home

Au_.exe

Shape Collage

Shape Collage Inc.

(Note, the name of the file is not always 'AU_.exe'; the NullSoft NSIS uninstaller changes the original name while copying it to the temporary directory.) This NSIS uninstallation utility is designed to provide removal capabilities of the accompanied program. This is installed with Shape Collage.
Publisher:
Shape Collage Inc.  (signed and verified)

Product:
Shape Collage

Description:
Shape Collage Setup for Windows

Version:
2.5.3

MD5:
68e2964bfb1f340b375dc8e9aeb1b81f

SHA-1:
80d3bc142ca827322ecb5f3034a6e78e6981efef

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:34:58 AM UTC  (today)

File size:
120.2 KB (123,072 bytes)

Product version:
2.5.3

Copyright:
Copyright Shape Collage Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\au_.exe

Digital Signature
Signed by:
Shape Collage Inc.

Authority:
VeriSign, Inc.

Valid from:
10/12/2012 2:00:00 AM

Valid to:
10/13/2013 1:59:59 AM

Subject:
CN=Shape Collage Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Shape Collage Inc., L=Vancouver, S=British Columbia, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
67573CFB94D6FA8B18D2651A60D7FB6A

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:yQpQ5EP0ijnRTXJzyg6Z7ei9n2HYRaL0AuN4DLRXOPkKUbRlpR6PsC5rwuU7N:yQIURTXJGp7ei92HYw0AkklbSPssyN

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file Au_.exe has been discovered within the following program.

Shape Collage  by Shape Collage Inc.
Publisher's description - “Create picture collages in less than a minute with just a few mouse clicks. Use photos on your computer or from the web to make collages. Adjust the collage size, size of the photos, number of photos, and spacing between photos.”
www.shapecollage.com
About 5% of users remove it
 
Powered by Should I Remove It?

Scan Au_.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.