1c2e27ec85b62b595c3b30ad4b081c304b8bfea3285979b3d55311ff33a30d57
Summary
| Architecture |
UNKNOWN
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2025-Sep-30 23:55:55 |
| Detected languages |
English - United States
Japanese - Japan |
| Comments | https://www.ponsoftware.com/en/ |
| CompanyName | pon software |
| FileDescription | Explzh Windows ARM64 EN |
| FileVersion | 10.01 |
| InternalName | deccabArm64W |
| LegalCopyright | Copyright (c) 1996-2026 by pon software |
| OriginalFilename | deccabArm64W.exe |
| ProductName | decode cab unicode version (ARM64) |
| ProductVersion | 10.05.2 |
Plugin Output
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
Contains references to system / monitoring tools:
|
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Info | The PE is digitally signed. |
Signer: pon software
Issuer: Sectigo Public Code Signing CA EV R36 |
| Safe | VirusTotal score: 0/69 (Scanned on 2026-11-03 19:45:10) | All the AVs think this file is safe. |
Hashes
| MD5 | 5738a1c8035dc1af25aa9c8d3c62bace 🔍 |
|---|---|
| SHA1 | 44dae7e240084fc5c3d6f101f636472645d1cd5e 🔍 |
| SHA256 | 1c2e27ec85b62b595c3b30ad4b081c304b8bfea3285979b3d55311ff33a30d57 🔍 |
| SHA3 | aae1cd5c5acc6c8e6a04a2783987d2162884dc315e57ba3b853e50469dc2ec34 🔍 |
| SSDeep | 98304:ncncsIi39BKi6Fv7V1DnQZY6i7Z1RR9XhFd/gMKj7Mg6vzQ3TYG0q85bCN6yR0GG:ncnbh3T8z1DQZjq/NJI/e7QDYXFGR0GG 🔍 |
| Imports Hash | 25e553ba84f0ab77e2ca9c65511082ce 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x108 |
PE Header
| Signature | PE |
|---|---|
| Machine |
UNKNOWN
|
| NumberofSections | 7 |
| TimeDateStamp | 2025-Sep-30 23:55:55 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x19200 |
| SizeOfInitializedData | 0x12400 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x00000000000098A8 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.2 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.2 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x2f000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x63d31c |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | c5bdad2b8a9ab1843c6284553d56ba0c 🔍 |
|---|---|
| SHA1 | 846f6470ca95ffeb68010475d4eb1136e077ba09 🔍 |
| SHA256 | 702389a676f16c29f0bd6bcd052ce087f4977117e2207edeec7de68198b4ffa8 🔍 |
| SHA3 | 286f3c557078ea74dd44ad36f093adea7663e6e96031e3a72c98892bd5eaf677 🔍 |
| VirtualSize | 0x19184 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x19200 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.35852 |
.rdata
| MD5 | f1e8cda8d648d8495120108e161fd17b 🔍 |
|---|---|
| SHA1 | 1c2a9657aa4c6695d1bbb4a50bfbc006b79e27eb 🔍 |
| SHA256 | f0fa22f5f612e54dee7a5e5a89827dfce081e0692b816f21b35b73111a96b7a0 🔍 |
| SHA3 | eaab9dddf57aedab380d331dad141c086b1c62b58ccf075d97190358e5361692 🔍 |
| VirtualSize | 0x9ada |
| VirtualAddress | 0x1b000 |
| SizeOfRawData | 0x9c00 |
| PointerToRawData | 0x19600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.28091 |
.data
| MD5 | b4ca6c24fa8dc65c87c69805a530cbb5 🔍 |
|---|---|
| SHA1 | 2d55823860c596cc46d77675d375adcea0092c10 🔍 |
| SHA256 | 453eb17871b9b4c186eed0351f7c792828aa9f3f290171734f452d0d404217f0 🔍 |
| SHA3 | ea0fbaa1cffb4815cc90fd566f36a96bbb195b63e2f78934c92ea3697f40327b 🔍 |
| VirtualSize | 0x3e14 |
| VirtualAddress | 0x25000 |
| SizeOfRawData | 0xc00 |
| PointerToRawData | 0x23200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 2.12133 |
.pdata
| MD5 | 732dab60abef9bb61ff56355836d3c04 🔍 |
|---|---|
| SHA1 | 32e3cbc01aa57218c05224d9feae1bc478964463 🔍 |
| SHA256 | 4293955b169c905f46b06074acf88d1b367cb053c2e556ff57650282113f5198 🔍 |
| SHA3 | fefccaab8be232ffcbd95c6b853f1e0c1b08bbf203e302c5e4b5737815c36bc5 🔍 |
| VirtualSize | 0xe00 |
| VirtualAddress | 0x29000 |
| SizeOfRawData | 0xe00 |
| PointerToRawData | 0x23e00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 5.21162 |
.fptable
| MD5 | bf619eac0cdf3f68d496ea9344137e8b 🔍 |
|---|---|
| SHA1 | 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍 |
| SHA256 | 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍 |
| SHA3 | 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍 |
| VirtualSize | 0x100 |
| VirtualAddress | 0x2a000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x24c00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0 |
.rsrc
| MD5 | 84276523093976060afe1404cd263d0d 🔍 |
|---|---|
| SHA1 | f36b0ea8e218ba402ce2975f19bcb92123af6645 🔍 |
| SHA256 | cb0c9f2b099c47ae5f0259b5fbb74304432003b0e7120907e982e99f781ab330 🔍 |
| SHA3 | da69af662e9ffcc2d49391ed3fa6c5e1c9e84b112ae35aee9d735d7fc4bfdd12 🔍 |
| VirtualSize | 0x2f18 |
| VirtualAddress | 0x2b000 |
| SizeOfRawData | 0x3000 |
| PointerToRawData | 0x24e00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.75707 |
.reloc
| MD5 | 062ea6bf99793e565617030a83f55e82 🔍 |
|---|---|
| SHA1 | 011e655d7ea0f642a35555a9e9563eaa90e55c4d 🔍 |
| SHA256 | baab27aeeff432be0e77435587b35c61101c81f47c5b96279d1f70ff7945679b 🔍 |
| SHA3 | 589111bf68e8e23d66e9520edd0cefc1b7481409b15eed2361c1bc7f7417d9c5 🔍 |
| VirtualSize | 0x66c |
| VirtualAddress | 0x2e000 |
| SizeOfRawData | 0x800 |
| PointerToRawData | 0x27e00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 4.91158 |
Imports
| KERNEL32.dll |
GetModuleHandleW
GetProcAddress FileTimeToDosDateTime lstrcmpW lstrcmpiW lstrcpyW lstrcatW lstrlenW MultiByteToWideChar GetModuleHandleA GetCurrentThreadId FreeLibrary LoadLibraryA lstrcmpA lstrcmpiA GetSystemDirectoryA lstrcatA CreateDirectoryW LocalFileTimeToFileTime ReadFile SetFilePointer SetFileTime WriteFile GetTempPathW GetLastError GetSystemDirectoryW GetWindowsDirectoryW GlobalAlloc GlobalReAlloc GlobalUnlock GlobalLock GlobalHandle GlobalFree LocalFree DosDateTimeToFileTime FormatMessageW lstrcpyA WideCharToMultiByte IsDBCSLeadByte FlushFileBuffers HeapReAlloc HeapSize WriteConsoleW GetStringTypeW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP GetFileTime GetModuleFileNameW LCMapStringW LoadLibraryExW VirtualProtect HeapAlloc HeapFree GetStdHandle TerminateProcess ExitProcess GetFileType SetStdHandle GetConsoleOutputCP ReadConsoleW GetConsoleMode SetFilePointerEx GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread RtlPcToFileHeader RaiseException EncodePointer RtlLookupFunctionEntry DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RtlUnwindEx VerifyVersionInfoW VerSetConditionMask InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive CreateProcessW GetFileSize GetFileAttributesW GetExitCodeThread GetExitCodeProcess GetCurrentProcess Sleep WaitForSingleObject CloseHandle SetFileAttributesW RemoveDirectoryW FindFirstFileExW GetShortPathNameW FindNextFileW FindFirstFileW FindClose FileTimeToLocalFileTime DeleteFileW CreateFileW IsValidCodePage SearchPathW |
|---|---|
| USER32.dll |
LoadStringW
wsprintfW GetMonitorInfoW MonitorFromWindow SystemParametersInfoW SetWindowsHookExW FindWindowA GetDesktopWindow SetWindowTextW GetKeyState MoveWindow CreateWindowExW PeekMessageW wsprintfA SystemParametersInfoA DestroyIcon UnhookWindowsHookEx SetWindowsHookExA GetWindow GetWindowThreadProcessId GetClassNameA EnumChildWindows GetParent SetWindowLongPtrW GetWindowLongPtrW GetWindowLongPtrA SetWindowLongW GetWindowLongW FillRect DrawFocusRect GetSysColor MessageBoxW GetWindowRect GetClientRect GetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC AllowSetForegroundWindow SetForegroundWindow GetForegroundWindow UpdateWindow DrawTextW GetSystemMetrics IsWindowEnabled EnableWindow GetFocus SetFocus GetDlgCtrlID IsDlgButtonChecked GetDlgItemTextW GetDlgItem EndDialog DialogBoxParamW CreateDialogParamW BringWindowToTop SetWindowPos ShowWindowAsync ShowWindow DestroyWindow CallWindowProcW PostQuitMessage AttachThreadInput PostMessageW DrawFrameControl IsDialogMessageW FindWindowW MessageBeep SetDlgItemTextW IsWindow WaitForInputIdle SendMessageW DispatchMessageW TranslateMessage GetMessageW CallNextHookEx |
| GDI32.dll |
SetROP2
SetBkMode SetBkColor SelectObject GetTextExtentPoint32W GetDeviceCaps DeleteObject CreateSolidBrush SetTextColor |
| ADVAPI32.dll |
RegOpenKeyExA
RegQueryValueExW RegQueryValueExA RegOpenKeyExW RegCloseKey |
| SHELL32.dll |
SHBrowseForFolderW
SHGetMalloc SHGetSpecialFolderLocation ShellExecuteW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteExW |
| ole32.dll |
CoTaskMemFree
|
| COMCTL32.dll |
#17
#412 #413 #410 |
Delayed Imports
1
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x8a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.62136 |
| MD5 | 7f2364bf241b65cdb979ea0e3053132c 🔍 |
| SHA1 | a8ac9bdb67306df08c424d379d0fe6a72f1fc71c 🔍 |
| SHA256 | df28342efca3c0045ccaf63b248b48374e84d24cc352481fe07cfd660c69d8a2 🔍 |
| SHA3 | c537ea4749923a44c52885d0c7e0dfbd017330bb1f2a95278e431e23df72c0f9 🔍 |
2
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x2e8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.41101 |
| MD5 | 68dec127ad1e2852d55c01ee5d2ae1a2 🔍 |
| SHA1 | 8fb808cda702982d5bb661780c4abdf39f39d130 🔍 |
| SHA256 | 2630f566987c79ae41cb645207efeafd0ee5f9b6458a6701c568628448ba8c3a 🔍 |
| SHA3 | 82927d8ac85f485313655090feeb1dd3ab71e7edf3750e75dc81267b399d0287 🔍 |
103
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xb0 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.10582 |
| MD5 | afd7f8229cfc1454b39da98d649a413b 🔍 |
| SHA1 | 82ca89976032df73621a550b07f29d170c195f6b 🔍 |
| SHA256 | 062c87f0dad7868371afdc97a5f45046161bbd5989ffaece1caaad4ce1be0b61 🔍 |
| SHA3 | 317b1411bfc56542b09b2aa9cf6e599f57f595a87587de38ad90e040f2a840b4 🔍 |
103 (#2)
| Type |
RT_DIALOG
|
|---|---|
| Language | Japanese - Japan |
| Codepage | UNKNOWN |
| Size | 0xb4 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.60674 |
| MD5 | 6a335cc7f27dc4063a60e97741515da6 🔍 |
| SHA1 | 6d0531ed114da7a8a22ab6cf51d4af56462d0098 🔍 |
| SHA256 | 831765f696d8adf1da06a4c4d4ef5eaa7e6b4b15cd430dfb8b04612bb6428c10 🔍 |
| SHA3 | 970a24649dd97095da091444c891dbffc1e624ed550e2a2fb167772d13746ce6 🔍 |
108
| Type |
RT_DIALOG
|
|---|---|
| Language | Japanese - Japan |
| Codepage | UNKNOWN |
| Size | 0x60 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.55603 |
| MD5 | 123494fa5d75f7c1c6384426b542d66d 🔍 |
| SHA1 | e3fce0313e390a7c06cd1057b91baef30cf68c33 🔍 |
| SHA256 | cd231fa84e76f0c703f57d8a315adb84b95f4944e3d4d4e84e40d903e5c876fc 🔍 |
| SHA3 | 5df11d98be0fcf7280c9628cf6ac1686a649323f1e915a8545d8dd9202c95c34 🔍 |
202
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x250 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.25502 |
| MD5 | d763f256c9fa7fec11e1e8d743126d3d 🔍 |
| SHA1 | 326857e9b2e87fa60724aa19c2f6e0778eba2b1b 🔍 |
| SHA256 | f4b71b5c0e90aa0e8a2bed29c3fd513b47f0d79a2d81319aef1b524de2635ddd 🔍 |
| SHA3 | 1cb58cd85f1961c4ca65041a4f7e56c99d62b18a3998e00c223ab2804598be20 🔍 |
202 (#2)
| Type |
RT_DIALOG
|
|---|---|
| Language | Japanese - Japan |
| Codepage | UNKNOWN |
| Size | 0x196 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.8693 |
| MD5 | 84c6a35a7bb9eb357d23752db5ae79ba 🔍 |
| SHA1 | 4e53237b3874fa85a7a4d70059f828e6faf9502f 🔍 |
| SHA256 | 9d6c5c19eb9220c84a05a8ccc599314e02306d7fb59bf06f79b0282890ec885b 🔍 |
| SHA3 | 3e85ebeda74006d2f7f941e857893e3c5f6680a95d9c442e5cf5e723f0b49dd7 🔍 |
2007
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x270 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.41412 |
| MD5 | ec19ec49b6f124138a9a6ecf55ece1e8 🔍 |
| SHA1 | e482f38d9f0af386964a7c36d74be8cc8ca0f84f 🔍 |
| SHA256 | 7d7605d294267d91b72940eb10660fcd2c9601a2f6ae59f2a91a53fb4abce5f5 🔍 |
| SHA3 | a052b949b791e040bc9b89fa7350673d303c9c8c544e7780cd4abe21d6a69a97 🔍 |
2007 (#2)
| Type |
RT_DIALOG
|
|---|---|
| Language | Japanese - Japan |
| Codepage | UNKNOWN |
| Size | 0x2b6 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.7965 |
| MD5 | 06128f1a54f59ddd448dc3b65bdc096d 🔍 |
| SHA1 | 2e881cac44a1089566cf9a3d4daf2180a85b4b13 🔍 |
| SHA256 | 3f8304671ccca63a27338190ba8849073871eba1adfd6cf7b990631265cacfd0 🔍 |
| SHA3 | a75fef6bf22aeb25ef03442944d41baddf96be0bde3ef3830f27b8da76375e36 🔍 |
2008
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x112 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.24862 |
| MD5 | aad8a893a594ac6f785a8d06e0e0a5c5 🔍 |
| SHA1 | 42d1c6b0b6ba43e227115e31ed557dd6fa7e5edb 🔍 |
| SHA256 | 61d312931f05dd00b01b98eb2293a22b062b53f165f89fd88b62a479ced2d2e6 🔍 |
| SHA3 | 388b94be7f6b1ed3c797a0082e21e629a51c18e43aa08abc32ee115c1a6b90e0 🔍 |
2008 (#2)
| Type |
RT_DIALOG
|
|---|---|
| Language | Japanese - Japan |
| Codepage | UNKNOWN |
| Size | 0xe6 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.74004 |
| MD5 | 4a55e26b597dfb899fa48a146572c290 🔍 |
| SHA1 | be9d5e4e92e8c84a4792cb14dfb428f3a7885519 🔍 |
| SHA256 | 6a60fbf338ac47482604575e8117cf150417d0e9ed1834aea8285dee98b18cbe 🔍 |
| SHA3 | afaaec308f0430b0c43c621d0411f1e89a98a3af03e4b878824d5402e5107be9 🔍 |
1 (#2)
| Type |
RT_STRING
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x14a |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.04067 |
| MD5 | 4e68afb36d0e4d860a022fe50de2bc02 🔍 |
| SHA1 | 3bbad54c7f8a39288ecdc43002cedebafec8e8b0 🔍 |
| SHA256 | ba85bb6ef305c139e09829a5db6ef63b976f4fe5a672186e6930420a6f570c69 🔍 |
| SHA3 | 3c1089fbee6115c06e8d96cb50cca222169089a65a62863932cb6cceb0f4582c 🔍 |
1 (#3)
| Type |
RT_STRING
|
|---|---|
| Language | Japanese - Japan |
| Codepage | UNKNOWN |
| Size | 0xce |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.44947 |
| MD5 | cc3f3dcdd4df5ed3a4a4207a860f33f0 🔍 |
| SHA1 | 133afc94d323cef4f880b408dbd47d32ecbeaded 🔍 |
| SHA256 | df4af22696ac1f5f461c8b5f03e1c5ff1c20d8c3ccb589cbb772c9373e940a48 🔍 |
| SHA3 | 8513a824c11f24a071e8ff1316df8240c5fb6ec1e4ecc486ed29a691871bdbd5 🔍 |
2 (#2)
| Type |
RT_STRING
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x278 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.39086 |
| MD5 | 6d9ecfdb19d162692ddf40f2c16ad54d 🔍 |
| SHA1 | 170b709c8a9ad6127c51ba1d2a2f127503409387 🔍 |
| SHA256 | d842264a9548ed515d293eada72e94bd22dc125ac3731e490d036ccb84d09be4 🔍 |
| SHA3 | 944e0f17489a06496de711a47caf06684a29d89115d6a2d5b885a5b39495fac8 🔍 |
2 (#3)
| Type |
RT_STRING
|
|---|---|
| Language | Japanese - Japan |
| Codepage | UNKNOWN |
| Size | 0x226 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.92957 |
| MD5 | fe16716fc4c4a0bd02159247552fb79e 🔍 |
| SHA1 | d497e1afe91c561f47289c3952ee2cfe188e4438 🔍 |
| SHA256 | d04fee2544f5b85f74ea8fea7339e2f7c7f1485dc5928f477a9ce6371964d7d2 🔍 |
| SHA3 | 8d4940298be298787ddc6511749326ba111b2e92abde44b8b18241308095482b 🔍 |
200
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.81924 |
| Detected Filetype | Icon file |
| MD5 | cbee427fa121aba9b9b265ff05de5383 🔍 |
| SHA1 | 24fcae33001c8e0f5ec795c6edf076a69d59589f 🔍 |
| SHA256 | 494e4fd717fa1ee0c5c7bb3b4e28fdab4b7f6e95b4f9865f5ab86f03f62ae62c 🔍 |
| SHA3 | a3fa35d56632275ba55716a4964f02031270f61f06a903fc460ac2dd6bebde85 🔍 |
205
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.22322 |
| Detected Filetype | Icon file |
| MD5 | e113b50b534c1cf282bd8b50aa427dfe 🔍 |
| SHA1 | 65f4cefce100e60fb5f37ee84f6c6079d8925964 🔍 |
| SHA256 | 70c44df2204ba02cef387313aed59a095724ba4b8e0213b68e41418b1236e140 🔍 |
| SHA3 | 889cd611ad8ce301ece0cff36f29c125c2350dba0106a153bf46ba8007f345cf 🔍 |
1 (#4)
| Type |
RT_VERSION
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x5e0 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.51216 |
| MD5 | c8937c6a15b4ec3a6b3e97fb20cd26a3 🔍 |
| SHA1 | f4b4335f423faf0835af95f0c1a8a615ac7b2bfb 🔍 |
| SHA256 | fdbca9fed8ed234eda1c43e353feda950152cf536aecd476968027df1b5ae1df 🔍 |
| SHA3 | 833e0caa2ed9e914506e766f87212fc0ea72a088fbadf988d1244f35357866b7 🔍 |
1 (#5)
| Type |
RT_MANIFEST
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x63c |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.3838 |
| MD5 | 22ad6a32d4b626bd9912ebbe01e1b713 🔍 |
| SHA1 | 422529a9aa64bcf4c7aea6f24b33f99da6e93810 🔍 |
| SHA256 | 79ac704faa9b11d1293f3a28549467bd0357348175b03263f4029193e71b1488 🔍 |
| SHA3 | fe6d38964ff07a67ebdd24b1428b325e30171e4fbd9cac5de065088e0fe80fbd 🔍 |
String Table contents
| Cannot create a file. |
| Cannot open arhive. |
| not supported archive format. |
| The Folder '%s' does not exist. |
| Do you want to create it? |
| Cannot create a folder. |
| 展開先にファイルを作成できません。 |
| 書庫を開けません。 |
| 対応していない書庫形式です。 |
| '%s' |
| 展開先フォルダは存在しません。 |
| フォルダを作成しますか？ |
| フォルダを作成できません。 |
| %s |
| invalid filename.(skipped) |
| Cannot create a folder. |
| This archive forbids writing. |
| CRC check error! |
| %%s Bytes |
| Modified: %02d, %02d, %04d, %02d:%02d:%02d |
| Invalid path! |
| Please select a folder to store the extracted files. |
| This sfx-module cannot be run in Win32. |
| This sfx-module cannot be run in Windows 9x. |
| %s |
| 不正なファイル名の展開をスキップします。 |
| 展開先フォルダを作成できません。 |
| CRC チェックエラー |
| '%s' |
| はファイルが改竄されたか、ファイルが破損しています。 |
| 配布ファイルの場合にはファイルの入手元から再入手してください。 |
| %%s バイト |
| %04d年%02d月%02d日 ?曜日、%02d:%02d:%02d |
| 格納パス情報がおかしいです。 |
| 解凍先のフォルダを指定してください。 |
| このセットアップモジュールは Windows 64ビット用です。 |
| このセットアップモジュールは Windows 9x 環境では動作しません。 |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 10.1.0.0 |
| ProductVersion | 10.0.5.2 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | UNKNOWN |
| Comments | https://www.ponsoftware.com/en/ |
| CompanyName | pon software |
| FileDescription | Explzh Windows ARM64 EN |
| FileVersion (#2) | 10.01 |
| InternalName | deccabArm64W |
| LegalCopyright | Copyright (c) 1996-2026 by pon software |
| OriginalFilename | deccabArm64W.exe |
| ProductName | decode cab unicode version (ARM64) |
| ProductVersion (#2) | 10.05.2 |
| Resource LangID | UNKNOWN |
|---|
IMAGE_DEBUG_TYPE_POGO
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Sep-30 23:55:55 |
| Version | 0.0 |
| SizeofData | 944 |
| AddressOfRawData | 0x21f0c |
| PointerToRawData | 0x2050c |
TLS Callbacks
| StartAddressOfRawData | 0x1400222e0 |
|---|---|
| EndAddressOfRawData | 0x1400222e8 |
| AddressOfIndex | 0x140027de8 |
| AddressOfCallbacks | 0x14001b7a8 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
| Callbacks | (EMPTY) |
Load Configuration
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x1400250c0 |
RICH Header
| XOR Key | 0xb87cb95f |
|---|---|
| Unmarked objects | 0 |
| C++ objects (33140) | 145 |
| C objects (33140) | 9 |
| ASM objects (33140) | 8 |
| ASM objects (35207) | 16 |
| C objects (35207) | 16 |
| C++ objects (35207) | 40 |
| Imports (33140) | 15 |
| Total imports | 241 |
| C objects (35217) | 1 |
| C++ objects (35217) | 6 |
| Resource objects (35217) | 1 |
| Linker (35217) | 1 |
Errors
Leave a comment
No comments yet.