WinRAR


WinRAR is a trialware file archiver utility for Windows, developed by Eugene Roshal of win.rar GmbH. It can create and view archives in RAR or ZIP file formats, and unpack numerous archive file formats. To enable the user to test the integrity of archives, WinRAR embeds CRC32 or BLAKE2 checksums for each file in each archive. WinRAR supports creating encrypted, multi-part and self-extracting archives.
WinRAR is a Windows-only program. An Android application called "RAR for Android" is also available. Related programs include the command-line utilities "RAR" and "UNRAR" and versions for macOS, Linux, FreeBSD, Windows CE, and MS-DOS.

Evolution

WinRAR and the RAR file format have evolved over time. Support for the archive format RAR5, using the same RAR file extension as earlier versions, was added in version 5.0; files in the older RAR file format have since been referred to as RAR4. WinRAR versions before 5.0 do not support RAR5 archives; only older versions of WinRAR run on Windows versions prior to XP, and cannot open RAR5 archives.
The RAR5 file format increased the maximum dictionary size to 1 GiB; 11 different compression directory sizes from 1 MiB to 1 GiB are available, with the default in version 5 increased from 4 MiB to 32 MiB, typically improving compression ratio. AES encryption, when used, is in CBC mode and was increased in strength from 128- to 256-bit. Maximum path length for files in RAR and ZIP archives is increased to 2048 characters.
Options added in v5.0 include 256-bit BLAKE2 file-hashing algorithm instead of default 32-bit CRC32, duplicate file detection, NTFS hard and symbolic links, and Quick Open record to allow large archives to be opened faster.
The RAR5 file format removed comments for each file, authenticity verification, and specialized compression algorithms for text and multimedia files. RAR5 also changed the file name for split volumes from "archivename.rNN" to "archivename.partNN.rar".

Features

When creating RAR archives:
The software is distributed as "try before you buy"; it may be used without charge for 40 days. When the period expires, the non-enterprise functionalities remain available, a move intended to discourage piracy. In China, a free-to-use personal edition has been provided officially since 2015.
Although archiving with the RAR format is proprietary, RARLAB supplies as copyrighted freeware the C++ source code of the current UnRAR unpacker, with a license allowing it to be used in any software, thus enabling others to produce software capable of unpacking, but not creating, RAR archives.
RAR for Android is free of charge. It displays advertisements; for a payment they can be disabled. A license for WinRAR does not provide ad-suppression for RAR for Android.

Security

In February 2019, a major security vulnerability in the unacev2.dll library which is used by WinRAR to decompress ACE archives was discovered. Consequently, WinRAR dropped the support for the ACE format from version 5.70.
Self-extracting archives created with versions before 5.31 are vulnerable to DLL hijacking: they may load and use DLLs named UXTheme.dll, RichEd32.dll and RichEd20.dll if they are in the same folder as the executable file.
It was widely reported that WinRAR v5.21 and earlier had a remote code execution vulnerability which could allow a remote attacker to insert malicious code into a self-extracting executable file being created by a user, "putting over 500 million users of the software at risk". However, examination of the claim revealed that, while the vulnerability existed, the result was merely an SFX which delivered its payload when executed; published responses dismissed the threat, one saying "If you can find suckers who will trust a.exe labelled as self-extracting archive... then you can trick them into running your smuggled JavaScript".

History

Versions

More recent versions do not support many older operating systems. Versions supporting older operating systems may still be available, but not maintained: