WinRAR

WinRAR

WinRAR 4.11 in Windows 7
Developer(s)	Eugene Roshal (developer), Alexander Roshal (distributor)[1]
Initial release	22 April 1995
Stable release	5.40 (August 16, 2016[2]) [±]
Operating system	Windows XP and later
Platform	IA-32, x64
Size	~2 MB
Available in	41 languages[3]
List of languages Albanian, Arabic, Armenian, Belarusian, Bulgarian, Catalan, Chinese Simplified, Chinese Traditional, Croatian, Czech, Danish, Dutch, English, Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Indonesian, Italian, Lithuanian, Norwegian, Persian, Polish, Portuguese, Portuguese Brazilian, Romanian, Russian, Serbian Cyrillic, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian, Uzbek, Vietnamese.
Type	File archiver
License	Trialware
Website	rarlab.com

WinRAR is a trialware file archiver utility for Windows. It can create archives in RAR or ZIP file formats,^[4] and unpack numerous archive file formats. To enable the user to test the integrity of archives, WinRAR embeds CRC32 or BLAKE2 checksums for each file in each archive. WinRAR supports creating encrypted, multi-part and self-extracting archives.

Although WinRAR is a Windows-only app, the author has made an Android app called "RAR for Android",^[5] and command-line utilities called "RAR" and "UNRAR" (widely released since autumn of 1993),^[6] available for OS X,^[3] Linux, FreeBSD, Windows, and MS-DOS.

Overview

WinRAR and the RAR file format have evolved over time. Support for the archive format RAR5, using the same RAR file extension as earlier versions, was added in v5;^[7] files in the older RAR file format are now referred to as RAR4. WinRAR versions before 5.0 do not support RAR5 archives.^[8]

The RAR5 file format increased the maximum dictionary size to 1 GiB; 11 different compression directory sizes from 1 MiB to 1 GiB are available, with the default in version 5 increased from 4 MiB to 32 MiB, typically improving compression ratio. AES encryption, when used, was increased from 128- to 256-bit. Maximum path length for files in RAR and ZIP archives is increased to 2048 characters.^[8]

Options added in v5 include 256-bit BLAKE2 file-hashing algorithm instead of default 32-bit CRC32, duplicate file detection, NTFS hard and symbolic links, and Quick Open record to allow large archives to be opened faster.^[8]

The RAR5 file format removed comments for each file (though archive comment still remains), authenticity verification, and specialized compression algorithms for text and multimedia files. RAR5 also changed the file name for split volumes from "archivename.rNN" to "archivename.partNN.rar".^[8]

Features

• Packing (creation) of RAR or ZIP archives.
• Unpacking of ACE, ARJ, BZIP2, CAB, EXE, GZ, ISO, JAR, LHA, RAR, TAR, UUE, XZ, Z, ZIP, ZIPX, 7z, 001 (split) archives.^[8][9]
• Checksum (integrity) verification for ACE, ARJ, BZIP2, CAB, GZ, BZIP2, RAR, XZ, ZIP and 7z archives.
• Multithreaded CPU compression and decompression.

When creating RAR archives:

• Support for maximum file size of 16 EiB (2⁶⁴ bytes) minus 1.
• Compression dictionary from 1 MiB to 1 GiB (limited to 256 MiB on 32-bit Windows, however 32-bit Windows still can decompress archives with 1 GiB dictionary). Default size is 32 MiB.^[8]
• Optional 256-bit BLAKE2 file hash can replace default 32-bit CRC32 file checksum.^[8]
• Optional encryption using AES (Advanced Encryption Standard) with a 256-bit key.^[10]
• Optional data redundancy is provided in the form of Reed-Solomon recovery records and recovery volumes, allowing reconstruction of damaged archives (including reconstruction of entirely missed volumes).
• Optional "Quick Open Record" to open RAR files faster.^[8]
• Ability to create multi-volume (split) archives^[11][12]
• Ability to create self-extracting files. The self-extractor can execute commands, such as running a specified program automatically after self-extraction.^[13]
• Support for advanced NTFS file system options, such as NTFS hard and symbolic links.^[8]
• Support for maximum path length up to 2048 characters (stored in the UTF-8 format).^[8]
• Optional archive comment (stored in the UTF-8 format).^[8]
• Optional file time stamp preservation: creation, last access, high precision modification times.
• Optional files deduplication.

License

The software is distributed as "try before you buy"; it may be used without charge for 40 days.^[14] In China, a completely free-to-use personal edition has been provided officially since 2015.^[15]

Although archiving with the RAR format is proprietary, RarLab supplies as copyrighted freeware the source code of the UnRAR unpacker, with a license allowing it to be used in any software, thus enabling others to produce software capable of unpacking, but not creating, RAR archives.^[16]

Security

Self-extracting archives created with versions before 5.31 (including the executable installer of WinRAR itself) are vulnerable to DLL hijacking: They may load and use DLLs named UXTheme.dll, RichEd32.dll and RichEd20.dll if they are in the same folder as the executable file.^[17][18]

History

Versions

• Command line RAR and UNRAR were first released in autumn 1993.^[6]
• Early development version WinRAR 1.54b was released in 1995 as 16-bit Windows 3.x application.
• Version 2.00 was released on September 6, 1996.
• Since version 3.00 (May 2002), the new RAR3 archive format is implemented. The new compressed archives cannot be managed by old versions of WinRAR.
• Since version 3.41 (December 2004), WinRAR adds support for Linux .Z archives like GZIP and BZIP2. New options include storing entire file paths and restoring compressed NTFS files.
• Since version 3.50 (August 2005), WinRAR adds support for interface skins and themes and support Windows XP x64.^[19]
• Since version 3.60 (August 2006), WinRAR includes a multithreaded version of the compression algorithm, which improves compression speed on systems with multiple, dual-core, or Hyper-threading-enabled CPUs.
• Since version 3.70 (circa January 2007), WinRAR features support for Windows Vista.^[20]
• Since version 3.80 (September 2008), support for ZIP archives, which contain Unicode file names in UTF-8.^[21]
• Since version 3.90 (May 2009), WinRAR adds support Windows x64 natively and support Windows 7. It also enhanced support for multithreading.^[8]
• Version 3.91 is the last version that supports Valencian.
• Version 3.92 is the last version that supports Serbian Cyrillic and Serbian Latin.
• Version 4.00 (March 2011) speeds up decompression by up to 30%. Windows 98, Windows Me, and Windows NT are no longer supported; the minimum Windows version required is Windows 2000.^[8]
• Since version 4.10 (January 2012) WinRAR removes all ZIP limitations now allowing unlimited number of files and archive size. WinRAR now also allows to create multivolume ZIP files. ZIP archives now include Unicode file names.^[8]
• Since version 4.20 (June 2012) Compression speed in SMP mode has been increased significantly, but this improvement was made at the expense of increased memory usage. ZIP compression now uses SMP as well. The default SMP mode cannot handle text; text compression is significantly worse unless additional switches are used. Also, Windows 2000 compatibility was removed.^[8]
• Since version 5.00 (September 2013) the later RAR5 archive format is implemented. RAR5 compressed archives cannot be managed by old versions of WinRAR. WinRAR 5 has better multicore processor support, and the RAR5 file format supports a dictionary size of up to 1 GiB with 64-bit WinRAR. Special compression algorithms optimised for RGB bitmaps, raw audio files, Itanium binaries, and text used by earlier versions, are supported only in the older RAR format, not RAR5.^[8]

Operating systems support

More recent versions do not support many older operating systems. Versions supporting older operating systems are still available, but not maintained:

• WinRAR v4.11 is the last version that supports Windows 2000.^[22]
• WinRAR v3.93 is the last version that supports Windows 95, 98, ME, NT,^[22] and Windows Mobile.^[23]
• RAR v3.93 is the last version that supports MS-DOS and OS/2 on 32-bit CPU, such as 80386 and later. It supports long file names in a Windows DOS box (except under Windows NT), and uses the RSX DPMI extender.^[24]
• RAR v2.50 is the last version that supports MS-DOS and OS/2 on 16-bit CPU, such as 8086 and 80286.^[24]

Exploit claims

It was widely reported that WinRAR v5.21 and earlier had a remote code execution (RCE) vulnerability which could allow a remote attacker to insert malicious code into a self-extracting executable (SFX) file being created by a user, "putting over 500 million users of the software at risk".^[25] However, examination of the claim revealed that, while the vulnerability existed, the result was merely an SFX which delivered its payload when executed; published responses dismissed the threat, one saying "If you can find suckers who will trust a .exe labelled as self-extracting archive ... then you can trick them into running your smuggled JavaScript".^[26][27]

Easter eggs

• In "About WinRAR" Help menu clicking on the WinRAR logo makes the ocean surf and waves move. Mouse clicking with Shift pressed on the logo causes the appearance of a sailboat above the "R" button which is sailing around in the water.^[28]
• In the same dialog pressing the book icon causes it to jump like a ball until it rests, and with each bounce, the Windows exclamation sound can be heard.

See also

• Comparison of file archivers
• Comparison of archive formats
• List of archive formats

References

1. (Russia, Chelyabinsk)WinRAR 3.40 release notes by Eugene Roshal (Russian)
2. "Latest changes in WinRAR".
3. RAR download page
4. Manuel Masiero (18 March 2013)"Compression Performance: 7-Zip, MagicRAR, WinRAR, WinZip" Tom's Hardware. Retrieved 27 November 2013.
5. RAR for Android; RARsoft.
6. Voloshin, Kirill (2011-03-10). Интервью по переписке [Interview by correspondence] (in Russian). Retrieved 2014-10-27.
7. Martin Brinkmann (29 April 2013)"WinRAR 5.0 introduces the new RAR 5 format. What you need to know" Ghacks. Retrieved 27 November 2013.
8. "Latest changes in WinRAR (release notes for all versions) [up to Version 5.20 beta 2]". Rarlab.com. Retrieved 2014-10-27.
9. "Best Archive Tool - DonationCoder.com". DonationCoder.com. 2005-09-05. Retrieved 2009-07-01.
10. "WinRAR 5 Final Released" Techno360.in. Retrieved 27 November 2013.
11. Jaymar Cabebe (15 June 2012)"WinRAR (32-bit). CNET Editors' Review" CNET. Retrieved 27 November 2013.
12. Jaymar Cabebe (15 June 2012)"WinRAR (64-bit). CNET Editors' Review" CNET. Retrieved 27 November 2013.
13. WinRAR Help - GUI SFX modules: setup commands
14. RAR and WinRAR END USER LICENSE AGREEMENT (EULA), retrieved 2014-01-04
15. "软众信息-WinRAR独家总代理商 最新官方简体中文版下载 支持64位非破解版压缩软件：软件介绍-致用户的一封信". www.winrar.com.cn. Retrieved 2016-10-18.
16. "Downloads, UnRAR for various platforms, and source. License says "The source code of UnRAR utility is freeware"
17. "WinRAR - What's new in the latest version". rarlab.com. RarLab. Retrieved 20 February 2016.
18. Kanthak, Stefan (7 February 2016). "Executable installers are vulnerable^WEVIL (case 25): WinRAR's installer and self-extractors allow arbitrary (remote) code execution and escalation of privilege". SecLists.org.
19. "WinRAR download and support. WinRAR is a powerful Windows tool to compress and decompress zip, rar and many other formats: Knowledge Base". Win-rar.com. Retrieved 2009-07-01.
20. "WinRAR download and support. WinRAR is a powerful Windows tool to compress and decompress zip, rar and many other formats: WinRAR 3.70 beta 1 Released". Win-rar.com. 2007-01-10. Retrieved 2009-07-01.
21. "WinRAR archiver, a powerful tool to process RAR and ZIP files". Rarlab.com. Retrieved 2009-07-01.
22. WinRAR Release History; RARsoft.
23. List of RAR software, archived 6 November 2011
24. FreeDOS general questions.
25. Shaikh Rafia (September 2015). "WinRAR Exploit Could Put 500 Million Users at Risk". Wccftech.com. Retrieved 29 September 2016.
26. Darren Pauli (30 September 2015). "Smuggle mischievous JavaScript into WinRAR archives? Sure, why not". The Register. Retrieved 29 September 2016.
27. "WinRAR Vulnerability Is Complete Bullshit". Darknet. 1 October 2015. Retrieved 29 September 2016.
28. Roshan Karkera (5 January 2013)"Hidden Easter Egg in WinRAR Application" Techie inspire. Retrieved 27 November 2013.

Further reading

• "Data Compression". 2007. doi:10.1007/978-1-84628-603-2. ISBN 978-1-84628-602-5.
• Fellows, G. (2010). "WinRAR temporary folder artefacts". Digital Investigation. 7: 9–8. doi:10.1016/j.diin.2009.12.001.
• Yeo, G. S. -W.; Phan, R. C. -W. (2006). "On the security of the WinRAR encryption feature". International Journal of Information Security. 5 (2): 115. doi:10.1007/s10207-006-0086-3.
• Metz, Cade (2004-11-16). "File Compression Beyond ZIP". PC Magazine. Vol. 23 no. 20. pp. 52–52. ISSN 0888-8507.
• Qin, J. C.; Bai, Z. Y. (2011). "Design of new format for mass data compression". The Journal of China Universities of Posts and Telecommunications. 18: 121. doi:10.1016/S1005-8885(10)60037-4.
• Spanbauer, Scott (December 2000). "Forget Napster-Usenet Is Where the Files Are". PC World. 18 (12): 254. ISSN 0737-8939.
• Allen, Danny (February 2007). "Compression Apps Do More Than Shrink Files". PC World. 25 (2): 64–64. ISSN 0737-8939.
• Sanjuàs-Cuxart, J.; Barlet-Ros, P.; Solé-Pareta, J. (2011). "Measurement Based Analysis of One-Click File Hosting Services". Journal of Network and Systems Management. 20 (2): 276. doi:10.1007/s10922-011-9202-4.
• Jovanova, B.; Preda, M.; Preteux, F. O. (2009). "MPEG-4 Part 25: A graphics compression framework for XML-based scene graph formats". Signal Processing: Image Communication. 24: 101. doi:10.1016/j.image.2008.10.011.
• Barr, K. C.; Asanović, K. (2006). "Energy-aware lossless data compression". ACM Transactions on Computer Systems. 24 (3): 250. doi:10.1145/1151690.1151692.

External links

• Official website
• List of WinRAR versions
• RAR 5.0 archive file format
• How to open, extract, create RAR files using WinRAR