home

wa.exe

WindowsAccess

Senior Sistemas SA.

This is a setup program which is used to install the application. The file has been seen being downloaded from docs.google.com and multiple other hosts.
Publisher:
Senior Sistemas SA.

Product:
WindowsAccess

Version:
5.8.6.32

MD5:
41a6190e8e358c177103f314f15b55e3

SHA-1:
2ba456715f0166feda9f36d4009714ea1dc2ee59

SHA-256:
212b0affd98a8ff71237696bf3ba715b6d7515ba53f4acb7d889f5bf13ac2818

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:05:15 PM UTC  (today)

File size:
5.6 MB (5,896,192 bytes)

Product version:
5.5

Copyright:
(2011)

Trademarks:
Senior Sistemas SA

Original file name:
WindowsAccess.exe

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:JeJ6KWOlc3Bky+cuGg/PiYJowIHoPa5wwcnqcRz21PojjGtedGYrVQ60ur:JeJ6jOlc3Bky+cuGgyYJTIHX5wwcnqc1

Entry address:
0x4E9500

Entry point:
55, 8B, EC, 83, C4, E8, 53, 56, 57, 33, C0, 89, 45, F0, B8, C0, 81, 4F, 00, E8, 74, EA, B1, FF, 33, C0, 55, 68, 28, 96, 4F, 00, 64, FF, 30, 64, 89, 20, 33, C0, 55, 68, A0, 95, 4F, 00, 64, FF, 30, 64, 89, 20, A1, 2C, 91, 51, 00, 8B, 00, E8, C4, C8, FD, FF, A1, 2C, 91, 51, 00, 8B, 00, BA, 40, 96, 4F, 00, E8, F7, C2, FD, FF, 8B, 0D, 2C, 91, 51, 00, 8B, 09, B2, 01, A1, 58, 7B, 4F, 00, E8, 5B, 33, FD, FF, 8B, 15, 08, 94, 51, 00, 89, 02, A1, 2C, 91, 51, 00, 8B, 00, E8, 3B, C7, FD, FF, A1, 2C, 91, 51, 00, 8B, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
4.9 MB (5,146,624 bytes)

The file wa.exe has been seen being distributed by the following 3 URLs.

https://docs.google.com/a/.../uc?authuser=0&id=0Bwj9zCuCOrv7aVpVYjI0OTdodUE&export=download

https://docs.google.com/uc?authuser=0&id=0Bwj9zCuCOrv7aVpVYjI0OTdodUE&export=download

https://doc-08-00-docs.googleusercontent.com/docs/securesc/9rdcvo49sr6odrvah7j04bhvkv6s7i7o/vna5hek8oatchcaeek588i5tmo2fknlh/1465250400000/.../15941303556703159231/0B1kuNNCKd3mfdmR1bVNMVTlLRjg?e=download

Scan wa.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.