» winrar v.5.31_x64_pt-br.exe
Overview
Analysis
File Details
Downloads (4)

winrar v.5.31_x64_pt-br.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www91.zippyshare.com and multiple other hosts.

File name:

MD5:

ab6e6fb8a5178126b35f16ccc539ed0b

SHA-1:

285fe806dfe7aa279d806c2bac891305432bb122

SHA-256:

df0cfc0c5f7ddac4d4645e93671ce4e6c0123ad1c4ea1eca2de997b147aab1a0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/6/2024 2:59:49 AM UTC (today)

File size:

3.4 MB (3,514,875 bytes)

File type:

Executable application (Win64 EXE)

Common path:

C:\users\{user}\downloads\bjmanic112015\winrar v5.31 (x86 & x64) final pt-br corporate edition\winrar v.5.31_x64_pt-br.exe

File PE Metadata

Compilation timestamp:

11/18/2015 7:15:34 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

98304:VwIpILfhiyPuu0dGvYYjqDNMlQZQ0TW/TRjSlNKtNBHe:CIIfccuu+MqD8Qq0TY1+lNKty

Entry address:

0x2218C

Entry point:

48, 83, EC, 28, E8, 2F, 65, 00, 00, 48, 83, C4, 28, E9, 12, FE, FF, FF, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 6C, 24, 10, 48, 89, 74, 24, 18, 57, 48, 83, EC, 20, 49, 8B, E8, 48, 8B, F2, 48, 8B, D9, 48, 85, C9, 75, 05, E8, 81, 1A, 00, 00, 48, 63, 43, 18, 8B, 7B, 14, 48, 03, 46, 08, 75, 05, E8, 6F, 1A, 00, 00, 33, C9, 85, FF, 74, 33, 4C, 8B, 4E, 08, 4C, 63, 43, 18, 4B, 8D, 14, 01, 48, 63, 02, 49, 03, C1, 48, 3B, E8, 7C, 0A, FF, C1, 48, 83, C2, 08, 3B, CF, 72, EB, 85, C9, 74, 0E, 8D, 41, FF, 49, 8D, 14, C0, 42... 
[+]

Entropy:

7.9754 (probably packed)

Code size:

186.5 KB (190,976 bytes)

The file winrar v.5.31_x64_pt-br.exe has been seen being distributed by the following 4 URLs.

http://www91.zippyshare.com/d/jmBGqs5D/.../WinRAR v.5.31_x64_PT-BR.exe

Scan winrar v.5.31_x64_pt-br.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.