home

keymaker.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from cfw.org.ua.
MD5:
1d8ef6788f9b2e5139f0efa530bdfee9

SHA-1:
e264c3f060ee383b72c54b6036173fb0e1d1f712

SHA-256:
63fcf98880765e12d8e4ed74c35d51294aeccf3c67ecacbaf26dd63fb1110202

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 6:26:37 AM UTC  (today)

File size:
324 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\keymaker.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6:WuDt0HJtEfORHT4NcoBfJhKKUaKvz3XWchN84NcoBfJhKKUaQ:W6etnuNcuKKUFv7XLLnNcuKKUb

Entry point:
0A, 57, 61, 72, 6E, 69, 6E, 67, 3A, 20, 66, 6F, 70, 65, 6E, 28, 2E, 2E, 2F, 75, 70, 6C, 6F, 61, 64, 73, 2F, 66, 69, 6C, 65, 73, 2F, 31, 33, 35, 39, 32, 30, 33, 39, 33, 39, 5F, 6B, 65, 79, 6D, 61, 6B, 65, 72, 2E, 65, 78, 65, 29, 3A, 20, 66, 61, 69, 6C, 65, 64, 20, 74, 6F, 20, 6F, 70, 65, 6E, 20, 73, 74, 72, 65, 61, 6D, 3A, 20, 4E, 6F, 20, 73, 75, 63, 68, 20, 66, 69, 6C, 65, 20, 6F, 72, 20, 64, 69, 72, 65, 63, 74, 6F, 72, 79, 20, 69, 6E, 20, 2F, 68, 6F, 6D, 65, 2F, 62, 75, 68, 6F, 62, 65, 68, 2F, 63, 66, 77...
 
[+]

The file keymaker.exe has been seen being distributed by the following URL.

http://cfw.org.ua/.../download.php?id=51

Scan keymaker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.