home

autoclickershocker-setup.exe

Auto Clicker by Shocker

Yang Cai

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from download1491.mediafire.com and multiple other hosts.
Publisher:
shockingsoft.com   (signed by Yang Cai)

Product:
Auto Clicker by Shocker

Version:
Auto Clicker by Shoc

MD5:
ab911567e1e2cd12afa8c7b34c49124a

SHA-1:
bc81ac8aa04b92e7d5c66062f45fc0b5c0806cf4

SHA-256:
a79ad94a093682d29bc9d93b69758d76d9e6cdadc212ce4255dcddcb76dbbf42

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 11:09:37 AM UTC  (today)

File size:
858.5 KB (879,112 bytes)

Product version:
V3.0

Copyright:
www.shockingsoft.com

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\autoclickershocker-setup.exe

Digital Signature
Signed by:
Yang Cai

Authority:
StartCom Ltd.

Valid from:
4/5/2012 5:06:08 PM

Valid to:
4/7/2014 2:49:25 PM

Subject:
E=info@remouse.com, CN=Yang Cai, L=NanChong, S=Sichuan, C=CN, Description=Qu3en5jyPutQkHg5

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
05C1

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:0naTk8XeZPcV/EH5vgxSY311pIrwESkS3rJQBtUkBgqX:0aAUeNcVIY3ewVinXBgu

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9755

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file autoclickershocker-setup.exe has been seen being distributed by the following 16 URLs.

http://download1491.mediafire.com/7xrh2ab3frdg/.../AutoClickerShocker-Setup.exe

http://download1491.mediafire.com/wn1dscmpr2vg/.../AutoClickerShocker-Setup.exe

http://download1491.mediafire.com/au3zieich43g/.../AutoClickerShocker-Setup.exe

http://download1491.mediafire.com/69956q33jeog/.../AutoClickerShocker-Setup.exe

http://download1298.mediafire.com/26id2klrwd6g/.../AutoClickerShocker-Setup.exe

http://download1406.mediafire.com/fnb38hhflugg/.../AutoClickerShocker-Setup.exe

http://download1234.mediafire.com/wgav5um57mug/.../AutoClickerShocker-Setup.exe

http://download1673.mediafire.com/z4akiaxr4big/.../AutoClickerShocker-Setup.exe

http://download1234.mediafire.com/ec8uc13u46mg/.../AutoClickerShocker-Setup.exe

http://download1308.mediafire.com/dbw39mv2cyug/.../AutoClickerShocker-Setup.exe

http://download963.mediafire.com/2lwoubg5vqzg/.../AutoClickerShocker-Setup.exe

https://www.dropbox.com/s/.../AutoClickerShocker-Setup.exe

http://download.s32cdn.com/41/405030/.../AutoClickerShocker-Setup.exe

http://auto-clicker-by-shocker.soft32.com/get/file/id/.../?no_download_manager=true

http://down.shockingsoft.com/AutoClickerShocker-Setup.exe

http://software-files-a.cnet.com/s/software/12/63/33/.../AutoClickerShocker-Setup.exe

Scan autoclickershocker-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.