RAR
From Forensics Wiki
RAR Archives (Roshal Archive file format) is a proprietary format for storing information created by Eugene Roshal. The format is currently handled by Alexander Roshal, Eugene's relative.
Contents |
Format
The file has the magic number of:
52 61 72 21 1A 07 00
Metadata
Sub-formats
The RAR format is comprised of many sub-formats that have changed over the years. The different formats and their descriptions are as follows:
Software
This only way to create a RAR file is using the Winrar software. There are several implementations of the process to open a RAR file (commonly known as the "unrar" process). Some of them are:
- unrarLib
- RAR file unarchiver written in C
- Easy implementation with a header file and the source code file
- Information Link
- WinRAR
- Only software that can create and open a RAR file
- Distributed by a proprietary license
- WinRAR executable for Windows
- UnRAR
- Created by Eugene Roshal for opening up RAR files only
- May not be used to reverse engineer the RAR file format and create RAR files
- Source code provided for people to implement/integrate methods of opening RAR files
- Additionally, implementations of UnRAR are available for a plethora of operating systems
- Download Link
- The Unarchiver
- Utility made for Mac OSX to open a multitude of files, including RAR files
- Very handy for dealing with multiple file types
- Source Code Download
- Information Website
- 7-Zip
- Utility made for Windows applications to open a multitude of files, including RAR files
- Download Link