Home / malware

PDF

HackTool:Win32/Keydump

First posted on 15 February 2019.
Source: Microsoft

Aliases :

HackTool:Win32/Keydump is also known as Win-AppCare/WinKeyfinder.272357, not-a-virus:PSWTool.Win32.RAS.a, FindKeyXP.A.dropper, HackTool.EEG, Win32/PSWTool.RAS.A, not-a-virus.Keyfinder.Findkey, RAS Key Editor, CRCK_JBEAN.A, Jelly Bean Keyfinder.

Explanation :

HackTool:Win32/Keydump is a tool that retrieves Microsoft Windows XP and Microsoft Office product keys. It is also capable of modifying the current Windows XP product key and Windows registration information. When run it may create the folder "rarsfx0", in which it drops the following files:   chgxp.vbs findkey.exe officekey.exe xpkey.exe  The user interface may be similar to the following:   Analysis by Jireh Sanico

Last update 15 February 2019

 

TOP