home

KeyHH.exe

KeyHH

KeyWorks Software

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.usna.edu and multiple other hosts.
Publisher:
KeyWorks Software

Product:
KeyHH

Description:
HTML Help Launcher

Version:
1, 1, 9145,0 0

MD5:
1cad242bb2cc0bafdac4ed184c11fbc9

SHA-1:
87cd72d6f1246caa264b0d9d25dffee1d6781c27

SHA-256:
bf3a8aa99f62748edb9c7921c50778bff5dd0f4d47f7a1263516e10b99903a28

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:04:40 AM UTC  (today)

File size:
24 KB (24,576 bytes)

Product version:
1, 1, 9145,0 0

Copyright:
Copyright © 1998-1999

Original file name:
KeyHH.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\windows\keyhh.exe

File PE Metadata
Compilation timestamp:
5/25/1999 4:59:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:CPWlTKrg4R0sZ/mRm9T4NuZ/VscYHbsv:Irg4aME64NuZSY

Entry address:
0x102F

Entry point:
81, EC, 64, 01, 00, 00, 53, 55, 56, 57, FF, 15, 20, 30, 40, 00, 8B, E8, 83, CE, FF, 85, ED, 89, 6C, 24, 14, 75, 07, 56, FF, 15, 54, 30, 40, 00, 8A, 45, 00, 8B, 3D, 78, 30, 40, 00, 3C, 22, 0F, 85, 8A, 00, 00, 00, 55, FF, D7, 8B, E8, 89, 6C, 24, 14, 8A, 45, 00, 3C, 22, 74, 04, 84, C0, 75, EC, 80, 7D, 00, 22, 75, 09, 55, FF, D7, 8B, E8, 89, 6C, 24, 14, 8A, 45, 00, 84, C0, 74, 04, 3C, 20, 7E, EC, 80, 7D, 00, 00, 75, 07, 56, FF, 15, 54, 30, 40, 00, 8B, FD, 8B, CE, 33, C0, F2, AE, F7, D1, 51, 50, FF, 15, 58, 30...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
8 KB (8,192 bytes)

The file KeyHH.exe has been discovered within the following programs.

Applied Biosystems ViiA 7 Software  by Life Technologies
www.lifetechnologies.com
About 1% of users remove it
Arcade Lines 1.81  by Lobstersoft
Publisher's description - “How about a nice game for unwinding while you have a break? Try Arcade Lines - A relaxing, yet highly addictive puzzle game featuring brilliant graphics, optional pulsating music and a great variety of different game modes.”
www.lobstersoft.com
11% remove it
ASTRO 25 Mobile CPS  by Motorola, Inc.
About 1% of users remove it
ASTRO 25 Portable CPS  by Motorola, Inc.
Motorola Astro performs digital voice transmission for use by federal, state/province and local public safety agencies in North America to enable them to communicate with other agencies and mutual aid response teams in emergencies.
www.motorola.com
About 1% of users remove it
Facets  by Winsteps.com
www.winsteps.com
About 8% of users remove it
Image for Windows 2.87  by TeraByte Unlimited
www.terabyteunlimited.com
About 6% of users remove it
MICRODEM Freeware GIS  by Petmar Triilobite Breeding Ranch
www.usna.edu/Users/oceano/pguth/website/microdem.htm
About 1% of users remove it
PingPlotter Pro  by Nessoft, LLC
Publisher's description - “PingPlotter Pro is a network monitoring and troubleshooting tool. It runs in the background collecting data for one or many remote hosts, and then allows network professionals/admins fast and easy access to network routing and performance information.”
www.pingplotterpro.com
8% remove it
RJ TextEd  by Rickard Johansson
Publisher's description - “RJ TextEd is a full featured text and source editor with Unicode support. It is also a very powerful web (PHP, ASP, JavaScript, HTML and CSS) development editor.”
www.rj-texted.se
About 4% of users remove it
Stronghold 2  by Firefly Studios Ltd
Stronghold 2 is a real time strategy computer game.
www.fireflyworlds.com
2% remove it
 
Latest 20 of 19 programs
Powered by Should I Remove It?

The file KeyHH.exe has been seen being distributed by the following 2 URLs.

https://www.usna.edu/Users/oceano/pguth/.../KeyHH.exe

http://www.usna.edu/Users/oceano/pguth/.../KeyHH.exe

Scan KeyHH.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.