home

4) repara datos ocultos de unidades.exe

USB Show

Ldc

Publisher:
Ldc

Product:
USB Show

Version:
1.00

MD5:
13bb431433b9e1fbffe0bce21fa534cb

SHA-1:
8469c34c15f12ed2b53311d585520848e3bfc1ec

SHA-256:
cd30d3604bb6a1688ba0e94ed0fe2dcd714205a6b5d06b5ea0438bc3d0f04cd1

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/27/2024 1:49:32 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

Trend Micro House Call
Suspicious_GEN.F47V0714
7.2.113

File size:
133 KB (136,192 bytes)

Product version:
1.00

Copyright:
Red Mx ( Martin Malagon )

Trademarks:
http://www.LdcMx.info

Original file name:
USB Show.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

File PE Metadata
Compilation timestamp:
5/1/2009 10:56:10 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:iDKw03DI0Ul4Eme6q6em0LjMFtA8PR0L+2Uqac:iDOI0PEmJAMg845d

Entry address:
0x1EAC

Entry point:
B8, 50, 6E, 46, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, DB, C1, 1C, A2, C7, 23, C8, 84, 94, 41, DA, 50, B1, C7, 75, 9D, B9, 49, 43, 15, 48, 70, 29, 0E, 06, 38, 87, 2B, BC, 87, 89, D5, 5F, 6E, 9A, 17, 26, 6F, 86, 35, 3D, 20, 1E, AA, 50, 39, 44, 7D, AB, AE, 29, 42, A7, 48, 48, 52, FB, 81, 51, FF, DF, B7, 78, E3, 04, 39, F1, EE, C7, 39, E0, CC, 5D, BF, 96, E7, 62, 83, A7, E0, 7C, 2A, 89, C2, 02, AE, D1, 99, A4, 0E, 3D, AA, 4A...
 
[+]

Entropy:
7.1915

Packer / compiler:
PECompact v2

Code size:
364 KB (372,736 bytes)

The file 4) repara datos ocultos de unidades.exe has been seen being distributed by the following 16 URLs.

http://download1385.mediafire.com/mbrx6jtjr3ig/.../USB Show.exe

https://doc-0k-0c-docs.googleusercontent.com/docs/securesc/jk27daf427taohfcdgdn19v3k7huvbul/ept4gdaqfra6438s7tioukma7cbm7vd8/1482580800000/.../00837590341168930875/0Bxg9ZnjJ2J-7NXVVdnFSM3pDRFU?e=download

http://download1634.mediafire.com/o1ca84kna1yg/.../USB Show.exe

http://download1634.mediafire.com/x18x954xgsig/.../USB Show.exe

http://download1634.mediafire.com/g3lbyg62w8ug/.../USB Show.exe

http://download1634.mediafire.com/09edk47glvlg/.../USB Show.exe

http://download15.mediafire.com/udjb0b6g6hig/.../USB Show.exe

http://download1385.mediafire.com/bicspnpxypug/.../USB Show.exe

http://download1385.mediafire.com/pd6cq7hmx6xg/.../USB Show.exe

http://download1385.mediafire.com/lzo44mn5o8sg/.../USB Show.exe

http://download1385.mediafire.com/jv293how47lg/.../USB Show.exe

http://download15.mediafire.com/d5zsnc6shmlg/.../USB Show.exe

http://download15.mediafire.com/lboedcuacdeg/.../USB Show.exe

http://download1385.mediafire.com/2kxj3cgf87gg/.../USB Show.exe

http://download15.mediafire.com/fmasj9bfx2hg/.../USB Show.exe

https://mega.nz/persistent/.../eVExxTya

Scan 4) repara datos ocultos de unidades.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.