home

contourautoplay.exe

Twenty20, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ContourCameraFinder’.
Publisher:
Twenty20, Inc.  (signed and verified)

MD5:
cbf8a1882ee5b746a7e36124a331f102

SHA-1:
321822f8977ac2ab9005c1c6597ca2611eae7030

SHA-256:
8f98addd6db52dc170efc3e869a9ebd6e178c9ce9661262e9c2040a4a1f9285c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 12:38:03 PM UTC  (today)

File size:
70.5 KB (72,184 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\contourstoryteller\contourautoplay.exe

Digital Signature
Signed by:
Twenty20, Inc.

Authority:
Starfield Technologies, Inc.

Valid from:
12/30/2009 9:31:08 AM

Valid to:
12/30/2010 9:31:08 AM

Subject:
CN="Twenty20, Inc.", O="Twenty20, Inc.", L=Seattle, S=WA, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
046AF03B8764B6

File PE Metadata
Compilation timestamp:
12/8/2010 2:10:30 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:6pCylb/c8WARaywgMSoKTACjVi1O0IHpOkLK:6pCylb/c8WARaywgMSoKTAyk1O0IHpO9

Entry address:
0x2F3B

Entry point:
E8, 48, 05, 00, 00, E9, 36, FD, FF, FF, CC, FF, 25, C0, 40, 40, 00, FF, 25, C4, 40, 40, 00, CC, CC, 68, AD, 2F, 40, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 18, 60, 40, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC, FF, 75, 14, FF, 75, 10, FF, 75, 0C...
 
[+]

Entropy:
5.2852

Code size:
10 KB (10,240 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ContourCameraFinder

Command:
C:\Program Files\contourstoryteller\contourautoplay.exe


The file contourautoplay.exe has been discovered within the following program.

Contour Storyteller  by Contour
Publisher's description - “Contour Storyteller brings video and location together into a single experience. When you play your GPS videos you'll be able to watch your path as you bomb down the hill while interacting between the map and the video player to fast forward to your favorite parts.”
contour.com/software/storyteller
About 2% of users remove it
 
Powered by Should I Remove It?

Scan contourautoplay.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.