USB-Explorer.exe is a filename observed in the malicious USB infection pattern analyzed during ANTÍDOTO development. The filename alone is not a classification.
What was observed in the known sample
The analyzed sample was associated with shortcut-style behavior on removable drives and hidden legitimate content. The known executable was 7,546,516 bytes in the incident analyzed.
SHA-256 of the known sample
The observed hash was:3F3E84744C41D44CE8EC2CBBB6E97B837B5EA9E18CADEE57781497AD23D80E09
An exact SHA-256 match is a much stronger indicator than merely finding a file with the same name.
Why the filename is not enough
Legitimate and malicious software can use similar names. ANTÍDOTO looks for correlation between hash, location, USB behavior, suspicious shortcuts and associated persistence.
What to do if you find the file
Do not run the file just to test it. Scan the drive and Windows, check for suspicious shortcuts, and look for persistence before connecting other external drives to the same PC.
An exact match to the known hash is a strong indicator; the name USB-Explorer.exe alone is not enough to accuse an arbitrary file.
Scan first. Decide after.
ANTÍDOTO shows the detected indicators before removal.