NEW BLOG POST: Windows Defender AV’s behavior monitoring coupled with cloud-powered machine learning models uncovered and blocked a massive Dofoil (Smoke Loader) coin mining campaign. Read the post
Alert level: Medium Detected with Windows Defender Antivirus
Also detected as: Troj/Keygen (Sophos) Crack (VirusBuster) not-a-virus:Keygen (Kaspersky) CRCK_KEYGEN (Trend Micro)
Windows Defender detects and removes this threat.
This tool generates software keys.
Malware is often installed along with this tool. Microsoft security software finds malware on more than half of the PCs where we detect this tool.
You can read more about Win32/Keygen in Volume 13 of the Security Intelligence Report.