home

USBWriteProtect.exe

USB Write Protect

Crystal Softworks

This is installed with USB Write Protect. The file has been seen being downloaded from app.box.com and multiple other hosts.
Publisher:
Crystal Softworks

Product:
USB Write Protect

Description:
USB Write Protection

Version:
2.00

MD5:
dc1fe6c148592c45e1eaa88f9fdf74a6

SHA-1:
0b5b4e66cb837390aa2eabd7a126c345fe53c84c

SHA-256:
3de4d5bf3f1d4cf80aef2a2c6a57392e0c289ede008c5faea32d11fd578692a5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 2:34:05 PM UTC  (today)

File size:
148 KB (151,552 bytes)

Product version:
2.00

Copyright:
Copyright(c) Naresh Manandhar

Original file name:
USBWriteProtect.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
2/23/2012 9:11:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:VIUo8Af1gxnWvhvjv6ZBlm/WQtYrV9kGtI4AUbT6zKOQ:KCMvhvjv+BlmeAiz1/9

Entry address:
0x15F8

Entry point:
68, 64, C3, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 58, 00, 00, 00, 40, 00, 00, 00, B8, 72, 3F, A2, 65, 7C, 94, 44, BD, 2F, 59, 3F, DB, C4, 16, 76, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 64, 65, 64, 3D, 30, 0D, 55, 53, 42, 57, 72, 69, 74, 65, 50, 72, 6F, 74, 65, 63, 74, 00, 55, 53, 42, 20, 57, 72, 69, 74, 65, 20, 50, 72, 6F, 74, 65, 63, 74, 00, 78, 4E, 75, 6D, 62, 65, 00, 00, 00, 00, FF, CC, 31, 00, 35, 33, 85, 40, 65, 15, 57, DB, 49, 92, 80, 8F, DC, 41, 46, D3, 67, 4E, 0B, 3D...
 
[+]

Entropy:
6.0061

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
136 KB (139,264 bytes)

The file USBWriteProtect.exe has been discovered within the following program.

USB Write Protect  by Crystal Softworks
About 3% of users remove it
 
Powered by Should I Remove It?

The file USBWriteProtect.exe has been seen being distributed by the following 15 URLs.

https://app.box.com/index.php?rm=box_download_shared_file&shared_name=s3oh7uqss6xrjxcvtvi7yx7mdv2w1mm5&file_id=f_77042581449

http://www.grabupdateshare.com/egHWNGmaCe2jlkXoKggRtTRw94j4MZ0tFeebFbXxfSNule7pVgKJWscgXAHptfq7uI4v6xYXkjVpDe4hutAGF4YXYeWMBP2CqoqB77wjoI0cZLlOlsoPU zeWAntChfai5ozFmlkgJewwWSgmyKS6dkEJCkNtAg9XI96vxf2evSKNsEDgKk7ZItR0MxpQMmgVEQwWoF4BibBP3VKNlJ3WDYIHaSMU1IuR7HD bRehHISpoaICeWgDlMmQBz66AQXJYfefZLL_JRjfho0dZfKnSE1AenzEKk2UcVJNxWhRZhq4clPJ_yiVoDBN1vT8loX0ca4FiyzGB 18paK7l9tTt9anSHoAQICKbfyvYHD8V1lXyh_U3O1q4r44czopIweFRyRRzUGhv4kB_xhJ06y euu84V1zb1DMmjJCcZl1A9yqckMrIenGhnWozy68KNHhLG_slmsvqwz9n8p9X0U2noyieIAZoofF3hpI6OhQOwsZSm1kmXnPPehUyPft8Yb4Q3rxVyztPSTMbGyzgTjrqdoDAadls6QxJp8XvGuULqPz9SPQllCNMyc6TY_bw3CVcJ5 uOHro4YP7sIjR9JvfsmHFg07Z9Jp Sm3zlxWyZ1XKcS7SM=-G04AAGRyXWyD8 ISdP1Nx7h8ULxlHAcdlIaNsXF9DiHSG7MoYNz37mF6rqZDXTeQUqkgRgoJmIIu53A39tzuproBAYg2HmKbvwE=-e

http://www.grabupdateshare.com/lCp6 pBXL1w7bUuIaskBqRz7hCyc6HYJT5813FmXsd1CCG_BZjya_URl RXerRopfgjClOuGQPmVBUCdZ6bYB9KDTRyC5bISeWELJoDplS0ivuZ3ipmHQ9Uvt3iGCZ6UioEtZf eizrIDCjWjDr1 4Eh8LF1cAtUFKSfZDFYj_VL_f2AB2513prYXM7w5bhfUaJEJCQCxhFWQF25Py6KfywFVsflSV mqMEV jujMAqTdScJC_QG_SaJ_6Yj49z 6nkP2Sw_PvGvc4okKvavHQ56THi6Odqkeh31CK_KDHPRroRAVYOjydtr952JbV0nU4OYZaLp27YHUisIUnic1OvI50xDiXt7Y7q9MG5WRRRWKy20bLpeaRpg3yG437m5YdnxVUi6Wd0r3vquvKYPEKYj6hU20LDpPPl8Y6x7zwFzcoAGVk KT36_vZmNx8H rWojYVJn4uxz4td9hvzOlleox7gp5PNxMULxmYgiJNJsXUNRRil9XvpTTjv44yuB0QHSXdInWbd5dNmEpqr2zg0pY69C GwUuitlivEuMfKOq64mQInkmpy8iMJYI8SrcmJqr29EiaXI0dmhiZiYsnzK7JEfRNmEoD0hq5ikz6PJXfudATg=-G04AAGRyXWyD8 ISdP1Nx7h8ULxlHAcdlIaNsXF9DiHSG7MoYNz37mF6rqZDXTeQUqkgRgoJmIIu53A39tzuproBAYg2HmKbvwE=-e

http://www.grabupdateshare.com/OoVy0eF4iytkyTEsMsK7HN00rdE56f4f2fbJmU0C4L139zaEqdFjThd3rxhq0ed6GxFhguUlnGwyG1agKYSdpRqdyFno58G5Sx2ZrpCsfjVstnHcFuTnq6nH3Uvoky8EERhziIo8oKkBm7dC2IlehzNbOBH_WEXNxrnDloTXtgZaO9FSL8 LllQ6XwCJrwQi8ZducescxSxk1Q7WfN6Kdrnh_Q69yWSOgMhQZpYXdxY4HuXMqakqY3EuwVyOYgAk5pn7Evu0BcFMupVclz3swLoA6jWZl7Qszfrf5kicnsKtLcoIjUEXCWVyIj497mLVXBm9tVGuOzKG8bZxy4rxBQPzoAyov4cKDgpYZR4osOfj1FAyAoYbFw3F0d7ZfzGETR1KrsUUg8xXb702HM9dvrm7sZ_hryZ1LtntfgTBR2bClmvGtSt7DUQL4UIGtPMkKAywZfexdrH3WOyOEgjXjCcoGqPrpdm3FGaFv6j7MrpXTfbVVMgDG3cuUk2VzqvtcYAH Rhph H2Zy_kYuxkLKTKzr ejJqhWJMGVcRcH1t9nFjootIQEcf YeC8yIkYp871MMBOhSiKXUXME ymXldaHWpTuLH7KAZwme rE _tkAy9nmOybgB4LdFlOkRWFZ6YMWGf-G04AAGRyXWyD8 ISdP1Nx7h8ULxlHAcdlIaNsXF9DiHSG7MoYNz37mF6rqZDXTeQUqkgRgoJmIIu53A39tzuproBAYg2HmKbvwE=

https://doc-0g-9o-docs.googleusercontent.com/docs/securesc/ul5piv0e1v4g8u22p8joerbcjv8f3lab/v7t0dl7p53pf766g6esko9tvbecs6g07/1477569600000/14316616033177637633/.../0B8HIVSBLZvlPVjdIWmQ0SWVqRlk?e=download

http://www.tourbodycontent.com/c?x=yh7lwP TO4AC2U c/sU6YnA9aoM1C8J9RGWIiHXW3CQ=&c=G15ZB9eYrDWcTCCczyQhRDl5PE2JSw7nYFXoQY8XW5tDAfOD860CgWmJIfRAaILoic2S9OLN0FEjqfAEEPYNgb555fGWy2eiUc2QiDMogTRL5HRfMnSX6THiBqCq5 fw&downloadAs=PasswordBook Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/3378/.../USBWriteProtect.2.0.0.JalanTikus.exe

http://www.safemegachuckle.com/c?x=4EJOe/VQh myXJcQE6qlXZrY1i6V GMu2qbyRs6jQFM=&c=qoDIHxiwSCP8dz5W5ta4Q5N9rAGr93JGHCea3xIus3l7Qi6c8H9pFoEL24PJI 8yPGDCujCTlMcegjvslms0DoYXUt6BpZ93Q91D0Iuk0kgr X3xuVtntJ2SqFK1dDCL&downloadAs=PasswordBook Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/3378/.../USBWriteProtect.2.0.0.JalanTikus.exe

http://www.grabupdateshare.com/c?x=MyoI3jBJSbUHsRVfMjLZbtOEXE2P84yrh6hP8XyjDgg=&c=ngU7wyVKa4bUPN2W6163KpPvqf55m2sjVGQryf9hZW62XvWpOACNFX0zupgOmqJPGkNvWIPNx6ci/B/Lg7ZsjSZ6d9su wLAaUbgFYbS/SyZNUN9qhOLo4 W787FVEDv&downloadAs=PasswordBook Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/3378/.../USBWriteProtect.2.0.0.JalanTikus.exe

http://www.grabupdateshare.com/c?x=/bOgy7QWIh1WoGs p6EiNH2RaCJw13bw2R5PtQcsYCQ=&c=RogcfRagUg2YX7lLlMVGaFPa/fTJf Dgfe7eK5bQ5IZTXL5 xI66fBu13T6mNm5TKl75MXpA76OxuynZrRTqKItcibh iejaVglxHYUOYurWCUx7oozWI6KGZfLr sgHvUslYcCStydtP7DNDuKXJw==&e=0&downloadAs=PasswordBook Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/3378/.../USBWriteProtect.2.0.0.JalanTikus.exe

http://www.giftpresentsign.com/c?x=6D4bGBETVhFxMW8ozVi831D g4XQgl/cIqSFkcL2W34=&c=aOMEQ3nX1yvYhsl2a9V G/YwWsgcgclihZmup2DkANAK5FMiwP65Ws1bgCUBMINZbtsYf9LOOJxcOcHEscXtErqydOhcohrzTUcU8XShhpJeRpga8QbB4WdeBEuQzP8U&downloadAs=PasswordBook Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/3378/.../USBWriteProtect.2.0.0.JalanTikus.exe

https://jalantikus.com/apps/download/.../

http://www.safeapplicationsfun.com/c?x=xFDFgP6HXtnJ2 9Sjcr h ul7LdQKYvFxFlhBgTMA4g=&c=iaKxPZUh9Qju4pzaXqklWl00amYbYZx1oGkWGPi205qnkvolIt8Mqd89vn/cL6IT o3lmFf/dotUeBazIlCL4NakgSdU5I8vKyF7LJNMb65f0sELyd76jfpzz14ol0DqSNX7X2IhIN9DWV3S/5WuLw==&e=0&downloadAs=PasswordBook Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/3378/.../USBWriteProtect.2.0.0.JalanTikus.exe

http://www.filesvaultshead.com/c?x=mJcwJHm8lpeM8v cGNhvMveC9qdWRl6695YPBDAATgI=&c=Mc3L3Lsq ICy3LD1bdrGIn3JVJIHHFPnp5lDRib4EGFOlLfGgVQSCoyvNDGBWYYnKzylJ82QwJ3i KH3IKs6AO7iqSsXrcbfn6ST9818LmwaBBJ2Ak7roivRBBZlHyvM&downloadAs=PasswordBook Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/3378/.../USBWriteProtect.2.0.0.JalanTikus.exe

http://www.tourbodycontent.com/c?x=cdW iLlALK/2emggHgb0i LJPsfCL4JoZ EmbVCrWdg=&c=Q/Zt1iq3CsQ16kshgnOiBT2qDr vlXvwQdwA1kPyC5dqhhK173GyCKtTU7YjCPlw5WTuwBKTtQMisLPXVfF8hpgY ovD0AhoqBrcvfwScHkvZwrm4nuOnEKQUXxyf187&downloadAs=PasswordBook Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/3378/.../USBWriteProtect.2.0.0.JalanTikus.exe

http://files.jalantikus.com/dde/3378/.../USBWriteProtect.2.0.0.JalanTikus.exe

Scan USBWriteProtect.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.