home

keygen.exe

The executable keygen.exe has been detected as malware by 16 anti-virus scanners.
MD5:
9f04d1b084961750da24e94b689a90a2

SHA-1:
859d496e4ecb090e44e0857e8c3d2867a8bcbdb0

SHA-256:
67aef8a8bc0fd982cb9d8c0d1eb2fe60c2dc2199f04d8d99c18bdec2fff9c508

Scanner detections:
16 / 68

Status:
Malware

Analysis date:
4/30/2024 3:00:55 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Agent.251904.I
7.9.1.3

Emsisoft A-Squared
Backdoor.Win32.IRCBot!IK
4.5.0.24

avast!
Win32:Trojan-gen {Other}
2014.9-170309

AVG
Suspicion: unknown virus
2018.0.2445

Bitdefender
Trojan.Generic.1269451
1.0.20.340

F-Prot
W32/Heuristic-210
v6.4.4.4.56

F-Secure
Suspicious:W32/Malware!Gemini
11.2017-09-03_5

G Data
Trojan.Generic.1269451
17.3.19

IKARUS anti.virus
Backdoor.Win32.IRCBot
t3scan.1.1.68.0

K7 AntiVirus
Trojan.Win32.Malware.1
13.7.10.821

McAfee
Generic.dx
5600.6101

Panda Antivirus
Malicious Packer
17.03.09.06

Quick Heal
Trojan.Agent.IRC
3.17.10.00

Rising Antivirus
Packer.Win32.UnkPacker.a [Suspicious]
23.00.65.17307

Sophos
Mal/Packer
4.44

Trend Micro
Cryp_MEW-11
10.465.09

File size:
245.9 KB (251,852 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

Entry address:
0x9907E

Entry point:
33, C0, E9, D0, 70, F6, FF, 55, 1C, 8B, EC, 83, 9D, 18, 43, 45, 0C, 56, 89, A3, E8, 37, 0E, 10, 0C, E8, 06, 14, 33, C9, 10, 75, F0, 7A, F6, 06, 55, 08, 8D, 04, 76, 06, 79, 82, 00, 10, 83, FA, 1D, 0F, 87, 4B, 01, E1, C0, FF, 24, 0E, 95, 88, 11, 40, 00, 8B, 48, 08, EB, 3C, DE, 0B, 07, 4C, 8D, E8, 96, 33, 13, 1E, 0F, B6, 09, 14, 2B, 08, 20, B7, 45, 23, F5, 1C, 4C, 1E, 0F, 65, BE, 22, 12, 62, 2A, E1, 9B, 09, EB, 09, F8, 40, 04, 89, F2, 85, F2, E9, 6C, F7, A6, 9A, 50, F9, 41, 18, 54, 95, FD, 8A, 88, 39, 88, 0A...
 
[+]

Entropy:
7.8988

Packer / compiler:
Mew, 0x10 v1.0

Code size:
512 Bytes (512 bytes)

Remove keygen.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.