home

winrar 5.21 64 bit hebrew.exe

WinRaR 5.21 64 Bit Hebrew

Yaron'S Team

This is a setup program which is used to install the application. The file has been seen being downloaded from serv71.f2h.co.il and multiple other hosts.
Publisher:
Yaron'S Team

Product:
WinRaR 5.21 64 Bit Hebrew

Version:
5. 2. 1. 0

MD5:
5c2b4a30fdf274d7b926ac885aa80d14

SHA-1:
7c54455aa5b25bd48fd9b0a5a6e556ca7a084ca4

SHA-256:
ef14fd3e0e8b1fdbd8dada40c66a4546f215d25bbf56cd29730a4fc7dc9862c2

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/24/2025 11:28:31 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.Gen
7.11.218.136

avast!
Win32:Malware-gen
2014.9-150430

File size:
14.7 MB (15,416,320 bytes)

Product version:
5. 2. 1. 0

Copyright:
Yaron'S Team

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\winrar 5.21 64 bit hebrew.exe

File PE Metadata
Compilation timestamp:
12/22/2011 3:26:30 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:LOFqAuki2svDM6S22buRPr5puyZERgBOxAUHU5/adRYYhuL2Khi:GXyv3b2buRPFt/BOK52eYhC2Khi

Entry address:
0xF26001

Entry point:
60, E8, 03, 00, 00, 00, E9, EB, 04, 5D, 45, 55, C3, E8, 01, 00, 00, 00, EB, 5D, BB, ED, FF, FF, FF, 03, DD, 81, EB, 00, 60, F2, 00, 83, BD, 88, 04, 00, 00, 00, 89, 9D, 88, 04, 00, 00, 0F, 85, CB, 03, 00, 00, 8D, 85, 94, 04, 00, 00, 50, FF, 95, A9, 0F, 00, 00, 89, 85, 8C, 04, 00, 00, 8B, F0, 8D, 7D, 51, 57, 56, FF, 95, A5, 0F, 00, 00, AB, B0, 00, AE, 75, FD, 38, 07, 75, EE, 8D, 45, 7A, FF, E0, 56, 69, 72, 74, 75, 61, 6C, 41, 6C, 6C, 6F, 63, 00, 56, 69, 72, 74, 75, 61, 6C, 46, 72, 65, 65, 00, 56, 69, 72, 74...
 
[+]

Entropy:
7.9896

Packer / compiler:
ASPack v2.12

Code size:
63 KB (64,512 bytes)

The file winrar 5.21 64 bit hebrew.exe has been seen being distributed by the following 9 URLs.

http://serv71.f2h.co.il/.../ywuo3udlpcek|d6978af1aca93bd093f1665031fc50b6|.exe

http://f2h.nana10.co.il/.../ywuo3udlpcek|9ee6f8bc363cddac23df256bd5fbe9ed|.exe

http://serv71.f2h.co.il/.../ywuo3udlpcek|eaead7dca69db87a61a428c60f805907|.exe

http://f2h.nana10.co.il/.../ywuo3udlpcek|fe9f434d58c5c28913648f0876535f37|.exe

http://serv71.f2h.co.il/.../ywuo3udlpcek|217a477cb2ad0ec8b3613b10770eed4b

http://serv71.f2h.co.il/.../ywuo3udlpcek|ef00f59c2923ba62e946ed85454a5fb7

http://serv71.f2h.co.il/.../ywuo3udlpcek|8427861290d0e428cb030ee4a78227d7

http://serv71.f2h.co.il/.../ywuo3udlpcek|29bffe1e077763c6193ec016135889db

http://serv71.f2h.co.il/.../ywuo3udlpcek|5bd62afd54134e9d8df9fa39d15b773e

Scan winrar 5.21 64 bit hebrew.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.