home

wrar393d.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.goodvibrations.etowns.net and multiple other hosts.
MD5:
8a4658046dadcab314f194607958fa54

SHA-1:
758fe0346ebfa8b953b5192799fdc2fce2ac70fe

SHA-256:
6ee76317af56c8e3856bb5557f706b984b564f57a0bd4a7a6c2bede50200363e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/17/2025 6:20:30 PM UTC  (today)

File size:
1.4 MB (1,444,057 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
3/15/2010 7:28:07 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:f382om6YpZgRGFAOzZcETHBj6rs/5MSWqqXfhMS3mfWvV3opw6SF0ByeyqTZl1b6:fXXgRoAOzWYhjeRqqvhMS3mfxpwpgXpe

Entry address:
0x8C84

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, 8A, 2A, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, 7E, B8, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, 24, BD, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 18, 02, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 1C, 02, 41, 00, 8D, 45, E4...
 
[+]

Code size:
57 KB (58,368 bytes)

The file wrar393d.exe has been discovered within the following programs.

League of Legends  by Riot Games
League of Legends (LoL) is a multiplayer online battle arena video game developed and published by Riot Games for Microsoft Windows. Players are formed into 2 even teams of Champions, 3v3 or 5v5. League of Legends is a session-based game.
www.RiotGames.com
12% remove it
WinRAR  by win.rar GmbH
WinRAR is a shareware file archiver and data compression utility that is able to create RAR archives natively. WinRAR supports RAR (WinRAR native conversion format) and ZIP archives, and unpacking of ARJ, LZH, TAR, GZ, ACE, UUE, BZ2, JAR, ISO, EXE, 7z, and Z archives.
www.rarlab.com
4% remove it
 
Powered by Should I Remove It?

The file wrar393d.exe has been seen being distributed by the following 2 URLs.

http://www.goodvibrations.etowns.net:1485/wrar393d.exe

http://rarlab.com/.../wrar393d.exe

Scan wrar393d.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.