home

winrar.5.2.1.exe

Tonec Inc

This is a setup program which is used to install the application. The file has been seen being downloaded from dla.uloz.to.
Publisher:
Tonec Inc

Product:
Tonec Inc

Version:
6.22.0.0

MD5:
3b4ad03337278caddd07ceb660de3496

SHA-1:
ed0d550ca59a3de315cfc3275eea6e2784551885

SHA-256:
7643aec79c33264ce5d8375e298582648a98e079527480589c4c9f476cb2c12e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:36:11 AM UTC  (today)

File size:
118 KB (120,832 bytes)

Product version:
6.22.0.0

Copyright:
Copyright © 2015

Trademarks:
Tonec Inc

Original file name:
doesApp.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\winrar.5.2.1.exe

File PE Metadata
Compilation timestamp:
2/19/2015 12:02:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:7ldz4ON8qW5kRuBp5oosevg+SGTgSoKYFL6y:7mN5k9o3cCIL6

Entry address:
0x8D8C

Entry point:
2A, 04, 38, 62, FF, FF, FF, 02, 38, 66, FF, FF, FF, 28, 41, 00, 00, 0A, 38, 67, FF, FF, FF, 00, 46, 7E, 17, 00, 00, 04, 2B, 07, 7B, 1B, 00, 00, 04, 59, 2A, 02, 2B, F6, 00, 00, 2E, 2B, 06, 7B, 1B, 00, 00, 04, 2A, 02, 2B, F7, 13, 30, 05, 00, A5, 00, 00, 00, 06, 00, 00, 11, 38, 8E, 00, 00, 00, 7B, 1A, 00, 00, 04, 38, 8A, 00, 00, 00, 38, 8B, 00, 00, 00, 02, 7B, 1B, 00, 00, 04, 31, 0A, 02, 7B, 1B, 00, 00, 04, 10, 03, 2B, 16, 02, 7B, 1A, 00, 00, 04, 02, 7B, 1B, 00, 00, 04, 59, 05, 58, 7E, 18, 00, 00, 04, 5F, 0A...
 
[+]

Code size:
95 KB (97,280 bytes)

The file winrar.5.2.1.exe has been seen being distributed by the following URL.

http://dla.uloz.to/Ps;Hs;fid=68554680;cid=185717308;rid=1403000476;up=0;uip=91.229.28.230;tm=1425047536;ut=f;aff=uloz.to;did=uloz-to;He;ch=a6e7bc03d2fe977877fb57fa4217efe5;Pe/.../winrar-5-2-1.exe

Scan winrar.5.2.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.