USB-Explorer.exe is a filename observed in the malicious USB infection pattern analyzed during ANTÍDOTO development. The sample disguised legitimate content through shortcut-style behavior and was associated with Windows persistence.
Known sample hash
3F3E84744C41D44CE8EC2CBBB6E97B837B5EA9E18CADEE57781497AD23D80E09What ANTÍDOTO checks
- Known hash indicators.
- Unexpected executables on removable drives.
- Suspicious .lnk patterns.
- Windows persistence that can reinfect external media.
ANTÍDOTO does not treat every file called USB-Explorer.exe as malicious by name alone; detection combines multiple indicators.
