17b167b1301827deaa07fb298e5b2c69dba3cf493efd1881d4232858bbab3ab2

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Feb-01 18:16:26
Detected languages English - United States
Debug artifacts D:\Projects\WinRAR\SFX\build\sfxrar64\Release\sfxrar.pdb

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: Contains another PE executable:
  • This program cannot be run in DOS mode.
 Contains domain names:
  • cacerts.digicert.com
  • crl3.digicert.com
  • crl4.digicert.com
  • digicert.com
  • http://cacerts.digicert.com
  • http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
  • http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
  • http://cacerts.digicert.com/DigiCertTrustedG4TimeStampingRSA4096SHA2562025CA1.crt0_
  • http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
  • http://crl3.digicert.com
  • http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
  • http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
  • http://crl3.digicert.com/DigiCertTrustedG4TimeStampingRSA4096SHA2562025CA1.crl0
  • http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
  • http://crl4.digicert.com
  • http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
  • http://ocsp.digicert.com0
  • http://ocsp.digicert.com0A
  • http://ocsp.digicert.com0C
  • http://ocsp.digicert.com0\
  • http://www.digicert.com
  • http://www.digicert.com/CPS0
  • www.digicert.com
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA1
Uses constants related to SHA256
Uses constants related to AES
Suspicious The PE is possibly packed. Unusual section name found: .fptable
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryW
  • LoadLibraryExA
  • LoadLibraryExW
 Can create temporary files:
  • CreateFileW
  • GetTempPathW
Suspicious The file contains overlay data. 804739 bytes of data starting at offset 0xb5800.
The overlay data has an entropy of 7.03855 and is possibly compressed or encrypted.
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 2435be265c6dac8a048f0db93f0db44b
SHA1 d0538bab8d9632a77742d8ba86e5556d0cebc292
SHA256 17b167b1301827deaa07fb298e5b2c69dba3cf493efd1881d4232858bbab3ab2
SHA3 945d7962c7f5ae957e894a7c40703602dba91fa949d4d14e21f2553764c08d40
SSDeep 24576:JRSfrAEH9XIYpj0BEHBkIl7OXPGfjuIb1iN1Eob4V:JgTbH94YxVdR721w
Imports Hash 1d7732453492d909356357cf8504925d

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x118

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 8
TimeDateStamp 2026-Feb-01 18:16:26
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x4c800
SizeOfInitializedData 0x68c00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000033D00 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xc8000
SizeOfHeaders 0x400
Checksum 0x1834d5
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 d29f3ffdc935047aabbb44274c344e81
SHA1 39d0b3328d3c89d22c83dfa785cccf3135c2b921
SHA256 028ed9df0d8a73ced6c2d8b718f223d9c344509fc251ea62ea9bec6804ecd6aa
SHA3 bf785133fedd8b3ab5d252d080d23d0b88b63785e4493f588eee7d490ae05c4e
VirtualSize 0x4c7ac
VirtualAddress 0x1000
SizeOfRawData 0x4c800
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.48824

.rdata

MD5 c8ced405180484b2b32f4566cc11c47f
SHA1 ec1934dbd532c0544174408be0662ebb27d38d87
SHA256 f05fc0dee272166324f3643bf4c815cfaee10f1ce22670eadb80de775487af07
SHA3 f26e4ddd0104cac3ce6223ef32a61d3a25404b2029353d35f4280d7d6ba92885
VirtualSize 0x1532c
VirtualAddress 0x4e000
SizeOfRawData 0x15400
PointerToRawData 0x4cc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.37625

.data

MD5 3238c0e7609d958acaaa041896ea4737
SHA1 1c58be1d31f85fea5df306cff918cf2c1eb18e91
SHA256 c0bb9c35046f7328fd410227186feaba185c1fabefa769fd562a7ccc4a231918
SHA3 dd8de195af0a55d9fb61ef5f7ce5e35185df9d6605a2fb89c5770346af1e8883
VirtualSize 0xe7ec
VirtualAddress 0x64000
SizeOfRawData 0x1c00
PointerToRawData 0x62000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.05891

.pdata

MD5 dab9fbcdcb756be7683b7255b869480c
SHA1 89ae19750d76688dc648a4e543722727b553fa57
SHA256 b45cdd142a22d3b210da8bd62294ad78a69d984d85f5e4709f75895178d5b164
SHA3 4d235a96e5b63800b615ce02b28bdc8c6e06eecd94ea60f051e6993389d2cac8
VirtualSize 0x3348
VirtualAddress 0x73000
SizeOfRawData 0x3400
PointerToRawData 0x63c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.60629

.didat

MD5 6e08e2b70ac43c270b773e7099098fc3
SHA1 c292aa92a3d062caf65b8cad5e8b0539bded739a
SHA256 b7ace0a69b17ef3dc3624c314f5917c58bd0f28f3c08aa617486a0c10cbdc8ba
SHA3 d27a74399191f467bc4cf9b1ecc9eb50cbb89fee677937dfb1145e2548603d7a
VirtualSize 0x360
VirtualAddress 0x77000
SizeOfRawData 0x400
PointerToRawData 0x67000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.02267

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59
VirtualSize 0x100
VirtualAddress 0x78000
SizeOfRawData 0x200
PointerToRawData 0x67400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 7283cdcac692b015ae3c9f227ba6c386
SHA1 80459db2b833b00a24e067f49842c4a797a73f78
SHA256 69591f2b6c9c96840fbc70bf13c9e872d9e3515cfdd9d12aadae4af742cf3677
SHA3 8a3c7bdb7ff3d26dd74db60194534e4bc8fc3bdce511f7a3c4f53a463386b66a
VirtualSize 0x4d67f
VirtualAddress 0x79000
SizeOfRawData 0x4d800
PointerToRawData 0x67600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.25344

.reloc

MD5 d5526fce39e9c6a12b0a76ed5fafc128
SHA1 893f1de285e92abce6bd7be25b811de2a6204f61
SHA256 1e3ce1514e2f86e4cce10e64edf6f10c78b32bf182ef79e1ea620d4edbbc6d70
SHA3 94d2e2951c80f53f802dc55626a2ec47c0bf168fd6f561510c81dd34bac56b6d
VirtualSize 0x998
VirtualAddress 0xc7000
SizeOfRawData 0xa00
PointerToRawData 0xb4e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.36862

Imports

KERNEL32.dll CreateFileW
ReadFile
WriteFile
CloseHandle
GetLastError
ConnectNamedPipe
DisconnectNamedPipe
PeekNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetOverlappedResult
WaitForSingleObject
CreateEventW
SetLastError
LocalFree
FormatMessageW
DeleteFileW
RemoveDirectoryW
SetFileTime
DeviceIoControl
CreateHardLinkW
GetLongPathNameW
GetShortPathNameW
MoveFileW
GetStdHandle
FlushFileBuffers
GetFileType
SetEndOfFile
SetFilePointer
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
GetCurrentProcessId
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetModuleFileNameW
FoldStringW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
ExpandEnvironmentStringsW
Sleep
GetCurrentProcess
ExitProcess
GetSystemDirectoryW
LoadLibraryW
SetThreadExecutionState
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
CreateThread
SetThreadPriority
GetProcessAffinityMask
GetSystemTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetCPInfo
IsDBCSLeadByte
GlobalAlloc
GlobalMemoryStatusEx
LoadResource
LockResource
SizeofResource
GlobalUnlock
GlobalLock
GlobalFree
GetDateFormatW
GetTimeFormatW
GetCommandLineW
SetEnvironmentVariableW
GetTempPathW
GetExitCodeProcess
GetLocalTime
GetTickCount
MoveFileExW
GetLocaleInfoW
GetNumberFormatW
GetConsoleMode
GetConsoleOutputCP
HeapSize
SetFilePointerEx
GetStringTypeW
SetStdHandle
GetProcessHeap
LCMapStringW
InitializeCriticalSectionEx
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
HeapFree
HeapAlloc
HeapReAlloc
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
OLEAUT32.dll SysAllocString
SysFreeString
gdiplus.dll GdipCloneImage
GdipFree
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
GdipAlloc
USER32.dll (delay-loaded) DialogBoxParamW
EndDialog
GetDlgItemTextW
SendDlgItemMessageW
WaitForInputIdle
SetForegroundWindow
GetSysColor
LoadBitmapW
LoadIconW
DestroyIcon
IsDialogMessageW
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
SetUserObjectInformationW
CopyImage
FindWindowExW
MessageBoxW
ReleaseDC
GetDC
LoadCursorW
SetWindowLongPtrW
CopyRect
MapWindowPoints
UpdateWindow
MoveWindow
DestroyWindow
IsWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
CharUpperW
LoadStringW
GetWindow
SetProcessDefaultLayout
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
GetWindowRect
GetClientRect
GetSystemMetrics
SetWindowPos
GetClassNameW
GetParent
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
EnableWindow
SetDlgItemTextW
GetDlgItem
ShowWindow
IsWindowVisible
SetFocus
SendMessageW

Delayed Imports

Attributes 0x1
Name USER32.dll
ModuleHandle 0x716a8
DelayImportAddressTable 0x77168
DelayImportNameTable 0x613d0
BoundDelayImportTable 0x61cc8
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

101

Type PNG
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x966
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.86555
Detected Filetype PNG graphic file
MD5 40cdd1173f5ca82c537e4960baeb32c8
SHA1 2c49e5a542f80e15b9782543d4ceea2483af1d4d
SHA256 f9876dc0c21b12ecda21d2dfd9ebad179c5938a580ff0f0df68789303651dcf1
SHA3 d46f1928bd3eab67c4bc50c82bd7bc2f8f3ac86bf7188c95623c8954f9005176

102

Type PNG
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x123f
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.88637
Detected Filetype PNG graphic file
MD5 03a51ab10cd70a78534eaddd98bd60cb
SHA1 c8ed41c879e63e3ad0da271b8f255bbb7244f22c
SHA256 bf6b8e42dc61586a83e4cefd0bf09992b5ae32a34f2f3f90cb36ec91aad96036
SHA3 9e4827a682fd2de6b726e1e7df19a9ebed5eac6b8e59a0543901ecf81c190089

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.84968
MD5 0c842a6a221b64a4fa30086025aa576d
SHA1 6744e8febb8130be4fc7036ba21b7bcaf535da18
SHA256 15ed2a0782bb39376010181f823befd636f6c5d54cd77027af46e800697df9ac
SHA3 2cae908824841188728cebcb65a0580ecdaf061c8c91243d584a278b083e2e21

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.17744
MD5 f37050435450348020d81263c6c06e88
SHA1 6226ee2d920f8eff6f428ce7e6e8b82cc66779ca
SHA256 56eb9774377cba10c08610f3a835676a517d2eeeae50702a4b11af88944c5c9c
SHA3 5a5e7d750034a0f178e25ae79d26ca5ce3a310c61bac0eb0d33049587bc1fdda

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.81019
MD5 651a877516e295ea87ea0241113e9c28
SHA1 532fa8614d091173534ca375dc478a89753137ad
SHA256 620c816af719dee4735b0f1b8565d0d415879412f5d7d4f298e6e3f54119a74f
SHA3 0223f7467c1fbbccb5bf7062e8ea889ce8ef4ee4868a35843f37de53f1dc3f99

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.2815
MD5 1f27af9c5e827355f7ce67fdf7abfbfb
SHA1 c3a2a6f46ca7f4fada67ac081dd56d8a5b8078ec
SHA256 d48dd4b64328358b374f12d1c3c26e4503006da4079af93daa9cf190c71535f2
SHA3 6e60e22881021db6ae16c3f8480bb1db75ab71729b1f2ecf39a0d85bb9aa8109

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01882
MD5 47b6b36f136f364d8c1c0754fdaac01a
SHA1 f8eb439d6f99ae13cbaeed7305066e8c21c6bb41
SHA256 c231df7c7efa7a0c12eb7708219197af5e372e18df675fedc0c3d5913403e7a8
SHA3 a319de12d8c27607351ed4dd163fc2872956d02f7717cbb779e1cd8d6f6100ea

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.72784
MD5 0d0e0a5e709faac52fbe5db6ee00ec3b
SHA1 b064a612b146143bdc81007564ecaf9d908ddfb6
SHA256 21f39b2f3039b3652dc4dfeedb7db152eb6809716c1502031eb78544355b88f8
SHA3 1cfc8cef864b562275df1967b31b836e6cd5cfe6d43b81f2c406e9e5f1ae5d08

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.56579
MD5 a787165960d0867791f1717af22c9546
SHA1 0fc68e2b6692ef1e4fd020debb3096f0f54acbb3
SHA256 d3d18ba507ce3b01b1b6e7c534c65a7161e036babfc952c01bcf7747dd4003e7
SHA3 429c0744f87690469709bb85a2ecad7b2cee6ef494b44cc5a7e6a8fe74a63d51

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.40547
MD5 8d8f200ca162c23020f84d2b15aff22b
SHA1 fc2b1d250dcdc43ae515653214cb467eee5ed4f8
SHA256 03362badb35e7362f18050b3dd5f021c904a1d3157493b7b296da871a55552f3
SHA3 648533d30eed8aae41ccd9f67035ed4ab3184ca283c1b27010581066e9e9baef

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1700
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.81138
Detected Filetype PNG graphic file
MD5 cf51adfc6d242767ef693f97d29ae830
SHA1 b772eea507e066a2013e8bacb01cb118673b2e9a
SHA256 5104dacbb9b9be3450322a43a97cd26765503f8ddae771743f2579079b86df2b
SHA3 34efb9495e861be46818308d0b4eb1b63dd556b51e8071501a904c91cd75a183

ASKNEXTVOL

Type RT_DIALOG
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2c2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.03767
MD5 7fa0bdbf847c6e6109b577208c08cd16
SHA1 7896b2e6ef7c2cc8ccb4f1cd0619ed7edff5881d
SHA256 52f92198e16c6f9c9b49ff5b261dac53c5d9a2f35d6281ae1158ccc1b340d457
SHA3 e5672c39230d54995ac8762fba89c4e3facf9ce0b67294db4d4b3ab477d2d209

GETPASSWORD1

Type RT_DIALOG
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x13a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.84009
MD5 33ccaed850f3b0e87dd14d8a8d3d5bd4
SHA1 765643f7b30c955e13a9dfbe944f42a539bbc795
SHA256 d7bccb4fc112e5ee3af71575fd25b2806568781ccd876a98a607ab49863efd69
SHA3 006b1a52a0ee4aded72b53fdf13624ad929e6c1e307d58f197982fccb7f05d2a

LICENSEDLG

Type RT_DIALOG
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xf2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.70073
MD5 350b91b0ea3545d6ad49f0367e9a04bb
SHA1 5cd337b363aab7ac673ccbcef4bd7a0976017063
SHA256 45cee74bb0ad2163281ee43d7735874b78c9ba6d7f5ea17d1a5ab7dbd1a1fd88
SHA3 69001591be0330e0a9b9207fabe921342465d6552ab1531152793e7e30473181

RENAMEDLG

Type RT_DIALOG
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x14a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.62816
MD5 632142fba1840e434bf65e6406e0ae28
SHA1 baef9c3020b3f5dcf631ed7ed80568342b8c78ea
SHA256 9ea5d1a1ed5a02941fecd70b54985e39691b1dbf06adfed786844c5234d98844
SHA3 333a8e2ce5b373a8f38cd8c9610c5bedc3f29c5778d47b6fc899b21454b43349

REPLACEFILEDLG

Type RT_DIALOG
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x314
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.82613
MD5 d96ce6ed8dbe388d25fab0d7f7076611
SHA1 ac04f933f319b439cf5d0e8e812f9b0c17fd4869
SHA256 1a30142b93d9f78209dfdd5319af64749c1fa47fbfe4669ffc915d450687ee32
SHA3 989f0faa23d6619ac9dfcbe169797eecf73d1a5054c2ecfc8a479fa30bdc4f55

STARTDLG

Type RT_DIALOG
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x24a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.05726
MD5 de5bed87d3f87aa29da188727ab1093c
SHA1 51c93f6f08e6eec34b08dd02973f6bf264435f34
SHA256 07fb40cc74d031c8f366fcd34a5fb3234924c237a8ebd3c19aa38793fd28f5a9
SHA3 2a7248859d87c6e38c1fe6429cef61d871a61fb8a4e7d02d146e2f6b1582d965

7 (#2)

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x1fc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.66634
MD5 84a2aa6fb93d661b02dd9fae67ce46a4
SHA1 a0d1a1952b83298a000a8ba5977f8efc4c86051a
SHA256 ec2cb06bbc07bf68507a8f11833a113290c501e50326464bcea8d04df617731a
SHA3 19a6131e2b7854011efb80a854c3796528dc49310847d92b644e7d8d7287ff82

8 (#2)

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x246
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.71728
MD5 a2aa034f25589077320a2cdfe5e79159
SHA1 786c0972867d2256fd9fb4da7c434e92490307a4
SHA256 73a938be272bcf485024a2f1bd64de6cd171d1b2e382a71a6d5265bbd0a27f51
SHA3 85ce382c4586156f28fbdb295da379caa92ac7faa66324863d7cc9bd0024fefe

9 (#2)

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x1a6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.73856
MD5 7eeb00e11496364525d55a3bc8a3ea88
SHA1 8f893840f2a27f16267d0765b24c41c59f6daf4f
SHA256 f6b4fc2653f5935067f883319bbddef009d32a716bd6484c980d8607a655867d
SHA3 d46e4330d674d137d0f221c09e438187adb554d91baa5ec43e247f499f5500bf

10

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xdc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.55807
MD5 d792ceea3def3f71682eb1eea04b403c
SHA1 a920b6a80ab4780f87b408cdf108a1ac82996509
SHA256 c7ce5dce1f5c60c9f0669551ba5a5d2cfa52dfdf47ca831ccf62d4aa55af4c24
SHA3 6aa103f2885b802f04287d341ba808f97f54fec9ad12a3b19cebda7f6ce023f0

11

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x470
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.91524
MD5 9a23d5d588a65b8a1464b284dcb9a4e2
SHA1 9a300250c3cee1e0654a40178b4e1c4ec1495298
SHA256 cbe1cb884bf32c1ce2bd68dd8fa721431d38af66508d7a67c85dd36076a6a8b4
SHA3 949f4b701639f0432101ed8de5dfa3dffeec3bc11d65605bc85f40ca5836a2b2

12

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x164
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.68258
MD5 c35f74b91635985b1b9c2a034066d48e
SHA1 0ca2026561a14649488829292a3cf65d72e8076d
SHA256 bc0a87bc2f823765b06c9308580fb4e7c09a3c584a7cb9355b190ff35c238649
SHA3 95baa54f914fd53ffa861353f14caf33195490bee711f1d758b52f1747252ac5

13

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x110
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.61824
MD5 2fcf98fe1351e05994c780638a179f36
SHA1 900cff0a51d982580fdbec03cbcb93581dd130d5
SHA256 efda66b5ce3770efc226bf58c66404f7f61dd9cf8b98e5a9f8f167c02457f481
SHA3 ff524692854a0494afed8006c2910b383707cc25f93db1315b36e5bd97fca024

14

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x158
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.61995
MD5 a4a9a568a83d61c47d19aefd97e27852
SHA1 aa65a41a2f60b7de1b35bb6655f02cf408d04ff9
SHA256 83f265e852184711ffb09f50939bba25cb14013804eaea4c516cc544b81afe4c
SHA3 aef4a78e8dd8b7a4dc071796053e6ec6933e3e272fdb64863675150c1dc4a9bd

15

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xe8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.4037
MD5 efde73c917066f48e2ce0d399a2b8b8d
SHA1 5ee91d6c6ba3e722cd8affb7fb94c8612c09f8e0
SHA256 8a5ed5de64061a372ea6c5e485d96e8b214e9881a4091697c466cd545ee2bda6
SHA3 44a7160dc77a24d8120e635da43412fc6314281cc16f2fc15ec89bccdcac2fa3

16

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x1c6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.67014
MD5 27f87fa316af22e00ad436bff5a841ff
SHA1 ca71ab71a07b6f8543756cae18019cf38dab768a
SHA256 2c3630472026de5e5dd17af3a6a32d4b60599dd3b2a619ef77e3689e5fe89a0c
SHA3 4854da8f3d2e2b30e1c659872ac1831c3d2f2f16346addb0ee13fd6f96aa6da1

17

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x268
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.59646
MD5 badaf5d472c241152d5d67ee262d0910
SHA1 bae85d271749980777ad077832e0789e4b007635
SHA256 fe69022e1c8410c6244072a092b6827fbe63c2471a9169fc254667972a23074c
SHA3 69bbdae3a2cb0e710d5725ab11932c4b89c86bfe7c8213dfe87f640ac7fa82da

MAINICON

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.01379
Detected Filetype Icon file
MD5 f0f26b8f5b16506832424ed7d42a182a
SHA1 1a7f34184d2773d198673a63dd57e0f393c0001a
SHA256 4c2a21397ab037c742029387b7617aba76a273c36edad7e849f80f25dead60d7
SHA3 689f7e5c25209de875d8756e69fe02ebcda8e193cac4d046f0fb226f5fb80cf0

1 (#2)

Type RT_MANIFEST
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x753
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.26192
MD5 7cf914a0753e462331c5878040b230a5
SHA1 c30ec5e6abdc3d00d7078ac65859a6e15bfe43a0
SHA256 161cc0f229c4324e466a767101d0b716a4edfe45b8f56270de6181e76deac96f
SHA3 d4dff8cc798e05e18bc612c4f02945d9075a13b38ff53af6ffe08fe59180b40b

String Table contents

Выберите папку для извлечения
Извлечение %s
Пропуск %s
Неожиданный конец архива
Повреждён заголовок файла "%s"
Обнаружен повреждённый заголовок
Повреждён главный заголовок архива
Повреждён заголовок комментария архива
Повреждён комментарий архива
Недостаточно памяти
Неизвестный метод в %s
Невозможно открыть %s
Невозможно создать %s
Невозможно создать папку %s
Ошибка контрольной суммы в зашифрованном файле %s. Файл повреждён или указан неверный пароль.
Ошибка контрольной суммы в %s
Ошибка контрольной суммы сжатых данных в %s
Ошибка записи в файле %s
Ошибка чтения в файле %s
Ошибка закрытия файла
Отсутствует необходимый том
Архив повреждён или имеет неизвестный формат
Извлечение из %s
Следующий том
Повреждён заголовок архива
Закрыть
Ошибка
Ошибки при выполнении операции.
См. окно с информацией
байт
изменён
папка недоступна
Некоторые файлы не были созданы.
Попробуйте повторить установку, закрыв другие приложения и перезагрузив Windows.
Некоторые установочные файлы повреждены.
Загрузите свежую копию и повторите установку
Все файлы
<ul><li>Нажмите кнопку <b><i>Установить</i></b>, чтобы начать извлечение.</li><br><br>
<ul><li>Нажмите кнопку <b><i>Извлечь</i></b>, чтобы начать извлечение.</li><br><br>
<li>Кнопка <b><i>Обзор</i></b> позволяет выбрать целевую папку
в дереве папок. Имя папки также можно ввести
вручную.</li><br><br>
<li>Если целевой папки не существует, то она будет
создана автоматически до начала процесса извлечения.</li></ul>
Архив повреждён
Извлечение файлов в папку %s
Извлечение файлов во временную папку
Извлечь
Ход извлечения
Максимум символов в пути и имени файла: %d
Неизвестный метод шифрования в %s
Указан неверный пароль.
Неверный пароль для %s
Невозможно скопировать %s в %s.
Невозможно создать символическую ссылку %s
Невозможно создать жёсткую ссылку %s
Сначала нужно распаковать целевой объект ссылки
Попробуйте запустить этот самораспаковывающийся архив от имени администратора
Приостановить
Продолжить
Предупреждение о безопасности
Удалите %s из папки %s. Пока это не сделано, запускать %s небезопасно.
Недостаточно памяти для распаковки архива со словарём сжатия %u ГБ.
Требуется 64-разрядный модуль самораспаковки.
Внимание
Для распаковки этого архива требуется более %u ГБ памяти, что превышает объём памяти в компьютере и может привести к чрезвычайно медленному извлечению или даже к зависанию системы.
Рекомендуется отменить извлечение. Вы всё равно хотите попробовать распаковать архив?
Извлечение отменено

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Feb-01 18:16:26
Version 0.0
SizeofData 81
AddressOfRawData 0x5c050
PointerToRawData 0x5ac50
Referenced File D:\Projects\WinRAR\SFX\build\sfxrar64\Release\sfxrar.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Feb-01 18:16:26
Version 0.0
SizeofData 20
AddressOfRawData 0x5c0a4
PointerToRawData 0x5aca4

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Feb-01 18:16:26
Version 0.0
SizeofData 1164
AddressOfRawData 0x5c0b8
PointerToRawData 0x5acb8

TLS Callbacks

StartAddressOfRawData 0x14005c590
EndAddressOfRawData 0x14005c598
AddressOfIndex 0x140071ce8
AddressOfCallbacks 0x14004e650
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_4BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140064e80
GuardCFCheckFunctionPointer 5369029928
GuardCFDispatchFunctionPointer 0
GuardCFFunctionTable 0
GuardCFFunctionCount 0
GuardFlags (EMPTY)
CodeIntegrity.Flags 0
CodeIntegrity.Catalog 0
CodeIntegrity.CatalogOffset 0
CodeIntegrity.Reserved 0
GuardAddressTakenIatEntryTable 0
GuardAddressTakenIatEntryCount 0
GuardLongJumpTargetTable 0
GuardLongJumpTargetCount 0

RICH Header

XOR Key 0x5b8e366d
Unmarked objects 0
C++ objects (33145) 157
253 (35207) 2
ASM objects (35207) 8
C objects (35207) 16
C++ objects (35207) 60
ASM objects (33145) 11
C objects (33145) 23
C objects (CVTCIL) (33145) 1
Imports (33145) 7
Total imports 298
C++ objects (35221) 51
Exports (35221) 1
Resource objects (35221) 1
Linker (35221) 1

Errors

Leave a comment

No comments yet.