64-bit
exemachine scopewww.rarlab.com · publisher domain- SHA-256
- 8ff0daf3ed564cc743c0e23ff2e253997ffc74460f9673f0b6dd037b2db4ce7b
- Silent install
- -s1
by win.rar GmbH · Proprietary
Compress, Encrypt, Package and Backup with only one utility
These URLs are the ones win.rar GmbH declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what win.rar GmbH published. Delete it.
Windows · PowerShell
Get-FileHash "winrar-x64-723.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "winrar-x64-723.exe"Expected output
8ff0daf3ed564cc743c0e23ff2e253997ffc74460f9673f0b6dd037b2db4ce7b
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 39 of 39 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 39 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 39 of 39 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions WinRAR registers itself to handle.
Every version with a published manifest, newest first. Useful when you need an older build for compatibility.