home

WRShellFix.exe

WRShellFix

Webroot, Inc

Publisher:
Webroot, Inc

Product:
WRShellFix

Version:
1.0.0.0

MD5:
452b4c11811ca2c66df63054cd545174

SHA-1:
f299cf80450950cfcc9d09275b09914b63a0e250

SHA-256:
e2c997c186739d2449305a92407d73c01c0f5a7c547f9ca11f4b8bc007250cae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 2:01:27 AM UTC  (today)

File size:
19 KB (19,456 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Webroot, Inc 2015

Original file name:
WRShellFix.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\paul\my applications\webroot secure anywhere\wrshellfix.exe

File PE Metadata
Compilation timestamp:
3/24/2015 8:25:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:DMTq8BJ2XXXXXXXXXXvRWWgoWWWggmMIIIIIIIIII0AIIIIIIIIIIJrPCzYcHe2c:DMTLBJ2XXXXXXXXXXrMIIIIIIIIII0Af

Entry address:
0x2FDE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 48, 00, 00, 80, 10, 00, 00, 00, 60, 00, 00, 80, 18, 00, 00, 00, 78, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 02, 00, 00, 00, 90, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 7F, 00, 00, A8, 00...
 
[+]

Entropy:
5.6321

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
4 KB (4,096 bytes)

The file WRShellFix.exe has been seen being distributed by the following URL.

http://download.webroot.com/WRShellFix.exe

Scan WRShellFix.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.