home

USB Show.exe

USB Show

Ldc

This is a setup program which is used to install the application. The file has been seen being downloaded from download685.mediafire.com and multiple other hosts.
Publisher:
Ldc

Product:
USB Show

Version:
1.00

MD5:
c235dad901917606c4e96ccfdd6460ae

SHA-1:
2ab32ffc94133e0084f187e83c71075bdfbd9ba6

SHA-256:
60e397e5cf9c489acad77f8977097b305d9cdcccf98831197cc1388335a493bf

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 3:07:03 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

File size:
113.5 KB (116,224 bytes)

Product version:
1.00

Copyright:
Red Mx ( Martin Malagon )

Trademarks:
http://www.LdcMx.info

Original file name:
USB Show.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish (Spain, International Sort)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\usb show.exe

File PE Metadata
Compilation timestamp:
5/2/2009 4:56:10 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:iDKw03DI0Ul4Eme6q6em0LjMFtA8PR0L+2Uqac:iDOI0PEmJAMg845d

Entry address:
0x1EAC

Entry point:
B8, 50, 6E, 46, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, DB, C1, 1C, A2, C7, 23, C8, 84, 94, 41, DA, 50, B1, C7, 75, 9D, B9, 49, 43, 15, 48, 70, 29, 0E, 06, 38, 87, 2B, BC, 87, 89, D5, 5F, 6E, 9A, 17, 26, 6F, 86, 35, 3D, 20, 1E, AA, 50, 39, 44, 7D, AB, AE, 29, 42, A7, 48, 48, 52, FB, 81, 51, FF, DF, B7, 78, E3, 04, 39, F1, EE, C7, 39, E0, CC, 5D, BF, 96, E7, 62, 83, A7, E0, 7C, 2A, 89, C2, 02, AE, D1, 99, A4, 0E, 3D, AA, 4A...
 
[+]

Entropy:
7.8859

Packer / compiler:
PECompact v2

Code size:
364 KB (372,736 bytes)

The file USB Show.exe has been seen being distributed by the following 50 URLs.

http://download685.mediafire.com/nbcy4jxd5qog/.../USB Show.exe

https://docs.google.com/uc?id=0By-EWmagE6_sM1YtVmVtWVBKY2c&export=download

http://download685.mediafire.com/a6q3fdc5odog/.../USB Show.exe

http://download2201.mediafire.com/ccagg847m8pg/.../usb show.exe

http://download1164.mediafire.com/6c4jd4fa5hqg/.../usb show.exe

http://download1800.mediafire.com/fl2p7h48i5kg/.../usb show.exe

http://download685.mediafire.com/gf1q531vrgkg/.../USB Show.exe

http://download685.mediafire.com/utmnu795k9lg/.../USB Show.exe

http://pt.download366.info/usb-show/download/.../1124

http://download2201.mediafire.com/2xix5vwtyhfg/.../USB Show.exe

https://api.edmodo.com/files/.../download?f=clc7nvijdvel762u57in099li

https://mega.nz/temporary/.../UdFxDTJY

https://doc-0s-54-docs.googleusercontent.com/docs/securesc/gi5ckd0uu1piofpmhv2jvuc98e76q5ag/9emjbpn7hj44n1267ffbn7sdo8iplvop/1478253600000/00452147834248038615/.../0B11ivNxJT9lqQ1pNTXNSMlExN00?e=download&nonce=d87uv31pr3eus&user=18309858682492048655&hash=4g9qkftpj3ij7f6p5534r733umpb5v9e

http://download1800.mediafire.com/owi0ojqs6irg/.../USB Show By PONCHO.exe

http://download1800.mediafire.com/7k72vzul2jvg/.../USB Show.exe

http://download1601.mediafire.com/g9lf69czlvag/.../USB Show.exe

http://download1849.mediafire.com/q7diyf5ohbwg/.../USB Show.exe

https://mega.nz/persistent/.../ZlIRhIhQ

https://mg.mail.yahoo.com/.../download?m=YaDownload&mid=2_0_0_2_39371_ANVVfbwAABfjVnrhvApoEEnr66M&fid=Sent&pid=2&clean=0&appid=YahooMailNeo&ymreqid=64931b24-1d7c-2044-019c-dd000d010000

http://download1164.mediafire.com/lsaq19oqdksg/.../USB Show.exe

http://download1164.mediafire.com/7iqd5rx8v0gg/.../USB Show.exe

http://download2218.mediafire.com/ummh2ib31rdg/.../USB Show.exe

https://onedrive.live.com/.../55rG354Au4=3&ithint=.exe

http://192.168.0.100/coria/.../usb.exe

http://liceoonline.org/moodle/mod/.../view.php?id=1636

http://download1164.mediafire.com/lq8n48vlo76g/.../USB Show.exe

http://download642.mediafire.com/z5cy1z9sya0g/.../USB Show.exe

http://download2218.mediafire.com/t6iticfhfxjg/.../USB Show.exe

http://download1800.mediafire.com/3p2sztcdk36g/.../USB Show.exe

https://doc-0s-4g-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/117u6qa3nf4geogsdceg38p6e8r0d812/1477526400000/18332874374418773817/.../0B0j40j-tq_U7NWN4YnRIdWcxT28?e=download

Latest 30 of 151 download URLs

Scan USB Show.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.