home

rar-password-cracker-v3.9-keygen_downloader.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dll513.down-loader.biz.
MD5:
a4cbd4361eb421ea2bb63406cd59f56a

SHA-1:
ae25f882785cfc540396bb37a91b27876786f087

SHA-256:
50ce74016376bdd5f372417f40dc8861443665344a10150bfdb74e9c17ca31b1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/13/2024 7:09:32 AM UTC  (today)

File size:
577.2 KB (591,007 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\rar-password-cracker-v3.9-keygen_downloader.exe

File PE Metadata
Compilation timestamp:
10/22/2014 8:31:34 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:srhwtxBJMYY7VbjdbDqHukasGtthx7cb+JKxB51cprd67ydwApew/I/:srkxf8hJqqMb+JKUpxOydVpe1

Entry address:
0x3A3B22

Entry point:
68, 23, 61, 07, 47, 9C, 60, C7, 44, 24, 24, CB, 7F, 2A, F4, C6, 04, 24, 13, E9, 33, 1A, 2B, 00, 10, 90, CB, 32, 29, 6E, 28, 14, 87, 39, 2F, 62, B5, 22, 5D, 41, 42, 6C, 31, 3A, 51, C0, 18, 6A, 27, 59, 07, 21, 1D, 44, 30, 64, AA, BE, F9, 61, 0A, 9E, 78, 6D, 99, 8E, 44, 93, FC, 65, 22, BA, 47, 51, 33, 60, 0E, B0, 66, D0, 0C, 80, E5, E2, 28, 88, 85, 9C, 0A, 68, 23, 79, F1, EF, 2F, 77, 7B, D8, 1E, 24, 18, C5, 3A, 62, 3A, 72, 94, 17, 9B, 3F, 89, 9C, 06, 56, 83, D7, DA, E2, FA, 75, 63, 7A, 10, 0F, 09, 93, 8A, 2C...
 
[+]

Entropy:
7.9986  (probably packed)

Code size:
774.5 KB (793,088 bytes)

The file rar-password-cracker-v3.9-keygen_downloader.exe has been seen being distributed by the following URL.

http://dll513.down-loader.biz/j5GXdlCdmXpV55pwWPz8AFz9lgxXkvQdJerkYlGNuBRbgsMjUe3Ybxfg3m4f6MZaCK ABVuExFoG1M5bCM5xEkyYaxIwr2Afe8crCziZd Unn0rzK3B8tmMifuMza0qubypR8xFPQfQVYBDrAn1Qxx1yUNNcQ1bGUFBZ3CVLLsYQWDfOv2QBnfRRLNPVWz2q7VcKqf19ae3iIC6Q8zhc4aliVOSSflDtiGVa7owtELzGPQaPjwZJiIUCHI7cWrPD31/nz6dH7c6jR zK EimM/pLpDHgpuxq68fVKbbvnHawqsZ2lq2dPZbmwnuf 8V8h/.../SHNhTg32s=

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.