» WinRAR.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)
Downloads (1)

WinRAR.exe

WinRAR

win.rar GmbH

WinRAR provides the full RAR and ZIP file support, can decompress CAB, GZIP, ACE and other archive formats. This is a setup program which is used to install the application. This is installed with WinRAR 5.21 (32-bit).

File name:

WinRAR.exe

Publisher:

Alexander Roshal (signed by win.rar GmbH)

Product:

WinRAR

Description:

WinRAR archiver

Version:

5.21.0

MD5:

f6dd08cd981ef2c687819f8eb6fa91ed

SHA-1:

6e76b84da78c594a87abb0b0e0f4979578fa8bd5

SHA-256:

729218c0849cebf185729c62b6fb2e165f36ed39cee5cedc6511e651c2b8823e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/25/2024 2:36:28 PM UTC (today)

File size:

1.3 MB (1,406,928 bytes)

Product version:

5.21.0

Original file name:

WinRAR.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\winrar\winrar.exe

Digital Signature

Signed by:

win.rar GmbH

Authority:

COMODO CA Limited

Valid from:

6/13/2013 1:00:00 AM

Valid to:

6/14/2015 12:59:59 AM

Subject:

CN=win.rar GmbH, O=win.rar GmbH, STREET=Schumannstr. 17, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

75953FA54DD12DD9CA6B948C17BFD67C

File PE Metadata

Compilation timestamp:

2/15/2015 8:00:07 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:YAfWRzx1rqXyvhxVvZ4MZf9yCBRwhBsOsbXp4fENO5OnMMMMMM7cY:YAORdxDruQ5dVMMMMMM4Y

Entry address:

0xE8B36

Entry point:

E8, 44, 91, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, C0, 4B, 51, 00, 33, C5, 89, 45, FC, F6, 05, 8C, 4E, 51, 00, 01, 56, 74, 08, 6A, 0A, E8, 12, 01, 00, 00, 59, E8, FE, 91, 00, 00, 85, C0, 74, 08, 6A, 16, E8, 00, 92, 00, 00, 59, F6, 05, 8C, 4E, 51, 00, 02, 0F, 84, CA, 00, 00, 00, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89, BD, CC, FD, FF, FF, 66, 8C, 95, F8, FD, FF, FF, 66, 8C, 8D, EC, FD, FF... 
[+]

Code size:

1007.5 KB (1,031,680 bytes)

Shell Open Command

Open type:

WinRAR

Command:

"C:\Program Files\winrar\winrar.exe" "%1"

The file WinRAR.exe has been discovered within the following program.

WinRAR 5.21 (32-bit) by win.rar GmbH

www.rarlab.com

6% remove it

The file WinRAR.exe has been seen being distributed by the following URL.

ftp://ftp.akzo.sonda.com.uy/Soporte/.../WinRAR.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.