home

winrar-x64-54b1.exe

win.rar GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from www.winrar.es and multiple other hosts.
Publisher:
win.rar GmbH  (signed and verified)

MD5:
b702712b0d477659e5f9d5b287cb10da

SHA-1:
488f2bc5a7c0a7c6c077c42ca90b6fc5f7b64cb0

SHA-256:
6df9dc9c6fc7581affd40f429e5a7982eb479ac02157cda6f44cf1684005f143

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:45:11 AM UTC  (today)

File size:
2.1 MB (2,179,840 bytes)

File type:
Executable application (Win64 EXE)

Digital Signature
Signed by:
win.rar GmbH

Authority:
COMODO CA Limited

Subject:
CN=win.rar GmbH, O=win.rar GmbH, STREET=Marienstrasse 12, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FE46A10AD94269C3DD225C13645352E4

File PE Metadata
Compilation timestamp:
5/10/2016 4:25:22 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
49152:8eOEE+k0vqJJ19A2uwo+1PhCuedIQ5keH1ZrtLrqaJG:Kpw2dA2uwoyPhd8mMZ5M

Entry address:
0x21A84

Entry point:
48, 83, EC, 28, E8, D3, 04, 00, 00, 48, 83, C4, 28, E9, 72, FE, FF, FF, CC, CC, 33, C0, 48, 89, 41, 10, 48, 8D, 05, AB, 3D, 01, 00, 48, 89, 41, 08, 48, 8D, 05, 18, 4A, 01, 00, 48, 89, 01, 48, 8B, C1, C3, CC, 40, 53, 48, 83, EC, 20, 48, 8B, D9, 48, 8B, C2, 48, 8D, 0D, E5, 49, 01, 00, 48, 89, 0B, 48, 8D, 53, 08, 33, C9, 48, 89, 0A, 48, 89, 4A, 08, 48, 8D, 48, 08, E8, D8, 29, 00, 00, 48, 8D, 05, F5, 49, 01, 00, 48, 89, 03, 48, 8B, C3, 48, 83, C4, 20, 5B, C3, CC, 33, C0, 48, 89, 41, 10, 48, 8D, 05, EB, 49, 01...
 
[+]

Code size:
202 KB (206,848 bytes)

The file winrar-x64-54b1.exe has been seen being distributed by the following 50 URLs.

http://www.winrar.es/.../99?PHPSESSID=8956fea46157beee8a826397a9d9a01c

https://www.winrar.es/.../99?PHPSESSID=8f480bfa2fb644cdd9f3e24af98bc907

https://www.winrar.es/.../99?PHPSESSID=02943ffd0e0dd9ae357df736a6b6f8aa

http://download1960.mediafire.com/kgdh9g9s3tyg/.../Winrar setup.exe

http://d.winrar.es/d/99z1467413036/.../winrar-x64-54b1.exe

http://www.winrar.es/.../99?PHPSESSID=df223d44efb220329603016c3cb23b23

https://www.winrar.es/.../99?PHPSESSID=b9bc4766a334baa5f2b528aa96a17fc4

https://www.winrar.es/.../99?PHPSESSID=04840f72e7042fa55efaeb5025aec995

http://www.winrar.es/.../99?PHPSESSID=d20c1ab284e71e8b2dc1505fe31286fa

https://www.winrar.es/.../99?PHPSESSID=4c35f5d9c0847afffff877d485aa4e5e

http://www.winrar.es/.../99?PHPSESSID=8456ff5d9760cfad9d4a51f47dec242d

https://www.winrar.es/.../99?PHPSESSID=afebcde8e03be35b0474721bad13463c

https://www.winrar.es/.../99?PHPSESSID=1303d84a5acd886f7393cd32d376e2b0

https://www.winrar.es/.../99?PHPSESSID=5b4a08f5f84e705accb7cc144a02d901

https://www.winrar.es/.../99?PHPSESSID=3fd0d953566b273a11a43411f0cb468f

https://www.winrar.es/.../99?PHPSESSID=1a48528abd602e93f355e5d9663f9442

http://95.211.90.141:182/d/.../_rar-x64-54b1.exe

http://www.winrar.es/.../99?PHPSESSID=79c5aa9cac7c9837773a47ff4cc27095

http://www.winrar.es/.../99?PHPSESSID=a5b4f381e7eb3f0e6d8f5aa44085898d

http://www.winrar.es/.../99?PHPSESSID=6693029fb42ff39003d263afeb9eecca

https://www.winrar.es/.../99?PHPSESSID=6c7bcba5a8fce984e4e433795ed41e6c

http://www.winrar.es/.../99?PHPSESSID=e15c56cb2d61a5f278f8b49d47bc1d3b

https://www.winrar.es/.../99?PHPSESSID=0bad25ab2544f065bef238cc9e6c1815

http://www.winrar.es/.../99?PHPSESSID=229a46b4f2dd09197f7aeb32d03db143

https://www.winrar.es/.../99?PHPSESSID=4dc6d398c5b838130ad588c42c7b30f9

https://www.winrar.es/.../99?PHPSESSID=75b509e60a475bcec2526882b7b282df

http://download2196.mediafire.com/k6b125c827yg/.../Winrar setup.exe

https://www.winrar.es/.../99?PHPSESSID=29364c688c62bbb44dbde8119f017f28

http://www.winrar.es/.../99?PHPSESSID=1d2743dea5370786ea03aca8b3254afc

temp:winrar-x64-54b1.exe

Latest 30 of 208 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.