» WinRAR.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

WinRAR.exe

WinRAR

win.rar GmbH

WinRAR provides the full RAR and ZIP file support, can decompress CAB, GZIP, ACE and other archive formats. This is installed with WinRAR 5.30 (32-bit).

File name:

WinRAR.exe

Publisher:

Alexander Roshal (signed by win.rar GmbH)

Product:

WinRAR

Description:

WinRAR archiver

Version:

5.30.0

MD5:

153112f0faa6bcc9f25a5f4acc74d7ec

SHA-1:

ba9a773ef08665b9d35c76bac2b6ecb9d1a2a864

SHA-256:

b42d372671cc4a9c2129764651ca8325ddbf2904d31b284d040333497c2d0242

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/24/2024 6:56:57 PM UTC (today)

File size:

1.4 MB (1,463,288 bytes)

Product version:

5.30.0

Original file name:

WinRAR.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\winrar\winrar.exe

Digital Signature

Signed by:

win.rar GmbH

Authority:

COMODO CA Limited

Valid from:

6/1/2015 3:00:00 AM

Valid to:

6/1/2017 2:59:59 AM

Subject:

CN=win.rar GmbH, O=win.rar GmbH, STREET=Marienstrasse 12, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00FE46A10AD94269C3DD225C13645352E4

File PE Metadata

Compilation timestamp:

11/18/2015 11:14:52 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0xEBFAB

Entry point:

E8, E4, 92, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, C0, 9B, 51, 00, 33, C5, 89, 45, FC, F6, 05, 8C, 9E, 51, 00, 01, 56, 74, 08, 6A, 0A, E8, 12, 01, 00, 00, 59, E8, 9E, 93, 00, 00, 85, C0, 74, 08, 6A, 16, E8, A0, 93, 00, 00, 59, F6, 05, 8C, 9E, 51, 00, 02, 0F, 84, CA, 00, 00, 00, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89, BD, CC, FD, FF, FF, 66, 8C, 95, F8, FD, FF, FF, 66, 8C, 8D, EC, FD, FF... 
[+]

Entropy:

6.4102

Code size:

1022 KB (1,046,528 bytes)

Shell Open Command

Open type:

WinRAR

Command:

"C:\Program Files\winrar\winrar.exe" "%1"

The file WinRAR.exe has been discovered within the following program.

WinRAR 5.30 (32-bit) by win.rar GmbH

www.rarlab.com

11% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.