Manalyze report for e0cc65b34dc060f1f2540d454258a6f8e482db24ad66c4860bc4cce03e6d87b0

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2025-Sep-30 23:55:36
Detected languages	English - United States Japanese - Japan
Comments	https://www.ponsoftware.com/en/
CompanyName	pon software
FileDescription	Explzh Windows x64 EN
FileVersion	`10.01`
InternalName	deccab64W
LegalCopyright	Copyright (c) 1996-2026 by pon software
OriginalFilename	deccab64W.exe
ProductName	decode cab unicode version (x64)
ProductVersion	`10.05.2`

Plugin Output

Suspicious	Strings found in the binary may indicate undesirable behavior:	`Contains references to system / monitoring tools: rundll32.exe` `May have dropper capabilities: %temp%` `Contains domain names: https://www.ponsoftware.com https://www.ponsoftware.com/en/ nsoftware.com ponsoftware.com www.ponsoftware.com`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryA LoadLibraryExW` `Functions which can be used for anti-debugging purposes: FindWindowA FindWindowW` `Code injection capabilities (PowerLoader): FindWindowA GetWindowLongW FindWindowW` `Can access the registry: RegQueryValueExW RegOpenKeyExA RegOpenKeyExW RegQueryValueExA RegCloseKey` `Possibly launches other programs: CreateProcessW ShellExecuteW` `Can create temporary files: GetTempPathW CreateFileW` `Uses functions commonly found in keyloggers: CallNextHookEx GetForegroundWindow AttachThreadInput` `Can take screenshots: FindWindowA GetDC FindWindowW`
Info	The PE is digitally signed.	`Signer: pon software` `Issuer: Sectigo Public Code Signing CA EV R36`
Suspicious	VirusTotal score: 1/71 (Scanned on 2026-11-03 19:44:56)	`Jiangmin: Trojan.Agent.fdlu`

Hashes

MD5	`be6e5db50a59bd66d7fd4697ca723bda` 🔍
SHA1	`d4c4ec7dd68de3b1023c4ea872302d3d046e7b21` 🔍
SHA256	`e0cc65b34dc060f1f2540d454258a6f8e482db24ad66c4860bc4cce03e6d87b0` 🔍
SHA3	`2dbc9481aeea6c789e9b956d9cc08e4834c49d868e81fa2cdb0bde4ae1c12610` 🔍
SSDeep	`196608:hvz5x01dSH9wZ4fxhjmq9ELBtcjKWjv0N4/zCekgYGl+:Dx0uwZ4HVe2KWjr7fk8l+` 🔍
Imports Hash	`ba1b345db1f0fce81ad1991d81975eee` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x110`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`7`
TimeDateStamp	2025-Sep-30 23:55:36
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0x16000`
SizeOfInitializedData	`0x15000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00000000000084EC (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x2e000`
SizeOfHeaders	`0x400`
Checksum	`0x673ded`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`39c318cc541b30a654433c4f4ef7d24b 🔍`
SHA1	`f4294431e5c480b05ef6bb65a07638aa5fb85bb6 🔍`
SHA256	`16f826f8ca9c1304cb557a9d76f8a78de0deda6690c83a52b4fd59655975c04f 🔍`
SHA3	`43b13ead7e4df44315d63fc105aa6f933b727bfe2aa9d0c3fe6e195bb59bc94d 🔍`
VirtualSize	`0x15ebc`
VirtualAddress	`0x1000`
SizeOfRawData	`0x16000`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.41209`

.rdata

MD5	`22925f42c7f83ce4e1531d8116c9a59f 🔍`
SHA1	`88f37830f09c873ebea1ae484137aa179cffd6ad 🔍`
SHA256	`902d97bd8a96c25fd594c60c543198ca5d14efe33ad0d0f9015e713e08c206cb 🔍`
SHA3	`f7ffaceafab82d952c49b6387c6ba4db443d3e7ef1703a9a206fdb463707abab 🔍`
VirtualSize	`0xbe0c`
VirtualAddress	`0x17000`
SizeOfRawData	`0xc000`
PointerToRawData	`0x16400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.84776`

.data

MD5	`3ef2ef6fcc059d31fe663445812d5c8a 🔍`
SHA1	`b2593ffff3312fef3c8c53e4996bab8b77b533d3 🔍`
SHA256	`cde0fe5b3a1af612850355a8b0d27d8f759654756e24bdfadfe2fbe09beab753 🔍`
SHA3	`99858786d206fa02af37432a0b6be69e8d1cac24f791147214f9616c8898157b 🔍`
VirtualSize	`0x3fc4`
VirtualAddress	`0x23000`
SizeOfRawData	`0xc00`
PointerToRawData	`0x22400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`2.14415`

.pdata

MD5	`0546788c8bf5b6f8432bf1f07a1c7344 🔍`
SHA1	`346af77fbcbdafa5d726da37964b3c232aa5e97e 🔍`
SHA256	`d9c1677273431eb52dd268ffb8929b3b5b7cddf970dd3b5d8c97c904d5f9265a 🔍`
SHA3	`b13a3cd8211e51b81b24c7a3d256225855a295e060c945336e51e00337a3ce31 🔍`
VirtualSize	`0x1560`
VirtualAddress	`0x27000`
SizeOfRawData	`0x1600`
PointerToRawData	`0x23000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.05398`

.fptable

MD5	`bf619eac0cdf3f68d496ea9344137e8b 🔍`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍`
VirtualSize	`0x100`
VirtualAddress	`0x29000`
SizeOfRawData	`0x200`
PointerToRawData	`0x24600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.rsrc

MD5	`725fa7e724f573114b42b273b8915d2c 🔍`
SHA1	`4511f34f6adcca1fe6b5cef29ce3fc0360618a53 🔍`
SHA256	`715aeeecbfd446854b6c033e03d0ec431d5e485b454eb19d7a0f235fc20dad11 🔍`
SHA3	`1b968933e0ea2ebe383f31965ccbcb260951ccac13062bac1c38dc3938cf8cc3 🔍`
VirtualSize	`0x2f08`
VirtualAddress	`0x2a000`
SizeOfRawData	`0x3000`
PointerToRawData	`0x24800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.7455`

.reloc

MD5	`4f1abfddd3827a2599de44ac2efe2349 🔍`
SHA1	`ad45e2ad3deb9428015afac2ddab2af5a1192c9a 🔍`
SHA256	`fca43c3b842a587699f4edafad478b81a724b6c1510d55877ad7064d194092d4 🔍`
SHA3	`7cc4a7ef0a3ceefcdc015a718526b93bf8172ceff3c65d963b6c0cb1dcaf53b5 🔍`
VirtualSize	`0x688`
VirtualAddress	`0x2d000`
SizeOfRawData	`0x800`
PointerToRawData	`0x27800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`4.95693`

Imports

KERNEL32.dll	`GetModuleHandleW` `GetProcAddress` `FileTimeToDosDateTime` `lstrcmpW` `lstrcmpiW` `lstrcpyW` `lstrcatW` `lstrlenW` `MultiByteToWideChar` `GetModuleHandleA` `GetCurrentThreadId` `FreeLibrary` `LoadLibraryA` `lstrcmpA` `lstrcmpiA` `GetSystemDirectoryA` `lstrcatA` `CreateDirectoryW` `LocalFileTimeToFileTime` `ReadFile` `SetFilePointer` `SetFileTime` `WriteFile` `GetTempPathW` `GetLastError` `GetSystemDirectoryW` `GetWindowsDirectoryW` `GlobalAlloc` `GlobalReAlloc` `GlobalUnlock` `GlobalLock` `GlobalHandle` `GlobalFree` `LocalFree` `DosDateTimeToFileTime` `FormatMessageW` `lstrcpyA` `WideCharToMultiByte` `IsDBCSLeadByte` `FlushFileBuffers` `HeapReAlloc` `HeapSize` `WriteConsoleW` `GetStringTypeW` `GetProcessHeap` `FreeEnvironmentStringsW` `GetEnvironmentStringsW` `GetCommandLineW` `GetCommandLineA` `GetCPInfo` `GetOEMCP` `GetACP` `IsValidCodePage` `FindFirstFileExW` `GetModuleFileNameW` `GetFileTime` `LCMapStringW` `VirtualProtect` `InitializeCriticalSectionEx` `FlsFree` `FlsSetValue` `FlsGetValue` `FlsAlloc` `HeapAlloc` `HeapFree` `GetStdHandle` `TerminateProcess` `ExitProcess` `GetFileType` `SetStdHandle` `GetConsoleOutputCP` `ReadConsoleW` `GetConsoleMode` `SetFilePointerEx` `GetModuleHandleExW` `FreeLibraryAndExitThread` `ExitThread` `CreateThread` `RtlPcToFileHeader` `RaiseException` `EncodePointer` `LoadLibraryExW` `TlsFree` `TlsSetValue` `TlsGetValue` `TlsAlloc` `InitializeCriticalSectionAndSpinCount` `DeleteCriticalSection` `LeaveCriticalSection` `EnterCriticalSection` `SetLastError` `RtlUnwindEx` `InitializeSListHead` `GetSystemTimeAsFileTime` `GetCurrentProcessId` `QueryPerformanceCounter` `IsProcessorFeaturePresent` `GetStartupInfoW` `SetUnhandledExceptionFilter` `UnhandledExceptionFilter` `IsDebuggerPresent` `RtlVirtualUnwind` `RtlLookupFunctionEntry` `RtlCaptureContext` `CreateProcessW` `GetExitCodeThread` `GetExitCodeProcess` `GetCurrentProcess` `Sleep` `WaitForSingleObject` `CloseHandle` `SetFileAttributesW` `RemoveDirectoryW` `GetFileSize` `GetFileAttributesW` `FindNextFileW` `FindFirstFileW` `FindClose` `FileTimeToLocalFileTime` `SleepConditionVariableSRW` `WakeAllConditionVariable` `AcquireSRWLockExclusive` `ReleaseSRWLockExclusive` `GetShortPathNameW` `DeleteFileW` `CreateFileW` `SearchPathW`
USER32.dll	`EndPaint` `LoadStringW` `GetMonitorInfoW` `MonitorFromWindow` `SystemParametersInfoW` `SetWindowsHookExW` `FindWindowA` `GetDesktopWindow` `SetWindowTextW` `GetKeyState` `MoveWindow` `CreateWindowExW` `PeekMessageW` `SystemParametersInfoA` `DestroyIcon` `CallNextHookEx` `UnhookWindowsHookEx` `SetWindowsHookExA` `GetWindow` `GetWindowThreadProcessId` `GetClassNameA` `EnumChildWindows` `GetParent` `SetWindowLongPtrW` `GetWindowLongPtrW` `GetWindowLongPtrA` `SetWindowLongW` `GetWindowLongW` `FillRect` `DrawFocusRect` `GetSysColor` `MessageBoxW` `GetWindowRect` `GetClientRect` `GetWindowTextW` `InvalidateRect` `wsprintfA` `BeginPaint` `ReleaseDC` `GetDC` `AllowSetForegroundWindow` `SetForegroundWindow` `GetForegroundWindow` `UpdateWindow` `DrawTextW` `GetSystemMetrics` `IsWindowEnabled` `EnableWindow` `GetFocus` `SetFocus` `GetDlgCtrlID` `IsDlgButtonChecked` `GetDlgItemTextW` `GetDlgItem` `EndDialog` `DialogBoxParamW` `CreateDialogParamW` `BringWindowToTop` `SetWindowPos` `ShowWindowAsync` `ShowWindow` `DestroyWindow` `CallWindowProcW` `PostQuitMessage` `AttachThreadInput` `PostMessageW` `DrawFrameControl` `IsDialogMessageW` `FindWindowW` `MessageBeep` `SetDlgItemTextW` `IsWindow` `WaitForInputIdle` `SendMessageW` `DispatchMessageW` `TranslateMessage` `GetMessageW` `wsprintfW`
GDI32.dll	`SetTextColor` `SetROP2` `SetBkMode` `SetBkColor` `SelectObject` `GetTextExtentPoint32W` `GetDeviceCaps` `DeleteObject` `CreateSolidBrush`
ADVAPI32.dll	`RegQueryValueExW` `RegOpenKeyExA` `RegOpenKeyExW` `RegQueryValueExA` `RegCloseKey`
SHELL32.dll	`SHBrowseForFolderW` `ShellExecuteExW` `SHGetSpecialFolderLocation` `SHGetMalloc` `ShellExecuteW` `SHGetPathFromIDListW` `SHGetFileInfoW`
ole32.dll	`CoTaskMemFree`
COMCTL32.dll	`#412` `#17` `#413` `#410`

Delayed Imports

1

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x8a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.60197`
MD5	`81eedc9a29690afd3c8e61c3c0f10fa2 🔍`
SHA1	`8a6db23591ce99b18ebf00ea28dac70096fb5914 🔍`
SHA256	`e10d8b414b0ce9797bf7f8c2ce166d733fdfe53fc5cb2ec500a0e4802c15c617 🔍`
SHA3	`aa5c9331975765dd1130d3c9f8dd4899d88d70793726c2af9a01d8d88da82e13 🔍`

2

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x2e8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.41101`
MD5	`68dec127ad1e2852d55c01ee5d2ae1a2 🔍`
SHA1	`8fb808cda702982d5bb661780c4abdf39f39d130 🔍`
SHA256	`2630f566987c79ae41cb645207efeafd0ee5f9b6458a6701c568628448ba8c3a 🔍`
SHA3	`82927d8ac85f485313655090feeb1dd3ab71e7edf3750e75dc81267b399d0287 🔍`

103

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xb0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.10582`
MD5	`afd7f8229cfc1454b39da98d649a413b 🔍`
SHA1	`82ca89976032df73621a550b07f29d170c195f6b 🔍`
SHA256	`062c87f0dad7868371afdc97a5f45046161bbd5989ffaece1caaad4ce1be0b61 🔍`
SHA3	`317b1411bfc56542b09b2aa9cf6e599f57f595a87587de38ad90e040f2a840b4 🔍`

103 (#2)

Type	`RT_DIALOG`
Language	Japanese - Japan
Codepage	UNKNOWN
Size	`0xb4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.60674`
MD5	`6a335cc7f27dc4063a60e97741515da6 🔍`
SHA1	`6d0531ed114da7a8a22ab6cf51d4af56462d0098 🔍`
SHA256	`831765f696d8adf1da06a4c4d4ef5eaa7e6b4b15cd430dfb8b04612bb6428c10 🔍`
SHA3	`970a24649dd97095da091444c891dbffc1e624ed550e2a2fb167772d13746ce6 🔍`

108

Type	`RT_DIALOG`
Language	Japanese - Japan
Codepage	UNKNOWN
Size	`0x60`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.55603`
MD5	`123494fa5d75f7c1c6384426b542d66d 🔍`
SHA1	`e3fce0313e390a7c06cd1057b91baef30cf68c33 🔍`
SHA256	`cd231fa84e76f0c703f57d8a315adb84b95f4944e3d4d4e84e40d903e5c876fc 🔍`
SHA3	`5df11d98be0fcf7280c9628cf6ac1686a649323f1e915a8545d8dd9202c95c34 🔍`

202

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x250`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.25502`
MD5	`d763f256c9fa7fec11e1e8d743126d3d 🔍`
SHA1	`326857e9b2e87fa60724aa19c2f6e0778eba2b1b 🔍`
SHA256	`f4b71b5c0e90aa0e8a2bed29c3fd513b47f0d79a2d81319aef1b524de2635ddd 🔍`
SHA3	`1cb58cd85f1961c4ca65041a4f7e56c99d62b18a3998e00c223ab2804598be20 🔍`

202 (#2)

Type	`RT_DIALOG`
Language	Japanese - Japan
Codepage	UNKNOWN
Size	`0x196`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.8693`
MD5	`84c6a35a7bb9eb357d23752db5ae79ba 🔍`
SHA1	`4e53237b3874fa85a7a4d70059f828e6faf9502f 🔍`
SHA256	`9d6c5c19eb9220c84a05a8ccc599314e02306d7fb59bf06f79b0282890ec885b 🔍`
SHA3	`3e85ebeda74006d2f7f941e857893e3c5f6680a95d9c442e5cf5e723f0b49dd7 🔍`

2007

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x270`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.41412`
MD5	`ec19ec49b6f124138a9a6ecf55ece1e8 🔍`
SHA1	`e482f38d9f0af386964a7c36d74be8cc8ca0f84f 🔍`
SHA256	`7d7605d294267d91b72940eb10660fcd2c9601a2f6ae59f2a91a53fb4abce5f5 🔍`
SHA3	`a052b949b791e040bc9b89fa7350673d303c9c8c544e7780cd4abe21d6a69a97 🔍`

2007 (#2)

Type	`RT_DIALOG`
Language	Japanese - Japan
Codepage	UNKNOWN
Size	`0x2b6`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.7965`
MD5	`06128f1a54f59ddd448dc3b65bdc096d 🔍`
SHA1	`2e881cac44a1089566cf9a3d4daf2180a85b4b13 🔍`
SHA256	`3f8304671ccca63a27338190ba8849073871eba1adfd6cf7b990631265cacfd0 🔍`
SHA3	`a75fef6bf22aeb25ef03442944d41baddf96be0bde3ef3830f27b8da76375e36 🔍`

2008

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x112`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.24862`
MD5	`aad8a893a594ac6f785a8d06e0e0a5c5 🔍`
SHA1	`42d1c6b0b6ba43e227115e31ed557dd6fa7e5edb 🔍`
SHA256	`61d312931f05dd00b01b98eb2293a22b062b53f165f89fd88b62a479ced2d2e6 🔍`
SHA3	`388b94be7f6b1ed3c797a0082e21e629a51c18e43aa08abc32ee115c1a6b90e0 🔍`

2008 (#2)

Type	`RT_DIALOG`
Language	Japanese - Japan
Codepage	UNKNOWN
Size	`0xe6`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.74004`
MD5	`4a55e26b597dfb899fa48a146572c290 🔍`
SHA1	`be9d5e4e92e8c84a4792cb14dfb428f3a7885519 🔍`
SHA256	`6a60fbf338ac47482604575e8117cf150417d0e9ed1834aea8285dee98b18cbe 🔍`
SHA3	`afaaec308f0430b0c43c621d0411f1e89a98a3af03e4b878824d5402e5107be9 🔍`

1 (#2)

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.04067`
MD5	`4e68afb36d0e4d860a022fe50de2bc02 🔍`
SHA1	`3bbad54c7f8a39288ecdc43002cedebafec8e8b0 🔍`
SHA256	`ba85bb6ef305c139e09829a5db6ef63b976f4fe5a672186e6930420a6f570c69 🔍`
SHA3	`3c1089fbee6115c06e8d96cb50cca222169089a65a62863932cb6cceb0f4582c 🔍`

1 (#3)

Type	`RT_STRING`
Language	Japanese - Japan
Codepage	UNKNOWN
Size	`0xce`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.44947`
MD5	`cc3f3dcdd4df5ed3a4a4207a860f33f0 🔍`
SHA1	`133afc94d323cef4f880b408dbd47d32ecbeaded 🔍`
SHA256	`df4af22696ac1f5f461c8b5f03e1c5ff1c20d8c3ccb589cbb772c9373e940a48 🔍`
SHA3	`8513a824c11f24a071e8ff1316df8240c5fb6ec1e4ecc486ed29a691871bdbd5 🔍`

2 (#2)

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x278`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.39086`
MD5	`6d9ecfdb19d162692ddf40f2c16ad54d 🔍`
SHA1	`170b709c8a9ad6127c51ba1d2a2f127503409387 🔍`
SHA256	`d842264a9548ed515d293eada72e94bd22dc125ac3731e490d036ccb84d09be4 🔍`
SHA3	`944e0f17489a06496de711a47caf06684a29d89115d6a2d5b885a5b39495fac8 🔍`

2 (#3)

Type	`RT_STRING`
Language	Japanese - Japan
Codepage	UNKNOWN
Size	`0x226`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.92957`
MD5	`fe16716fc4c4a0bd02159247552fb79e 🔍`
SHA1	`d497e1afe91c561f47289c3952ee2cfe188e4438 🔍`
SHA256	`d04fee2544f5b85f74ea8fea7339e2f7c7f1485dc5928f477a9ce6371964d7d2 🔍`
SHA3	`8d4940298be298787ddc6511749326ba111b2e92abde44b8b18241308095482b 🔍`

200

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.81924`
Detected Filetype	Icon file
MD5	`cbee427fa121aba9b9b265ff05de5383 🔍`
SHA1	`24fcae33001c8e0f5ec795c6edf076a69d59589f 🔍`
SHA256	`494e4fd717fa1ee0c5c7bb3b4e28fdab4b7f6e95b4f9865f5ab86f03f62ae62c 🔍`
SHA3	`a3fa35d56632275ba55716a4964f02031270f61f06a903fc460ac2dd6bebde85 🔍`

205

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.22322`
Detected Filetype	Icon file
MD5	`e113b50b534c1cf282bd8b50aa427dfe 🔍`
SHA1	`65f4cefce100e60fb5f37ee84f6c6079d8925964 🔍`
SHA256	`70c44df2204ba02cef387313aed59a095724ba4b8e0213b68e41418b1236e140 🔍`
SHA3	`889cd611ad8ce301ece0cff36f29c125c2350dba0106a153bf46ba8007f345cf 🔍`

1 (#4)

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x5cc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.46075`
MD5	`cecebdfcabc52f25aa1b191fb21ee8fb 🔍`
SHA1	`3bbf4728f51dfb109b636e6a3b63b55b89f9a0c4 🔍`
SHA256	`670a43b4a4c029eedeb87dfa67da94d5e85e40b1a46335ac189b4fcf84e33820 🔍`
SHA3	`313138eb9f4c843d54f66d08ca58cea5c24d6c7df860e40b198c12b05cdfb3bd 🔍`

1 (#5)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x63c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.3838`
MD5	`22ad6a32d4b626bd9912ebbe01e1b713 🔍`
SHA1	`422529a9aa64bcf4c7aea6f24b33f99da6e93810 🔍`
SHA256	`79ac704faa9b11d1293f3a28549467bd0357348175b03263f4029193e71b1488 🔍`
SHA3	`fe6d38964ff07a67ebdd24b1428b325e30171e4fbd9cac5de065088e0fe80fbd 🔍`

String Table contents

Cannot create a file.
Cannot open arhive.
not supported archive format.
The Folder '%s' does not exist.
Do you want to create it?
Cannot create a folder.
展開先にファイルを作成できません。
書庫を開けません。
対応していない書庫形式です。
'%s'

展開先フォルダは存在しません。
フォルダを作成しますか？
フォルダを作成できません。
%s

invalid filename.(skipped)
Cannot create a folder.
This archive forbids writing.
CRC check error!
%%s Bytes
Modified: %02d, %02d, %04d, %02d:%02d:%02d
Invalid path!
Please select a folder to store the extracted files.
This sfx-module cannot be run in Win32.
This sfx-module cannot be run in Windows 9x.
%s

不正なファイル名の展開をスキップします。
展開先フォルダを作成できません。
CRC チェックエラー

'%s'
はファイルが改竄されたか、ファイルが破損しています。
配布ファイルの場合にはファイルの入手元から再入手してください。
%%s バイト
%04d年%02d月%02d日 ?曜日、%02d:%02d:%02d
格納パス情報がおかしいです。
解凍先のフォルダを指定してください。
このセットアップモジュールは Windows 64ビット用です。
このセットアップモジュールは Windows 9x 環境では動作しません。

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	10.1.0.0
ProductVersion	10.0.5.2
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT` `VOS_NT_WINDOWS32` `VOS_WINCE` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments	https://www.ponsoftware.com/en/
CompanyName	pon software
FileDescription	Explzh Windows x64 EN
FileVersion (#2)	10.01
InternalName	deccab64W
LegalCopyright	Copyright (c) 1996-2026 by pon software
OriginalFilename	deccab64W.exe
ProductName	decode cab unicode version (x64)
ProductVersion (#2)	10.05.2

Resource LangID	UNKNOWN

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2025-Sep-30 23:55:36
Version	`0.0`
SizeofData	`972`
AddressOfRawData	`0x1fc98`
PointerToRawData	`0x1f098`

TLS Callbacks

StartAddressOfRawData	`0x1400200b0`
EndAddressOfRawData	`0x1400200b8`
AddressOfIndex	`0x140025e08`
AddressOfCallbacks	`0x140017808`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_4BYTES`
Callbacks	`(EMPTY)`

Load Configuration

Size	`0x140`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x1400230c0`

RICH Header

XOR Key	`0x7c66f6d0`
Unmarked objects	`0`
C++ objects (33140)	`150`
C objects (33140)	`12`
ASM objects (33140)	`8`
ASM objects (35207)	`9`
C objects (35207)	`18`
C++ objects (35207)	`42`
Imports (33140)	`15`
Total imports	`248`
C objects (35217)	`1`
C++ objects (35217)	`6`
Resource objects (35217)	`1`
Linker (35217)	`1`

Errors

Leave a comment

No comments yet.