home

WinRAR.exe

WinRAR

Alexander Roshal

WinRAR provides the full RAR and ZIP file support, can decompress CAB, GZIP, ACE and other archive formats. The file has been seen being downloaded from online.b1.org and multiple other hosts.
Publisher:
Alexander Roshal

Product:
WinRAR

Description:
WinRAR archiver

Version:
3.93.0

MD5:
b284e0f20811226bc0211bf742247542

SHA-1:
abbedb56afe58b76b80732f42995f8500334b604

SHA-256:
aa3db28e89b5e48128c8a63b197ab5f58677416fcd4013f9b8752983bc2e6359

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/15/2024 5:24:35 PM UTC  (today)

File size:
1015 KB (1,039,360 bytes)

Copyright:
Copyright © Alexander Roshal 1993-2010

Original file name:
WinRAR.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\winrar\winrar.exe

File PE Metadata
Compilation timestamp:
3/15/2010 2:26:28 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:pKG+6WC0IBOw0DW/yvZnTQYuGJWcMMMMMMcu:4ovBOrRnTQYZMMMMMM

Entry address:
0xA287D

Entry point:
E8, 57, 73, 00, 00, E9, 78, FE, FF, FF, 8B, 44, 24, 04, 33, C9, 3B, 04, CD, 98, 06, 4C, 00, 74, 12, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0C, 6A, 0D, 58, C3, 8B, 04, CD, 9C, 06, 4C, 00, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, C3, E8, 2E, 2F, 00, 00, 85, C0, 75, 06, B8, 00, 08, 4C, 00, C3, 83, C0, 08, C3, E8, 1B, 2F, 00, 00, 85, C0, 75, 06, B8, 04, 08, 4C, 00, C3, 83, C0, 0C, C3, 56, E8, E7, FF, FF, FF, 8B, 4C, 24, 08, 51, 89, 08, E8, 8D, FF, FF, FF, 59, 8B, F0...
 
[+]

Entropy:
6.4706

Code size:
703 KB (719,872 bytes)

Shell Open Command
Open type:
WinRAR

Command:
"C:\Program Files\winrar\winrar.exe" "%1"


The file WinRAR.exe has been discovered within the following programs.

Arquivo do WinRAR  by win.rar GmbH
Publisher's description - “WinRAR is a 32-bit / 64-bit Windows version of RAR Archiver, the powerful archiver and archive manager.”
www.rarlab.com
12% remove it
Compressor WinRAR  by win.rar GmbH
WinRAR is a shareware file archiver and data compression utility. It is one of the few applications that is able to create RAR archives natively, because the encoding method is held to be proprietary.
9% remove it
WinRAR  by win.rar GmbH
WinRAR is a shareware file archiver and data compression utility that is able to create RAR archives natively. WinRAR supports RAR (WinRAR native conversion format) and ZIP archives, and unpacking of ARJ, LZH, TAR, GZ, ACE, UUE, BZ2, JAR, ISO, EXE, 7z, and Z archives.
4% remove it
WinRAR 4.00 (32-bit)  by win.rar GmbH
Version 4.00 speeds up decompression by up to 30%. Windows 98, Windows Me, and Windows NT are no longer supported; the minimum Windows version required is Windows 2000. WinRAR is a shareware file archiver and data compression utility that is able to create RAR archives natively.
1% remove it
WinRAR archiver  by win.rar GmbH
WinRAR archiver is a shareware file archiver that is able to create RAR archives natively.
12% remove it
 
Powered by Should I Remove It?

The file WinRAR.exe has been seen being distributed by the following 32 URLs.

http://online.b1.org/rest/online/download/ativador windows 7 todas as versoes (1).b1/.../WinRAR.exe

http://download1697.mediafire.com/8ip7y27fwg2g/.../WinRAR.exe

http://download1697.mediafire.com/lxc4ajytmjgg/.../WinRAR.exe

http://download1475.mediafire.com/yjf5e87drejg/.../WinRAR.exe

http://download1697.mediafire.com/fmwqtbdzq0bg/.../WinRAR.exe

http://download1697.mediafire.com/2i4fnl63w40g/.../WinRAR.exe

https://s8999.chomikuj.pl/File.aspx?e=YSadDu8C9zWb1hodgN6wpE2Wz73PTJOBNBvEraN0DA80lT1HDXU3zDdn3fLOJAeAFZ-tSyG1alD9fwmQiPolhG2vTvHhoOLJJi44sHbp12Z2G6lOai3Bd2DJRLf812RRK_MktvqWQHMPX-q5F5Qzrg&pv=2

https://dl-web.dropbox.com/.../WinRAR.exe

http://download1272.mediafire.com/w3wre01bwtng/.../WinRAR.exe

http://download1475.mediafire.com/y2d89d8e7qcg/.../WinRAR.exe

http://download1475.mediafire.com/tsnlw2023dug/.../WinRAR.exe

https://dc452.4shared.com/download/.../WinRAR.exe

http://download1697.mediafire.com/n9gygpk482pg/.../WinRAR.exe

http://download1697.mediafire.com/f2ttu5p773jg/.../WinRAR.exe

https://dc366.4shared.com/download/.../WinRAR.exe

http://dc366.4shared.com/download/.../WinRAR.exe

http://dc443.4shared.com/download/.../WinRAR.exe

http://download1232.mediafire.com/q9sh5vfn8syg/.../WinRAR.exe

https://doc-0s-bk-docs.googleusercontent.com/docs/securesc/napb9g7iulubc0p6bvoufj70j62rc81b/n34qr7djfqntrvmvpgft2inhhur2elkb/1465430400000/.../08313596493329422515/0B-zAcslXkaobTWtaNG9KQVUyc3M?e=download

https://mg.mail.yahoo.com/.../download?m=YaDownload&mid=2_0_0_3_12137_AENwimIAABVmUnkkXAAAAAX4qVY&fid=Draft&pid=2&clean=0&appid=YahooMailNeo

http://dc366.4shared-china.com/download/.../WinRAR.exe

http://dc395.4shared.com/download/.../WinRAR.exe

http://dc452.4shared.com/download/.../WinRAR.exe

http://download1392.mediafire.com/40af91s88ktg/.../WinRAR.exe

https://doc-14-9k-docs.googleusercontent.com/docs/securesc/5l906e5upurep5sroo4638dp1g89dptb/c77no180hr5frd7q7gifscph9jirrsjg/1454839200000/.../02294875185985421447/0B8db0US9O1UDYXZ4VzJSQldwb0k?e=download

http://dc452.4shared.com/download/.../WinRAR.exe

temp:WinRAR.exe

http://download1272.mediafire.com/ae1g21c7t63g/.../WinRAR.exe

http://get.dubdownmanage.com/sb/n/.../WinRAR.exe

https://qhceog.bl3302.livefilestore.com/.../WinRAR.exe

Latest 30 of 32 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.