home

wrar300.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from filez.kappa.ro.
MD5:
3c0aede084cb2d31f1fc6bb7ed9a8bdb

SHA-1:
fbe5057f90dcef75e9a41d440a3649e2f6b2a503

SHA-256:
264e78bcb8c959c479d71639a10c31eb2669b3ca98dddecd0732ff7f0b11bc65

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:10:04 PM UTC  (today)

File size:
993.7 KB (1,017,501 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\wrar300.exe

File PE Metadata
Compilation timestamp:
5/14/2002 3:22:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
24576:LWJXDM8IMCXZHTNzzNwW6WZGjXCecgveosw1l/IzTXHIOFc:LWJXDM/MYZZ5PNZSXCecbo1l/IzTXHIN

Entry address:
0x1000

Entry point:
85, C6, 76, 08, 8D, 35, 25, 7A, B0, EF, 86, EA, F7, C2, 0A, F1, B7, F9, 40, 69, DE, 92, 4F, 9D, 9B, 0F, BF, EB, 6A, 00, 5A, 18, C1, 4E, B3, 44, 48, 13, CE, F6, C7, AC, 81, C2, EF, 0F, 00, 00, 35, F8, 56, 40, 2E, FE, C5, 81, EA, EE, 0F, 00, 00, 81, E5, 3B, 12, A0, 52, 2C, 3E, 41, 28, C5, 2D, F4, 44, 0C, 0F, BD, D7, 15, 37, F7, 81, FA, 74, 0B, 00, 00, 0F, 8C, C1, FF, FF, FF, 86, C9, 0F, AF, C8, C6, C5, E6, 00, CC, E8, 41, 00, 00, 00, 86, E8, 0F, B6, DB, F6, C2, 21, 0C, 34, 69, C8, 6C, C9, F5, B7, 87, DF, 8D...
 
[+]

Code size:
68 KB (69,632 bytes)

The file wrar300.exe has been seen being distributed by the following URL.

http://filez.kappa.ro/utilities/.../wrar300.exe

Scan wrar300.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.