home

wrar531fr.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.win-rar.com.
MD5:
609b08cbc3ba232b23dcb7fc8ebcefb8

SHA-1:
b5a1e7ea01147aa986929fbd567feeacc394c4b5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 12:42:37 PM UTC  (today)

File size:
1.9 MB (1,978,960 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\documents and settings\khalil\mes documents\downloads\wrar531fr.exe

File PE Metadata
Compilation timestamp:
2/3/2016 8:38:36 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:pqTQCR5el1THqQM8ZQdOp1sFD8L5ScKJg2:pRB1rzEUb+YIc+g2

Entry address:
0x1E06B

Entry point:
03, CB, F3, 42, 8D, 35, 59, 98, B1, 4D, 04, B1, 87, FD, F3, F2, 69, CB, 09, E9, B3, 26, B9, 70, AA, BF, 37, B0, C6, 2B, DB, B4, 05, 08, CA, 86, F4, F2, 0F, B6, FA, 0F, B7, ED, 8D, 05, F6, 00, 0F, 0F, 00, E9, 87, D1, F3, 2D, AE, 0E, 6E, E2, E8, 20, 00, 00, 00, C6, C7, D4, 0F, BE, EB, BE, 56, 61, 50, 9F, F7, C0, 57, 35, 59, 98, C7, C3, 8B, F8, 30, C4, BE, 5E, 43, A2, E8, 02, DE, 3B, C6, 8B, D9, 80, FE, 87, 87, D5, 87, C0, 69, D5, 19, 1B, 33, CC, 81, F9, 0E, 61, 00, 00, 5E, F7, C5, 23, 6B, 77, E8, EB, 09, F2...
 
[+]

Code size:
164.5 KB (168,448 bytes)

The file wrar531fr.exe has been seen being distributed by the following URL.

http://www.win-rar.com/fileadmin/winrar-versions/.../wrar531fr.exe

Scan wrar531fr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.