home

wa_update-3.0.5.0_beta_2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s6938.chomikuj.pl and multiple other hosts.
MD5:
2238155c7607599a9c7f7a9e45de77ae

SHA-1:
0860e8005193ee98d314d69e58992a82ae68e275

SHA-256:
2a678ed8539076fd0e5675c0ca7b665857a9225f911d69e2921b84713a52f45d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:50:27 PM UTC  (today)

File size:
8.2 MB (8,574,864 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
3/27/2000 8:09:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:18KQHYKAyNU0KLWl26+KfBGI60QOQSgLz:6KCYMU0KLa2YpzQ3

Entry address:
0x83F7

Entry point:
55, 8B, EC, 6A, FF, 68, 10, 23, 41, 00, 68, 30, B5, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E8, 21, 41, 00, 33, D2, 8A, D4, 89, 15, 30, 53, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 2C, 53, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 28, 53, 41, 00, C1, E8, 10, A3, 24, 53, 41, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 11, 2F, 00, 00, FF, 15, EC, 21, 41, 00, A3, E4, 68, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
68 KB (69,632 bytes)

The file wa_update-3.0.5.0_beta_2.exe has been seen being distributed by the following 12 URLs.

http://s6938.chomikuj.pl/File.aspx?e=UFkOpBcP03pQyAgcaT7VRGspAAbznBa6dIn5K653HsqcdjtS32WKOqq9yn2bzUpUdbljPXl4IWbfmZ3X65dx8mfOf7ovaSoGnMow_8ecXLSgz-ZRLKQCq5FTX_TAGIai9pwTnifKyNAJ4Q0gT53r3FPPl2lWKQhMozNitsQc7t4&pv=2

http://s6938.chomikuj.pl/File.aspx?e=UFkOpBcP03pQyAgcaT7VRGspAAbznBa6dIn5K653Hsr5uIt0ni0xsKEgX7veYfMfgmPrEo8zCc-SJ7PTtc16qEAdSGyJJbWOwljNl2rNaljXBq0YMfMtMWhASB69tKS4WS59tHeL1xmEgUwvBFO5jVxiTUXHpknUCHsvu0p3pB4&pv=2

http://worms2d.info/.../WA_Update-3.0.5.0_Beta_2.exe

http://s6938.chomikuj.pl/File.aspx?e=UFkOpBcP03pQyAgcaT7VRGspAAbznBa6dIn5K653HspbtiJ1e856H6-G4dcHyVKeLL2TTRrqODWHER2kE134eVj7Z_SzzmRR8V3QexvLWQmMc60gNk8dD-KFInEqjSbMVSQ1Hh9ao9h4mJgRPNd_hW_0BaO95riZZrQxZVBaCfs&pv=2

http://s6938.chomikuj.pl/File.aspx?e=UFkOpBcP03pQyAgcaT7VRGspAAbznBa6dIn5K653Hsqgovcvar0c6XohOhINEAXRdffywkFotTzT17L6dmdtGoal7GSJQLpOkMU30hocE-NU6s-ELctIYhPBAvWa7Sokn4uhztI3JRxrVHJPNV5114slT5WNoX9bfYpUdWNg2LI&pv=2

http://s6938.chomikuj.pl/File.aspx?e=UFkOpBcP03pQyAgcaT7VRGspAAbznBa6dIn5K653HsorIn8BAqfj1Bg5DBX60p9yOPP-kJD02Q1_qreQrxzfu8WRjNoV0WCczf--aRqOG41uGzkO1sff--_29p3kUIRQtb05wO-hViKzEYX0mC5tZnVW1A8sGKHqzdU78JxCWuQ&pv=2

http://s6938.chomikuj.pl/File.aspx?e=UFkOpBcP03pQyAgcaT7VRGspAAbznBa6dIn5K653Hsp6QiWlZ6D8hUvhmS1bqAnEfNo9RRwsVO-GnKkcsnMufNY_qyXsK2CGPD3AEb5H_b3ddsfIXW3_bQwJZBl265HFDucwN7WDEi6SlnzLT9WNPXNzRId0ZaFDGIXHe_cg3oI&pv=2

http://s6938.chomikuj.pl/File.aspx?e=UFkOpBcP03pQyAgcaT7VRGspAAbznBa6dIn5K653HsrEnH-9GAx5hQlKQQbcRGow3fTc-GIpIvLLr_-dGp-Tv2e4H7D1DxhyzeViehfI74Bloq7yk0uGZCOEVRItqBLUVs_pda85908N46aWWkaoGc5m6E1ulmt2cMEXlb3gYOg&pv=2

http://s6938.chomikuj.pl/File.aspx?e=UFkOpBcP03pQyAgcaT7VRGspAAbznBa6dIn5K653Hsocp5k66yBgRDSBPPvjd6R0PTZJbd9RkGRLtEq_LsjjIFeWVvfWCFMbUnTRoPBojd-ak4W2Hw52stwLGPl-9j0kW_wMkbVbPA807MNPMkb2hUyr1z6XQWkhtqufhjNlywA&pv=2

http://s6938.chomikuj.pl/File.aspx?e=UFkOpBcP03pQyAgcaT7VRGspAAbznBa6dIn5K653HsoFSzNa1NI4PDtKdrAii_OpcMxuEslgLQj6-t0_Bueu7v0BLHMECUp50H99XCxNmTPs9rhbaoFdUahyyDP-e9OFu95S2ZqaWYgbhQ54AF4VDEHeLZG4wVx61sFBSLKZGXo&pv=2

http://s6938.chomikuj.pl/File.aspx?e=UFkOpBcP03pQyAgcaT7VRGspAAbznBa6dIn5K653HsqtHxpvYDlTXAH6XOQarcDlkCaIh2aXh5ma2tzV_z61-Us0Nz03xzRk3axUHZh4eAu45L8z1rxXkSn3Y8L69u8lFwkx26_4tQqki1RcJ6Pa04HRImWv842CRzPQAE5oPhw&pv=2

http://s6938.chomikuj.pl/File.aspx?e=UFkOpBcP03pQyAgcaT7VRGspAAbznBa6dIn5K653HspEllvHZeuq_oGpVcN2oQ5F6zMw8I2Sgj33yG5YU0xWEoi-Ln5Cjb_T4RmBBMEKipJbqMZcExZvIC6bIGd3GDQP2DY1jcQCAVdDbSafcLrUQTvxx7No2YMboFv2zh_AwrY&pv=2

Scan wa_update-3.0.5.0_beta_2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.