The Rar exe (Command line RAR) Alexander Roshal File Malware Analysis
Gridinsoft Logo

The Rar.exe (Command line RAR) File Analysis

Updated 7 months ago
Checked by Malware Check
Rar.exe

Technical Analysis

File Name Rar.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-16 22:00:24 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
762,520
File Size (bytes)
2025-05-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
168ee0a1413bd8a97a2411acaa1607c6
SHA1
2a77d60cf21ee993215c1a2cf9bee25ffd5954bd
SHA256
b61f5cd83d9f781e57d17a78ad421e04267dc99bd0a3ebeaa1fc07e271d9e07b
SHA512
43ae8907f329fe15ddb3f0afeea55b52699392acd0997c410778b87a8fa2ae54cfa8065da89fcc8e400a252fb39ea29ba04cc863fc61b33b2d02755001b94af3
ImpHash
43abd757e2af547c27f3aa862031733e

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x140079700
Compilation Time 2024-02-26 09:00:48
Checksum 0x000bce4e (Actual: 0x000bce4e)
OS Version 5.2
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path D:\Projects\WinRAR\rar\build\rar64\Release\RAR.pdb
Digital Signature OK
Imports 7 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, POWRPROF
Exports 0 functions
Resources 54 Resources
Sections 7 Sections

Version Information

▼
ProductName WinRAR
CompanyName Alexander Roshal
FileDescription Command line RAR
FileVersion 7.0.0
ProductVersion 7.0.0
InternalName Command line RAR
LegalCopyright Copyright © Alexander Roshal 1993-2024
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 584,558 bytes 584,704 bytes 6.51 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ F0CBE242E2938B9FA5C82889B08F27A5
.rdata 0x00090000 94,620 bytes 94,720 bytes 5.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 646A4875DC4E48A9C6B2B98B20445283
.data 0x000a8000 82,268 bytes 13,824 bytes 4.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE CE5A054817F43659A02B10E7CA9F24DD
.pdata 0x000bd000 20,100 bytes 20,480 bytes 5.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 153E71378331B8634211B5FA1C3FCECF
_RDATA 0x000c2000 348 bytes 512 bytes 3.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 642F25B8C0C6935A56DF038AC5933C9C
.rsrc 0x000c3000 33,608 bytes 33,792 bytes 3.55 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DFB6A25362133D0977D1B975380DBB6F
.reloc 0x000cc000 2,700 bytes 3,072 bytes 5.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 4178EE4738DB40450449709C2F1E4435
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 54 (30,750 bytes)
Resource Type Count Total Size Percentage
RT_STRING 52 28,452 bytes
92.5%
RT_VERSION 1 688 bytes
2.2%
RT_MANIFEST 1 1,610 bytes
5.2%

Certificate Chain Analysis

▼
Certificate Information
Product WinRAR
Description Command line RAR
File Version 7.0.0
Signing Date 09:02 AM 02/26/2024 (657 days ago)
Verification Status Signed
Signers win.rar GmbH; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name Command line RAR
Copyright Copyright © Alexander Roshal 1993-2024
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
win.rar GmbH #2 Chain
Validity Period: 2023-08-08 00:00:00 → 2026-08-07 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 04 8B 08 39 9E C7 03 62 3C 72 CD 20 77 AD 65 D9
DigiCert Timestamp 2023 #3 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware