home

winrar.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.vins.co.il.
MD5:
fb61f7225e0328b91d9951c394a6bb39

SHA-1:
e15eb34003e9f4551dbbebef4bbdd4aa8022dbf7

SHA-256:
72419d155a4fcf191ac603f9a3f0b4b47931508248db32514b1a8d85dcf47d91

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:55:47 AM UTC  (today)

File size:
278.2 KB (284,889 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\winrar.exe

File PE Metadata
Compilation timestamp:
9/29/2046 3:34:07 PM

OS bitness:
Win16

CTPH (ssdeep):
6144:vfurLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAoz4oSpKr:0AuU4rfxe1VpMT54A/oSpKr

Entry point:
65, 7B, 5F, 5A, DD, 58, C1, 89, B3, 32, A8, 68, D0, 6A, F3, 03, 32, BC, 60, 25, 39, C4, AD, 73, D5, 95, 63, 11, 50, E4, 2D, C7, 28, C7, 7B, C7, C6, 7A, 59, 52, 57, 08, 3F, C9, D9, B7, 54, 3D, CB, 32, 41, 01, FA, 44, A1, 6A, EF, 6B, 8B, 4A, 75, 1C, 10, F5, 06, 5A, F5, 89, 46, B9, 74, 50, 49, 05, 89, 52, 53, B2, 82, 32, 4A, 7B, 20, 2F, CF, EF, 13, 2C, E8, 01, 64, 8E, 60, 4F, B4, AB, EA, CB, A2, 40, 92, 2D, CB, BF, C0, 18, A0, 96, 6A, E4, 17, DE, 8C, E7, A5, 91, 25, AF, 38, 5A, 64, 7B, D6, 49, F2, D9, 72, 9A...
 
[+]

Entropy:
7.9553  (probably packed)

The file winrar.exe has been seen being distributed by the following URL.

http://www.vins.co.il/.../winrar

Scan winrar.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.