» b1freearchiver_1.5.86.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)
Downloads (4)

b1freearchiver_1.5.86.exe

B1 Free Archiver Installer

Catalina Group Limited

The application b1freearchiver_1.5.86.exe by Catalina Group Limited has been detected as a potentially unwanted program by 11 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program B1 Free Archiver by Catalina Group Ltd. This file is typically installed with the program B1 Free Archiver by Catalina Group Ltd. The file has been seen being downloaded from b1.org and multiple other hosts.

File name:

Publisher:

Catalina Group Limited (signed and verified)

Product:

B1 Free Archiver Installer

Version:

2, 6, 16, 0

MD5:

ea41ce06ee7bdfbef3ce36dad6254fa6

SHA-1:

161363135994fa700a600b80165f04ba821f29b2

SHA-256:

0954db91d01768e89a5c938b00d3002480ce086527d2963a374aa1ea54abe2f4

Scanner detections:

11 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 3:41:47 AM UTC (today)

Scan engine

Detection

Engine version

avast!

Win32:Adware-gen [Adw]

2014.9-141127

Dr.Web

Adware.Downware.2449

9.0.1.0331

Emsisoft Anti-Malware

Backdoor.Bot.135374

8.14.11.27.02

ESET NOD32

Win32/4Shared (variant)

8.10755

IKARUS anti.virus

Trojan.Win32.Badur

t3scan.1.6.1.0

K7 AntiVirus

Unwanted-Program

13.185.14085

McAfee

Artemis!F432B905A787

5600.6933

Qihoo 360 Security

Malware.QVM10.Gen

1.0.0.1015

Reason Heuristics

PUP.Installer.CatalinaGroupLimited.T

14.11.27.14

Rising Antivirus

PE:PUF.4Shared!1.9C25

23.00.65.141125

Trend Micro House Call

TROJ_GEN.F47V0327

7.2.331

File size:

962 KB (985,104 bytes)

Product version:

2, 6, 16, 0

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\b1freearchiver_1.5.86.exe

Digital Signature

Signed by:

Catalina Group Limited

Authority:

GoDaddy.com, Inc.

Valid from:

8/16/2013 7:34:08 AM

Valid to:

9/26/2016 10:56:54 PM

Subject:

CN=Catalina Group Limited, O=Catalina Group Limited, L=Kwun Tong, S=Hong Kong, C=HK

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

4B8F32520620F6

File PE Metadata

Compilation timestamp:

8/22/2014 8:25:12 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:TO+86KmMZNdDDwv/tdIedO/J86+FmGDv4Sz:S+8MedDDa+8d

Entry address:

0x20A000

Entry point:

83, EC, 04, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, D0, 09, 00, 2D, AF, 0D, 0C, 10, 05, A4, 0D, 0C, 10, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, F7, 07, 76, 42, 68, 31, 66, C0, 12, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, BE, E9, 3F, 11, 86, A4, D2, 45, 16, 18, F7, A9, 22, 04... 
[+]

Code size:

267 KB (273,408 bytes)

Program Uninstaller

Program name:

B1 Free Archiver

Display publisher:

Catalina Group Ltd

Display version:

1.5.86.4889

Uninstall string:

"C:\Program Files\B1 Free Archiver\installer.exe" "C:\Program Files\B1 Free Archiver\uninstall.xml"

The file b1freearchiver_1.5.86.exe has been discovered within the following program.

B1 Free Archiver by Catalina Group Ltd

About 5% of users remove it

The file b1freearchiver_1.5.86.exe has been seen being distributed by the following 4 URLs.

http://b1.org/smart-download/297812/.../B1FreeArchiver_1.5.86.exe

Remove b1freearchiver_1.5.86.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.