home

autorun-usb-helper-1-01-es-en-br-fr-de-it-dk-cat-win.exe

Autorun USB Helper

Complit-S OOO

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Visual Designing   (signed by Complit-S OOO)

Product:
Autorun USB Helper

Description:
Autorun USB Helper Setup

MD5:
54d4109063817d708d79394f228c052e

SHA-1:
4059a2aae26af8194516911f63f66fb6842d579e

SHA-256:
08d0aa93a2e0e66de98e8b9d36272ba2af23f29c99e5e6224a3d484000d6fff6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:46:08 PM UTC  (today)

File size:
1.1 MB (1,124,920 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\autorun-usb-helper-1-01-es-en-br-fr-de-it-dk-cat-win.exe

Digital Signature
Signed by:
Complit-S OOO

Authority:
COMODO CA Limited

Valid from:
8/19/2011 2:00:00 AM

Valid to:
8/19/2014 1:59:59 AM

Subject:
CN=Complit-S OOO, O=Complit-S OOO, STREET=Lyadova 64, L=Penza, S=No, PostalCode=440071, C=RU

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0080FAAE1494B042D2CD80A687DFBE55FD

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:lnaeO/RufeAHBrnl5H/zR2J4/bX7RQdFSbnpwhlRd5y1NkkS3rJQBtUkBg8G:laLpAhrTzH/bX7sM21y12inXBg8G

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file autorun-usb-helper-1-01-es-en-br-fr-de-it-dk-cat-win.exe has been seen being distributed by the following 6 URLs.

http://dw.uptodown.com/dwn/_X9_GfFtCydFaoNJlJ6cmdNYfj_RCTxSO96G35rb057tEl_vBQ3yfVejgQ0L3GSplcimr8BNxQ5DyS7hGGWed-zQ7qfeqvjzii3CifXJ0wISERQSuCE-PQcbourYcthv/JacTEeQ7llIUB4cPXMtpp3JbazH7rJ5WUot4f8AU8NYiJstRwnCBQXGqa0Z8H-A4eXvoQmwH24-hzb9xjXWrc1Gr1WIpZ-41S_SXHWtluvcFRe5GsxGhZkWOuUY_D6gG/VUrjGbLOv92A2tzHXnRzYMDA13_CBNHqTHMy8tUo_wcr6qDuMnM7f1BSE8dp-8My7ai8GJ1Ctd8RJVPazda2HN19_Z5mbVHoxJugvf8NHztyMdlummelGQBxnjXyC2jb/.../

http://dw.uptodown.com/dl/1435446794/.../autorun-usb-helper-1-01-es-en-br-fr-de-it-dk-cat-win.exe

http://dw11.uptodown.com/dwn/hK4_cg6v1CedcHEFQ5iSvRRJtCAF1i29Ff-infSd4uuXQ7TRu_qn3gGvRmbOWPQ3qxcFs6-l1Wru0jjB7f4MByl-vIVLT4_DDkaQED4SgiWe_QueWqR_RN_oIs68IJnG/_RHXwo_2HdWVb9ecC3GCnuJUiTLW3wLTq1z9Osj84JJAbl0WL9PY6EZVHNRxXFssxKv_iGvvBnFspr8uIK5kVLrGE7FHHPBG4J1yi8cRmtoa3YVuRMmjUkcS0mSFGJBh/hyntD16ZhnJmWYs3QMyXDu1ZnGyyJAOXJVnVPq8eApaGtnCHW0rrqtKS0cr_de8NbxwwomMYOwNFVxEm1vnbF_Tn35BytzgtgnDGEsnBZCCefyu8nDyaVtlQDtD69-TP/.../autorun-usb-helper-1-01-es-en-br-fr-de-it-dk-cat-win.exe

http://www.visualdesigning.com/.../autorunusbhelper.exe

https://dw.uptodown.com/dwn/WsESQjxD8nmulRPN_StQ7_TrJt_POguOWtG5CI50TrO_6OAwE0yKhBQUbR0EY0-JVOq3EnBXZFoV4ZwHaCN1uX8kYYbIqLl_NaZD2X5lFg_YOe9BbwzYGFCq_uG28KlY/zvbTh1WC2P6aFok5Mk2WpiQZ6aHimAcyA4b0IPq5qhgzCeiqTV1B99rIl5Sh6h4S2RT_4KTv7CLwU_1yrECkAns6vcSZhu3YfwO-qPDxCgzeGzlA__1v76v5z6LpeBe4/qDSLTB-8QHkGaDi6rzl3TyS46GGKsYnUGnju1_xToxLIWXxtrZYme4GeSYGsafH7okJfFqU3mDmkn6lEvByE29FWUPUMxGpGEWxBQaIkZSqxWD8S2M8d-d8UMaec5hFK/.../

https://dw5.uptodown.com/dwn/upt6rDNFAmiRahXbU6pr8uhKcTyXtrLWLq09-A2DM4K1k2o8sqgDBYNLlaHB9rYmSbYQd8k7FWfMGnn5hjC2-2PKWkFc4tVQFzdVcOu1temzh9FFuWcHobxnt9SoP-KF/2pYDaEzc360U1wKJ3DzWY8rY9Tu2WD9BD0xZt_yetLWEhJ_TI7wFcdBdAy55V7k36TygtpJNANJS5HJoF1sJ2ilzdD9QPGRgM3yYHyuPw8njFH80Kz8IG1UACxGwOnIw/Y8cnZCwqf54Uu1A05d_lX51MYfkE14riXF4gJ3RpDtC5eAuY_JY6B7btgRUb6w310Fz5U5SkUZVDShku8rH0_TGN1gYf1PQL6s8w7QNPBXABnUapBEPGD-pQRGU0KO-m/.../autorun-usb-helper-1-01-es-en-br-fr-de-it-dk-cat-win.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.