» WinRAR.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

WinRAR.exe

WinRAR

win.rar GmbH

WinRAR provides the full RAR and ZIP file support, can decompress CAB, GZIP, ACE and other archive formats. This is installed with WinRAR 5.20 (64-bit).

File name:

WinRAR.exe

Publisher:

Alexander Roshal (signed by win.rar GmbH)

Product:

WinRAR

Description:

WinRAR archiver

Version:

5.20.0

MD5:

9920913721ab74e3f06233d6d2fc0379

SHA-1:

95b30da49def7b78adc3e8f8deb7d5256c0cf463

SHA-256:

c5b0b3639aa04b4b43136d9b6dd79f45cbc25b2b9483d7969cbe27feb29e6dcc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/25/2024 12:58:45 AM UTC (today)

File size:

1.4 MB (1,500,248 bytes)

Product version:

5.20.0

Original file name:

WinRAR.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\winrar\winrar.exe

Digital Signature

Signed by:

win.rar GmbH

Authority:

COMODO CA Limited

Valid from:

6/12/2013 7:00:00 PM

Valid to:

6/13/2015 6:59:59 PM

Subject:

CN=win.rar GmbH, O=win.rar GmbH, STREET=Schumannstr. 17, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

75953FA54DD12DD9CA6B948C17BFD67C

File PE Metadata

Compilation timestamp:

12/2/2014 5:07:10 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0xECB18

Entry point:

48, 83, EC, 28, E8, 33, 92, 00, 00, 48, 83, C4, 28, E9, 12, FE, FF, FF, CC, CC, 48, 81, EC, A8, 05, 00, 00, F6, 05, 9A, FA, 03, 00, 01, 74, 0A, B9, 0A, 00, 00, 00, E8, A6, 00, 00, 00, E8, DD, 92, 00, 00, 48, 85, C0, 74, 0A, B9, 16, 00, 00, 00, E8, DA, 92, 00, 00, F6, 05, 73, FA, 03, 00, 02, 74, 5F, 48, 8D, 8C, 24, D0, 00, 00, 00, FF, 15, 27, 7A, 01, 00, 48, 8D, 4C, 24, 30, 33, D2, 41, B8, 98, 00, 00, 00, E8, AD, A5, FF, FF, 48, 8B, 84, 24, A8, 05, 00, 00, 33, C9, 48, 89, 44, 24, 40, 48, 8D, 44, 24, 30, C7... 
[+]

Code size:

1 MB (1,059,328 bytes)

Shell Open Command

Open type:

WinRAR

Command:

"C:\Program Files\winrar\winrar.exe" "%1"

The file WinRAR.exe has been discovered within the following program.

WinRAR 5.20 (64-bit) by win.rar GmbH

9% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.