home

wrar340.exe

This is a setup program which is used to install the application.
MD5:
b07814a4d120b0971dccec4d2059f806

SHA-1:
1d1cc99c61d60aa775c209d89206899ae284fe32

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/13/2024 6:27:01 PM UTC  (today)

File size:
1.1 MB (1,162,846 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
9/8/2004 4:51:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
24576:CZf4AYuBC3ulh01w5ffuAyhFcukRonmx7guc+F0odgPG+4Fx:6f4AYeC34LhToERomxUucjkSe

Entry address:
0x1000

Entry point:
E8, 93, 27, 00, 00, 50, E8, 53, F1, 00, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E5, 10, 41, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, 1E, 43, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, 9C, F3, 00, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, 8C, 20, 41, 00, 6A, 65, 56, E8, E2, F2, 00, 00, 6A, 01, 56, E8, BC, F2, 00, 00...
 
[+]

Entropy:
7.9678  (probably packed)

Code size:
64 KB (65,536 bytes)

The file wrar340.exe has been discovered within the following programs.

WinRAR 5.31 (64-bit)  by win.rar GmbH
6% remove it
WinRAR archiver  by win.rar GmbH
WinRAR archiver is a shareware file archiver that is able to create RAR archives natively.
www.rarlab.com
12% remove it
 
Powered by Should I Remove It?

The file wrar340.exe has been seen being distributed by the following 5 URLs.

ftp://10.0.5.160/Compress & Tools/WinRAR/.../wrar340.exe

https://cloclo27.cldmail.ru/2nLmW9QcJJYyHdb62oK8/G/.../ekdHKniHC?key=35eac8930d7aed492f2e21f0adfaf793adcbc2af

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3Nzk0NzkxNjtzOjI6ImlkIjtpOjY2Mjc7czo0OiJmaWxlIjtzOjEzOiJ3aW5yYXIzNDAuZXhlIjtzOjM6InVybCI7czo0NToiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL3dpbnJhci0zLTQwIjtzOjQ6InBhc3MiO3M6MzI6IjBjNTBlNGYyZDlkMzMxYTU4MzNhMWY5YTA3ZTVmNjk0Ijt9

https://www.drivehq.com/file/DF.aspx/isGallery/share/shareID0/fileID2402140814/pay/.../wrar340.exe

ftp://192.168.1.10/Master/.../wrar340.exe

Scan wrar340.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.