home

recoverkeysusb.exe

Recover Keys

ONE UP LTD.

The executable recoverkeysusb.exe, “Tool for getting installed software keys” has been detected as malware by 1 anti-virus scanner.
Publisher:
ONE UP LTD.  (signed and verified)

Product:
Recover Keys

Description:
Tool for getting installed software keys

Version:
7.0.3.86

MD5:
5fa2e1853a9d53d11cc9f5d5387087b2

SHA-1:
07a0afdf6e3241da4ff8bdd9f879a823f7e42245

SHA-256:
5136a1fc2175d312708cdd7b5d7f599f6f58993ab975e2c4899ba2511362b808

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/4/2024 4:57:42 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
17.2.24.0

File size:
12.7 MB (13,273,024 bytes)

Product version:
7.0.3.86

Copyright:
© ONE UP LTD. All rights reserved.

Original file name:
RecoverKeys.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
ONE UP LTD.

Authority:
Starfield Technologies, Inc.

Valid from:
4/25/2013 9:33:03 AM

Valid to:
4/25/2016 9:33:03 AM

Subject:
CN=ONE UP LTD., O=ONE UP LTD., L=LEMESOS, S=LEMESOS, C=CY

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
041ABD63CA5DA9

File PE Metadata
Compilation timestamp:
10/4/2013 6:41:06 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x880524

Entry point:
55, 8B, EC, 83, C4, F0, B8, 9C, CC, C6, 00, E8, 18, BD, 78, FF, A1, 98, AF, CB, 00, 8B, 00, E8, 74, 79, 8A, FF, A1, 98, AF, CB, 00, 8B, 00, BA, 88, 05, C8, 00, E8, A3, 73, 8A, FF, 8B, 0D, 94, AD, CB, 00, A1, 98, AF, CB, 00, 8B, 00, 8B, 15, F4, 6E, C6, 00, E8, 63, 79, 8A, FF, A1, 98, AF, CB, 00, 8B, 00, E8, BB, 7A, 8A, FF, E8, 06, 71, 78, FF, 00, 00, B0, 04, 02, 00, FF, FF, FF, FF, 0C, 00, 00, 00, 52, 00, 65, 00, 63, 00, 6F, 00, 76, 00, 65, 00, 72, 00, 20, 00, 4B, 00, 65, 00, 79, 00, 73, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.7974

Developed / compiled with:
Microsoft Visual C++

Code size:
8.5 MB (8,908,800 bytes)

Remove recoverkeysusb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.