Malware scan of winrar-x64-531d.exe 229c3b6ccb88eb07f9047f569ca8c24ef3e91649

File name:

winrar-x64-531d.exe

Publisher:

win.rar GmbH (signed and verified)

MD5:

049095fe42d479556ded919cba0e96ce

SHA-1:

229c3b6ccb88eb07f9047f569ca8c24ef3e91649

SHA-256:

3972e508f46a83e97eaf47b90b98f0323364baa9733df40d08f606b0aca3e4b8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

7/27/2025 7:08:09 PM UTC (today)

File size:

2 MB (2,114,680 bytes)

File type:

Executable application (Win64 EXE)

Common path:

C:\users\{user}\downloads\winrar-x64-531d.exe

Signed by:

win.rar GmbH

Authority:

COMODO CA Limited

Valid from:

6/1/2015 2:00:00 AM

Valid to:

6/1/2017 1:59:59 AM

Subject:

CN=win.rar GmbH, O=win.rar GmbH, STREET=Marienstrasse 12, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00FE46A10AD94269C3DD225C13645352E4

Compilation timestamp:

2/3/2016 8:38:39 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:KFrHVxWUBLQFKj3zgKR905hNfpft658RvFauoFDUZ:kJxWUBvrrENp1HRvFauoFDG

Entry address:

0x23398

Entry point:

48, 83, EC, 28, E8, E7, 67, 00, 00, 48, 83, C4, 28, E9, 12, FE, FF, FF, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 6C, 24, 10, 48, 89, 74, 24, 18, 57, 48, 83, EC, 20, 49, 8B, E8, 48, 8B, F2, 48, 8B, D9, 48, 85, C9, 75, 05, E8, 81, 1A, 00, 00, 48, 63, 43, 18, 8B, 7B, 14, 48, 03, 46, 08, 75, 05, E8, 6F, 1A, 00, 00, 33, C9, 85, FF, 74, 33, 4C, 8B, 4E, 08, 4C, 63, 43, 18, 4B, 8D, 14, 01, 48, 63, 02, 49, 03, C1, 48, 3B, E8, 7C, 0A, FF, C1, 48, 83, C2, 08, 3B, CF, 72, EB, 85, C9, 74, 0E, 8D, 41, FF, 49, 8D, 14, C0, 42... 
[+]

Code size:

191 KB (195,584 bytes)

The file winrar-x64-531d.exe has been seen being distributed by the following 41 URLs.

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455022874&v=3600&s=7c288842cb8ef83ebeca26b2aa142839

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455622396&v=3600&s=d4a01bbcaf696c987fd33907331b789b

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455276127&v=3600&s=72591f631a0d27e382767399efe47af7

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455029636&v=3600&s=1cc9d9e5427b63349c510f41c15d3003

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455221274&v=3600&s=32401c6ab405a3f244e14c5567f80cc1

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455023734&v=3600&s=add32be7196db40ec3a10219e123e2fd

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455025731&v=3600&s=e10d52ea178e0debdaadfe9b9a099a98

http://rarsoft.com/.../winrar-x64-531d.exe

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455136724&v=3600&s=aa60eb04575b03de296ce4f0ba3a8b16

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455208635&v=3600&s=307f85aa251eb44f6bad13fff1de4fd7

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455444137&v=3600&s=acb92209121d2c4bd1a1bc556d24c297

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455467571&v=3600&s=d1384301923ad306363b326a06f3c8e8

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455213802&v=3600&s=6baf547e3206167ab11255c07686a90f

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455408723&v=3600&s=2e0e5dba0eb80ae48e9c628b3d702830

http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/.../winrar-x64-531d.exe&s=buDL-dl-extDL

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455112341&v=3600&s=adb2909720644362691023ae3bf704de

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455050386&v=3600&s=ac32afa746a381e7c298ead7cc27be0b

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455571704&v=3600&s=e2e55f4d1da3b2cfa4fbaf0ed55d1121

http://www.rarlabs.com/.../winrar-x64-531d.exe

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455467571&v=3600&s=d1384301923ad306363b326a06f3c8e8

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455222898&v=3600&s=b5ee96645c2a8066b03912b6daf6ec03

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=72163be1599d5818058a798c2ac3df92&url=http://www.rarsoft.com/rar/winrar-x64-531d.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_37666791.html?t=1455080421&v=3600&s=3bc6bd86f727ed3717456ce8d9f03da4