

Remove keygen.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.