home

WinRAR.exe

WinRAR

win.rar GmbH

WinRAR provides the full RAR and ZIP file support, can decompress CAB, GZIP, ACE and other archive formats.
Publisher:
Alexander Roshal  (signed by win.rar GmbH)

Product:
WinRAR

Description:
WinRAR archiver

Version:
5.40.0

MD5:
51cae3447f61a1e1177204de2dba9422

SHA-1:
217bc1196c70ff3e51dffd243302fce092c1d57a

SHA-256:
dbc6995bc0485c9569d99f2cfed0b0eb94b743514314a00afeaeda9271bde5d6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 9:52:14 PM UTC  (today)

File size:
1.5 MB (1,578,839 bytes)

Product version:
5.40.0

Copyright:
Copyright © Alexander Roshal 1993-2016

Original file name:
WinRAR.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\winrar\winrar.exe

Digital Signature
Signed by:
win.rar GmbH

Authority:
COMODO CA Limited

Valid from:
5/31/2015 5:00:00 PM

Valid to:
5/31/2017 4:59:59 PM

Subject:
CN=win.rar GmbH, O=win.rar GmbH, STREET=Marienstrasse 12, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FE46A10AD94269C3DD225C13645352E4

File PE Metadata
Compilation timestamp:
8/14/2016 12:15:08 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

Entry address:
0xEC921

Entry point:
E9, 33, A2, F3, FF, E9, 80, FE, FF, FF, 55, 8B, EC, 56, FF, 75, 08, 8B, F1, E8, 87, 07, F5, FF, C7, 06, C8, 52, 51, 00, 8B, C6, 5E, 5D, C2, 04, 00, 83, 61, 04, 00, 8B, C1, 83, 61, 08, 00, C7, 41, 04, D0, 52, 51, 00, C7, 01, C8, 52, 51, 00, C3, 55, 8B, EC, 83, EC, 0C, 8D, 4D, F4, E8, F4, 06, F5, FF, 68, D4, DE, 51, 00, 8D, 45, F4, 50, E8, F1, 0F, 00, 00, CC, 55, 8B, EC, 83, EC, 0C, 8D, 4D, F4, E8, BD, FF, FF, FF, 68, 8C, 1B, 52, 00, 8D, 45, F4, 50, E8, D4, 0F, 00, 00, CC, E9, 91, 5B, 00, 00, FF, 25, F0, B6...
 
[+]

Entropy:
6.5289

Packer / compiler:
Xtreme-Protector v1.05

Code size:
1 MB (1,086,464 bytes)

Shell Open Command
Open type:
WinRAR

Command:
"C:\Program Files\winrar\winrar.exe" "%1"


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.