» WinRAR.exe
Overview
Analysis
File Details
Behaviors (1)

WinRAR.exe

WinRAR

win.rar GmbH

WinRAR provides the full RAR and ZIP file support, can decompress CAB, GZIP, ACE and other archive formats.

File name:

WinRAR.exe

Publisher:

Alexander Roshal (signed by win.rar GmbH)

Product:

WinRAR

Description:

WinRAR archiver

Version:

5.31.0

MD5:

e52eaf591fb41050adee8d2548b039d9

SHA-1:

d7acefe262a736d7c28084eb6b8259886ec84c79

SHA-256:

5da8f123ca06baf973ec805842c4b6105a8126200033c06e4b0904e311365039

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 5:03:39 AM UTC (today)

File size:

1.5 MB (1,597,807 bytes)

Product version:

5.31.0

Original file name:

WinRAR.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\winrar\winrar.exe

Digital Signature

Signed by:

win.rar GmbH

Authority:

COMODO CA Limited

Valid from:

6/1/2015 8:00:00 AM

Valid to:

6/1/2017 7:59:59 AM

Subject:

CN=win.rar GmbH, O=win.rar GmbH, STREET=Marienstrasse 12, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00FE46A10AD94269C3DD225C13645352E4

File PE Metadata

Compilation timestamp:

2/4/2016 3:37:43 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0xEBFFB

Entry point:

BB, E5, 1F, 9B, BA, 93, E9, 20, 01, 00, 00, F6, 9C, FF, FB, A7, 2B, FF, FB, 7F, 8B, 95, 7F, 7F, FF, 7F, 7F, 6C, 7F, 7F, 7F, DE, B0, B5, B0, AF, B0, B8, B6, B5, 7F, 7F, 7F, F3, E0, F9, E4, E1, E0, EC, E0, AD, E3, EB, EB, 7F, 7F, 7F, 7F, DB, 7F, 7F, 7F, C5, F1, E4, E4, CB, E8, E1, F1, E0, F1, F8, 7F, C2, F1, E4, E0, F3, E4, C3, E8, F1, E4, E2, F3, EE, F1, F8, C0, 7F, 7F, 7F, 7F, C6, E4, F3, D6, E8, ED, E3, EE, F6, F2, C3, E8, F1, E4, E2, F3, EE, F1, F8, C0, 7F, 7F, 7F, 7F, C6, E4, F3, CC, EE, E3, F4, EB, E4... 
[+]

Entropy:

6.6192

Code size:

1022.5 KB (1,047,040 bytes)

Shell Open Command

Open type:

WinRAR

Command:

"C:\Program Files\winrar\winrar.exe" "%1"

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.