home

pkeyui.exe

MD5:
2cc8636acb488e8ea5ec42df603ef489

SHA-1:
667df5dc0048f67fb5756918a01c1405fb2b6a15

SHA-256:
fd298cca7353b242d29c6cbd1b3603720f89054497fcf8368a8d77328b04f046

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 8:47:49 AM UTC  (today)

File size:
22 KB (22,528 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\pkeyui.exe

File PE Metadata
Compilation timestamp:
4/5/2013 7:36:21 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
192:7TBfv/0+HrVKhHAspTw7diTJXCvPdc39arXVDPDPDtPDPD/1lq6sB/Zi:Z9RsHAsJw7diTUHdcNkNrrtrrG6sB

Entry address:
0x1000

Entry point:
EB, 02, 3A, 83, 6A, 00, E8, F7, 06, 00, 00, A3, 64, 30, 40, 00, E8, 11, 07, 00, 00, 6A, 00, 68, 31, 10, 40, 00, 6A, 00, 6A, 65, FF, 35, 64, 30, 40, 00, E8, 83, 06, 00, 00, 50, E8, CB, 06, 00, 00, 55, 8B, EC, 81, 7D, 0C, 11, 01, 00, 00, 0F, 85, 63, 01, 00, 00, 81, 7D, 10, EB, 03, 00, 00, 75, 31, 6A, FF, 6A, 00, 68, B1, 00, 00, 00, 68, E9, 03, 00, 00, FF, 75, 08, E8, 6C, 06, 00, 00, 6A, 00, 6A, 00, 68, 01, 03, 00, 00, 68, E9, 03, 00, 00, FF, 75, 08, E8, 56, 06, 00, 00, E9, 0D, 02, 00, 00, 81, 7D, 10, F1, 03...
 
[+]

Entropy:
3.9544

Packer / compiler:
FSG v1.10 (Microsoft Visual C++ 6.0 / 7.0)

Code size:
2 KB (2,048 bytes)

The file pkeyui.exe has been seen being distributed by the following 13 URLs.

https://docs.google.com/uc?authuser=0&id=0B-7z6NWh4T0cS2FfTUxDLVNxSk0&export=download

http://s6290.chomikuj.pl/File.aspx?e=iY8lJCx2iZQghZCs0EYqGQbv0S8DWSQS6S_lnO9IJ81vugfchQviPr2RQYJ92e_ryLe6qcMfmfG31f_CV1RMmkIu9bG9yan-ZnXP_ouryBEm8VwHPy3XUgJ4XaDJew7OduBDJEQdtaDehOATmNys1Q&pv=2

https://driver-disk.com/.../Windows-8-Product-Key-Finder.exe

https://doc-0s-8g-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/cbbe3dgq25cajo999oq095q5m5bqc72h/1456056000000/11636920822879726367/.../0B-7z6NWh4T0cS2FfTUxDLVNxSk0?e=download

http://rscds.com/.../Windows-8-Product-Key-Finder.exe

http://s6290.chomikuj.pl/File.aspx?e=iY8lJCx2iZQghZCs0EYqGQbv0S8DWSQS6S_lnO9IJ82Cm0D8zSFPDAfbq0zvgD85J2gjuDoaNGO5I_CyRAlXQhU2alKLORXzd0k1c2-M9OAYhcpB7Lw14LM6TgeviaoutwG19Ssz9_Gt-twh4lLDrg&pv=2

http://www.kuzniewski.pl/.../pkeyui.exe

https://doc-0s-8g-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/hgb8c8h724c08ipfjcc6t9ccr5fppiqq/1453708800000/11636920822879726367/.../0B-7z6NWh4T0cS2FfTUxDLVNxSk0?e=download

https://doc-0s-8g-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/hqk3s54jr1ffc6f433a8tgt51al7c3ij/1452520800000/11636920822879726367/.../0B-7z6NWh4T0cS2FfTUxDLVNxSk0?e=download

http://online.b1.org/rest/online/download/wpkey_v1.4.7d.rar/.../pkeyui.exe

https://restore.solutions/.../Windows-8-Product-Key-Finder.exe

https://onedrive.live.com/download.aspx?cid=8FC33F93E3470CE8&authKey=!AD0DsuarejCFqLc&resid=8FC33F93E3470CE8!3969&canary=j6WouHkyWkncQyMNsLC5pO68MUkVl4ypDcCdzr42P0M=7

http://web.mail.comcast.net/service/home/.../pkeyui.exe

Scan pkeyui.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.