» winrar-x64-521.exe
Overview
Analysis
File Details
Downloads (13)

winrar-x64-521.exe

win.rar GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from winrar-64bit.en.softonic.com and multiple other hosts.

File name:

winrar-x64-521.exe

Publisher:

win.rar GmbH (signed and verified)

MD5:

3cfcb52f4f6ffd32dec1c6112946801c

SHA-1:

69a620b22e1a3d64aebbe7904ddaf4c2d579a23c

SHA-256:

730679900496c97b2d31f99c293d91bea0d79bb8050c0f1fabebde54cb35351d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 8:26:35 AM UTC (today)

File size:

1.9 MB (1,944,328 bytes)

File type:

Executable application (Win64 EXE)

Common path:

C:\users\{user}\downloads\winrar-x64-521.exe

Digital Signature

Signed by:

win.rar GmbH

Authority:

COMODO CA Limited

Valid from:

6/12/2013 8:00:00 PM

Valid to:

6/13/2015 7:59:59 PM

Subject:

CN=win.rar GmbH, O=win.rar GmbH, STREET=Schumannstr. 17, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

75953FA54DD12DD9CA6B948C17BFD67C

File PE Metadata

Compilation timestamp:

2/15/2015 3:00:45 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:VTYm3eYD6ZArhszDt2y5S4HYxwm7hRdW2AqpmjBbFb2yN:lYeDcRtYEOw2UPqpmjNz

Entry address:

0x21DEC

Entry point:

48, 83, EC, 28, E8, 33, 65, 00, 00, 48, 83, C4, 28, E9, 12, FE, FF, FF, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 6C, 24, 10, 48, 89, 74, 24, 18, 57, 48, 83, EC, 20, 49, 8B, E8, 48, 8B, F2, 48, 8B, D9, 48, 85, C9, 75, 05, E8, 81, 1A, 00, 00, 48, 63, 43, 18, 8B, 7B, 14, 48, 03, 46, 08, 75, 05, E8, 6F, 1A, 00, 00, 33, C9, 85, FF, 74, 33, 4C, 8B, 4E, 08, 4C, 63, 43, 18, 4B, 8D, 14, 01, 48, 63, 02, 49, 03, C1, 48, 3B, E8, 7C, 0A, FF, C1, 48, 83, C2, 08, 3B, CF, 72, EB, 85, C9, 74, 0E, 8D, 41, FF, 49, 8D, 14, C0, 42... 
[+]

Entropy:

7.9257 (probably packed)

Code size:

185.5 KB (189,952 bytes)

The file winrar-x64-521.exe has been seen being distributed by the following 13 URLs.

http://winrar-64bit.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMT6ivKKC1zIlpmJ8ihejjAD N05eJE7gJRZur5k4ykPO84/ZH2dZaGoLZ8vG9hIwpYTwWseyY9iMUyXR0itfiuwlz4KJ6YbLjkGxOfpsCQlGPNYi KpsFRDaMhozaNvfRHxw0GdwCcCEuxdaazKFEeb0iR/DsTT6GMtH8f E5Q51iybwAjtZQ0MJqIbY77Ktzz4EieVgIcJKh 5fWWrL3Hn8Qeo3MM/DQVhpdlVI Xfn5Lpvrno94UJGFkv9ixDBj3AGWIF3DpIn2uBhfnxh5zFWmq8p0zu/DhsKbQqx4tmqQz/FyC0AA0DIF8ez2l2vk1WPBTp3BymVDeR/.../9O88cvO9XnxIhOZm4BfIYzKgQaLaEksw7IQOkyIyonEqZXmmbmLidpyhAvX9CTiSfsShUixiCI A6jvxvqvXu7fvX1seqXZLyE3HtwTvhITimzRvAIM4v2qDFIDRHzvdhtPO5i3Qp66U59NKc64v1A0rGbSMg82L3gE6h8jYX31k9ncicSeeIGzQlOWoG5oMoyFV4KDSGuGcTMqQgPmjd 71zEXvzkbJPwDscnMgKRvgdJpCIYmOU8iSSrJLYf58iqpRhCavvcNA4 G6ZfKcsw4WQMwZoyWHGRCtE=

http://winrar-64bit.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMT6ivKKC1zIlpmJ8ihejjAD N05eJE7gJRZur5k4ykPO84/ZH2dZaGoLZ8vG9hIwpYTwWseyY9iMUyXR0itfiuwlz4KJ6YbLjkGxOfpsCQlGPNYi KpsFRDaMhozaNvfRHxw0GdwCcCEuxdaazKFEeb0iR/DsTT6GMtH8f E5Q51iybwAjtZQ0MJqIbY77Ktzz4EieVgIcJKh 5fWWrL3Hn8Qeo3MM/DQVhpdlVI Xfn5Lpvrno94UJGFkv9ixDB31GjP1krzRL67ZHGRwm6JaKPQSP66V3ha07HGbu0RMjSHQGmmLHXRwMiyWPmai R83GQDpoRCs6KtQRHLT B37JzloWeYaBzgExmxn288NY5rb6kNPUk5L4/FqJH6WtQzvy0yDfqPym z K6Umpo1vbFf q8mawk qrmvO115UOAZxBtc4djicZpmZXiSr5TS7XHo9eJXhlSOTC lerC1jld9/.../jWTpRVDIsy mLyvSLwdC7zegRpQmIL728ktn2s5ufvAHYXckQgPmjd 71zEXvzkbJPwDscnMgKRvgdJpCIYmOU8iSSrJLYf58iqpRhCavvcNA4 G6ZfKcsw4WQMwZoyWHGRCtE=

http://my.downfiles.net/69a/620/.../winrar-x64-521.exe

http://winrar-64bit.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMT6ivKKC1zIlpmJ8ihejjAD N05eJE7gJRZur5k4ykPO84/ZH2dZaGoLZ8vG9hIwpYTwWseyY9iMUyXR0itfiuwlz4KJ6YbLjkGxOfpsCQlGPNYi KpsFRDaMhozaNvfRHxw0GdwCcCEuxdaazKFEeb0iR/DsTT6GMtH8f E5Q51iybwAjtZQ0MJqIbY77Ktzz4EieVgIcJKh 5fWWrL3Hn8Qeo3MM/.../fX3mSOSylq0HLY9V6X4YNlfbgZab5ov3xYHZSeDpPqg5pq2DxUyVxPQngM9Cpz0OwuxNCPLWu UsvvASQGUzOYa9WEg0ruHn4XcTKwT4jThrcC1qc4YAMSaYYgvQingmJteO6ckGXyR3P925WqLRWqLb40rrVgM60dh53KLQxKaPEj6wEO6KX5PcZ1onVsAy3nkoWitMhLm6KudUS6XsbqviPnapNv 3UMbSEFd7Vuk3GIWFDdNEei5Sl1nQFe5uDRAtGylqNAgPmjd 71zEXvzkbJPwDscnMgKRvgdJpCIYmOU8iSSrJLYf58iqpRhCavvcNA4 G6ZfKcsw4WQMwZoyWHGRCtE=

http://winrar-64bit.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMT6ivKKC1zIlpmJ8ihejjAD N05eJE7gJRZur5k4ykPO84/ZH2dZaGoLZ8vG9hIwpYTwWseyY9iMUyXR0itfiuwlz4KJ6YbLjkGxOfpsCQlGPNYi KpsFRDaMhozaNvfRHxw0GdwCcCEuxdaazKFEeb0iR/DsTT6GMtH8f E5Q51iybwAjtZQ0MJqIbY77Ktzz4EieVgIcJKh 5fWWrL3Hn8Qeo3MM/DQVhpdlVI Xfn5Lpvrno94UJGFkv9ixDBnWIZMscvG9hDP1iWoh4HFv mIsubVh4hZkhMqP9ROolSt3pITWUOQr8529QBfxEtbY9HLjKEGSZkVYAjhJJ89tTsW4vl EJPOkooMAIzpUEKoP/.../1IJIzwemkqVAvAsuAXXLqYl2OpvY5IMSRhS7 xWofL8XtvJEttQQPZyerx5AggPmjd 71zEXvzkbJPwDscnMgKRvgdJpCIYmOU8iSSrJLYf58iqpRhCavvcNA4 G6ZfKcsw4WQMwZoyWHGRCtE=

http://i.download.idg.pl/fannef/17065b3de107681d4840228844f03a2e/55f5b430//vol2/w95/archiv/winrar/.../winrar-x64-521.exe

http://winrar-64bit.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMT6ivKKC1zIlpmJ8ihejjAD N05eJE7gJRZur5k4ykPO84/ZH2dZaGoLZ8vG9hIwpYTwWseyY9iMUyXR0itfiuwlz4KJ6YbLjkGxOfpsCQlGPNYi KpsFRDaMhozaNvfRHxw0GdwCcCEuxdaazKFEeb0iR/DsTT6GMtH8f E5Q51iybwAjtZQ0MJqIbY77Ktzz4EieVgIcJKh 5fWWrL3Hn8Qeo3MM/DQVhpdlVI Xfn5Lpvrno94UJGFkv9ixDCGfhgk3NVIe/oS0lMw63 ikpau3J 0Be2HhW VzexKK CRVUoX XpX2N1JsdD1mC8OIFzlhydzJnfDPWTqTyV8sQ2H5snqgx2jFjAI4VZXUKg6U7jy2Lq 6wLPcnxYaxpDShDjHSYI1gtug/6X3LdWJBCjQ44j4pLZmWn382DDTYkhrwVpDTZ/GhZRBm1h0qvuQW/.../HA1Zb6gO EbiUYMrGFp5Xazl5NUcXoaDsQR4p2EoKnORe6f0asX8Kk iw7lGZ2CvPz9FxRvDmQKm5ch1rKLzdwgPmjd 71zEXvzkbJPwDscnMgKRvgdJpCIYmOU8iSSrJLYf58iqpRhCavvcNA4 G6ZfKcsw4WQMwZoyWHGRCtE=

http://winrar-64bit.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMT6ivKKC1zIlpmJ8ihejjAD N05eJE7gJRZur5k4ykPO84/ZH2dZaGoLZ8vG9hIwpYTwWseyY9iMUyXR0itfiuwlz4KJ6YbLjkGxOfpsCQlGPNYi KpsFRDaMhozaNvfRHxw0GdwCcCEuxdaazKFEeb0iR/DsTT6GMtH8f E5Q51iybwAjtZQ0MJqIbY77Ktzz4EieVgIcJKh 5fWWrL3Hn8Qeo3MM/DQVhpdlVI Xfn5Lpvrno94UJGFkv9ixDByNU6ubsZiKdAbVlcQXlDaInHN692G0V94M0QfvX39PT2dy/v8uzrNYRzcsdy0oYzyBmd57gJc/XsCKka4hzBcBgvBYeSui9LD8KIh1VlBxterWGTqbZNopNY xxd kEoRkL/02KWm8GZIM3nE1TTVjfvr3waOHFwD2NZnZHf/6OZU/sqWfjp61mBlKJyojk51U2pbm1g4yJkULVERH5dvwMCtZadbTSKTx8ky8/.../qhmWudzPrwgPmjd 71zEXvzkbJPwDscnMgKRvgdJpCIYmOU8iSSrJLYf58iqpRhCavvcNA4 G6ZfKcsw4WQMwZoyWHGRCtE=

http://winrar-64bit.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMT6ivKKC1zIlpmJ8ihejjAD N05eJE7gJRZur5k4ykPO84/ZH2dZaGoLZ8vG9hIwpYTwWseyY9iMUyXR0itfiuwlz4KJ6YbLjkGxOfpsCQlGPNYi KpsFRDaMhozaNvfRHxw0GdwCcCEuxdaazKFEeb0iR/DsTT6GMtH8f E5Q51iybwAjtZQ0MJqIbY77Ktzz4EieVgIcJKh 5fWWrL3Hn8Qeo3MM/DQVhpdlVI Xfn5Lpvrno94UJGFkv9ixDAjkT4Xkt9f/UTE4vY6iNzqFoEFj1tHkr8UFU2mU2QSdZjEd2Vf9hGGWROex17UoIRbx271gw OW00GZbzA knaiTwXGPsQ27Zo2RD1Ng952q7rf6CBzyOMV2aBCrkbY1bS6FylwEeoCLdsdeOJsb8RO eiEAwMqUl0SfJU3u2JDgIVyCKnRPk9cGz/w14DqG30UlASFNl79znxOpOK66kJaH0f3pg9NpII OqgOxr6nxPeEXKcnrr3HnIi88/.../IJwRIXDiAgPmjd 71zEXvzkbJPwDscnMgKRvgdJpCIYmOU8iSSrJLYf58iqpRhCavvcNA4 G6ZfKcsw4WQMwZoyWHGRCtE=

http://global-shared-files-lw.softonic.com/69a/620/.../winrar-x64-521.exe

http://gsf-cf.softonic.com/69a/620/.../winrar-x64-521.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.