Gridinsoft Logo
File Icon

The winrar-x64-701es.exe (WinRAR) File Analysis

Updated 3 months ago
Checked by Malaware Check
winrar-x64-701es.exe

Technical Analysis

File Name winrar-x64-701es.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.209.174
Database Version 2025-03-02 18:00:36 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
4,075,800
File Size (bytes)
2025-03-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
6fd5d917d1afca88894bf84c93e31aa3
SHA1
39f4cebfa25f2b8b8ce09adead8beaec2bbfb332
SHA256
f5a13bb8f154db80fd9ebf38381f320dbc9741596eb6b910a18fe538dcf3a87f
SHA512
694989d8e75d7e15845ee7ce24473bacb072fcd4db3778334eafe8310007c1cad1315db41c92d6eeee22cc9390947435d0f1e3381796804a0d411271b2e36d17
ImpHash
39da3cace27ab9503fa46001ce968ea6

PE Analysis

Basic Information

▼
Icon
Hash: d4a9c34f7171828c8adc9c3a0307afb8
Fuzzy: 2ea515c30e1a6ee8ad367944867f72e8
dHash: b233332a6b2ab232
Image Base 0x140000000
Entry Point 0x140029e90
Compilation Time 2024-05-12 10:17:26
Checksum 0x003e6510 (Actual: 0x003e6510)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb
Digital Signature OK
Imports 3 libraries
KERNEL32, OLEAUT32, gdiplus
Exports 0 functions
Resources 25 Resources
Sections 8 Sections

Version Information

▼
ProductName WinRAR
CompanyName Alexander Roshal
FileDescription WinRAR
FileVersion 7.1.0
ProductVersion 7.1.0
InternalName WinRAR
LegalCopyright Copyright © Alexander Roshal 1993-2024
OriginalFilename WinRAR.exe
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 270,718 bytes 270,848 bytes 6.47 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 3B541339CC9E14F15B888D0479B3133F
.rdata 0x00044000 73,878 bytes 74,240 bytes 5.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 68B3387C3DEDEAA3B1E5CD69A387443C
.data 0x00057000 58,372 bytes 4,608 bytes 3.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 615B97FD5C58191151507C5357520B77
.pdata 0x00066000 16,368 bytes 16,384 bytes 5.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1B12BB5F5C27BC0EC26E22D952EFE46A
.didat 0x0006a000 824 bytes 1,024 bytes 2.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 7A4026FB8D4E9AA87FE9F6AAAAA650D9
_RDATA 0x0006b000 348 bytes 512 bytes 3.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C2A487C68E9B43CB7D57799AAD555EA0
.rsrc 0x0006c000 159,744 bytes 156,160 bytes 7.76 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0E7C014A9728AC20034E79955AE49A9B
.reloc 0x00093000 2,372 bytes 2,560 bytes 5.25 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C5A48E3CA994DEE11A564D2249CDF0A4
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 25 (154,290 bytes)
Resource Type Count Total Size Percentage
PNG 2 69,432 bytes
45%
RT_ICON 7 77,238 bytes
50.1%
RT_DIALOG 4 2,236 bytes
1.4%
RT_STRING 9 2,696 bytes
1.7%
RT_GROUP_ICON 1 104 bytes
0.1%
RT_VERSION 1 712 bytes
0.5%
RT_MANIFEST 1 1,872 bytes
1.2%

Certificate Chain Analysis

▼
Certificate Information
Product WinRAR
Description WinRAR
File Version 7.1.0
Original Name WinRAR.exe
Signing Date 10:25 AM 05/20/2024 (383 days ago)
Verification Status Signed
Signers win.rar GmbH; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name WinRAR
Copyright Copyright © Alexander Roshal 1993-2024
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
win.rar GmbH #2 Chain
Validity Period: 2023-08-08 00:00:00 → 2026-08-07 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 04 8B 08 39 9E C7 03 62 3C 72 CD 20 77 AD 65 D9
DigiCert Timestamp 2023 #3 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware