home

sfk_setup.exe

Spyrix Free Keylogger 8.0

Video Technology

This is a setup and installation application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Spyrix Security Inc.  (signed by Video Technology)

Product:
Spyrix Free Keylogger 8.0

Description:
Spyrix Free Keylogger 8.0 Setup

Version:
8.0

MD5:
68a2810a09b05b83dde38c9dc2bc6f54

SHA-1:
c29473667efaadfcabedfa6e200eccee4cbedfa7

SHA-256:
5c9c3f95e19aa6594bc557bcb138f1e32b2d775436ea62132d34beb3bbdc0852

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 11:38:11 AM UTC  (today)

File size:
7.2 MB (7,512,808 bytes)

Product version:
8.0

Copyright:
Copyright(c) 2009-2015 Spyrix Security Inc.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\sfk_setup.exe

Digital Signature
Signed by:
Video Technology

Authority:
COMODO CA Limited

Valid from:
5/14/2015 9:00:00 PM

Valid to:
5/14/2016 8:59:59 PM

Subject:
CN=Video Technology, O=Video Technology, STREET="86, 15 Karl Marks Street", L=Kirov, S=Kirov, PostalCode=610000, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
009B1136CEC0DAFFD7654D11E10DA50E0B

File PE Metadata
Compilation timestamp:
6/14/2015 8:39:56 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:piZCS7IeMd7byXRdeQnkgE+Sf22AF56kPXEihYpA+G+CJkHjKYTHW:piZ8eMdyXRdeWg2VEihGHSATHW

Entry address:
0x16602

Entry point:
55, 8B, EC, 6A, FF, 68, E0, 91, 41, 00, 68, FC, 65, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, C4, 80, 41, 00, 59, 83, 0D, 24, E4, 41, 00, FF, 83, 0D, 28, E4, 41, 00, FF, FF, 15, C0, 80, 41, 00, 8B, 0D, 08, C4, 41, 00, 89, 08, FF, 15, CC, 80, 41, 00, 8B, 0D, 04, C4, 41, 00, 89, 08, A1, D0, 80, 41, 00, 8B, 00, A3, 2C, E4, 41, 00, E8, DC, 4D, FF, FF, 39, 1D, 90, C1, 41, 00, 75, 0C, 68, 8A, 67, 41, 00, FF, 15, D4, 80...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
90.5 KB (92,672 bytes)

The file sfk_setup.exe has been seen being distributed by the following 8 URLs.

https://dw.uptodown.com/dwn/te3mQ8bt9YFPHdzbZ3odrok_dgoFCsNikQMIXSNBOZJBsow2csg0LMHzxZCIt7gHeAJI3_8g0WWybDolSQsBikZJm7241VzUAeUZ-Ia5pOoJXLfRt_75vnSSXMtu0chA/mI9o2qnwzyOIGMidE04lIOZchpkZ9L8F8S_wxqIJ0nSeuPny9JwJLPvVLEaOfEEfirxgPhMZJIBTzHgLvgPVVeRoKipZzcOdkK-b_iR3pTB1TbpfiD41xi9pSIYC3dI4/GbBheXskSrerg-x2sWmdGDn_W8n3mEgQj5-9XH1uLURkmPu1RBVGHtipCF-xGlp6mqAnnymwK9zxLZgL5hSsnhAWMRJC6_nkg64aVnR8cafKSd0UwRQqJYakoQsuMiGs/.../

https://dw.uptodown.com/dwn/6LmSMujpeBnzN1kzPThqpkjeVrGkfZULoPJl1FxQTi5gom1dlKxcmMuQE5RDLZx9QkAv5SJW58gHRI2wc9si68jf6YBeM7arRgRfCt3BaJV5uzUwGdf6Mc65LO0PX3S-/zbarBVIc--Mx028YSfUsf7hCt7iF5Q1P_GZh_IUFbdDwmAVfnktUj0S-EJjetCdPGsOiQkmOsPA_oyS7Ja7IX6qjWs_tQbRrkdEJLVLJKemQEDAxAAktvXdzhtheTwrf/6woxDTgXH56pjw-Q2a2VaXOQkx9Mg_wV5bp3T5t1V6Un5kKbIn29WwJFpNVFvSH9WgbR6WKc6d7A3lC0FeWU_40ehmPxJKqwy40KFv3niAV4-wYmwau3F12wqEc8G5Ey/.../

http://spyrix-free-keylogger.it.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPxJrO1TsV2ZQoV4i4Pnuvz5BfvcJF5YcB ioRo OYiFT7DtoqGzlYQfiAIMgAP cMmceB5iuPwv0riDm8sDPYTUtF2r7tWEBsWbR2pyzwHcts MlQx0sXT6 7OJXtrlUQ=

https://dw.uptodown.com/dwn/nq8f74w3gTXXbVlz6W9Qf2uNwY_suXjQ95Ls_sbkyuNWfFa-ow-SKzKbf-BSHnlmjF7eqHPMZV4u7xkN3q1WwhYV5djqPnBKgtq0hM6JM7e0vieKn5X_so1geXdZGCKb/M66dzZ7qQleCo_6FajiFgJrWVjui7VhxbwgKEd5BdY2XliquthPjB0drTQmhz7I-x4duBXd4YtNS5wwiZqbwApvZMqMp2dytETkzSBHGgqnFMzLyRabNq4LfDFl4y81D/CZFKecGc9oUBYc39qTNT_Q6UhhiYundO_0YWCG_cZYfyZ7vetodb2MBSY-6DvTi--L-UodQLR1e9s1Up9lK8Pz91G3p01hj63o_gZRJJZi0TEx4FiBh54p-W5LA55J48/.../

http://spyrix-free-keylogger.softonic.com.br/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPxJrO1TsV2ZQoV4i4Pnuvz5BfvcJF5YcB ioRo OYiFT7DtoqGzlYQfiAIMgAP cMmceB5iuPwv0riDm8sDPYTUtF2r7tWEBsWbR2pyzwHcts MlQx0sXT6 7OJXtrlUQ=

http://spyrix-free-keylogger.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPxJrO1TsV2ZQoV4i4Pnuvz5BfvcJF5YcB ioRo OYiFT7DtoqGzlYQfiAIMgAP cMmceB5iuPwv0riDm8sDPYTUtF2r7tWEBsWbR2pyzwHcts MlQx0sXT6 7OJXtrlUQ=

http://spyrix-free-keylogger.softonic.com/.../trmsvRChbxdrflJq3ZIylWsXfmbmYGwgWnzQBmkAP uXSl KjyGEAisgWreTuFDFKjPbn27PLl9gbXTGlPaktUOD6PetkRyIFxJmSL6aFvtjmu44OK5ZEUcv ojSt9WX85N3pqYFgNFFt2TMaJ2yYyM=

https://wundersearch.net/redirect.php?url=http://www.spyrix.com/.../sfk_setup.exe

Scan sfk_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.