Gridinsoft Logo
File Icon

The winrar-x64-710b2.exe (WinRAR) File Analysis

Updated 3 months ago
Checked by Malaware Check
winrar-x64-710b2.exe

Technical Analysis

File Name winrar-x64-710b2.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-07 16:00:40 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
3,740,080
File Size (bytes)
2025-03-07
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
8a12292bbe521d26a7182e00db8f1fb3
SHA1
1153fca3789bf0a1cd83713eb42c46c36a96f1c3
SHA256
af40257d79037f485d2cc85271085a65773784a6792609347d4146c23d1a50f0
SHA512
3c22a28fa9f80a165f2a5fb83bdfe65a5890e0c94ae2f7514343be6d0072346cf99d5c880ac2c4aec551dae9d21b4794eb3d37cfbbbf0033c334ef41c57f6b90
ImpHash
ff7e069b78bf716250a0686cc64fce2e

PE Analysis

Basic Information

▼
Icon
Hash: d4a9c34f7171828c8adc9c3a0307afb8
Fuzzy: 2ea515c30e1a6ee8ad367944867f72e8
dHash: b233332a6b2ab232
Image Base 0x140000000
Entry Point 0x140024780
Compilation Time 2025-01-10 16:06:21
Checksum 0x003a03de (Actual: 0x003a03de)
OS Version 6.1
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\Projects\WinRAR\SFX\setup\build\sfxrar64\Release\sfxrar.pdb
Digital Signature OK
Imports 3 libraries
KERNEL32, OLEAUT32, gdiplus
Exports 0 functions
Resources 25 Resources
Sections 7 Sections

Version Information

▼
ProductName WinRAR
CompanyName Alexander Roshal
FileDescription WinRAR
FileVersion 7.10.2
ProductVersion 7.10.2
InternalName WinRAR
LegalCopyright Copyright © Alexander Roshal 1993-2025
OriginalFilename WinRAR.exe
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 248,926 bytes 249,344 bytes 6.44 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 4EBB092653478CFA7162B47C3A540C7C
.rdata 0x0003e000 71,784 bytes 72,192 bytes 5.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1F4E20346E66BB40056FB7622407A81E
.data 0x00050000 45,972 bytes 4,608 bytes 3.09 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B68D02F4E4D53AF9C5F091DBB191B83C
.pdata 0x0005c000 15,492 bytes 15,872 bytes 5.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DBC4DC2E7DE3B3EF78C51FDABCBA26AA
.didat 0x00060000 824 bytes 1,024 bytes 2.93 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 40DAE85710BDCB5B7BBE5E51A8F4B2DB
.rsrc 0x00061000 137,048 bytes 137,216 bytes 7.71 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E4E679BE3896617365B71C356F28057B
.reloc 0x00083000 2,364 bytes 2,560 bytes 5.24 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 693E5DFEDE9A40441E196E727BFF0810
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 25 (135,502 bytes)
Resource Type Count Total Size Percentage
PNG 2 55,193 bytes
40.7%
RT_ICON 7 72,681 bytes
53.6%
RT_DIALOG 4 2,236 bytes
1.7%
RT_STRING 9 2,696 bytes
2%
RT_GROUP_ICON 1 104 bytes
0.1%
RT_VERSION 1 720 bytes
0.5%
RT_MANIFEST 1 1,872 bytes
1.4%

Certificate Chain Analysis

▼
Certificate Information
Product WinRAR
Description WinRAR
File Version 7.10.2
Original Name WinRAR.exe
Signing Date 04:06 PM 01/10/2025 (147 days ago)
Verification Status Signed
Signers win.rar GmbH; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name WinRAR
Copyright Copyright © Alexander Roshal 1993-2025
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
win.rar GmbH #2 Chain
Validity Period: 2023-08-08 00:00:00 → 2026-08-07 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 04 8B 08 39 9E C7 03 62 3C 72 CD 20 77 AD 65 D9
DigiCert Timestamp 2024 #3 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware