051f79a233c4969cc9a37e67488ace47b6daa124ebaf513eef7c1406e5b051dc

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2023-Oct-03 07:51:19
Detected languages English - United States
Process Default Language
Debug artifacts D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Suspicious Strings found in the binary may indicate undesirable behavior: Accesses the WMI:
  • ROOT\CIMV2
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA1
Uses constants related to SHA256
Uses constants related to AES
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryW
  • LoadLibraryExA
  • LoadLibraryExW
 Can create temporary files:
  • CreateFileW
  • GetTempPathW
Info The PE is digitally signed. Signer: LICENSE TOM LLC
Issuer: Sectigo Public Code Signing CA EV R36
Safe VirusTotal score: 0/71 (Scanned on 2026-11-08 20:51:27) All the AVs think this file is safe.

Hashes

MD5 a9b041b67339c73e06f4afafb4e98155 🔍
SHA1 e4717d78b27dc3fa54cd25e5450c572dc22998b9 🔍
SHA256 051f79a233c4969cc9a37e67488ace47b6daa124ebaf513eef7c1406e5b051dc 🔍
SHA3 38a67575a4ee04e1212a7acbda6d282df4678af44631eeec6afb4cd257e35453 🔍
SSDeep 49152:LsvKPwxJgMvN4dGZ0+0wRfPlAAnRnaNm/bqFbK5MpislbEiHGJNIPj0pkj+I6:LsCPwxJg1Gr0wRfPlXRnao6m5liH1PY3 🔍
Imports Hash 52d711ee82958c8f4401c74c99fb40e3 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x118

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 6
TimeDateStamp 2023-Oct-03 07:51:19
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0x34600
SizeOfInitializedData 0x24200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00021D50 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x36000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.1
ImageVersion 0.0
SubsystemVersion 5.1
Win32VersionValue 0
SizeOfImage 0x81000
SizeOfHeaders 0x400
Checksum 0x2d4d8c
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 b7a8b04ab2248443b05e8133fb3a9064 🔍
SHA1 733262d6191653c0b1bd92c0518c79d5d33cf408 🔍
SHA256 83c24f3010155d94a5bab6ab715370ca90c7f686b3bd6bc1d4902c1c6fca9490 🔍
SHA3 62f422423f4115ab205cafffd5254ecebcf0c314f3b07e8d764351260ae42824 🔍
VirtualSize 0x345cc
VirtualAddress 0x1000
SizeOfRawData 0x34600
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.70839

.rdata

MD5 a418919d63b67e937555eec95d3b6bcb 🔍
SHA1 5eea2585b4c451a4be856918cc02172535efc85a 🔍
SHA256 9432eb799ecdc94294ed0029a2eb475018c54a11efdb3439b05fd5020d914e19 🔍
SHA3 230e00867dd1582246007beda009ee7f1852ec9f67f651fc2b32955d38cb9ce5 🔍
VirtualSize 0xb410
VirtualAddress 0x36000
SizeOfRawData 0xb600
PointerToRawData 0x34a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.21595

.data

MD5 d8d5c95192b51ddad1857caa38e7daa9 🔍
SHA1 23d761743279f0aeede3a1b66de209ff79ff5177 🔍
SHA256 165b2ad3741722ad68b2d82fcb3565fd70f70f1de217d446488d5c37bc09ec89 🔍
SHA3 9b3d3fa3e39033fa6e07387a43b31407875577e1e4dd5e753e1143536f0e5104 🔍
VirtualSize 0x24758
VirtualAddress 0x42000
SizeOfRawData 0x1200
PointerToRawData 0x40000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.07892

.didat

MD5 ee74a17c4eeb586c9811481b77498b43 🔍
SHA1 c855e2b4369dfe4e9a1d71a269bd29f7d46e2c52 🔍
SHA256 42bb30fbd6d9bd5aa50d802fb2b2b66930f3b7677df3f378751cc448ff030179 🔍
SHA3 254e924321dbf72b1e84f9f695c5e3d8a57e0812f53a0957bda3ea2213f0621e 🔍
VirtualSize 0x1a4
VirtualAddress 0x67000
SizeOfRawData 0x200
PointerToRawData 0x41200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.51946

.rsrc

MD5 083db69c6a62433c2781b599c7cee549 🔍
SHA1 b7fa42dbc580ad48b72e517d53f130af7a5bd505 🔍
SHA256 8d0b623347d865f680e24ffdb3b4eff9b859882d2f2dc6c5c62c296e709d6940 🔍
SHA3 f7c9a5eabaeb119416186d6b5a864be8651b6dbbc135c66a1d4ce0ee40d5a9c5 🔍
VirtualSize 0x1518c
VirtualAddress 0x68000
SizeOfRawData 0x15200
PointerToRawData 0x41400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.65493

.reloc

MD5 699c6b2b1b2acad2d0f219d9328713af 🔍
SHA1 4fe55c867ea92c2976c71afa196333bfd7d1c57a 🔍
SHA256 283dff21a831db6e55dce693076ffe81a754d1f937267c6aabacbe44a7dcec9d 🔍
SHA3 ac72aa2faeeca7b88168f224c339607ce458a35d23b85bac6a2ea14a582896c4 🔍
VirtualSize 0x255c
VirtualAddress 0x7e000
SizeOfRawData 0x2600
PointerToRawData 0x56600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.66608

Imports

KERNEL32.dll GetLastError
SetLastError
FormatMessageW
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetCurrentProcessId
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
InterlockedDecrement
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetTimeFormatW
GetDateFormatW
LocalFree
GetExitCodeProcess
GetLocalTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetNumberFormatW
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapReAlloc
HeapAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
OLEAUT32.dll SysAllocString
SysFreeString
VariantClear
gdiplus.dll GdipAlloc
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
GdipFree
USER32.dll (delay-loaded) GetDlgItemTextW
SendDlgItemMessageW
SetFocus
DialogBoxParamW
GetSysColor
LoadBitmapW
LoadIconW
DestroyIcon
IsDialogMessageW
IsWindowVisible
WaitForInputIdle
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
wvsprintfW
CopyImage
GetClassNameW
FindWindowExW
MessageBoxW
ReleaseDC
GetDC
SendMessageW
LoadCursorW
CopyRect
MapWindowPoints
UpdateWindow
DestroyWindow
IsWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
CharUpperW
OemToCharBuffA
LoadStringW
GetWindow
SetProcessDefaultLayout
SetWindowLongW
GetWindowLongW
GetWindowRect
GetClientRect
GetSystemMetrics
SetDlgItemTextW
SetWindowPos
GetParent
SetWindowTextW
EnableWindow
GetDlgItem
EndDialog
SetForegroundWindow
ShowWindow

Delayed Imports

Attributes 0x1
Name USER32.dll
ModuleHandle 0x65cf8
DelayImportAddressTable 0x670b4
DelayImportNameTable 0x3fc70
BoundDelayImportTable 0x40414
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

101

Type PNG
Language English - United States
Codepage Latin 1 / Western European
Size 0xb45
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.87356
Detected Filetype PNG graphic file
MD5 63486a769bbe3f49d5848b9c69734a25 🔍
SHA1 e48bd36c2f23c238206bdddf3ebb6d6862905710 🔍
SHA256 a91f4373ceebadfc70b3bd0758848918f928c3c76562e3d9d531574796fd9e9c 🔍
SHA3 7e9dc73ef6ee0ce127eee80c5daf334bd98ed2d2f262376ed7760866816d815b 🔍

102

Type PNG
Language English - United States
Codepage Latin 1 / Western European
Size 0x15a9
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.80129
Detected Filetype PNG graphic file
MD5 e6ccfb6d9ffd4e1a907a47761c64bd79 🔍
SHA1 d6a2994dedae3527a878140aa60dcaa087b90445 🔍
SHA256 27d3a1a2da49dc535cc10806abaae9dfa49e4f5f44a40540ead50e065b99ca68 🔍
SHA3 11423dcd0ab4c11695ad71f56e4fcdfc4b20a38cc6ac653ab7575f7dd024d0e5 🔍

1

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.1936
MD5 9447e0cfe6e2ac007821d82112e3ee1d 🔍
SHA1 72d8527e918c3a52deae4e2d79260f6aff74b0dc 🔍
SHA256 a14f5c168e640a73ad719243a99b94e5afedd205b2a0a806f24bd0f6527f42d1 🔍
SHA3 22b26a6b031a343a1d0dcfe86d8e87bc9df20817e30a64a8da456faf8b32e2a9 🔍

ASKNEXTVOL

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x286
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.419
MD5 8edc9d9954c16d9083b44657a62c353e 🔍
SHA1 bb567f7e6b33d5d976abe26b9da4e403c3182dc4 🔍
SHA256 8f25d7b09ecff6d3389a7742dc2a9e3187bdf010877d5512b7bab24566c3fca9 🔍
SHA3 140be6b67eed1b2eba6651eb7fb1ed127c202df3b0cbe5ef1d2a3299fbb2c3fb 🔍

GETPASSWORD1

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x13a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33594
MD5 846493df763dc8986b2a7a908694aa5c 🔍
SHA1 7113017d3f8ab15f721836f8cac36a3dde424962 🔍
SHA256 a6cb648be2175544ba05cd1c0d9f5b45b1d344915c503f01495f744708ebf6fc 🔍
SHA3 c524ff060d297a1a5d5a072ad50e5440ed3119f05de91aaf5f372a6d6a5e642b 🔍

LICENSEDLG

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0xec
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16133
MD5 4da01a070e57545f97e0d84bcf1524e5 🔍
SHA1 eeeadb106e138aa26b66d276f84c8d076a31142e 🔍
SHA256 44e6a8daef1ac762f8016fc4c8aec52bad42f589b6d8a25d430a619610dd0028 🔍
SHA3 a018ce14f68b06cbed4adb1bf6714f3b6c1aa64fa2afa2215e037aa654f9fcee 🔍

RENAMEDLG

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x12e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.09135
MD5 43b0cc5d14bc75c453a11cb013864a38 🔍
SHA1 6990aed36ba67f0d6d34a63c3d9fd9dc2487db01 🔍
SHA256 237fb4fcfacd77cffde8221c92f0726c849afc96cd0bfd833f50b78552f7b22b 🔍
SHA3 a5ace4978d8258be5a68d7db48bc472ffa5cb949b4bb7c64f35348b5b34bb9e2 🔍

REPLACEFILEDLG

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x338
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.31634
MD5 59053a2d4069a360fc73761849e1318c 🔍
SHA1 541edef52f27a7178cac477eb3803cb4820d31ae 🔍
SHA256 19561beb5029c85d95648f15c598b028a4f8a00bc36f452c5428308693ed748e 🔍
SHA3 a1fea8b8bfc45c410ebcfcc73afd1716c6c2abb2889e8a170e221a7ac702bb59 🔍

STARTDLG

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x252
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.51642
MD5 8f7f380b1a69743aac7181d97f60324b 🔍
SHA1 e6a444d1fb41f3a3bfec6dee720ee63e2337fcfe 🔍
SHA256 ad7a2ec8f4ae2bad71bc363e13eb5a809b2936f010f453b986ea04a5605c630a 🔍
SHA3 313019b4cd37222ade46ea6cfb35e136befe0a6e755a2d02590745173e2199d6 🔍

7

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x1e2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.1586
MD5 2ee005bf14efd62d866ca276e73b47aa 🔍
SHA1 e098ed7de14a3221722e8c25ada1cb901ce85978 🔍
SHA256 450b4d82a86dba50acea995d6356e0174a242081f2c2438f6f88c29038f7097d 🔍
SHA3 3bd4b237507bdbc645d985837c718b5df99fa6c91e862fe59f7295cd82c7d0b0 🔍

8

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x1cc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.11685
MD5 91984a8521454b1758674f2f0765e695 🔍
SHA1 f48b0e0ca433d99226abe5cb9f1421b5dc204d31 🔍
SHA256 89051dca472bd5ebb7b344c05150755b6e3d32cb0dffea086c04186820b188d2 🔍
SHA3 c7c2157fcb23e3b9253e37f60afe11361c625e3d5e0535bbbf988387d2cd517c 🔍

9

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x1b8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.11236
MD5 de2fde7dcddbe30df25bfcf234a301c3 🔍
SHA1 749b1a50cbed02bb7fd1fd277333340996b22c6f 🔍
SHA256 dd64405d95bedf0c5a998dba963360b3b9dd01d1482179c2b1d33ddb465841eb 🔍
SHA3 18b764b7d6b4bd748a55e961d11738a5fc2eb831e2be55cb21dd535e29ca9aeb 🔍

10

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x146
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.99727
MD5 06aeb5ae44f152010b502d79d78da978 🔍
SHA1 765389e59fc961fb9782413bccd6218c0ed29c95 🔍
SHA256 1e87eca343221966ecd9472109f3baf9081c821e3f4e905aa34eb8bce73af4e7 🔍
SHA3 dda651f9f04eded147d6b4d66801eb000f7f83f5e6161c919beca8e51e7b6f8a 🔍

11

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x46c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.21979
MD5 1be38e8c51c46677f97f7e62d11e717e 🔍
SHA1 b4bbba99c20a80c523e001e056d1a7bccf98de2e 🔍
SHA256 42fee2a4c1761b5d51e875cc86bf87d276e6d21ab4a93cd450f8263dcdd58c36 🔍
SHA3 3446bf7ba6c34ddd25d212e2bd1d9e092ce3d7dfbf314ab0ee577eff4219bc49 🔍

12

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x166
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.12889
MD5 70f271b2edd6a05942b95abced225c10 🔍
SHA1 dd3de2dc38efaf506c8c902edc3c6639651babbf 🔍
SHA256 d5755fffe2a9a4baf3593b8fba9a029b23bcc08e77c8d98e07b93baee6b9e6de 🔍
SHA3 99f9038fe42c25749482786e85b1f0ee5dda044080bf4ea4b311b333a3098c63 🔍

13

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x152
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.01704
MD5 f82916fbe2aea69eafe68b9796d66a02 🔍
SHA1 0163aae109725b0ddb7740b3f648da2777463e55 🔍
SHA256 abbb67522b7822276112f9a351d05701b2b62f2317592dd8ac7c921809de2ccc 🔍
SHA3 bb63fc32a6057e9ffc74dc8c5276a24af66b86604daede76ce69550e41999599 🔍

14

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x10a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.94627
MD5 30e6552170bc691f678f7acef9e80e0c 🔍
SHA1 8b2d788087dcb89391aca01e923a041f91bbb58b 🔍
SHA256 9259a6b6d2959b4dc26b0563c2e15fca703e6bf343e2016ed314a992617f1904 🔍
SHA3 c36395577d2aeb1248c26a8b5a5db48646b2ca0c999cc6e8bdba8678cefc97d7 🔍

15

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0xbc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.83619
MD5 09b30c86fe6cd7c8fe6d5d5fdd8b0a3e 🔍
SHA1 ba24c6e94ca7607f3fa91f71142d64d2e2938152 🔍
SHA256 f63fabe3ed749afb7b1719755170afe965f37e216834adf90dec051811afe657 🔍
SHA3 f4baf857de57ba1229f413a1165ec8e17dfa3e973f315fda2a082f79a3f64948 🔍

16

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0xd6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.80514
MD5 3a1b603eaeaa7aca84afab706054807b 🔍
SHA1 577ba4baf69c0cc5867167174746fc35fb11e8fd 🔍
SHA256 cfa68e1c4fe3e613725ec1c45a80c2e4855c07e2d4587c8cf46fac05a78c0145 🔍
SHA3 dc50fd5dad67b49d6067255f83399ab84ccc7adc2476f3b4db2c652fa24c5169 🔍

100

Type RT_GROUP_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.98048
Detected Filetype Icon file
MD5 38388dda6548693f4d42f2241a4218d7 🔍
SHA1 78bedd12a20f97e31e58742381f3d0ca1edb4715 🔍
SHA256 cd0991dd595a1392452a8c7ccf089e73626bc6eed1fd3f54ee4c6aa7ffbaedba 🔍
SHA3 9ace1e9f008d60580379cdfdcd4119706c82d52d2e5fdb9e5745fa00864cc1a8 🔍

1 (#2)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x753
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.25329
MD5 8ddcbbd6b8c80eef68bf9305e59fa1f3 🔍
SHA1 014923abccec57fa3ad16f65feb0de2b8cbc8408 🔍
SHA256 1b7b67e5d8927449d8f7be80a0e5ba5f03d25670035027c0cb71abce27da6810 🔍
SHA3 e5c4bfc7e92f1b945363bb9ad2aabbe4324074ac295d08722e743d6e7c524b69 🔍

String Table contents

Select destination folder
Extracting %s
Skipping %s
Unexpected end of archive
The file "%s" header is corrupt
Corrupt header is found
Main archive header is corrupt
The archive comment header is corrupt
The archive comment is corrupt
Not enough memory
Unknown method in %s
Cannot open %s
Cannot create %s
Cannot create folder %s
Checksum error in the encrypted file %s. Corrupt file or wrong password.
Checksum error in %s
Packed data checksum error in %s
Write error in the file %s
Read error in the file %s
File close error
The required volume is absent
The archive is either in unknown format or damaged
Extracting from %s
Next volume
The archive header is corrupt
Close
Error
Errors encountered while performing the operation
Look at the information window for more details
bytes
modified on
folder is not accessible
Some files could not be created.
You can try to repeat the installation after closing other applications and restarting Windows.
Some installation files are corrupt.
Please download a fresh copy and retry the installation
All files
<ul><li>Press <b>Install</b> button to start extraction.</li><br><br>
<ul><li>Press <b>Extract</b> button to start extraction.</li><br><br>
<li>Use <b>Browse</b> button to select the destination
folder from the folders tree. It can be also entered
manually.</li><br><br>
<li>If the destination folder does not exist, it will be
created automatically before extraction.</li></ul>
The archive is corrupt
Extracting files to %s folder
Extracting files to temporary folder
Extract
Extraction progress
Total path and file name length must not exceed %d characters
Unknown encryption method in %s
The specified password is incorrect.
Incorrect password for %s
Cannot copy %s to %s.
Cannot create symbolic link %s
Cannot create hard link %s
You need to unpack the link target first
You may need to run this self-extracting archive as administrator
Pause
Continue
Security warning
Please remove %s from folder %s. It is unsecure to run %s until it is done.

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2023-Oct-03 07:51:19
Version 0.0
SizeofData 81
AddressOfRawData 0x3e804
PointerToRawData 0x3d204
Referenced File D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2023-Oct-03 07:51:19
Version 0.0
SizeofData 20
AddressOfRawData 0x3e858
PointerToRawData 0x3d258

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2023-Oct-03 07:51:19
Version 0.0
SizeofData 964
AddressOfRawData 0x3e86c
PointerToRawData 0x3d26c

TLS Callbacks

Load Configuration

Size 0xc0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x44277c
SEHandlerTable 0x43e654
SEHandlerCount 44
GuardCFCheckFunctionPointer 4416120
GuardCFDispatchFunctionPointer 0
GuardCFFunctionTable 0
GuardCFFunctionCount 0
GuardFlags (EMPTY)
CodeIntegrity.Flags 0
CodeIntegrity.Catalog 0
CodeIntegrity.CatalogOffset 0
CodeIntegrity.Reserved 0
GuardAddressTakenIatEntryTable 0
GuardAddressTakenIatEntryCount 0
GuardLongJumpTargetTable 0
GuardLongJumpTargetCount 0

RICH Header

XOR Key 0xe9a736a9
Unmarked objects 0
241 (40116) 13
243 (40116) 142
242 (40116) 24
253 (VS2022 Update 3 (17.3.0) compiler 31616) 2
C objects (VS2022 Update 3 (17.3.0) compiler 31616) 19
ASM objects (VS2022 Update 3 (17.3.0) compiler 31616) 22
C++ objects (VS2022 Update 3 (17.3.0) compiler 31616) 53
C objects (VS2008 SP1 build 30729) 11
Imports (VS2008 SP1 build 30729) 7
Total imports 282
C++ objects (VS2022 Update 3 (17.3.4-6) compiler 31630) 49
Exports (VS2022 Update 3 (17.3.4-6) compiler 31630) 1
Resource objects (VS2022 Update 3 (17.3.4-6) compiler 31630) 1
Linker (VS2022 Update 3 (17.3.4-6) compiler 31630) 1

Errors

Leave a comment

No comments yet.