home

csgo_keyhack_4.9.5.exe

Kemeda

Publisher:
Kemeda  (signed and verified)

Version:
12.3.0.78

MD5:
8e369490966b8491afb5a67bdda867b0

SHA-1:
078015e62c2fa6745c1e9f6b2d6d2954dfd72635

SHA-256:
b7742bf5a661198c049a255c9f32f2eee73a1cb6508f10e328d82bbee5880156

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/28/2024 4:02:07 PM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Trojan.MSIL.Injector
4.0.3.15119

ESET NOD32
MSIL/Injector.MIX (variant)
9.12533

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1077

File size:
825.5 KB (845,288 bytes)

Product version:
12.3.0.78

Original file name:
zavx.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
Kemeda

Authority:
Kemeda

Valid from:
10/22/2015 5:07:25 AM

Valid to:
10/22/2016 5:07:25 AM

Subject:
CN=www.kemeda.pt, O=Kemeda, L=Lisboa, S=Lisboa, C=PK

Issuer:
CN=www.kemeda.pt, O=Kemeda, L=Lisboa, S=Lisboa, C=PK

Serial number:
008C6590B70633A028

File PE Metadata
Compilation timestamp:
11/6/2015 2:25:56 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
80.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:C0AwpEGpBxNfIQXO+jf19/JxBi10DMtHlTCm7c1RjVHiU+pUKrBv4VeBeGR:CtotpDBI98TJxBizXhmVD+pvwVCey

Entry address:
0xCF5BE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 10, 00, 00, 00, 20, 00, 00, 80, 18, 00, 00, 00, 50, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 38, 00, 00, 80, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0912

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
821.5 KB (841,216 bytes)

Scan csgo_keyhack_4.9.5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.