The phrase "52111 rar" is primarily linked to the Grandoreiro banking trojan, which uses port 52111 as an indicator of compromise to download malicious payloads. This threat predominantly targets users in Spanish and Portuguese-speaking regions by stealing credentials. Details regarding this malware are available from Microsoft .
Trojan:Win64/Grandoreiro.psyE!MTB threat description - Microsoft 52111 rar