home

installer.exe

B1 Free Archiver Installer

Catalina Group Limited

The application installer.exe by Catalina Group Limited has been detected as a potentially unwanted program by 12 anti-malware scanners. This is the uninstaller utility registered in the Windows Control Panel for the program B1 Free Archiver by Catalina Group Ltd. This file is typically installed with the program B1 Free Archiver by Catalina Group Ltd. The file has been seen being downloaded from b1.org.
Publisher:
Catalina Group Limited  (signed and verified)

Product:
B1 Free Archiver Installer

Version:
2, 5, 13, 0

MD5:
7f236550fa9f94d4b891f12ed366ee0f

SHA-1:
8e83f4a564dd8e2d28b9f4a2fdb3eed8c70b0c18

SHA-256:
cb2fac007f0dcf23266dde6818110c8ca38378369d5fcac500e6a64feae2a6ba

Scanner detections:
12 / 68

Status:
Potentially unwanted

Analysis date:
4/24/2024 2:18:25 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Adware-gen [Adw]
2014.9-141221

Dr.Web
Adware.Downware.2449
9.0.1.0355

Emsisoft Anti-Malware
Backdoor.Bot.135374
8.14.12.21.11

ESET NOD32
Win32/4Shared.T potentially unwanted application
8.7.0.302.0

F-Prot
W32/S-526cfc88
v6.4.7.1.166

IKARUS anti.virus
Trojan.Win32.Badur
t3scan.1.6.1.0

K7 AntiVirus
Unwanted-Program
13.183.13504

McAfee
Artemis!B7243B60CAF1
5600.6909

Qihoo 360 Security
Malware.QVM10.Gen
1.0.0.1015

Reason Heuristics
Threat.Win.Reputation.IMP
14.12.21.23

Rising Antivirus
PE:PUF.4Shared!1.9C25
23.00.65.14306

Trend Micro House Call
TROJ_GEN.F47V0528
7.2.355

File size:
557 KB (570,352 bytes)

Product version:
2, 5, 13, 0

Copyright:
Copyright (C) 2013

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\b1 free archiver\installer.exe

Digital Signature
Signed by:
Catalina Group Limited

Authority:
GoDaddy.com, Inc.

Valid from:
8/16/2013 6:34:08 AM

Valid to:
9/26/2016 9:56:54 PM

Subject:
CN=Catalina Group Limited, O=Catalina Group Limited, L=Kwun Tong, S=Hong Kong, C=HK

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
4B8F32520620F6

File PE Metadata
Compilation timestamp:
2/27/2014 12:37:46 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:jNmtYGVSqGAnknK+1uXBnQdJdRowlvmTX4n8FK5sH0SCP+kj9:Zm3La14QPdRowsTXk52hyt9

Entry address:
0x27390

Entry point:
E8, E5, C2, 00, 00, E9, 79, FE, FF, FF, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B, C1, C3, 8D, 41, FE...
 
[+]

Entropy:
6.3703

Code size:
255.5 KB (261,632 bytes)

Program Uninstaller
Program name:
B1 Free Archiver

Display publisher:
Catalina Group Ltd

Display version:
1.5.86.4889

Uninstall string:
"C:\Program Files (x86)\B1 Free Archiver\installer.exe" "C:\Program Files (x86)\B1 Free Archiver\uninstall.xml"


The file installer.exe has been discovered within the following program.

B1 Free Archiver  by Catalina Group Ltd
About 5% of users remove it
 
Powered by Should I Remove It?

The file installer.exe has been seen being distributed by the following URL.

http://b1.org/smart-download/0/.../B1FreeArchiver_1.5.86.exe

Remove installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.