home

keymaker&patch.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from tedinator2k.themis.feralhosting.com.
MD5:
13569f3b0e104d876863f53359eab97e

SHA-1:
e03521c997187b97d0741a3ddc21cbe565f78717

SHA-256:
9db86b20e53a70b9919e36e3956970ea6632289174e11dc721e614c7e775551d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/15/2024 7:28:56 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

File size:
3 MB (3,138,560 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\stardock\registrations\keymaker&patch.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:uonKRbhzVKFnxA0o+Mrf4KNNnqcJUXJwj788qP+Ku88kmOtqT7ezBIdwDGrT73wF:u1hhJUxA0o+Mrf4oxbR8Jv8YtqeBIQ8Y

Entry address:
0x7052C

Entry point:
B8, 88, 87, CF, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 62, E5, 67, F2, 19, FE, 9D, AB, 8F, 5E, 63, 9D, 7C, 45, 38, F5, AE, 53, 9A, F1, F0, 1D, 95, B0, 6C, B4, 37, 2C, 8F, 3F, 96, 14, 62, B1, 3B, 5B, 29, C6, D0, 09, D8, FD, E0, 7F, 0C, F7, BE, 8B, 13, 3C, C4, 78, 45, 30, F4, 64, 00, 65, 0C, F8, 2C, D8, 95, CE, E1, 79, 12, 56, 06, 17, 61, EE, 51, 18, 0D, 51, 0A, C9, FC, 8C, E6, 37, 46, DA, 23, B9, A0, 8E, 25, B0, B6, 0C, 9C...
 
[+]

Packer / compiler:
PECompact v2

Code size:
445.5 KB (456,192 bytes)

The file keymaker&patch.exe has been discovered within the following programs.

Fences  by Stardock Corporation
Publisher's description - “Fences is a revolutionary new program that lets users clean up their desktop icons in moments. Users draw "fences" on their desktop which enables users to drag and drop icons into them. Users can have fences show and hide by double-clicking on the desktop.”
www.stardock.com
5% remove it
Fences 2  by Stardock Corporation
Publisher's description - “Fences® is a program that helps you organize your desktop and hide your icons when they're not in use. Fences is the world's most popular desktop enhancement for Windows®.”
3% remove it
ObjectDock Plus  by Stardock Corporation
Publisher's description - “Tabbed docks help keep your weblinks and shortcuts organized. Tuck them away on an edge, setup hotkeys, or leave them in your taskbar. It’s easy to customize for your applications.”
www.stardock.com/products/objectdock/information_plus.asp
About 6% of users remove it
Stardock Fences 2  by Stardock Corporation
Publisher's description - “Fences is a program that helps you organize your desktop. It can hide icons when they are not in use as well as make it easy to place icons into moveable groups called "fences". You can have pages of fences on your desktop.”
www.stardock.com/products/fences
About 3% of users remove it
Stardock Fences 3  by Stardock Corporation
About 3% of users remove it
Stardock ObjectDock  by Stardock Corporation
Publisher's description - “ObjectDock is an animated dock for Windows that enables you to quickly access and launch your favorite applications, files and shortcuts. ObjectDock can also automatically hide itself when not in use and will reappear when you move your mouse to its position.”
www.stardock.com/products/objectdock
About 4% of users remove it
 
Powered by Should I Remove It?

The file keymaker&patch.exe has been seen being distributed by the following URL.

http://tedinator2k.themis.feralhosting.com/rutorrent/plugins/.../action.php?hash=D03B776318CFD0204E07F4979F290156237C258B&no=0

Scan keymaker&patch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.