Gridinsoft Logo
File Icon

Glary Utilities 6 Keymaker.exe Trojan Heuristic Analysis

Updated 5 days ago
Checked by Malaware Check
Glary Utilities 6 Keymaker.exe

Technical Analysis

File Name Glary Utilities 6 Keymaker.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-06-01 06:00:22 UTC
⚠

Trojan.Heur!.032104A1

Malware family: Heuristic

Heuristic detection uses behavioral analysis and pattern recognition to identify potential threats without specific signatures. This proactive approach detects suspicious code behavior that may indicate malware presence. Detection may occasionally produce false positives when legitimate software exhibits similar behavioral patterns.
N/A
Detection Rate
6,063,616
File Size (bytes)
2025-06-01
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
e6fe6cd510a7c62f3e4542318944fd84
SHA1
d18aa46aa89a8f86cab2bfe3ee631307d21417bb
SHA256
ee81a8bbdb37cced80e1116a6d3a7e68ae6420d907c7851e2fc6f836317d8499
SHA512
39fe6d524464aacfa25e0c15cb196e543873229f87cecf9be4015a2890ab3b253057718793b35e30f20c4a92b7a3e5349956c77fc8df5986de9222129407974d
ImpHash
4328f7206db519cd4e82283211d98e83

PE Analysis

Basic Information

▼
Icon
Hash: 9b0c13667ad8934280f510d33986251c
Fuzzy: 69b5b6ef46e2a1b4f917cd9728a35459
dHash: 000000d8d2010000
Image Base 0x00400000
Entry Point 0x00cb81b8
Compilation Time 2038-07-05 10:46:46
Checksum 0x005ca747 (Actual: 0x005ca747)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 2 libraries
kernel32, mscoree
Exports 0 functions
Resources 4 Resources
Sections 7 Sections

Version Information

▼
Translation 0x0000 0x04b0
Comments Jasi2169
CompanyName Jasi2169
FileDescription Glary Utilities 6 Keygen
FileVersion 1.0.0.0
InternalName Glary Utilities 6 Keygen.exe
LegalCopyright Copyright © 2023
LegalTrademarks All Rights Reserved
OriginalFilename Glary Utilities 6 Keygen.exe
ProductName Glary Utilities 6 Keygen
ProductVersion 1.0.0.0
Assembly Version 1.0.0.0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
0x00002000 3,538,944 bytes 3,291,648 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C4AF791629FE45CC289C90CCF521DA9D
0x00362000 21,664 bytes 2,560 bytes 7.74 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 398EAFAF862AD658D8446B81B7CF7513
0x00368000 12 bytes 512 bytes 4.64 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2C1641B9397824EACD9DD17FE59E8A32
.idata 0x0036a000 8,192 bytes 512 bytes 1.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F89B5ADCEC033EB16F05834A0BAD846E
.rsrc 0x0036c000 22,016 bytes 22,016 bytes 2.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4143E09876BB4F313FAC5AE006A55FC8
jasi2169 0x00372000 5,529,600 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.boot 0x008b8000 2,745,344 bytes 2,745,344 bytes 7.97 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0B4928D0CE23962D7088CBE9B26C843E
Entropy Analysis Alert

3 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 4 (21,359 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 16,936 bytes
79.3%
RT_GROUP_ICON 1 20 bytes
0.1%
RT_VERSION 1 992 bytes
4.6%
RT_MANIFEST 1 3,411 bytes
16%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Heur!.032104A1 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.032104A1 without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware