Au_.exe

TNod User & Password Finder

Tukero[X]Team

(Note, the name of the file is not always 'AU_.exe'; the NullSoft NSIS uninstaller changes the original name while copying it to the temporary directory.) This NSIS uninstallation utility is designed to provide removal capabilities of the accompanied program. This is the uninstaller utility registered in the Windows Control Panel for the program TNod User & Password Finder by Tukero[X]Team.
Publisher:
Tukero[X]Team

Product:
TNod User & Password Finder

Description:
Installer. NSIS

Version:
1.4.2.3

MD5:
a6a94ff8593cc67075c66a2654027972

SHA-1:
f50ff92ed9ba5e1a943689a4e3835b8ea76f3117

SHA-256:
c06a5c4644314c255d917f59f0e4f439acb52f9e38e6e3ceb270a7689b84398e

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 11:27:24 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Malwarebytes
Trojan.Agent.CK
v2013.12.21.12

File size:
68.8 KB (70,445 bytes)

Product version:
1.4.2.3

Copyright:
© Tukero

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\au_.exe

File PE Metadata
Compilation timestamp:
12/6/2009 2:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:iQpQ5EP0ijnRTXJKqpxn6acrTPQxaO5LJOxMaPOVBZ+Vlmr:iQIURTXJ7N67PQfKaaI+TA

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

Program Uninstaller
Program name:
TNod User & Password Finder

Display publisher:
Tukero[X]Team

Display version:
1.4.2.3

Uninstall string:
"C:\Program Files\ESET\tnod\TNod User & Password Finder\uninst-TNod.exe"


The file Au_.exe has been discovered within the following program.

TNod User & Password Finder  by Tukero[X]Team
Publisher's description - “TNod User & Password Finder is software that is used to search the internet for activation keys for any version of NOD32 programs. In particular, it provides the username and password for ESET NOD32 Smart Security and ESET NOD32 Antivirus.”
tukero.blogspot.com
67% remove it
 
Powered by Should I Remove It?

Scan Au_.exe - Powered by Reason Core Security