home

autohotkey112207_install.exe

AutoHotkey

This is a self-extracting archive and installer. The file has been seen being downloaded from ahkscript.org and multiple other hosts.
Product:
AutoHotkey

Description:
AutoHotkey Setup

Version:
1.1.22.07

MD5:
183a689e49b51547e454fd1c6e4db93b

SHA-1:
c548f8611b0dcd423293db86eadabf3607196cf2

SHA-256:
f2c600d3467713ae433153f9b7f268c1a5f7653316abf9f9992276b808e44411

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/27/2024 11:04:32 AM UTC  (today)

Scan engine
Detection
Engine version

Zillya! Antivirus
Worm.VBNA.Win32.262259
2.0.0.2482

File size:
2.9 MB (3,076,250 bytes)

Product version:
1.1.22.07

Copyright:
Copyright (c) 2015 Steve Gray

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\autohotkey112207_install.exe

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:3zeRFz+w2mNLYtYjwqjW5sbpWusiAHi42yapBqLtSsbhgeZRt7NgvuGuLa:3zeaTALY4wgW2pWyyNapB6tvCeRtuvuU

Entry address:
0x11E80

Entry point:
55, 89, E5, 81, EC, 68, 00, 00, 00, 90, 8D, 45, E8, 50, E8, 7E, 02, 00, 00, 83, C4, 04, B8, 02, 00, 00, 00, 50, E8, FF, 03, 00, 00, 83, C4, 04, B8, 00, 00, 03, 00, 50, B8, 00, 00, 01, 00, 50, E8, F3, 03, 00, 00, 83, C4, 08, E8, F3, 03, 00, 00, 89, 45, E4, 8B, 45, E4, 85, C0, 0F, 84, B5, 00, 00, 00, 8B, 45, E4, B9, 20, 00, 00, 00, 0F, BE, 10, 39, D1, 0F, 85, 0B, 00, 00, 00, 8B, 45, E4, 89, C1, 40, 89, 45, E4, EB, E2, 8B, 45, E4, B9, 22, 00, 00, 00, 0F, BE, 10, 39, D1, 0F, 85, 3A, 00, 00, 00, 8B, 45, E4, 40...
 
[+]

Entropy:
7.9909

Packer / compiler:
REALbasic

The file autohotkey112207_install.exe has been seen being distributed by the following 6 URLs.

http://ahkscript.org/download/.../AutoHotkey112207_Install.exe

https://autohotkey.com/download/.../AutoHotkey112207_Install.exe

http://www.techspot.com/downloads/downloadnow/.../?evp=43a3d0d498617bfcda38237cd79713cc&file=1

https://www.autohotkey.com/download/.../AutoHotkey112207_Install.exe

https://github-cloud.s3.amazonaws.com/releases/.../aa322f26-654f-11e5-9b83-22220c4c9874.exe

http://ahkscript.org/.../ahk-install.exe

Scan autohotkey112207_install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.