» usbfix_2016_8.235.exe
Overview
Analysis
File Details
Downloads (1)

usbfix_2016_8.235.exe

UsbFix- www.SosVirus.net - www.UsbFix.net

El Desaparecido - SosVirus.net - UsbFix.net

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.sosvirus.net.

File name:

Publisher:

El Desaparecido - SosVirus.net - UsbFix.net

Product:

UsbFix- www.SosVirus.net - www.UsbFix.net

Description:

UsbFix - Remove Malware From Your Drive!

Version:

8.2.3.4

MD5:

8398d53ef260661b8d974e53ec3d776b

SHA-1:

f89c2a6518c726564d2ff6bacd87a238f0ee15e4

SHA-256:

c35c1faa75c0e57ff00035219a59e44cec5e2433d91e738b6305f1372d8ef142

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 5:21:01 AM UTC (today)

File size:

3 MB (3,124,065 bytes)

Product version:

Trademarks:

Original file name:

UsbFix.exe

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\usbfix_2016_8.235.exe

File PE Metadata

Compilation timestamp:

4/2/2016 5:20:13 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

49152:YEOhcD9gGoXKTanLCdvUioGdr8U1TPVfYK3R++ixPr/2IFsup/RnVJiDuG1Lx51:YRGBgGyCd8iDrD9RYCRiPaDK5VcDPlp

Entry address:

0x312A

Entry point:

81, EC, 84, 01, 00, 00, 53, 55, 56, 57, 33, DB, 68, 01, 80, 00, 00, 89, 5C, 24, 20, C7, 44, 24, 14, 68, 91, 40, 00, 89, 5C, 24, 1C, C6, 44, 24, 18, 20, FF, 15, B0, 70, 40, 00, FF, 15, AC, 70, 40, 00, 66, 3D, 06, 00, 74, 11, 53, E8, EF, 2D, 00, 00, 3B, C3, 74, 07, 68, 00, 0C, 00, 00, FF, D0, BE, 80, 72, 40, 00, 56, E8, 6B, 2D, 00, 00, 56, FF, 15, 08, 71, 40, 00, 8D, 74, 06, 01, 38, 1E, 75, EB, 6A, 0D, E8, C3, 2D, 00, 00, 6A, 0B, E8, BC, 2D, 00, 00, A3, 24, EC, 42, 00, FF, 15, 38, 70, 40, 00, 53, FF, 15, 6C... 
[+]

Packer / compiler:

Nullsoft install system v2.x

Code size:

24 KB (24,576 bytes)

The file usbfix_2016_8.235.exe has been seen being distributed by the following URL.

https://www.sosvirus.net/telecharger/.../?wpdmdl=173

Scan usbfix_2016_8.235.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.