Best Free Keylogger Lite

Published:
Last updated:

Threat Scorecard

Popularity Rank: 3,664
Threat Level: 10 % (Normal)
Infected Computers: 2,302
First Seen: November 26, 2019
Last Seen: October 4, 2026
OS(es) Affected: Windows

The detection of Best Free Keylogger Lite on your system indicates a potential security threat that requires immediate attention. This Trojan-type threat is designed to secretly monitor and record keystrokes, potentially leading to unauthorized access to sensitive information such as passwords, credit card numbers, and other personal data.

What Is Best Free Keylogger Lite?

Best Free Keylogger Lite is a type of malicious software that is designed to remain hidden on an infected system, making it difficult to detect without the use of specialized security software. Its primary function is to capture and record keystrokes, which can then be transmitted to a remote server or saved locally for later retrieval. This type of threat can be particularly dangerous, as it can lead to identity theft, financial fraud, and other serious consequences.

How Best Free Keylogger Lite Operates

Once Best Free Keylogger Lite has infected a system, it can begin to monitor and record keystrokes in real-time. This can include login credentials, email passwords, and other sensitive information. The malware may also be able to capture screenshots, monitor browsing activity, and even record audio and video. In some cases, the malware may also be able to spread to other systems through infected files, emails, or other means.

Symptoms of Infection

Systems infected with Best Free Keylogger Lite may exhibit a range of symptoms, including slow system performance, unusual network activity, and unexplained changes to system settings. In some cases, the malware may also cause system crashes, freezes, or other instability issues. However, in many cases, the malware may operate silently, making it difficult to detect without the use of specialized security software.

  • Unexplained system crashes or freezes
  • Slow system performance
  • Unusual network activity
  • Unexplained changes to system settings

How to Remove Best Free Keylogger Lite

  1. Boot your system in Safe Mode with Networking to prevent the malware from loading and to allow for easier removal.
  2. Use a reputable security tool, such as SpyHunter, to perform a full scan of your system and detect and remove any malware.
  3. Uninstall any suspicious programs or applications that may be related to the malware.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
  5. Reboot your system and perform a follow-up scan to ensure that the malware has been completely removed.

Conclusion

The detection and removal of Best Free Keylogger Lite is a critical step in protecting your system and sensitive information from potential security threats. By following the steps outlined above and using reputable security software, you can help to ensure that your system is safe and secure. It is also important to practice good security habits, such as regularly updating your operating system and software, using strong passwords, and avoiding suspicious emails and attachments, to help prevent future infections.

SpyHunter Detects & Remove Best Free Keylogger Lite

File System Details

Best Free Keylogger Lite may create the following file(s):
# File Name MD5 Detections
1. 479977cb3fcbf001e879b4bfce4f1aed_tmp3038.exe 479977cb3fcbf001e879b4bfce4f1aed 84
2. d9bb076692dd72337ba6cac58f00430a38d4081843548ec4ea396adf150fd7a6 647570f549305357a343a9d1182255ae 23
3. installer_free.exe 76e1e74420a575f8504002101ac5170f 19
4. 6.1.0_installer_free.exe bb55d6a650fdaf946ebcdd26c24f989d 15
5. d69b238438fc9b322b3f9000da2b5514503f59b9abb38d2f2cbae956165c9179 bf92df38e3ed45c23d581fec2c15b4f9 13
6. syscrb.exe 811620702659cf36f3e0bf0a499b1566 10
7. CBAccess.exe 880bc48473c99cd781ea6db706fc2ed3 7
More files

Analysis Report

General information

Family Name: PUP.Best Free Keylogger Lite
Signature status: No Signature

Known Samples

MD5: 5babb2841593aa81b486dccce953da72
SHA1: 910165fb3420ad029d58eddf923d71d3fb332007
SHA256: 16D30BDE7BE101E05DCD8F3A2665CE966DA59FDE9657F852A8F3D10B72191342
File Size: 2.56 MB, 2561536 bytes
MD5: d0c7e58ff85c49c4277f6776716a50ea
SHA1: 93e9fa7973330c33ec0f0f7598bb6d2376894b2d
SHA256: 16BFF1AF258714840BF5F2B1867D6307CB3AE357F329ED3DE63AEBE47006FC62
File Size: 7.74 MB, 7737345 bytes
MD5: e6e2af446393e600a5f7ee70db4ecdb2
SHA1: 9457d9bfdbaa8745564577b1a49ea81cbe498f14
SHA256: 35F851ADA36E4C7504821C386676B6515AB924FDA26C7362B5FB55372D12AFF1
File Size: 19.46 KB, 19456 bytes
MD5: d3cba993500a61d9926ea605ad6175fd
SHA1: e308c373f1b50e917f8f5f0c6328e24b7c77a15a
SHA256: 863A59E5B2231C4127DBEF4D4C3002AF523845F47B6E808355E826D43276E23B
File Size: 2.60 MB, 2601984 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have debug information
  • File doesn't have exports table
  • File doesn't have relocations information
  • File doesn't have security information
  • File has exports table
  • File has TLS information
  • File is .NET application
  • File is 32-bit executable
  • File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
Show More
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Icons

Windows PE Version Information

Name Value
Assembly Version
  • 8.3.0.0
  • 8.2.0.0
  • 1.0.5.0
Comments
  • Last update: 09/06/2023
  • This installation was built with Inno Setup.
Company Name
  • bestxsoftware
  • Bestxsoftware
File Description
  • App Setup
  • bwurcap
  • syscrb
File Version
  • 6.0.0.0
  • 1.0.5.0
Internal Name
  • bwurcap.dll
  • syscrb.exe
Legal Copyright
  • bestxsoftware © 2024
  • bestxsoftware © 2026
  • Copyright © Bestxsoftware 2023
Original Filename
  • bwurcap.dll
  • syscrb.exe
Product Name
  • App
  • bwurcap
Product Version
  • 8.2.0
  • 6.0.0.0
  • 1.0.5.0

File Traits

  • .NET
  • dll
  • NewLateBinding
  • x86

Block Information

Total Blocks: 1,981
Potentially Malicious Blocks: 121
Whitelisted Blocks: 1,210
Unknown Blocks: 650

Visual Map

0 0 0 0 ? 0 ? 0 0 0 0 ? ? ? 0 ? x x 0 0 ? 0 0 0 0 ? ? x ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x ? 0 ? 0 ? ? ? 0 x ? ? 0 ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? 0 0 0 0 0 ? ? ? ? 0 ? ? ? ? ? ? ? ? ? ? 0 0 ? ? x ? 0 0 0 ? x 0 ? ? 0 ? 0 0 0 0 0 ? 0 0 0 0 ? ? 0 0 ? ? x ? ? 0 ? 0 0 0 ? 0 ? x 0 ? ? ? ? 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? ? ? ? ? ? x ? ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? ? 0 ? x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? ? ? 0 0 ? ? ? ? ? ? ? ? ? ? x ? ? ? ? 0 ? 0 0 0 0 0 0 0 0 ? ? ? ? ? 0 ? 0 ? 0 0 x x ? ? ? 0 ? 0 ? 0 x 0 0 0 ? 0 0 ? 0 ? 0 0 0 0 0 x ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? 0 ? ? ? ? ? ? ? ? 0 0 ? 0 0 0 x ? x 0 ? 0 0 0 0 0 0 0 ? ? ? ? ? ? x ? ? ? ? ? ? 0 0 ? 0 0 0 0 0 0 0 ? ? ? ? ? ? x ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? 0 ? ? ? 0 0 ? 0 0 0 ? x 0 ? 0 0 0 0 0 ? ? ? ? ? 0 ? 0 0 x x ? ? ? 0 ? ? ? x ? ? ? ? ? ? ? ? 0 0 ? 0 0 0 0 ? 0 0 x 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 x x x x x x x x x x x x x x x x x x x x ? ? x 0 0 ? 0 0 0 ? ? x ? ? 0 0 ? 0 0 0 0 0 0 0 ? ? ? 0 ? ? ? x ? 0 0 ? 0 0 0 0 ? 0 0 ? x 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? ? ? ? x ? x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? ? ? ? ? ? ? 0 0 0 0 0 ? 0 0 ? x 0 0 ? 0 0 0 0 0 ? ? x 0 0 x 0 ? 0 0 0 0 0 0 0 0 ? ? ? ? 0 ? ? ? ? ? x ? 0 x ? ? ? x 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? x ? ? ? ? x x 0 0 ? ? x ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? ? ? ? ? ? x x ? ? ? ? ? ? ? 0 0 ? 0 0 ? ? ? x ? ? ? 0 ? ? ? ? 0 ? ? ? ? ? ? ? 0 ? 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? x ? ? ? ? ? ? ? 0 ? ? ? ? x x x x ? ? ? ? ? 0 0 ? ? ? ? ? ? ? x ? x ? x ? x ? 0 ? ? ? ? ? ? ? ? ? 0 0 0 0 0 ? ? ? ? ? ? ? ? ? x ? ? ? 0 0 ? ? 0 ? ? ? ? ? ? ? ? ? 0 0 0 0 0 ? 0 ? 0 0 0 ? 0 0 0 ? 0 ? 0 0 0 ? 0 0 ? 0 0 0 0 0 0 0 0 ? 0 0 0 0 ? ? ? 0 ? ? x x 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? ? ? ? 0 ? ? ? ? x x x x 0 ? 0 0 ? ? x 0 0 ? 0 0 0 0 0 0 0 ? ? ? ? 0 0 ? 0 0 0 ? 0 0 x ? 0 0 ? 0 0 0 x ? x ? ? ? ? ? ? 0 ? 0 0 0 0 0 ? ? ? ? ? x ? 0 0 ? ? 0 ? ? 0 0 ? 0 0 0 0 0 ? ? 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x ? ? ? x 0 ? 0 0 0 ? ? ? ? 0 x ? 0 0 0 ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? 0 0 ? 0 0 0 x ? 0 0 ? 0 0 0 0 ? ? x 0 0 ? 0 0 0 0 ? 0 ? ? 0 ? ? ? ? x ? 0 0 ? 0 0 0 0 0 ? 0 x ? ? 0 0 ? 0 0 ? ? x 0 0 ? 0 0 0 0 0 ? x 0 0 ? 0 0 ? x 0 0 0 0 0 0 0 0 0 0 0 ? ? ? ? ? ? 0 0 ? 0 0 0 ? ? ? 0 x x ? 0 ? x ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? 0 ? 0 0 0 0 ? ? ? ? ? ? ? ? x ? ? ? 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? ? 0 ? ? x ? ? ? ? ? 0 ? 0 0 0 0 ? ? x 0 0 ? 0 x ? 0 0 0 ? ? 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 ? 0 0 0 0 0 0 ? ? ? ? ? 0 ? ? ? ? x x ? 0 0 ? 0 0 0 ? ? x 0 0 0 0 0 0 0 0 ? x ? ? ? ? ? ? ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? 0 0 x ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? x ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? 0 0 0 ? x ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? 0 0 0 0 0 x ? ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? x ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? x 0 0 0 ? ? ? x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 ? x ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? 0 0 0 ? x ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Files Modified

File Attributes
c:\users\user\appdata\local\temp\is-25ld8.tmp\93e9fa7973330c33ec0f0f7598bb6d2376894b2d_0007737345.tmp Generic Write,Read Attributes
c:\users\user\appdata\local\temp\is-7u97e.tmp\_isetup\_setup64.tmp Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\is-7u97e.tmp\image.bmp Generic Write,Read Attributes

Windows API Usage

Category API
Syscall Use
  • ntdll.dll!NtAccessCheck
  • ntdll.dll!NtAlpcSendWaitReceivePort
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtClearEvent
  • ntdll.dll!NtClose
  • ntdll.dll!NtConnectPort
  • ntdll.dll!NtCreateEvent
  • ntdll.dll!NtCreateMutant
  • ntdll.dll!NtCreatePrivateNamespace
  • ntdll.dll!NtCreateSection
Show More
  • ntdll.dll!NtCreateSemaphore
  • ntdll.dll!NtCreateThreadEx
  • ntdll.dll!NtDeviceIoControlFile
  • ntdll.dll!NtDuplicateObject
  • ntdll.dll!NtDuplicateToken
  • ntdll.dll!NtEnumerateKey
  • ntdll.dll!NtEnumerateValueKey
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtOpenDirectoryObject
  • ntdll.dll!NtOpenEvent
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenProcess
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenProcessTokenEx
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenSemaphore
  • ntdll.dll!NtOpenThreadToken
  • ntdll.dll!NtOpenThreadTokenEx
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryDebugFilterState
  • ntdll.dll!NtQueryDefaultLocale
  • ntdll.dll!NtQueryDirectoryFileEx
  • ntdll.dll!NtQueryFullAttributesFile
  • ntdll.dll!NtQueryInformationFile
  • ntdll.dll!NtQueryInformationJobObject
  • ntdll.dll!NtQueryInformationProcess
  • ntdll.dll!NtQueryInformationThread
  • ntdll.dll!NtQueryInformationToken
  • ntdll.dll!NtQueryKey
  • ntdll.dll!NtQueryLicenseValue
  • ntdll.dll!NtQueryPerformanceCounter
  • ntdll.dll!NtQuerySecurityAttributesToken
  • ntdll.dll!NtQuerySecurityObject
  • ntdll.dll!NtQuerySystemInformation
  • ntdll.dll!NtQuerySystemInformationEx
  • ntdll.dll!NtQueryValueKey
  • ntdll.dll!NtQueryVirtualMemory
  • ntdll.dll!NtQueryVolumeInformationFile
  • ntdll.dll!NtQueryWnfStateData
  • ntdll.dll!NtReadFile
  • ntdll.dll!NtReadRequestData
  • ntdll.dll!NtReleaseMutant
  • ntdll.dll!NtReleaseSemaphore
  • ntdll.dll!NtReleaseWorkerFactoryWorker
  • ntdll.dll!NtRequestWaitReplyPort
  • ntdll.dll!NtResumeThread
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationKey
  • ntdll.dll!NtSetInformationProcess
  • ntdll.dll!NtSetInformationThread
  • ntdll.dll!NtSetInformationVirtualMemory
  • ntdll.dll!NtSetInformationWorkerFactory
  • ntdll.dll!NtSubscribeWnfStateChange
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtTraceControl
  • ntdll.dll!NtUnmapViewOfSection
  • ntdll.dll!NtUnmapViewOfSectionEx
  • ntdll.dll!NtWaitForAlertByThreadId
  • ntdll.dll!NtWaitForSingleObject
  • ntdll.dll!NtWaitForWorkViaWorkerFactory
  • ntdll.dll!NtWaitLowEventPair
  • ntdll.dll!NtWriteFile
  • UNKNOWN
User Data Access
  • GetComputerNameEx
  • GetUserDefaultLocaleName
  • GetUserObjectInformation
Anti Debug
  • IsDebuggerPresent
Encryption Used
  • BCryptOpenAlgorithmProvider
Process Shell Execute
  • CreateProcess
Keyboard Access
  • GetKeyState

Shell Command Execution

"C:\Users\Idqxouue\AppData\Local\Temp\is-25LD8.tmp\93e9fa7973330c33ec0f0f7598bb6d2376894b2d_0007737345.tmp" /SL5="$501F8,6911403,832512,c:\users\user\downloads\93e9fa7973330c33ec0f0f7598bb6d2376894b2d_0007737345"