Manalyze report for eca23c361948fee5dc7667c8fb437d63818c0631e5299cf50325e22c5307cb81

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	1978-Sep-24 10:10:54
Detected languages	English - United States Spanish - Spain (International sort)
Debug artifacts	wextract.pdb
CompanyName	Microsoft Corporation
FileDescription	Archivo autoextractor de archivos CAB de Win32
FileVersion	`11.00.26100.7306 (WinBuild.160101.0800)`
InternalName	Wextract
LegalCopyright	Â© Microsoft Corporation. Todos los derechos reservados.
OriginalFilename	WEXTRACT.EXE .MUI
ProductName	Internet Explorer
ProductVersion	`11.00.26100.7306`

Plugin Output

Suspicious	Strings found in the binary may indicate undesirable behavior:	`Contains references to system / monitoring tools: rundll32.exe` `May have dropper capabilities: CurrentVersion\Run` `Contains domain names: Command.com`
Suspicious	The PE is possibly packed.	`Unusual section name found: fothk`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: LoadLibraryA GetProcAddress LoadLibraryExW LoadLibraryExA` `Can access the registry: RegDeleteValueA RegOpenKeyExA RegQueryInfoKeyA RegSetValueExA RegCreateKeyExA RegQueryValueExA RegCloseKey` `Possibly launches other programs: CreateProcessA` `Can create temporary files: GetTempPathA CreateFileA` `Functions related to the privilege level: OpenProcessToken AdjustTokenPrivileges` `Enumerates local disk drives: GetDriveTypeA GetVolumeInformationA` `Can shut the system down or lock the screen: ExitWindowsEx`
Malicious	The PE header may have been manually modified.	`Resource CABINET detected as a CAB Installer file.` `The resource timestamps differ from the PE header: 1982-May-27 10:10:50`
Suspicious	VirusTotal score: 1/64 (Scanned on 2026-09-07 10:00:58)	`DrWeb: Trojan.Siggen32.40494`

Hashes

MD5	`9ed7dc40f8797eb5bc94e4a7e278ffa1` 🔍
SHA1	`1f50d6e65ae50faf7f8dd02b216836f42be791b6` 🔍
SHA256	`eca23c361948fee5dc7667c8fb437d63818c0631e5299cf50325e22c5307cb81` 🔍
SHA3	`8363c053dfadf9baa9d89a847f1c1b026752b4ed95a9bc6bf5de8bc115806adc` 🔍
SSDeep	`3072:rRLCJxDxQxsO8lM51u5GWp1icKAArDZz4N9GhbkrNEkieimXw:wXDxQr0p0yN90QEH` 🔍
Imports Hash	`9da7080b9b697496fd4f41997e8bd436` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0xf8`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`7`
TimeDateStamp	1978-Sep-24 10:10:54
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0xa000`
SizeOfInitializedData	`0x25000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000000001300 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x1000`
OperatingSystemVersion	`A.0`
ImageVersion	`A.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x31000`
SizeOfHeaders	`0x1000`
Checksum	`0x372d0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_GUARD_CF` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x80000`
SizeofStackCommit	`0x2000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`6ce0ff0d897b774a86622da7d6479d50 🔍`
SHA1	`30bde7b70a2e785bae31afaf9265bb8712997fa6 🔍`
SHA256	`519dbb7328808c6ed1ff8ac2efc9fa0199a61420787d7641dddab21a626e8ab3 🔍`
SHA3	`15343458879bccdaae1658c810ff4174208b75db2922d49be22290a434572fdb 🔍`
VirtualSize	`0x8cb0`
VirtualAddress	`0x1000`
SizeOfRawData	`0x9000`
PointerToRawData	`0x1000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.06437`

fothk

MD5	`3e0748234244ec6a7d0e6ac9f84c6dfd 🔍`
SHA1	`2d5278160f8189e52660e4e51e24a56ba0b37573 🔍`
SHA256	`2b620d3d8efff5854e3a98324d0331e885cb5d169143a84561f8a335ce050b09 🔍`
SHA3	`c969875c6a8894db1bc501771ae5d987976a674a8ca85fc8fe337aa62d16281a 🔍`
VirtualSize	`0x1000`
VirtualAddress	`0xa000`
SizeOfRawData	`0x1000`
PointerToRawData	`0xa000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`0.0159202`

.rdata

MD5	`799b00a33bc7da9d6281e446ab019d20 🔍`
SHA1	`ca7416961b3e3a02cfc8d59db707f05fbac55702 🔍`
SHA256	`6a63b1d29ffa79ecb191e6079ef282ef192b1131f09a2396d0887fe3d89072b0 🔍`
SHA3	`110c39e95de1fada7872000e9be95982cf4637d0960d82039fda724daea6618c 🔍`
VirtualSize	`0x2938`
VirtualAddress	`0xb000`
SizeOfRawData	`0x3000`
PointerToRawData	`0xb000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.32768`

.data

MD5	`158424ed40b5e3daf92c419328534714 🔍`
SHA1	`4cd59c2d63a97e186ee2447ab7043f8dfddaf6b2 🔍`
SHA256	`75d557870afe06be5b3decb08dc53508088eb496fc5a48cb4a57eb3cf7322a6e 🔍`
SHA3	`af252d6521eb79057869e494cd1d7d74891abd278a15f9cc2c3035b432ee10a0 🔍`
VirtualSize	`0x1ff0`
VirtualAddress	`0xe000`
SizeOfRawData	`0x1000`
PointerToRawData	`0xe000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`1.05058`

.pdata

MD5	`d7062ca56e9339a816ce3b7ef0e31bc9 🔍`
SHA1	`4526b1f2229c3f4590a976992aad86bc79a5f497 🔍`
SHA256	`ae70fc5d897d47bb3b23428bb982229a9c199690f9d1346b628e4e3004d3ea2a 🔍`
SHA3	`f5963abf91d05f8e792b126dbe9806bc0731ae65dc8caa972fe60304fb64c711 🔍`
VirtualSize	`0x4b0`
VirtualAddress	`0x10000`
SizeOfRawData	`0x1000`
PointerToRawData	`0xf000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`1.61166`

.rsrc

MD5	`f552c99c95a2e5ea29cedf399d9ed506 🔍`
SHA1	`aaccbc451d300145bf83a97074d9bb314c7311ca 🔍`
SHA256	`7405f99172bb56badf3522fb25613498fd8f74b17825de8caf42867a8749097d 🔍`
SHA3	`827db5da34ec643b4daa66f17bd2856f716949080dd707ee15c64819328739fb 🔍`
VirtualSize	`0x1f000`
VirtualAddress	`0x11000`
SizeOfRawData	`0x1f000`
PointerToRawData	`0x10000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.80823`

.reloc

MD5	`df82dc24c3c2559e6dd511f364fef34b 🔍`
SHA1	`3a623b63da47b03d7c045ef8c141efdaf387f452 🔍`
SHA256	`32fb9527caf574a16c7f50215bde49da56d6b005fb660df2af990b339d2803d3 🔍`
SHA3	`5a0a6881a452887f3805151541d9776d135c8186880f501e630891310eafc332 🔍`
VirtualSize	`0xac`
VirtualAddress	`0x30000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x2f000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.237395`

Imports

ADVAPI32.dll	`GetTokenInformation` `RegDeleteValueA` `RegOpenKeyExA` `RegQueryInfoKeyA` `FreeSid` `OpenProcessToken` `RegSetValueExA` `RegCreateKeyExA` `LookupPrivilegeValueA` `AllocateAndInitializeSid` `RegQueryValueExA` `EqualSid` `RegCloseKey` `AdjustTokenPrivileges` `EventUnregister` `EventRegister` `EventWriteTransfer`
KERNEL32.dll	`_lopen` `_llseek` `CompareStringA` `GetLastError` `GetFileAttributesA` `GetSystemDirectoryA` `LoadLibraryA` `DeleteFileA` `GlobalAlloc` `GlobalFree` `CloseHandle` `WritePrivateProfileStringA` `IsDBCSLeadByte` `GetWindowsDirectoryA` `SetFileAttributesA` `GetProcAddress` `GlobalLock` `LocalFree` `RemoveDirectoryA` `FreeLibrary` `_lclose` `CreateDirectoryA` `GetPrivateProfileIntA` `GetPrivateProfileStringA` `GlobalUnlock` `ReadFile` `SizeofResource` `WriteFile` `GetModuleHandleExW` `GetDriveTypeA` `GetShortPathNameA` `lstrcmpA` `SetFilePointer` `FindResourceA` `CreateMutexA` `GetVolumeInformationA` `WaitForSingleObject` `GetCurrentDirectoryA` `FreeResource` `ExpandEnvironmentStringsA` `SetCurrentDirectoryA` `GetTempPathA` `LocalFileTimeToFileTime` `CreateFileA` `SetEvent` `TerminateThread` `GetVersionExA` `LockResource` `GetSystemInfo` `CreateThread` `ResetEvent` `LoadResource` `ExitProcess` `GetModuleHandleW` `CreateProcessA` `FormatMessageA` `GetTempFileNameA` `DosDateTimeToFileTime` `CreateEventA` `LoadLibraryExW` `GetExitCodeProcess` `MulDiv` `LocalAlloc` `SetFileTime` `GetDiskFreeSpaceA` `EnumResourceLanguagesA` `GetTickCount` `GetSystemTimeAsFileTime` `GetCurrentThreadId` `GetCurrentProcessId` `QueryPerformanceCounter` `TerminateProcess` `SetUnhandledExceptionFilter` `UnhandledExceptionFilter` `RtlVirtualUnwind` `RtlLookupFunctionEntry` `RtlCaptureContext` `GetStartupInfoW` `Sleep` `FindClose` `FindNextFileA` `GetCurrentProcess` `FindFirstFileA` `GetVersion` `GetModuleFileNameA` `LoadLibraryExA`
GDI32.dll	`GetDeviceCaps`
USER32.dll	`MsgWaitForMultipleObjects` `SetWindowPos` `GetDC` `GetWindowRect` `DispatchMessageA` `ShowWindow` `DialogBoxIndirectParamA` `GetDesktopWindow` `CharUpperA` `SetDlgItemTextA` `ExitWindowsEx` `MessageBeep` `EndDialog` `CharPrevA` `LoadStringA` `CharNextA` `EnableWindow` `ReleaseDC` `SetForegroundWindow` `SetWindowLongPtrA` `GetWindowLongPtrA` `PeekMessageA` `GetDlgItem` `SendMessageA` `SendDlgItemMessageA` `MessageBoxA` `SetWindowTextA` `CallWindowProcA` `GetSystemMetrics` `GetDlgItemTextA`
msvcrt.dll	`_fmode` `_commode` `?terminate@@YAXXZ` `_acmdln` `memset` `__C_specific_handler` `_initterm` `__setusermatherr` `_ismbblead` `_cexit` `_exit` `exit` `__set_app_type` `__getmainargs` `_amsg_exit` `_XcptFilter` `memcpy_s` `_vsnprintf` `memcpy`
COMCTL32.dll	`#17`
Cabinet.dll	`#20` `#23` `#22` `#21`
VERSION.dll	`VerQueryValueA` `GetFileVersionInfoSizeA` `GetFileVersionInfoA`

Delayed Imports

3001

Type	`AVI`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x2e1a`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.52241`
Detected Filetype	AVI Resource Interchange File Format
Detected Filetype (#2)	Windows animated cursor
MD5	`f9035cf32b756fd6a452e9fdfd4a5dd9 🔍`
SHA1	`6912e88a3ee4d2c98ca69772cec564c6334fd9c4 🔍`
SHA256	`3bd1d253c90f7e82dc70dc1e4b869cc2e5e154e6b4079be93837e4a6c68044c0 🔍`
SHA3	`8cd00290363b6d3e609845f2e5828f3e2adaf35c4a97561bcf427bbd054401a6 🔍`

1

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x668`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.0699`
MD5	`1119ea8ccf13471c5cb7981c00112bd1 🔍`
SHA1	`5311a1759e6269a3cb555795379241550dc70baf 🔍`
SHA256	`689e072bec88a4f92eeadc6ada816cbcbedc4de9e76b27c38183f820bcc11e04 🔍`
SHA3	`2829f8159ff036d9f6a40b9fad5416e1c3458ad61e83e0139a92c36620b75e99 🔍`

2

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x2e8`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.15864`
MD5	`46db957427f76e2faed509fa0f083815 🔍`
SHA1	`9f062ff76b99cdbbdbc040adca1ec94fd7e0ebf8 🔍`
SHA256	`3032bc8ec0d2b10c731ce65338958a69401a6ea5c13bf43236be1cadfaaa796f 🔍`
SHA3	`d64af304edb5ed919be1e617b3194ad9d40d97f07942bc10ffe3529713358797 🔍`

3

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x1e8`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.07737`
MD5	`53892c6e1aa6882a0e541da89c8bed9b 🔍`
SHA1	`74093737e0c001a618623b84ae2a7c0ae105870b 🔍`
SHA256	`c6f49cc3ab503756f46a301d8543d1ed4db7e037b4df86407d24de6542a9b241 🔍`
SHA3	`28c5ddd935a6f3e2a9112068eb23447d12c5b75a05fabd52aba335a36d3cd694 🔍`

4

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x128`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.50949`
MD5	`77c3fdd8ab3a5023f948ef9dc0a75588 🔍`
SHA1	`3c10786225e3af4724ad179081ab67b7bdddb002 🔍`
SHA256	`472af970994f80d1368af62de093894cdef4e2ea76f661eabc49e4f7e41a5860 🔍`
SHA3	`c7ef5cf31e71ee1211fe1b9ec1aab03e0cc3d9c88d358837f2bf4982d8e83469 🔍`

5

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xea8`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`5.56662`
MD5	`9291ba83d585b4e27b489e5e6c0b9e6d 🔍`
SHA1	`6a1823c83ba0ee8a9088c2d96c951ff7b0aad0ed 🔍`
SHA256	`828bf50bd62a7fca6f0ee8d03970215d1550d31a4f9382b1608b76742ef8aa95 🔍`
SHA3	`2201c2224048249b39ff38a95ea21061ad85214a9912fb00474b96082ce81112 🔍`

6

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x8a8`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`5.94251`
MD5	`dd6416457884b08fb3b97e48cd8b296d 🔍`
SHA1	`460407ba589b388b7095dac3cba861d07d0bc32d 🔍`
SHA256	`5a2bcb6347493ac6873330f55603ae586a8b21ab1a7137f7b326b6e682827892 🔍`
SHA3	`ff855ab2a14ba17cb2d90b6bdaee4e2257ee959788fa22e7a62a25a86fe401ec 🔍`

7

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x6c8`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`5.99361`
MD5	`d9189a0ae5a4ce576b2cd6a3aee869d2 🔍`
SHA1	`546acefecec2664dafd9c62b84211d32c5c25ddc 🔍`
SHA256	`563e2c3128746f769950f3ccb9267525888c91c6437692a719541acd71afad5c 🔍`
SHA3	`4589be5962a881128d7157d9d319ba7ed7c15b7a5c322de0ce2ec6b795bf4191 🔍`

8

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x568`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.37828`
MD5	`ff4b77125d8d6dd0bb13557a6e043d70 🔍`
SHA1	`4f401d2b2fdd25337757c115b0c3d16850ee90df 🔍`
SHA256	`4429f0eabd35418cb2022378e73ee2e766841d35aca4a8b7369359d1341304fe 🔍`
SHA3	`915504672b75c8aa786fa9065ade3aaccb2a03a46fe59b92c0f65e502ae43196 🔍`

9

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xd9d2`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`7.98515`
Detected Filetype	PNG graphic file
MD5	`d58effc60f9809303be37c9da12ec938 🔍`
SHA1	`5f5d1459f715b6d7ac0c9f5e6c86112d02c611a8 🔍`
SHA256	`f169eed8248d8f9efd20dd716790f2b3bb0547687546811b4137be21b5c63b71 🔍`
SHA3	`927f706c7c34a5b18477f72fb37fca3487c206f65f015b40463be7083a461c7b 🔍`

10

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x25a8`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`5.33023`
MD5	`6f18b3932aca200c19eda2c0a8389fe2 🔍`
SHA1	`454e38e44e9570502d4134818f983e6b3514c595 🔍`
SHA256	`ebfd8bce706bc334ada961a2489fb266101c8960e05bd20fbf2e8ee66af64060 🔍`
SHA3	`2f401e2395d28434ceed9c91f17de1595dcfd794e537304dd0c8867ea9c4be60 🔍`

11

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x10a8`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`5.61313`
MD5	`56e519ddae3afada70d9d5afc3e20414 🔍`
SHA1	`584a6b17a1a2174921a185cc123bb8e609f0f0ba 🔍`
SHA256	`fa6b2f5422746f7377a3ed24f2b108f04f963caa0cc096c51cb49ac74266b107 🔍`
SHA3	`1896fe210c328289e0e771e497715e6c92d6e2545625858358002ceb5d1c7ee9 🔍`

12

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x988`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`5.90788`
MD5	`5102430eabaa9f88a657c8a2d9a00547 🔍`
SHA1	`6f202d879a72db4c054632a883f9d3c3d1a28dac 🔍`
SHA256	`6f44d16ede32521ef7336056baff805a3305f225430de3bd01203ff0625c23d1 🔍`
SHA3	`5e8efdae85f063f0502553f6fe4fd93d6882663a77b5513c8e06b5e23f1f99a0 🔍`

13

Type	`RT_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x468`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`4.85349`
MD5	`6948b3a73688c3ea8fbd7f533a579e25 🔍`
SHA1	`931d017e52aa63fec9f1401436e07e3df2573e1b 🔍`
SHA256	`8561da4d70ae051d1f146859ba0b50467258730daae8af73726e0700c034b737 🔍`
SHA3	`2e6fc86970dfb7e8d036900a05d4c89591b3ab0a597a5074ea56489aa68d3414 🔍`

2001

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x2f2`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.25575`
MD5	`733ab5b92105575b10e4716e64f874a7 🔍`
SHA1	`84177368dd4658cebdc991269a7584907f5dcc57 🔍`
SHA256	`ea6588cf6a9eaa2daaeace3bcd90ad19cfaca72505c0cbba9f10a0db2923d888 🔍`
SHA3	`7ed0210cc660b29977851bb04b3cf3c27eb4ea9953117e019b774d7b974ec128 🔍`

2001 (#2)

Type	`RT_DIALOG`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x326`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.26979`
MD5	`6438f15bb31e11028a2d01addd52feed 🔍`
SHA1	`dc4a204817dc4f1f7a2e78472be7e6a5d880a7e4 🔍`
SHA256	`6a1aa1a76ddd30cd893b7649a3603a470c32cbbeb67145e09bc2b6f0ad6801b9 🔍`
SHA3	`05027bcb4baef0afcad23ac09bae80ec4a85ce77abae3e1b6e72978090ad188d 🔍`

2002

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x1b0`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.16025`
MD5	`57c16fb56b83819ba4b6267c6dddb013 🔍`
SHA1	`1477b9eb543fbd469c392064e4147d47e74dbb46 🔍`
SHA256	`1abfad902cece4ff79c75ee25d79fe254e3c6af72c161295c7ba006e56cd74b1 🔍`
SHA3	`941c199bcd737811c390814980c5ac4b546ef6538677f9599de9e7afed0bcb46 🔍`

2002 (#2)

Type	`RT_DIALOG`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x1ac`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.18383`
MD5	`98b8d2187d956a2c175bcc54ad796a4a 🔍`
SHA1	`77a6bf54950c98b2dd32e033bc0f06ffa04717f3 🔍`
SHA256	`bf9f1d77dc6ab964d6f1f1c2819b7f0611ec327c188bc17544c91377fb88ea7f 🔍`
SHA3	`dc160673b06f14ff55812fc7acb73a4ac5c2b47b7196d161a8a25e9610141478 🔍`

2003

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x166`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.99713`
MD5	`dc468a007b317c7439d83a5985cea5a7 🔍`
SHA1	`3d89aacc7eebd8c046e2f0e95f66b2b54d577568 🔍`
SHA256	`ec8a0548b6bb169afe513ec8a366e746255c3556fe66c95067756fb3ec8b895b 🔍`
SHA3	`505917a9fccb89b46551e12f0ced60758a952248cd6f0f7c69967e2e6eabea8d 🔍`

2003 (#2)

Type	`RT_DIALOG`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x16a`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.98895`
MD5	`df619aab23fc3b72d23ee67d960665fe 🔍`
SHA1	`708b817ca9ed62eefca6c00d0f32eb0d9a44c505 🔍`
SHA256	`156732dd7ec88eeac05947e0f48c472f91a4c4bb20409f551da75dec9a89acf2 🔍`
SHA3	`152da6156e6ef7a67fa7084abf7938ca1bce6efd405c08f1ad87c7bb67c14a3f 🔍`

2004

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x1c0`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.11992`
MD5	`a5187dc5894162b201fe774046408732 🔍`
SHA1	`81611f2aa32cfc8b03f00856f319870e97554b7d 🔍`
SHA256	`a3565ee9a8656bbdf37e3a50d14d954280cba4895576687a261200aefa1b5b39 🔍`
SHA3	`f9fe30ec54d6b149fa57e2cff2eeece6354e12fb7903c85ec221418ac11e94d0 🔍`

2004 (#2)

Type	`RT_DIALOG`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x1b8`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.1265`
MD5	`428bbe3c59b7e8da46156af6bfada686 🔍`
SHA1	`4d22c3fe6e33e8c50a9fe0f241d16a78c907dfef 🔍`
SHA256	`ad28ea65628190c878fdff3207816f66cf62ce4bdfba5fe57bd5864aed0c16a7 🔍`
SHA3	`1178cb0521f597727e9714cfc3feb720661d39c387914c40fa7871915530f902 🔍`

2005

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x130`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.97326`
MD5	`ecc5f63aedee66cebcda9ed8fcb3e9f7 🔍`
SHA1	`60fadb22b7c1ac3638b8a4d12e2cbe174941ac71 🔍`
SHA256	`238d6c2e50312c555901a61e92afad3c7c6b42b9abd5acdda68658c2e2b48678 🔍`
SHA3	`b0eb2e4784dc0ae082c941596324510ddcdcd045da590b9db81d1c41f08f02da 🔍`

2005 (#2)

Type	`RT_DIALOG`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x128`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.00928`
MD5	`e54b3989856626af68eb21c50224f417 🔍`
SHA1	`4f769ae8ac2fe0d5b8acea6167be2f8da597ad94 🔍`
SHA256	`8577bfbb61436c2b8f63ae07e89aba368b0e8ab08400e984b8636e6934e9537b 🔍`
SHA3	`7668736820a036bb64826f28829a84d50c14e032be5ba1f12fc9bdb1f8b778e0 🔍`

2006

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x120`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.97672`
MD5	`42e1aa8919d27f02bcfc6981dbe5248e 🔍`
SHA1	`ec432b9979fad89557dd0b0ff1de774750f03f76 🔍`
SHA256	`cc21e9115c14c21af11786ff781dcf25c81beda500acf4966d0ddc7260610b06 🔍`
SHA3	`a11e5a0307464c1c66d9615a47d5568ab6bcd39c6bd6858842ad3c535272a129 🔍`

2006 (#2)

Type	`RT_DIALOG`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x11a`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.00185`
MD5	`ed4cecfdd8b66bf5b2579fc645f3671f 🔍`
SHA1	`669c42e3b29853532ed30dd07ca58fa22dfe6435 🔍`
SHA256	`e2ee22449b57f47823b9c4e92db5bbba0595ffe5161dec06b874025a607c6dfa 🔍`
SHA3	`47a669d0096d947c249723b55a57769545bf2c19466f76c058206f598a9971af 🔍`

63

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x8c`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.48958`
MD5	`ad0fe039aecc9c8af6f573923f182a0a 🔍`
SHA1	`b4fd492a37127d31fc36b7bd07084cc2f1ae18a1 🔍`
SHA256	`29b228ae95784d37b8729fe88e3bf1346c4b1339231dd1e9f702fab0654c5b1f 🔍`
SHA3	`7a67b4664ab18841c125d33dbe110fe774b16f91d1471094307c0ac35be5d8a8 🔍`

63 (#2)

Type	`RT_STRING`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x8a`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.63099`
MD5	`097d8aadfd882ec43306eaf308d2db71 🔍`
SHA1	`bf30f144c3c579a7b8d54b7cbbae497ce975afe9 🔍`
SHA256	`64a4066ee6c669b29225abb747260e615cd4ca7e613f61ec7c8b832a46a4afb3 🔍`
SHA3	`8708de317180eb41d49bfff102743b12c8504df6ad162cad807b532fb033264d 🔍`

76

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x520`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.2674`
MD5	`0f3f664bff00f8c4a1b42349d2956963 🔍`
SHA1	`d0ec056db75705bd79b7ebf1767c91dce955d79a 🔍`
SHA256	`7cc882dbb9f1315968f31bf40b57a535ff468271e253575752e03cb4aaa25f0c 🔍`
SHA3	`a81b1ab97bb98d4fb6d1619bf8bdee495b3176693e77305e438805563e952b91 🔍`

76 (#2)

Type	`RT_STRING`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x686`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.14941`
MD5	`d43855479ef528b7ef7ff4a417f3c332 🔍`
SHA1	`8432a091230826d1e1f8a5b74ffe623ff9d5d9da 🔍`
SHA256	`fb98c49cfe51323374f6c46d7dd858d61bbce26d2c873402c56b60ec5509561c 🔍`
SHA3	`677326ea03b81ef60381482a96b2448077cadbe1dccedb26f7c31920146c3121 🔍`

77

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x5cc`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.29977`
MD5	`5f3ef55a113dc5f00ffc647e8be50df1 🔍`
SHA1	`cf04ac59ce78d6b2ffde0990ef76cf40ee1c439b 🔍`
SHA256	`3f715c8970d240cb57ba8ae8914ea8385b42728ffd48a3916493422a80cc3ed4 🔍`
SHA3	`fdabc44cd05ee45599b1e28ee3ca323cd6768db6606bffe95ceb6025b31b4d2f 🔍`

77 (#2)

Type	`RT_STRING`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x6ce`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.2367`
MD5	`7962f4b7f6976904df6665ec028091c4 🔍`
SHA1	`3cefe316859fd849983dfc7c3f89b23af7ae97ba 🔍`
SHA256	`8c122cdcfaa1a4c1f8136d959064ae6ecb91417da4b90fa849455cad396d3909 🔍`
SHA3	`92b3109360fa42b124f550709394bbe5858e4280a4a788ec655f55fa99f8f53f 🔍`

80

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x4b0`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.27174`
MD5	`1f268a77ca8f853ff0c410e622706bef 🔍`
SHA1	`75afb11daf446704dddb5ef5fe39b2009aecf01d 🔍`
SHA256	`39023f15fbabf4be02e0d84a76c363003374b11076406f84cd8f92e49aecd3ba 🔍`
SHA3	`5e684d700849b8552f5449c5869807ce32caa8ae657695824e4a41be4a2ee55d 🔍`

80 (#2)

Type	`RT_STRING`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x5ca`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.19725`
MD5	`a8ed691e4c8656a4b8887edc0492f9b9 🔍`
SHA1	`6fc642df0dbd1b914951556b7f1019ee93d89d17 🔍`
SHA256	`48cce45b226f1e744047940cb286d19d8a7342e6e7506fdfa15864f7fc6872e1 🔍`
SHA3	`cdcf81e3d3e5e2205d149504f2803fcb757aea4a8476378bc9cb6235fdef8f07 🔍`

83

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x44a`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.2912`
MD5	`586fc633195baca29ef84b9271b42689 🔍`
SHA1	`69d5712401f0ca87f897c68f3a07ee9e01de8a25 🔍`
SHA256	`c1a5490b8a26165048de894aacdcd25e09cec0c4aebc5ff1d435f2cc4757118b 🔍`
SHA3	`04492be8d1f2fd83ad6633ec69825c302118f6039586e9f2bd804e00fdcc0913 🔍`

83 (#2)

Type	`RT_STRING`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x4e6`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.23066`
MD5	`925c5474896c87fc4ad217b07e9ab3be 🔍`
SHA1	`730b8fcc72ed4246bfc1f2b71189127bc3426a48 🔍`
SHA256	`b662cc5544eb11576554f2874bc93f122c88fc3fd47ce3e5f5bc4d2febc7df09 🔍`
SHA3	`1b3457307532dff96eb8e3bce8ef8b78b6618c39f1102258c20a33dffdeb1f4f 🔍`

85

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x3ce`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.13591`
MD5	`949714f4f3946ad108bb0817d170c459 🔍`
SHA1	`01b3524390968f27c27943e9f06f145b8527f8de 🔍`
SHA256	`59d8ad57a3629edd20c7b298a6e3604eeb95dfc7c507ad7e329ea0bff7a571ff 🔍`
SHA3	`6447983c227f98b8cd5f4045d58626cd5f965fa8e9cb99c33a68a58136ceb655 🔍`

85 (#2)

Type	`RT_STRING`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x406`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.10951`
MD5	`482a58c46951ce2137b869a27b86dff3 🔍`
SHA1	`2e911930a456870831bc2e184b11e12919a751c9 🔍`
SHA256	`74619929d57156067fbde6f2b46c40137659e680db67c7729b6d9ba728314b00 🔍`
SHA3	`9ba983e538352c87cafbb9d6fddbf27520621d0bd203ec0d785729e3d5cba533 🔍`

ADMQCMD

Type	`RT_RCDATA`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x7`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.80735`
MD5	`527eeaa35a23dd5cac9bddcc2561a457 🔍`
SHA1	`0445b1735fd9797d537d360695940c7e68d25ace 🔍`
SHA256	`eaadcdd05a9a7c7f80d53d758f39e4399749d774b09a8a0165fe7c69ad6d8c3c 🔍`
SHA3	`28c8e1f57de512535bfd686562ef240323f7331b18e71f0506079f0e67e8f89e 🔍`

CABINET

Type	`RT_RCDATA`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x6b0`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`7.80393`
Detected Filetype	CAB Installer file
MD5	`e976a8be36d744478e80586c6eaf3878 🔍`
SHA1	`6c775d3d39467115a6b7827ffd8c1ccd4e8899c5 🔍`
SHA256	`6e7b96387b7c66f277d0825251f55f3472ccef4148dca3a6c3c11b3c4e3c14fa 🔍`
SHA3	`94ed4acfc89b5eca2440d518fb34fa81e836d2aa649a9fcc630b9d4466d08d84 🔍`

EXTRACTOPT

Type	`RT_RCDATA`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x4`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`0.811278`
MD5	`4352d88a78aa39750bf70cd6f27bcaa5 🔍`
SHA1	`3c585604e87f855973731fea83e21fab9392d2fc 🔍`
SHA256	`67abdd721024f0ff4e0b3f4c2fc13bc5bad42d0b7851d456d88d203d15aaa450 🔍`
SHA3	`295cd1698c6ac5bd804a09e50f19f8549475e52db1c6ebd441ed0c7b256e1ddf 🔍`

FILESIZES

Type	`RT_RCDATA`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x24`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`1.58753`
MD5	`f26379ad5f1b46df348c747b147f6018 🔍`
SHA1	`61aa3c5ae93ee00319622b15f4e7e2183bc89761 🔍`
SHA256	`42dbbf35dd6ee5e37842dfdb116a25f9cb0b7d13fcd351058b9529747370e082 🔍`
SHA3	`3ea8ad4531b9819a4ff8480c69e30c77a0f83ef70b4a2742e0998925d6f090bc 🔍`

FINISHMSG

Type	`RT_RCDATA`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x7`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.80735`
MD5	`527eeaa35a23dd5cac9bddcc2561a457 🔍`
SHA1	`0445b1735fd9797d537d360695940c7e68d25ace 🔍`
SHA256	`eaadcdd05a9a7c7f80d53d758f39e4399749d774b09a8a0165fe7c69ad6d8c3c 🔍`
SHA3	`28c8e1f57de512535bfd686562ef240323f7331b18e71f0506079f0e67e8f89e 🔍`

LICENSE

Type	`RT_RCDATA`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x7`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.80735`
MD5	`527eeaa35a23dd5cac9bddcc2561a457 🔍`
SHA1	`0445b1735fd9797d537d360695940c7e68d25ace 🔍`
SHA256	`eaadcdd05a9a7c7f80d53d758f39e4399749d774b09a8a0165fe7c69ad6d8c3c 🔍`
SHA3	`28c8e1f57de512535bfd686562ef240323f7331b18e71f0506079f0e67e8f89e 🔍`

PACKINSTSPACE

Type	`RT_RCDATA`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x4`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`0`
MD5	`f1d3ff8443297732862df21dc4e57262 🔍`
SHA1	`9069ca78e7450a285173431b3e52c5c25299e473 🔍`
SHA256	`df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119 🔍`
SHA3	`8b0a2385d83c8bf7be27e59996f7d881d3bf1fc6606f81ce600b753ad94192a2 🔍`

POSTRUNPROGRAM

Type	`RT_RCDATA`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x7`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.80735`
MD5	`527eeaa35a23dd5cac9bddcc2561a457 🔍`
SHA1	`0445b1735fd9797d537d360695940c7e68d25ace 🔍`
SHA256	`eaadcdd05a9a7c7f80d53d758f39e4399749d774b09a8a0165fe7c69ad6d8c3c 🔍`
SHA3	`28c8e1f57de512535bfd686562ef240323f7331b18e71f0506079f0e67e8f89e 🔍`

REBOOT

Type	`RT_RCDATA`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x4`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`0`
MD5	`f1d3ff8443297732862df21dc4e57262 🔍`
SHA1	`9069ca78e7450a285173431b3e52c5c25299e473 🔍`
SHA256	`df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119 🔍`
SHA3	`8b0a2385d83c8bf7be27e59996f7d881d3bf1fc6606f81ce600b753ad94192a2 🔍`

RUNPROGRAM

Type	`RT_RCDATA`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x19`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.85947`
MD5	`565b32b577fcd12f8002395a6dde40e3 🔍`
SHA1	`8193a2e58d395852f49977fcfb02b412e93e4727 🔍`
SHA256	`88b5f06f022638a399fe6bfc3fb8e16ec52f5a137bd15ebb71aa3b750c8aaae8 🔍`
SHA3	`989750752d78a55a196bdb45e314e867ce130b01c7def4c89afcc451d5fdd743 🔍`

SHOWWINDOW

Type	`RT_RCDATA`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x4`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`0`
MD5	`f1d3ff8443297732862df21dc4e57262 🔍`
SHA1	`9069ca78e7450a285173431b3e52c5c25299e473 🔍`
SHA256	`df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119 🔍`
SHA3	`8b0a2385d83c8bf7be27e59996f7d881d3bf1fc6606f81ce600b753ad94192a2 🔍`

TITLE

Type	`RT_RCDATA`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0xe`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.09307`
MD5	`9c348e1267a140286400997eb8695100 🔍`
SHA1	`098d03de6d28932f6d1a9aede1c2dcf4a886a0ea 🔍`
SHA256	`7d02617633af1f467c8c3e55ecb3c1b49d807236108417a585d56d127800c31d 🔍`
SHA3	`ac7dc14c62c16100d757329ad5d42b19192c316dd0fe927a7ee38ffd440da162 🔍`

UPROMPT

Type	`RT_RCDATA`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x7`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.80735`
MD5	`527eeaa35a23dd5cac9bddcc2561a457 🔍`
SHA1	`0445b1735fd9797d537d360695940c7e68d25ace 🔍`
SHA256	`eaadcdd05a9a7c7f80d53d758f39e4399749d774b09a8a0165fe7c69ad6d8c3c 🔍`
SHA3	`28c8e1f57de512535bfd686562ef240323f7331b18e71f0506079f0e67e8f89e 🔍`

USRQCMD

Type	`RT_RCDATA`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x7`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`2.80735`
MD5	`527eeaa35a23dd5cac9bddcc2561a457 🔍`
SHA1	`0445b1735fd9797d537d360695940c7e68d25ace 🔍`
SHA256	`eaadcdd05a9a7c7f80d53d758f39e4399749d774b09a8a0165fe7c69ad6d8c3c 🔍`
SHA3	`28c8e1f57de512535bfd686562ef240323f7331b18e71f0506079f0e67e8f89e 🔍`

3000

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xbc`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.06903`
Detected Filetype	Icon file
MD5	`fd33ac51d62922419e4891a00f6e6efa 🔍`
SHA1	`8cb942ccc95430628eb8200da35c0a5c8240de84 🔍`
SHA256	`f327fb34dd8f0143903c681df662ae88c1b36483647d54b9ca074aae9b7620e3 🔍`
SHA3	`6752df93dd0adf3e0e172480a7ed20eb5b97bff02646dd17b7eb6880745049c3 🔍`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x408`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.39552`
MD5	`c81e630b98c5d77046d792464f63603f 🔍`
SHA1	`f1c5863b24989b093bd2c472a0f9e1aecf00d230 🔍`
SHA256	`5927d26d0488d0712346a3bd0a9467e9ae44a430ff8c799623337c6859da0a9d 🔍`
SHA3	`8d48828b4e61e0b76e6e67fdb13b91939ada0baa0af6a1f3ba8c66fba0ebf5af 🔍`

1 (#3)

Type	`RT_VERSION`
Language	Spanish - Spain (International sort)
Codepage	Latin 1 / Western European
Size	`0x3f8`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`3.5055`
MD5	`d0c4fbdefca44389722e448d4cbacf25 🔍`
SHA1	`753ba24059bba09a83296628099cc6f617c301bc 🔍`
SHA256	`48553da6230e596f52690025a6b34137bdcb0b65db6891a1aada8f0389dff291 🔍`
SHA3	`9ad10ae4312cc96b2e348095645adc5cdeb4c614594ad20df9da0673c421b401 🔍`

1 (#4)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x7e6`
TimeDateStamp	1982-May-27 10:10:50
Entropy	`5.00142`
MD5	`24a920dd92e3820a7fb081893dbfdc21 🔍`
SHA1	`c107c7e70fcb950a6b489741a9ff95640bf2d1c8 🔍`
SHA256	`ea7dbcb656b43eacb4f691740eaf9f53b79c347bffc0cd8c4f3b8e0e2f3e1a2f 🔍`
SHA3	`0799a889b78379e7e9e5c751426a1924f93f9fcbd28b9eefa11d281be4ca8999 🔍`

String Table contents

Please select a folder to store the extracted files.
%s
Seleccione una carpeta para los archivos extraídos.
%s
Failed to get disk space information from: %s.

System Message: %s.
A required resource cannot be located.
Are you sure you want to cancel?
Unable to retrieve operating system version information.
Memory allocation request failed.
Unable to create extraction thread.
Cabinet is not valid.
Filetable full.
Can not change to destination folder.
Setup could not find a drive with %s KB free disk space to install the program. Please free up some space first and press RETRY or press CANCEL to exit setup.
That folder is invalid. Please make sure the folder exists and is writable.
You must specify a folder with fully qualified pathname or choose Cancel.
Error en la obtención de la información de espacio en: %s.

Mensaje de sistema: %s.
No se puede encontrar uno de los recursos necesarios.
¿Está seguro de que desea cancelar?
No se puede obtener información sobre la versión del sistema operativo.
Error en la solicitud de asignación de memoria.
No se puede crear subproceso de extracción.
El contenedor no es válido.
Tabla de archivos llena.
No se puede cambiar a la carpeta de destino.
El programa de instalación no pudo encontrar una unidad con %s KB de espacio en disco libres para instalar el programa. Libere un poco de espacio primero y presione Reintentar, o presione Cancelar para salir del programa de instalación.
La carpeta no es válida. Asegúrese de que la carpeta existe y se puede escribir en ella.
Debe especificar una carpeta con la ruta completa o elegir Cancelar.
Could not update folder edit box.
Could not load functions required for browser dialog.
Could not load Shell32.dll required for browser dialog.
Error creating process <%s>. Reason: %s
The cluster size in this system is not supported.
A required resource appears to be corrupted.
Windows 95 or Windows NT 4.0 Beta 2 or greater is required for this installation.
Error loading %s
GetProcAddress() failed on function '%s'. Possible reason: incorrect version of advpack.dll being used.
Windows 95 or Windows NT is required to install
Could not create folder '%s'
To install this program, you need %s KB disk space on drive %s. It is recommended that you free up the required disk space before you continue.

Do you still want to continue?
No se pudo actualizar el cuadro de edición de carpeta.
No se pueden cargar las funciones requeridas por el diálogo Examinar.
No se pudo cargar el archivo Shell32.dll, requerido por el cuadro de diálogo del examinador.
Error en la creación del proceso <%s>. Causa: %s
El tamaño de clúster en este sistema no es soportado.
Uno de los recursos necesarios parece estar dañado.
Es necesario Windows 95 o Windows NT 4.0 Beta 2 o posterior para realizar esta instalación.
Error al cargar %s
Error de GetProcAddress() en función "%s". Causa posible: versión incorrecta de advpack.dll.
Es necesario Windows 95 o Windows NT para instalar este producto
No se pudo crear la carpeta "%s"
Para instalar este programa, necesita %s KB disponibles en la unidad %s. Es recomendable que libere la cantidad necesaria de espacio en disco antes de continuar.

¿Aún así desea continuar?
Error retrieving Windows folder
NT Shutdown: OpenProcessToken error.
NT Shutdown: AdjustTokenPrivileges error.
NT Shutdown: ExitWindowsEx error.
Extracting file failed. It is most likely caused by low memory (low disk space for swapping file) or corrupted Cabinet file.
The setup program could not retrieve the volume information for drive (%s) .
System message: %s.
Setup could not find a drive with %s KB free disk space to install the program. Please free up some space and try again.
The installation program appears to be damaged or corrupted. Contact the vendor of this application.
Error en la recuperación de la carpeta de Windows
Apagar NT: Error en token de OpenProcess.
Apagar NT: Error en AdjustTokenPrivileges.
Apagar NT: Error en ExitWindowsEx.
Error en la extracción del archivo. Probablemente se deba a un problema de memoria baja (poco espacio en disco para el intercambio de archivos) o un archivo .CAB dañado.
El programa de instalación no pudo recuperar la información del volumen para la unidad (%s) .
Mensaje del sistema: %s.
El programa de instalación no pudo encontrar una unidad con %s KB de espacio en disco libres para instalar el programa. Libere un poco de espacio e inténtelo de nuevo.
El programa de instalación parece estar dañado. Póngase en contacto con el proveedor de esta aplicación.
Command line option syntax error. Type Command /? for Help.
Command line options:

/Q -- Quiet modes for package,

/T:<full path> -- Specifies temporary working folder,

/C -- Extract files only to the folder when used also with /T.

/C:<Cmd> -- Override Install Command defined by author.

You must restart your computer before the new settings will take effect.

Do you want to restart your computer now?
Another copy of the '%s' package is already running on your system. Do you want to run another copy?
Could not find the file: %s.
Error de sintaxis en la opción de línea de comandos. Escriba Comando /? para
obtener ayuda.
Opciones de línea de comandos:

/Q -- Modos silenciosos de paquete

/T:<ruta completa> -- Especificar la carpeta temporal de trabajo

/C: -- Extraer archivos solo en la carpeta, cuando se usa con /T

/C:<Cmd> -- Sobrescribir el comando de instalación definido por el
autor.

Debe reiniciar el equipo para que la nueva configuración surta efecto.

¿Desea reiniciar su equipo ahora?
Otra copia del paquete "%s" ya está ejecutándose en su sistema. ¿Desea ejecutar otra copia?
No se pudo encontrar el archivo: %s.
You do not have administrator privileges on this machine. Some installations cannot be completed correctly unless they are run by an administrator.
The folder '%s' does not exist. Do you want to create it?
Another copy of the '%s' package is already running on your system. You can only run one copy at a time.
The '%s' package is not compatible with the version of Windows you are running.
The '%s' package is not compatible with the version of the file: %s on your system.
No tiene privilegios de administrador en este equipo. Algunos procesos de instalación no pueden ser completados correctamente a menos que sean ejecutados por un administrador.
No existe la carpeta "%s". ¿Desea crearla?
Otra copia del paquete "%s" ya está ejecutándose en su sistema. Solo es posible ejecutar una copia a la vez.
El paquete "%s" no es compatible con la versión de Windows que está ejecutando.
El paquete "%s" no es compatible con la versión del archivo %s que se encuentra en su sistema.

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	1978-Sep-24 10:10:54
Version	`0.0`
SizeofData	`37`
AddressOfRawData	`0xbdac`
PointerToRawData	`0xbdac`
Referenced File	wextract.pdb

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	1978-Sep-24 10:10:54
Version	`0.0`
SizeofData	`768`
AddressOfRawData	`0xbdd4`
PointerToRawData	`0xbdd4`

UNKNOWN

Characteristics	`0`
TimeDateStamp	1978-Sep-24 10:10:54
Version	`0.0`
SizeofData	`36`
AddressOfRawData	`0xc0fc`
PointerToRawData	`0xc0fc`

UNKNOWN (#2)

Characteristics	`0`
TimeDateStamp	1978-Sep-24 10:10:54
Version	`0.0`
SizeofData	`4`
AddressOfRawData	`0xc120`
PointerToRawData	`0xc120`

TLS Callbacks

Load Configuration

Size	`0x148`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x14000e080`
GuardCFCheckFunctionPointer	`5368755888`
GuardCFDispatchFunctionPointer	`0`
GuardCFFunctionTable	`0`
GuardCFFunctionCount	`0`
GuardFlags	`(EMPTY)`
CodeIntegrity.Flags	`0`
CodeIntegrity.Catalog	`0`
CodeIntegrity.CatalogOffset	`0`
CodeIntegrity.Reserved	`0`
GuardAddressTakenIatEntryTable	`0`
GuardAddressTakenIatEntryCount	`0`
GuardLongJumpTargetTable	`0`
GuardLongJumpTargetCount	`0`

RICH Header

XOR Key	`0xdb9e4ad6`
Unmarked objects	`0`
C++ objects (33145)	`1`
Unmarked objects (#2)	`1`
ASM objects (33145)	`4`
C objects (33145)	`20`
Imports (33145)	`17`
Total imports	`167`
C objects (LTCG) (33145)	`10`
Resource objects (33145)	`1`
Linker (33145)	`1`

Errors

[*] Warning: Multiple nodes using the name Version Info in a dictionary.

Leave a comment

No comments yet.