home

winrar-x64-521.exe

win.rar GmbH

This is a setup program which is used to install the application. This file is installed with the program WinRAR 5.21 (64-bit). The file has been seen being downloaded from letoltes.szoftverbazis.hu and multiple other hosts.
Publisher:
win.rar GmbH  (signed and verified)

MD5:
9b6f7231533f04b75f3b3c86cb9d0117

SHA-1:
aab35c65c372d46aafb97b83e5ae288612c7e991

SHA-256:
e315674d9e2f5f63977fb5fd8e8bcafcdc106594b83e7ba062c5bec24901a5d2

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 1:56:50 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Detection.Undefined
7.0.302.0

File size:
1.9 MB (1,941,744 bytes)

File type:
Executable application (Win64 EXE)

Digital Signature
Signed by:
win.rar GmbH

Authority:
COMODO CA Limited

Valid from:
6/13/2013 6:00:00 AM

Valid to:
6/14/2015 5:59:59 AM

Subject:
CN=win.rar GmbH, O=win.rar GmbH, STREET=Schumannstr. 17, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
75953FA54DD12DD9CA6B948C17BFD67C

File PE Metadata
Compilation timestamp:
2/15/2015 2:00:45 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:tTylHjKNg/z1mxbq2HCtY+zAfwNxuCBw8ZsS+qlVPNLt+:dyt5z1mxbq2iPVa8cqlfQ

Entry address:
0x21DEC

Entry point:
48, 83, EC, 28, E8, 33, 65, 00, 00, 48, 83, C4, 28, E9, 12, FE, FF, FF, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 6C, 24, 10, 48, 89, 74, 24, 18, 57, 48, 83, EC, 20, 49, 8B, E8, 48, 8B, F2, 48, 8B, D9, 48, 85, C9, 75, 05, E8, 81, 1A, 00, 00, 48, 63, 43, 18, 8B, 7B, 14, 48, 03, 46, 08, 75, 05, E8, 6F, 1A, 00, 00, 33, C9, 85, FF, 74, 33, 4C, 8B, 4E, 08, 4C, 63, 43, 18, 4B, 8D, 14, 01, 48, 63, 02, 49, 03, C1, 48, 3B, E8, 7C, 0A, FF, C1, 48, 83, C2, 08, 3B, CF, 72, EB, 85, C9, 74, 0E, 8D, 41, FF, 49, 8D, 14, C0, 42...
 
[+]

Entropy:
7.9326  (probably packed)

Code size:
185.5 KB (189,952 bytes)

The file winrar-x64-521.exe has been discovered within the following program.

WinRAR 5.21 (64-bit)  by win.rar GmbH
www.rarlab.com
5% remove it
 
Powered by Should I Remove It?

The file winrar-x64-521.exe has been seen being distributed by the following 50 URLs.

http://letoltes.szoftverbazis.hu/Mn0k1NlOMxqBS2fHzkcDOw/1486321280/.../winrar-x64-521.exe

http://d.winrar.es/d/101z1431571173/.../winrar-x64-521.exe

http://filehippo.com/download/file/.../

https://doc-04-bo-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/66q9ni349da33hlvdv7lmquu8l3otlbf/1481688000000/13738329838500753702/.../0ByjsaparNGZlZTJpZ2ZDaEpfU3c?e=download

http://letoltes.szoftverbazis.hu/71VhiB09i8cDZ3KIaDXMZg/1457359077/.../winrar-x64-521.exe

http://download010.fshare.vn/dl/.../winrar-x64-521.exe

http://download991.mediafire.com/1um3mj6b63gg/.../winrar-x64-521.exe

http://www.filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://letoltes.szoftverbazis.hu/KZzyX_qwhUhcaQo-TGr_qg/1483466194/.../winrar-x64-521.exe

http://winrar.soft32.com/get/file/id/.../

http://letoltes.szoftverbazis.hu/hcl1sgYDynw1Vh_6Ze9TDQ/1484485398/.../winrar-x64-521.exe

http://filehippo.com/download/file/.../

http://www29.zippyshare.com/d/N9NQdjmf/.../_www.gigapurbalingga.com__winrar-x64-521.exe

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://download1994.mediafire.com/pobjb8nasb0g/.../winrar-x64-521.exe

http://download1994.mediafire.com/zp37ng984jng/.../winrar-x64-521.exe

http://dl.asiadl.ir/15/software/94/3/27/WinRar 5.21/.../WinRar_5.21_x64(www.asiadl.ir).exe

http://i.download.idg.pl/fannef/429e2ac0ea56daa6afb2b83f06f6416b/563d0d11//vol2/w95/archiv/winrar/.../winrar-x64-521.exe

https://www.dropbox.com/s/.../winrar-x64-521.exe

http://fs35.filehippo.com/8120/.../winrar-x64-521.exe

http://filehippo.com/download/file/.../

http://www.filepuma.com/file/1448146481c8235/winrar_64bit_5.21/.../0/

http://www.filepuma.com/file/1446139083c8235/winrar_64bit_5.21/.../0/

http://filehippo.com/es/download/file/.../

http://download1437.mediafire.com/4uqoos0smnhg/.../winrar-x64-521.exe

http://fs32.filehippo.com/9287/.../winrar-x64-521.exe

http://winrar.es/.../101?PHPSESSID=f63d7d923d680ac9f6c77ba155274c27

http://10.10.10.10/SOFTWARE COLLECTION/New Collection/.../winrar-x64-521.exe

Latest 30 of 614 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.