f293e8ca3ae1c077be4ac25328f6048625ec95cce1d557e0da55a8c46a7a71b5

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2016-Aug-14 19:15:49
Detected languages English - United States
Process Default Language
Debug artifacts D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA1
Uses constants related to SHA256
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryW
  • LoadLibraryExA
  • LoadLibraryExW
 Can create temporary files:
  • CreateFileW
  • GetTempPathW
Info The PE is digitally signed. Signer: Bitdefender SRL
Issuer: DigiCert Assured ID Code Signing CA-1
Safe VirusTotal score: 0/67 (Scanned on 2026-07-03 19:30:55) All the AVs think this file is safe.

Hashes

MD5 30c04e90cc319adf8d926f06b8a9ac44
SHA1 60f7b91fb1983f4e80a14ce85f721cf589e3db5d
SHA256 f293e8ca3ae1c077be4ac25328f6048625ec95cce1d557e0da55a8c46a7a71b5
SHA3 40afce062a6e844787f29e09e5529d8d24749a576258f80e3d6932cbb5cb9a61
SSDeep 393216:T7FGoD/kLCdSbidRNyJWbxsSgsN3lp+d+NSbdAiAdHW/8O1d9SSpqxUYKggZd5G9:3FGhQHb5NVpd8baiAd2EKVMxUPZdaFpf
Imports Hash 04a1de9d4a3fd6eff3a9a4deeecd5f1a

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 6
TimeDateStamp 2016-Aug-14 19:15:49
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0x2e000
SizeOfInitializedData 0x40c00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0001CAB5 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x2f000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.1
ImageVersion 0.0
SubsystemVersion 5.1
Win32VersionValue 0
SizeOfImage 0x91000
SizeOfHeaders 0x400
Checksum 0x19c4755
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 2ae181684b1677561119f5765623448e
SHA1 182714a8dc00634957fc5497c59311cb266eb0d8
SHA256 71e7afd90a1e72771d99f88ace71d2dcca2a01e561ea4c0669759634dc119975
SHA3 0e9b8430de659a65d4fa560ac23371f7e8953fdbd14da2f9429790cb91662fc4
VirtualSize 0x2dfe8
VirtualAddress 0x1000
SizeOfRawData 0x2e000
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.71025

.rdata

MD5 0e0f6a60d8fa917a060c8ef7becc0888
SHA1 45387237f43e902bac33f58df8880f57c3d6467d
SHA256 7893addbe4db02ed0676b4ec06c87bfbe499e9bc763b05c3e9fb80007a195972
SHA3 d1eddbb10bcae9a0ae36beb69b3e00dc04b61969757805013c1689b8dc0a8930
VirtualSize 0x99d0
VirtualAddress 0x2f000
SizeOfRawData 0x9a00
PointerToRawData 0x2e400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.15287

.data

MD5 4e4aa728d9cced1622c2be27733e3fc5
SHA1 f1213e8d61ddd0a79e1e18741b4820ce6f99fdf8
SHA256 e2baf4064b5150eb5498697eebdd362b713707cd99be6bc836a38d3e6d8a54bf
SHA3 1aab407ab0c16930cf978e7f7f8ab12ef30e487d7981095b3cc118f72a508f5b
VirtualSize 0x1f8b8
VirtualAddress 0x39000
SizeOfRawData 0xc00
PointerToRawData 0x37e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.29547

.gfids

MD5 c923099e27bf0e45a5c402d935d0620b
SHA1 b4eb17c639b3a987a9a5a4aabd8c64a02ffbdf6c
SHA256 0115ee8756d3f8daea536f0e039ac346532ba30dbaa82b7b9daab265f8e87d37
SHA3 bfdf521a7e1c72fd55a856d10aa7e41b2436774969cbcbd41514b39414000d1e
VirtualSize 0xf0
VirtualAddress 0x59000
SizeOfRawData 0x200
PointerToRawData 0x38a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.12367

.rsrc

MD5 cfb36c176fb16d63fd1444cca3e40780
SHA1 0d498d949148ae2430fd124b01286239b1b3bbc4
SHA256 e536caf59358da99de4a93e24f3dd29d3ee1d2fa8e00ab65ce1a28c693c966e7
SHA3 164aa3c6eb68adb659df32ae16eb3349c5f62372455a6c34608faa6f06f30b3e
VirtualSize 0x34338
VirtualAddress 0x5a000
SizeOfRawData 0x34400
PointerToRawData 0x38c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.31986

.reloc

MD5 d13d3f8a8adfe6861c49a01d81cf73ed
SHA1 c113176090053eb95d552ea4885b7988e5585b78
SHA256 66b5b3b9ef16648d1df7cf243759e51ef6d6bc77f07ed334e554d6cd76acf4b5
SHA3 54be84a4a2d2895d0b1ac11a74732fa05047bb5f4d1e62a5f8a68313280f14e8
VirtualSize 0x1f8c
VirtualAddress 0x8f000
SizeOfRawData 0x2000
PointerToRawData 0x6d000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.62986

Imports

KERNEL32.dll GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
SetFilePointerEx
DecodePointer
COMCTL32.dll (delay-loaded) InitCommonControlsEx

Delayed Imports

Attributes 0x1
Name COMCTL32.dll
ModuleHandle 0x57e40
DelayImportAddressTable 0x39a3c
DelayImportNameTable 0x37480
BoundDelayImportTable 0x37be4
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

101

Type RT_BITMAP
Language English - United States
Codepage Latin 1 / Western European
Size 0xbb6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.19099
MD5 5c475f4b07e1e05af29d25e1700f7279
SHA1 b139902d2f9eae34727ba4f740b4b1e99d4bc4e8
SHA256 690c938562399f89ad78e3fde2a7edaee8ddf2fafef987a7b37e577a8f6126ea
SHA3 1d3dd19fbcc656a30478c2b4ba98485853b464fe09ea2debc4cfc64271677d1e
Preview

1

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x1663
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.71667
Detected Filetype PNG graphic file
MD5 7aa95a8bed67ee8d431025815f30cb4f
SHA1 d05a893a8f12dd3b0dfb3e239832741b594bf4ca
SHA256 9e486b62ae4a3162fe16da77f5a91768cb7c4108a1544d48ec15440eaecb5eed
SHA3 c8b91e00ddd9f6e21bce1f4e9a2f1210d65b1bb09eb14cc7f76844bb1f709566

2

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x4c28
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.77696
MD5 6aefec7ac8fad54c3322e528496763e8
SHA1 54066ba45c63d478453601b3b8ca95b3c7cbf6aa
SHA256 0e210df61756d9eb114cd12e11947c178cf733d184e694e07b0a1adf771aa86a
SHA3 453d2c8472633c576a94dede5a7474c63491aad9f8a1a11772cd88fd7f6384de

3

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x2ca8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.0495
MD5 9cccb58eb68d4180648a3371b91a16b4
SHA1 46b76298cadac602eed58c9e2b73393a9eb588be
SHA256 80a07607ec59032e93104f885c13588bfadf94284cfbf72d652be92438cefe3e
SHA3 d96080555ee4543bafe1cd81e7e6b5da551e7358d44074fa9d7b5931a50ee32c

4

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x1628
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.64818
MD5 084bf565c54ba0376daa74e61fd80c22
SHA1 71ce390ed363e57a6fb8f0e5b93935baa11b2d8d
SHA256 63418b10fc9b75bc89b0088ca91bbdae511d0790ab8f8995e44d5d1c3eb7a01f
SHA3 5089fdd17d9f2fe1804e68f6b2250c8ebd07cf68b76cdf7bcce16e79c7143172

5

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.47916
MD5 0a83eed76191d812eb935140509c2fff
SHA1 e8a59419b8fa97100d4f846d312273f32934dfe5
SHA256 ff7fb18df4854840f133eb141388699ce697c2a098a717e84981860bb2e6a016
SHA3 9725b6c6ac610f9ec884c58d0030cd40b502a9fcbb3a5e4b13be4743d921fb66

6

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.75145
MD5 3f18ff99dde9a97fd8b9cd5ab7c953a6
SHA1 5a5df6b6449f5a590ff0d0d270d91f895c7a0537
SHA256 056eaccd42d7b305a2db50960e2a71d599965ffbd24e069485b785edfcdd9a83
SHA3 e15ed8cb58eaece98d79cb9f64b860b414e78d7114987e51d5179d0d1bc8b23f

7

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x6c8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.25266
MD5 a3934747faaffb2b22924a0edf161963
SHA1 b6089191ccfd499d6737041919b3978690c34265
SHA256 d0de5df45346b99c74a8b39a57224bc182ccdc3d04f9e41d28358797dfddf411
SHA3 2d317a78959ef8516e1466e1b2b1bacaa1c38beb0cff861fdd4bfcf2a0004c28

8

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.66455
MD5 c9e362f8cedc1d94a2ff298164139683
SHA1 56179c4a58924253eaed99cf102a0de0f9853560
SHA256 ff19173853fd8f2d9920e805bd827d65d33b4a2fe990e13e28c114540c021db9
SHA3 c7325355053d31d70636c20038e0d350ad4169a65e2f56d70b8a2ff191331c2d

9

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x4e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.6609
MD5 c725ce8a4b00bc9b113c95f8f7e49978
SHA1 a01e044c5197051707528a9b0510f90a11851438
SHA256 c64c0d331e47d0cb7d2e15d0d7f389aa468f9a67f09ba29e1ab3815e9df7eba6
SHA3 34504620305b00fa385e5e38457d67da3e58d048c685301a22c07a1755f68a3c

10

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x17d7
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.79977
Detected Filetype PNG graphic file
MD5 bf9f5bcd78f35fc135e123647994fe41
SHA1 778fcf9e2d5e8a5147821fb800168a649e9de108
SHA256 c896e7ab5e8c26b219170d2258270ef2b31ecd1d35857ebf68139ceead20d968
SHA3 ce1d2b31ef10ca61145b6dada2d6c7048ca44468c5fdb39c9156c12b1ef78bd7

11

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.7003
MD5 d03c86cb7dd00494c58275c4e8533fd8
SHA1 517df5817a4a8f96959161c42a132a7e4583e694
SHA256 7e654d47fb182bda75e5bfe07cd0f65ab683e17af52ad1e34768241e587e8846
SHA3 c98615cd00f970f42b6ed6cd49e57c264c6a724eec16184e15f44577d03eb00d

12

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.75164
MD5 eaa14142a2f36f3f317e24893c487539
SHA1 e9da74407fd6c98d11172021f80649151ea878ce
SHA256 879ec5fe686c35abd694ea73c1bf17a1c246902c77258168e1335717c24155fa
SHA3 04ecf217e3feb79edb8cb78754456bd3eb3cd47737c6f6f6523a72057003a91b

13

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.84518
MD5 b9725404d02bd0db683cd9ef8916e826
SHA1 8333b0c26bb9242fd9c0306053f48a78eea0e50c
SHA256 d71393c20d8a0478c8e9f720d0e16624fcabefdb6fca87f58777cd54b320b8e8
SHA3 5989164e785914df524623911ba7eeb9911f21d13ebcea14966f6172bebb7e09

14

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.99687
MD5 08544cee752d1a8b02663e50927e45a6
SHA1 8dcb628366cd184219991fce35d789ee9ee02b5c
SHA256 8a53b41af5baeac7f27c756fce3a652994f65c86625598a08e349358f83f41ea
SHA3 50d959cbe97a934638e437ec91566e8c1db1588e1d23419a361d0f48ecf211b9

15

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.00032
MD5 c976e17d89046bf7a35c855e400c4c2d
SHA1 e74051f507f30e210dc544932eb9477d429140c8
SHA256 00e09a8c8b53a995ab4863d14adc0be23925ccaa206564aff43c0f7c9960ce26
SHA3 1771a6b52b660a534618c972b629703e856160078146e9c02b6c9c451d6763e9

16

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.32299
MD5 32ca5dbd4fef8652d7d4f126bc0f0ee7
SHA1 976a411391680ac2df55bf358a27198fe166192b
SHA256 16df1ae4075900a20e111176f9b9e39032ee14ca991282aa96657a485f24405b
SHA3 91764b908c8d15821d1021ac25a7fe0153706d0fb47469538470af3af889ae51

17

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.86914
MD5 05419bff599021f5d444d53072addfbb
SHA1 7766bcde4f6a200ea448864a223427d37defb247
SHA256 1af9485afc6cb059c0ecb0fcae73b4162d651675f8afc828336b02a9510f3df0
SHA3 f792cd1a28b7e557d190ce344865f143e35e7d23dc44746d9484ff8ff9fbb0b7

18

Type RT_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x298
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.23049
MD5 0a240966b720dc95230650a03ea71f0f
SHA1 c10dfc2aff99d54d3431d53d4fed6ef73a2aa7f9
SHA256 d850e74c1aa591ae5054cd71fdb5ee1d2ac03582bb05801102354743b5875bba
SHA3 53b781e5ac80491281471d4b6f55bf6492729acea35648c72ab2c482f1520fff

ASKNEXTVOL

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x286
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.42597
MD5 361be3e9f16096819f38433be227aeab
SHA1 303da809d3ec1bfc46b5fa4fde1733cfffdb9596
SHA256 887347f27d903f6652ba35c3dfae297c23435755a63e02a80259ee6dd0b8af86
SHA3 db76532737d079016d6f113bb1ac833820a004c041973cb70af7ed2cf185da55

GETPASSWORD1

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x13a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33944
MD5 331b55f85040e216e56c0b8e843438a8
SHA1 af4002fec283154f7d72fa3f363d28dbb1536f85
SHA256 2e11a1ed4f812e37fdb32a1310cdcca802c46497c27e33ab66ac127345463d31
SHA3 206eda4241a8bdb201359d75e1063c41ed5aba18392eea3d09b31bb5ed4f5f8c

LICENSEDLG

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0xec
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16133
MD5 4da01a070e57545f97e0d84bcf1524e5
SHA1 eeeadb106e138aa26b66d276f84c8d076a31142e
SHA256 44e6a8daef1ac762f8016fc4c8aec52bad42f589b6d8a25d430a619610dd0028
SHA3 a018ce14f68b06cbed4adb1bf6714f3b6c1aa64fa2afa2215e037aa654f9fcee

RENAMEDLG

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x12e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.08925
MD5 23f9ee829c671147edcb4e5fc285dc76
SHA1 65f15e95491df6b271c340bc3cf6fc2a6e628a31
SHA256 30358e9c494ca9d125b34ccb93a2d8f1237042904f6fcecc2f5ca9a83b7dba9d
SHA3 830894d4015e75dd74224a9a6e70c573491f721f5d9526bbb9cbf766cf000092

REPLACEFILEDLG

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x338
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.31987
MD5 822b9ba661d87f4dedeb47b67cdd4d5a
SHA1 b7902c16350bc2ee7fd78fbeb9461d2f123d59be
SHA256 a1141852e6fb28826de51733ee35fbfdcf74dd8eb7f73049c7c7ad6c21d0cb33
SHA3 712432c699365c95e1b04b3a44cebc97ce77f9824418dbb6784f0c653567325e

STARTDLG

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x280
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.44167
MD5 c0c5aad90b8bb33034651832a84fd237
SHA1 420cf85ba805896819d086b3294873256786f164
SHA256 be6aa28e099c43564722e05b9a9be691076d519d6efa38bd7eae900decd897a0
SHA3 6b0b49585300ef9f1fd3b642fbcf2caafa89c9ab0f56bf1de53ff15ed6e56849

7 (#2)

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x1e2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.1586
MD5 2ee005bf14efd62d866ca276e73b47aa
SHA1 e098ed7de14a3221722e8c25ada1cb901ce85978
SHA256 450b4d82a86dba50acea995d6356e0174a242081f2c2438f6f88c29038f7097d
SHA3 3bd4b237507bdbc645d985837c718b5df99fa6c91e862fe59f7295cd82c7d0b0

8 (#2)

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x1cc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.11685
MD5 91984a8521454b1758674f2f0765e695
SHA1 f48b0e0ca433d99226abe5cb9f1421b5dc204d31
SHA256 89051dca472bd5ebb7b344c05150755b6e3d32cb0dffea086c04186820b188d2
SHA3 c7c2157fcb23e3b9253e37f60afe11361c625e3d5e0535bbbf988387d2cd517c

9 (#2)

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x1ee
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.15447
MD5 bea5af210aba31a79a4329c4fe918826
SHA1 0639f7b55623ed115a7a2573862194ce497e135e
SHA256 4b330444367ebff69a042f9aaa930485c02a02e7efdad56db24cb2b76dc8f134
SHA3 0e3c015b6a949195bfecc1b2c288abf0b79803889b3a25c6558580c175e6a651

10 (#2)

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x146
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.99727
MD5 06aeb5ae44f152010b502d79d78da978
SHA1 765389e59fc961fb9782413bccd6218c0ed29c95
SHA256 1e87eca343221966ecd9472109f3baf9081c821e3f4e905aa34eb8bce73af4e7
SHA3 dda651f9f04eded147d6b4d66801eb000f7f83f5e6161c919beca8e51e7b6f8a

11 (#2)

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x446
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.2036
MD5 50607cbf5fa33da61e8d119c4a2c0c9b
SHA1 d38285a743fe1ebf62ecb612d62336060c865bc7
SHA256 06b2bd666ed1afbbfc9914b94d703087c18248c5fe28dead42e42f22c3984c5e
SHA3 9bc82cef576158d1c1bf6c60e77dae43a3c3ef80d1373ceafa46da206fd67cfe

12 (#2)

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x166
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.12889
MD5 70f271b2edd6a05942b95abced225c10
SHA1 dd3de2dc38efaf506c8c902edc3c6639651babbf
SHA256 d5755fffe2a9a4baf3593b8fba9a029b23bcc08e77c8d98e07b93baee6b9e6de
SHA3 99f9038fe42c25749482786e85b1f0ee5dda044080bf4ea4b311b333a3098c63

13 (#2)

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x120
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.95673
MD5 269a2d7069663060af7c9dd46b06fa63
SHA1 3addd59b10812bf9a9a37c28139b048acf8bb003
SHA256 a71a1445d83285856c39bf2f0caa19e88c9be65f0178a6878f321a925a21f97c
SHA3 9a7c6ec3de596dee9c3710ef77cb4693c3d5b584d842ccac347b066e46afbdf6

14 (#2)

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0xba
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.77928
MD5 f2f57022da11e6b34117697226056e76
SHA1 94643fa46ab3195fa8fd17faed49d09a2c8d9fda
SHA256 71966cf60a28c1cdde4196d7909347e3f66661546af21edbacb15c7116944832
SHA3 c30201373f1a146121e6a60a036cdbbed0031c6ccae088ab15e9cd58c9339f61

15 (#2)

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0xbc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.83619
MD5 09b30c86fe6cd7c8fe6d5d5fdd8b0a3e
SHA1 ba24c6e94ca7607f3fa91f71142d64d2e2938152
SHA256 f63fabe3ed749afb7b1719755170afe965f37e216834adf90dec051811afe657
SHA3 f4baf857de57ba1229f413a1165ec8e17dfa3e973f315fda2a082f79a3f64948

16 (#2)

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0xd6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.80514
MD5 3a1b603eaeaa7aca84afab706054807b
SHA1 577ba4baf69c0cc5867167174746fc35fb11e8fd
SHA256 cfa68e1c4fe3e613725ec1c45a80c2e4855c07e2d4587c8cf46fac05a78c0145
SHA3 dc50fd5dad67b49d6067255f83399ab84ccc7adc2476f3b4db2c652fa24c5169

100

Type RT_GROUP_ICON
Language Process Default Language
Codepage Latin 1 / Western European
Size 0x102
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.23177
Detected Filetype Icon file
MD5 2ffb01c601a0f5d9021b199ed662eeae
SHA1 187f7f20fe91d20997cebe7ae20e843d7717f57d
SHA256 683ff8dfc08d06976685a296d8563f300e35aeb64d84ad753dd892af9f047912
SHA3 8739824d0b77e5092cc387456505b840ec6f01afb10f72fb164ef9a8747b7b5c

1 (#2)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x753
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.25329
MD5 8ddcbbd6b8c80eef68bf9305e59fa1f3
SHA1 014923abccec57fa3ad16f65feb0de2b8cbc8408
SHA256 1b7b67e5d8927449d8f7be80a0e5ba5f03d25670035027c0cb71abce27da6810
SHA3 e5c4bfc7e92f1b945363bb9ad2aabbe4324074ac295d08722e743d6e7c524b69

String Table contents

Select destination folder
Extracting %s
Skipping %s
Unexpected end of archive
The file "%s" header is corrupt
Corrupt header is found
Main archive header is corrupt
The archive comment header is corrupt
The archive comment is corrupt
Not enough memory
Unknown method in %s
Cannot open %s
Cannot create %s
Cannot create folder %s
Checksum error in the encrypted file %s. Corrupt file or wrong password.
Checksum error in %s
Packed data checksum error in %s
Write error in the file %s. Probably the disk is full
Read error in the file %s
File close error
The required volume is absent
The archive is either in unknown format or damaged
Extracting from %s
Next volume
The archive header is corrupt
Close
Error
Errors encountered while performing the operation
Look at the information window for more details
bytes
modified on
folder is not accessible
Some files could not be created.
Please close all applications, reboot Windows and restart this installation
Some installation files are corrupt.
Please download a fresh copy and retry the installation
All files
<ul><li>Press <b>Install</b> button to start extraction.</li><br><br>
<ul><li>Press <b>Extract</b> button to start extraction.</li><br><br>
<li>Use <b>Browse</b> button to select the destination
folder from the folders tree. It can be also entered
manually.</li><br><br>
<li>If the destination folder does not exist, it will be
created automatically before extraction.</li></ul>
The archive is corrupt
Extracting files to %s folder
Extracting files to temporary folder
Extract
Extraction progress
Total path and file name length must not exceed %d characters
Unknown encryption method in %s
The specified password is incorrect.
Cannot copy %s to %s.
Cannot create symbolic link %s
Cannot create hard link %s
You may need to run this self-extracting archive as administrator
Pause
Continue
Security warning
Please remove %s from folder %s. It is unsecure to run %s until it is done.

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2016-Aug-14 19:15:49
Version 0.0
SizeofData 81
AddressOfRawData 0x361dc
PointerToRawData 0x355dc
Referenced File D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2016-Aug-14 19:15:49
Version 0.0
SizeofData 20
AddressOfRawData 0x36230
PointerToRawData 0x35630

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2016-Aug-14 19:15:49
Version 0.0
SizeofData 1056
AddressOfRawData 0x36244
PointerToRawData 0x35644

TLS Callbacks

Load Configuration

Size 0x5c
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x4391b8
SEHandlerTable 0x436090
SEHandlerCount 37

RICH Header

XOR Key 0x723f06de
Unmarked objects 0
241 (40116) 13
243 (40116) 139
242 (40116) 24
ASM objects (23907) 22
C objects (23907) 19
C++ objects (23907) 45
C objects (VS2008 SP1 build 30729) 10
Imports (VS2008 SP1 build 30729) 3
Total imports 248
C++ objects (VS2015 UPD2 build 23918) 48
Exports (VS2015 UPD2 build 23918) 1
Resource objects (VS2015 UPD2 build 23918) 1
Linker (VS2015 UPD2 build 23918) 1

Errors

Leave a comment

No comments yet.