home

installer.exe

Installer B1 Free Archiver

Catalina Group Ltd

The application installer.exe by Catalina Group has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program B1 Free Archiver by Catalina Group Ltd.
Publisher:
http://b1.org/  (signed by Catalina Group Ltd)

Product:
Installer B1 Free Archiver

Version:
2, 6, 27, 0

MD5:
5849e32c3194c11d557db56a97da7afb

SHA-1:
8c7561f183a51892b943fa8b10e3bf696e602671

SHA-256:
6b6a2da7ef4cd11f9a47497734e4ec1dc35b00dabd3f6a45556f375f128e171b

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/27/2024 12:32:34 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Catalina (M)
17.1.21.3

File size:
26.9 MB (28,180,288 bytes)

Product version:
2, 6, 27, 0

Copyright:
Copyright(C) 2014

Original file name:
Installer

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\b1 free archiver\installer.exe

Digital Signature
Signed by:
Catalina Group Ltd

Authority:
Catalina Group Ltd

Valid from:
4/16/2015 5:53:24 PM

Valid to:
1/1/2040 6:59:59 AM

Subject:
CN=Catalina Group Ltd

Issuer:
CN=Catalina Group Ltd

Serial number:
F16F6DA8DF8C458545A6335860591E9C

File PE Metadata
Compilation timestamp:
5/21/2015 6:22:09 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x5B26A

Entry point:
E8, 9F, DA, 00, 00, E9, 79, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04...
 
[+]

Entropy:
7.9657  (probably packed)

Code size:
470 KB (481,280 bytes)

Program Uninstaller
Program name:
B1 Free Archiver

Display publisher:
Catalina Group Ltd

Display version:
0.0.0.0

Uninstall string:
"C:\Program Files (x86)\B1 Free Archiver\installer.exe" "C:\Program Files (x86)\B1 Free Archiver\uninstall.xml"


Remove installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.