home

autohotkey104805_install.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download1861.mediafire.com and multiple other hosts.
MD5:
97bc6ad7ef40955712ca1e4e8e195104

SHA-1:
13e5a9ca6d5b7705f1cd02560c3af4d38b1904fc

SHA-256:
4311c3e7c29ed2d67f415138360210bc2f55ff78758b20b003b91d775ee207b9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 8:14:18 AM UTC  (today)

File size:
2 MB (2,047,357 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\autohotkey104805_install.exe

File PE Metadata
Compilation timestamp:
4/27/2007 2:59:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:W0Yfc6z628HBUyNSGpRsc7RQBZszjJCxKBjvBtsF7ezgAAjfN:W0YfLiCyAkRssR7z9T1Btsb

Entry address:
0x32FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 70, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 53, FF, 15, 78, 72, 40, 00, A3, D4, 3F, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, E8, F4, 41, 00, FF, 15, 54, 71, 40, 00, 68, 2C, 92, 40, 00, 68, 20, 37, 42, 00, E8, 9A, 27, 00, 00, FF, 15, B4, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 88, 27, 00, 00, 53, FF, 15, 08, 71, 40, 00, 80, 3D, 00, 90, 42, 00, 22, A3, 20, 3F, 42, 00, 8B, C7, 75, 0A...
 
[+]

Entropy:
7.9947

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file autohotkey104805_install.exe has been discovered within the following program.

AutoHotkey 1.0.48.05  by Chris Mallett
Publisher's description - “Automate almost anything by sending keystrokes and mouse clicks. You can write a mouse or keyboard macro by hand or use the macro recorder. Create hotkeys for keyboard, joystick, and mouse. Virtually any key, button, or combination can become a hotkey.”
www.autohotkey.com
About 4% of users remove it
 
Powered by Should I Remove It?

The file autohotkey104805_install.exe has been seen being distributed by the following 50 URLs.

http://download1861.mediafire.com/eerc2mdevljg/.../AutoHotkey104805_Install.exe

http://www.speedyshare.com/HcvkA/e76d5c3e/.../AutoHotkey104805-Install.exe

http://download1861.mediafire.com/20rb3jqij0rg/.../AutoHotkey104805_Install.exe

https://downloader.disk.yandex.ru/disk/9c148a526dd406ccb6ea7b859e601898d6ee4aced47ce842e010014de4dbf6ec/586559b8/.../x-msdownload&fsize=2047357&hid=c65635356b112000fe423c4b62c1fe2f&media_type=executable&tknv=v2

http://download1028.mediafire.com/kw3nccg46vgg/.../AutoHotkey104805_Install.exe

http://www.speedyshare.com/HcvkA/4f8a4759/.../AutoHotkey104805-Install.exe

http://www.speedyshare.com/HcvkA/46f6d4ea/.../AutoHotkey104805-Install.exe

https://autohotkey.com/download/.../AutoHotkey104805_Install.exe

http://download1650.mediafire.com/xwbheoqgxihg/.../AutoHotkey104805_Install.exe

http://download1861.mediafire.com/839jc28bjjeg/.../AutoHotkey104805_Install.exe

http://download1028.mediafire.com/fgl99ys8yrng/.../AutoHotkey104805_Install.exe

https://downloader.disk.yandex.com/disk/99880ad88c568e2189e3a0810b5d4210c89decedf17f2d3f7dc3caa1220d3cc2/57fd473f/.../x-msdownload&fsize=2047357&hid=c65635356b112000fe423c4b62c1fe2f&media_type=executable&tknv=v2

http://download1861.mediafire.com/ltw2didnwyfg/.../AutoHotkey104805_Install.exe

http://www.speedyshare.com/HcvkA/92faca18/.../AutoHotkey104805-Install.exe

http://download1861.mediafire.com/1tf5nel2g77g/.../AutoHotkey104805_Install.exe

http://www.speedyshare.com/HcvkA/4db83dce/.../AutoHotkey104805-Install.exe

http://download1028.mediafire.com/f91h8bqtdcqg/.../AutoHotkey104805_Install.exe

http://electricstuff.co.uk/.../AutoHotkey104805_Install.exe

http://download1650.mediafire.com/ek9d1zoq1kxg/.../AutoHotkey104805_Install.exe

http://download1861.mediafire.com/appadp08r9kg/.../AutoHotkey104805_Install.exe

http://www.speedyshare.com/HcvkA/3a50f6b8/.../AutoHotkey104805-Install.exe

http://download1650.mediafire.com/4y3vmj3g78bg/.../AutoHotkey104805_Install.exe

http://download1861.mediafire.com/97pqio3j9mog/.../AutoHotkey104805_Install.exe

https://docs.google.com/uc?authuser=1&id=0B5TWeMw2ozCCOVBHaUMwLVNoVk0&export=download

http://download1861.mediafire.com/0ua37s02o3eg/.../AutoHotkey104805_Install.exe

http://software.thaiware.com/download_url.php?id=11600

https://downloader.disk.yandex.ru/disk/c02e632efe96e1fd839d3083396ae5475e9d81e505576a4d60ebf2c2fe6e95ce/57f52904/.../x-msdownload&fsize=2047357&hid=c65635356b112000fe423c4b62c1fe2f&media_type=executable&tknv=v2

http://download851.mediafire.com/90jyca2qdktg/.../AutoHotkey104805_Install.exe

http://download1861.mediafire.com/ep268cwcwhkg/.../AutoHotkey104805_Install.exe

http://download1130.mediafire.com/c86mc2cl2kwg/.../AutoHotkey104805_Install.exe

Latest 30 of 95 download URLs

Scan autohotkey104805_install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.