Gridinsoft Logo
File Icon

The winrar-x64-624uk.exe (WinRAR archiver) File Analysis

Updated 1 year ago
Checked by Malware Check
winrar-x64-624uk.exe

Technical Analysis

File Name winrar-x64-624uk.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.164.174
Database Version 2024-02-15 13:00:16 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
3,641,416
File Size (bytes)
2024-02-15
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
aa2a6dc7fd5c6964319f483b43114df4
SHA1
cb2fc692a43276f47c574d902f82bbed1743a8a1
SHA256
ed619b8a30b06681ef9975b08bb0b81d262cbeee134838bddf0002ef1b26c202
SHA512
14ce528a1d5d552eaa87991eb40d88ebd872508c9cea1240fca8f2f47a2fdc194e9ebdebfc5a074b0ac198904245280a8aa66bde21b924f65926a7eff885584e
ImpHash
a7c1e5228dc2514c5c5cc8010b9d4138

PE Analysis

Basic Information

▼
Icon
Hash: d4a9c34f7171828c8adc9c3a0307afb8
Fuzzy: 2ea515c30e1a6ee8ad367944867f72e8
dHash: b233332a6b2ab232
Image Base 0x140000000
Entry Point 0x1400268c0
Compilation Time 2023-10-03 07:51:35
Checksum 0x003820e1 (Actual: 0x003820e1)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb
Digital Signature OK
Imports 3 libraries
KERNEL32, OLEAUT32, gdiplus
Exports 0 functions
Resources 25 Resources
Sections 8 Sections

Version Information

▼
ProductName WinRAR
CompanyName Alexander Roshal
FileDescription WinRAR archiver
FileVersion 6.24.0
ProductVersion 6.24.0
InternalName WinRAR
LegalCopyright Copyright © Alexander Roshal 1993-2023
OriginalFilename WinRAR.exe
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 254,606 bytes 254,976 bytes 6.51 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 700ABD5209C09592AECEF74399515047
.rdata 0x00040000 67,702 bytes 68,096 bytes 5.13 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DCBAE7301C6BE99FEA3F4B5C731600C0
.data 0x00051000 152,940 bytes 5,120 bytes 3.69 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 24C867FF22AD5E76095F4649AF51EBD2
.pdata 0x00077000 11,592 bytes 11,776 bytes 5.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6478FAA678055A38DF9D47605C2B56D5
.didat 0x0007a000 816 bytes 1,024 bytes 2.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F6B31A2163413B79CA7E2D315D760B7A
_RDATA 0x0007b000 348 bytes 512 bytes 3.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0C3D4C8A16597DE7BAD64B697AD716F6
.rsrc 0x0007c000 159,744 bytes 159,744 bytes 7.79 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BD0441D9D1183DD998B75D413BEA0EB1
.reloc 0x000a3000 2,320 bytes 2,560 bytes 5.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 76CC9DB5AC7A0A73079B00F93B20A984
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 25 (157,947 bytes)
Resource Type Count Total Size Percentage
PNG 2 72,993 bytes
46.2%
RT_ICON 7 77,238 bytes
48.9%
RT_DIALOG 4 2,216 bytes
1.4%
RT_STRING 9 2,788 bytes
1.8%
RT_GROUP_ICON 1 104 bytes
0.1%
RT_VERSION 1 736 bytes
0.5%
RT_MANIFEST 1 1,872 bytes
1.2%

Certificate Chain Analysis

▼
Certificate Information
Product WinRAR
Description WinRAR archiver
File Version 6.24.0
Original Name WinRAR.exe
Signing Date 10:55 AM 10/12/2023 (621 days ago)
Verification Status Signed
Signers win.rar GmbH; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name WinRAR
Copyright Copyright © Alexander Roshal 1993-2023
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
win.rar GmbH #2 Chain
Validity Period: 2023-08-08 00:00:00 → 2026-08-07 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 04 8B 08 39 9E C7 03 62 3C 72 CD 20 77 AD 65 D9
DigiCert Timestamp 2023 #3 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware