home

b1freearchiver_1.1.0.exe

B1 Free Archiver Installer

Catalina Group Limited

The application b1freearchiver_1.1.0.exe by Catalina Group Limited has been detected as a potentially unwanted program by 3 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. This file is typically installed with the program B1 Free Archiver by Catalina Group Ltd.. The file has been seen being downloaded from b1.org.
Publisher:
Catalina Group Limited  (signed and verified)

Product:
B1 Free Archiver Installer

Version:


MD5:
1b3dec293b1f724e84c14be1f8126e08

SHA-1:
1e2c93c4ee848146ce09b06617b509306a9a92e7

SHA-256:
126ade2c63656fa63de91ea5bc5aa5fb850dd054ca44adf5311b3e96e8bd1bab

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 3:30:37 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/4Shared.T potentially unwanted application
9.7.0.302.0

Reason Heuristics
PUP.Catalina.CatalinaGroup.Installer (M)
15.6.30.19

Rising Antivirus
PE:PUF.4Shared!1.9C25
23.00.65.15628

File size:
1.1 MB (1,185,128 bytes)

Product version:
1, 1, 9, 0

Copyright:
Copyright (C) 2013

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\dont delete\b1freearchiver_1.1.0.exe

Digital Signature
Signed by:
Catalina Group Limited

Authority:
GoDaddy.com, Inc.

Valid from:
9/26/2012 9:56:54 PM

Valid to:
9/26/2013 9:56:54 PM

Subject:
CN=Catalina Group Limited, O=Catalina Group Limited, L=Kwun Tong, S=Hong Kong, C=HK

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
27B940A1704DC9

File PE Metadata
Compilation timestamp:
5/23/2013 10:28:19 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:485K5RSlYivcD4Tgyd+RXvJ9fp66iIosJ79v9ThQkbm17/:4oKzSCAckTgydGvjE6vphrTmkkL

Entry address:
0x22BF1

Entry point:
E8, F2, 9E, 00, 00, E9, 79, FE, FF, FF, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B, C1, C3, 8D, 41, FE, 8B...
 
[+]

Entropy:
7.5055

Code size:
227 KB (232,448 bytes)

The file b1freearchiver_1.1.0.exe has been discovered within the following program.

B1 Free Archiver  by Catalina Group Ltd.
Publisher's description - “B1 archive is an open archive format, where best proven solutions were improved even more with new original ideas. It's free and available for both personal and commercial use. B1 Archiver is extremely simple to use, you don't need comprehensive manuals or guides.”
b1.org
45% remove it
 
Powered by Should I Remove It?

The file b1freearchiver_1.1.0.exe has been seen being distributed by the following URL.

http://b1.org/smart-download/131961/.../B1FreeArchiver_1.1.0.exe

Remove b1freearchiver_1.1.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.