» KeyScrambler.exe
Overview
Analysis
File Details
Behaviors (2)
Programs (1)

KeyScrambler.exe

KeyScrambler

QFX Software Corporation

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘KeyScrambler’. This is installed with KeyScrambler.

File name:

KeyScrambler.exe

Publisher:

QFX Software Corporation (signed and verified)

Product:

KeyScrambler

Version:

3,3,0,0

MD5:

3f744d5bcef935b32b43bf7f83098032

SHA-1:

33ae16e04f21bd5564de88c7cdec5f41bb9d55aa

SHA-256:

8152b47cb1b5966329c2c66de0f137fbf7e5ce8d3af56ad949be737d5fe0ad17

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 3:38:55 AM UTC (today)

File size:

496.2 KB (508,144 bytes)

Product version:

3,3,0,0

Trademarks:

KeyScrambler is a registered trademark of QFX Software Corporation

Original file name:

KeyScrambler.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\keyscrambler\keyscrambler.exe

Digital Signature

Signed by:

QFX Software Corporation

Authority:

GlobalSign nv-sa

Valid from:

5/4/2012 12:09:27 PM

Valid to:

6/4/2014 12:09:27 PM

Subject:

E=qfxsoft@qfxsoftware.com, CN=QFX Software Corporation, O=QFX Software Corporation, L=Ormond Beach, S=FL, C=US

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11216652A6E06021908E944AFB16E293C548

File PE Metadata

Compilation timestamp:

11/14/2013 10:16:04 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

6144:wXf8kOKMzP+sg+T1sJqDGHWok6MjRjNK617o41Nptp7Nu+w:wXE9N+sg+TSqDGHWokBj37p7Nu

Entry address:

0x11E28

Entry point:

E8, DC, 8B, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 14, 56, 85, C0, 74, 41, 83, 7D, 08, 00, 75, 13, E8, 61, 44, 00, 00, 6A, 16, 5E, 89, 30, E8, D0, 55, 00, 00, 8B, C6, EB, 2A, 83, 7D, 10, 00, 74, E7, 39, 45, 0C, 73, 0E, E8, 43, 44, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, DE, 50, FF, 75, 10, FF, 75, 08, E8, 23, D7, FF, FF, 83, C4, 0C, 33, C0, 5E, 5D, C3, 8B, FF, 55, 8B, EC, 8B, 45, 08, 85, C0, 74, 08, 8B, 4D, 0C, 89, 08, 83, C0, 08, 5D, C3, 8B, FF, 55, 8B, EC, 8B, 45, 08, 85, C0, 74, 12, 83... 
[+]

Entropy:

7.1396

Code size:

192 KB (196,608 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

KeyScrambler

Command:

C:\Program Files\keyscrambler\keyscrambler.exe

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

KeyScrambler

Command:

C:\Program Files\keyscrambler\keyscrambler.exe \a

The file KeyScrambler.exe has been discovered within the following programs.

KeyScrambler by QFX Software Corporation

Publisher's description - “An unrivaled tool of Internet information security for businesses and individuals alike, KeyScrambler Premium protects users' privacy in 200+ essential apps against keyloggers and keylogging malware.”

www.qfxsoftware.com

12% remove it

Scan KeyScrambler.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.