home

whatrun.hta

MD5:
c28ec4c5e3f6be843e972f7ab0bbecc5

SHA-1:
7a748e375c1a33b7ac59f2401f5fcc1da15e1ffc

SHA-256:
420cba386384ddc1c12c4c911cfc96d9150edbbbd46950e974ab67d02de176a6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:23:21 PM UTC  (a few moments ago)

File size:
10.4 KB (10,619 bytes)

Common path:
C:\users\{user}\downloads\whatrun.hta

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:6jqLWYEjwVTJHk2IeQpq/uX/AmC7xIxo8unhisYdJZKBIkJ6k1R:JrlFxk2IeQpqjaxoNnhisYdJZKBIkJ64

The file whatrun.hta has been seen being distributed by the following URL.

http://filenurse.com/v9?d=1

Scan whatrun.hta - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.