home

InstallRARFileOpenKnife.exe

RAR File Open Knife - Free Opener Installer

Philipp Winterberg

The program is a setup application that uses the Nullsoft Scriptable Install System installer. The file has been seen being downloaded from rar-file-open-knife.en.softonic.com.
Publisher:
Philipp Winterberg

Product:
RAR File Open Knife - Free Opener Installer

Version:
7

MD5:
b2e98565ecb9af733b08f8ca783d0df3

SHA-1:
265826c365ec88fb2ddaab2b999fa9a6d6302089

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/19/2024 3:23:24 AM UTC  (today)

File size:
1.1 MB (1,188,712 bytes)

Product version:
7

Copyright:
© Philipp Winterberg

Original file name:
InstallRARFileOpenKnife.exe

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Language:
Language Neutral

Common path:
C:\Documents and Settings\{user}\My documents\downloads\installrarfileopenknife.exe

File PE Metadata
Compilation timestamp:
6/6/2009 2:41:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:0WiKN5QCRvV/QmGWAwGC/Og6Ik53uxOue7PZTJftE4oS:BmCj8v5IIuxNe7BFftjoS

Entry address:
0x30CB

Entry point:
F2, 39, C0, 0F, BE, ED, 80, F0, 06, 84, E4, F7, C2, AA, CA, 67, CE, 87, CB, 0F, AF, CE, B2, F8, F3, 8B, DD, 2B, EB, 8D, 05, FC, D4, C8, C4, 68, CA, 05, 00, 00, F2, 0F, B7, C3, 59, 89, FB, F3, FE, CF, 81, C1, 7B, 08, 00, 00, 22, D3, 0F, B7, D1, F6, C5, 44, 0D, 30, 20, 0E, 57, 81, E9, DE, 05, 00, 00, 8B, EF, F3, 81, C1, DD, 05, 00, 00, 80, E4, 4A, 0D, 26, CF, 37, E3, FF, C5, FF, C6, F2, 81, F9, 85, 03, 00, 00, 0F, 8F, CB, FF, FF, FF, 8B, D5, F7, C0, B0, 99, 1B, E9, 03, F0, B6, 90, E8, 51, 00, 00, 00, 6A, 00...
 
[+]

Entropy:
7.9768  (probably packed)

Code size:
22.5 KB (23,040 bytes)

The file InstallRARFileOpenKnife.exe has been seen being distributed by the following URL.

http://rar-file-open-knife.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAO5GjYLt2FuXfL6tICKFThXytc260JfxvHi3fjIc9cmRUh9eqYQqISSx4Ly3c4JgzfzaZuGT5GdY9vtF /.../0N1WKRrZ4SC3NwvCp0GFE2CqBM9SOboRDewuQTNEDrIw3yGjfakXSGvFTeAS6j35ikg==

Scan InstallRARFileOpenKnife.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.