home

Autorun.exe

PWEXE

HapyPure

Publisher:
HapyPure

Product:
PWEXE

Version:
1.00

MD5:
52bef2d43ccbb8a0df9aec83d3a30d45

SHA-1:
6186511424a42de7185fb5c9748cce257f6f7a98

SHA-256:
5dd066c0593cead068168281ce113e93171396cd9b9cd835c0d764fa9a3860d5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/19/2024 4:06:01 PM UTC  (today)

File size:
10.5 KB (10,752 bytes)

Product version:
1.00

Original file name:
Autorun.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
1/18/2004 7:25:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.20

CTPH (ssdeep):
96:w6jFsY7M+oLYN5GZy/n/gfVkLN1L5VnWC/WESoLwWu:Lj2+FKZC/Ek55WsSFJ

Entry address:
0x1104

Entry point:
68, 78, 17, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, C0, 6A, 82, 1C, E7, 1D, 15, 49, A9, F4, DF, D2, 2C, 7B, 2B, BF, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 64, 0D, 0A, 20, 20, 20, 50, 57, 45, 58, 45, 00, 56, 42, 00, 00, 00, 00, FF, CC, 31, 00, 03, 31, 06, 3B, D5, 5D, 37, 21, 44, 8D, DF, 72, C2, DA, F8, 43, 14, 0A, 95, B9, 7F, A5, 01, A8, 4B, A9, 5C, 54, 5F, EB, B7, BA, 40, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00, AA, 00, 60, D3, 93, 00, 00, 00...
 
[+]

Entropy:
4.0768

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
5.5 KB (5,632 bytes)

The file Autorun.exe has been seen being distributed by the following URL.

https://www.wd2go.com/api/1.0/rest/device_redirect?device_user_id=12062261&device_uri=/api/1.0/rest/file_contents/Public/Software/.../Autorun.exe

Scan Autorun.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.