filename7zFM.exe
size495104 (0x78e00)
md50b3e979bef0d8b96231f7bbc95629f55
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
1472997
1180473
10804711
480472
9521905
9621901
10297
93217921
119782144
170402193
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x57f3c6d9
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x12f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x59600
SizeOfInitializedData0x1fc00
SizeOfUninitializedData0
AddressOfEntryPoint0x526e8
BaseOfCode0x1000
BaseOfData0x5b000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x7d000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x594620x59600R-X CODE
.rdata0x5b0000x130820x13200R-- IDATA
.data0x6f0000xb040x400RW- IDATA
.sxdata0x7000040x200RW- IDATA
.rsrc0x710000xbaf00xbc00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x6c7640xf0
RESOURCE0x710000xbaf0
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x5b0000x49c
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#1009680
BITMAP#1019680
BITMAP#1029680
BITMAP#1039680
BITMAP#1049680
BITMAP#1059680
BITMAP#1069680
BITMAP#1503920
BITMAP#1513920
BITMAP#1523920
BITMAP#1533920
BITMAP#1543920
BITMAP#1553920
BITMAP#1563920
BITMAP#1901000
ICON#17440
ICON#22960
ICON#337520
ICON#491280
MENU#7122860
DIALOG#953560
DIALOG#962460
DIALOG#9710880
DIALOG#981900
DIALOG#991980
DIALOG#21011380
DIALOG#21033680
DIALOG#22002480
DIALOG#23005660
DIALOG#24004240
DIALOG#25006080
DIALOG#29004100
DIALOG#35007560
DIALOG#38002940
DIALOG#66022040
DIALOG#73003580
DIALOG#77006620
STRING#1600
STRING#26620
STRING#28660
STRING#29960
STRING#51480
STRING#63860
STRING#642800
STRING#652540
STRING#663240
STRING#672980
STRING#684800
STRING#691740
STRING#132460
STRING#138500
STRING#1463440
STRING#1511260
STRING#1886060
STRING#1899180
STRING#2071240
STRING#2081800
STRING#2131100
STRING#2142820
STRING#2151060
STRING#220500
STRING#2324900
STRING#2333420
STRING#234860
STRING#2361820
STRING#3763780
STRING#3826860
STRING#3941240
STRING#3951480
STRING#4011020
STRING#413820
STRING#444920
STRING#451960
STRING#4573460
STRING#4633340
STRING#4692260
STRING#4701020
ACCELERATORS#72160
GROUP_ICON#1480
GROUP_ICON#100200
VERSION#17040
MANIFEST#17890
idlangstring
11033English
21033English
4081033&Close
4111033&Continue
4451033&Foreground
4471033Paused
4481033Are you sure you want to cancel?
8011033Bookmark
10031033Path
10041033Name
10051033Extension
10061033Folder
10071033Size
10081033Packed Size
10091033Attributes
10101033Created
10111033Accessed
10121033Modified
10131033Solid
10141033Commented
10151033Encrypted
10161033Split Before
10171033Split After
10181033Dictionary
10191033CRC
10201033Type
10211033Anti
10221033Method
10231033Host OS
10241033File System
10251033User
10261033Group
10271033Block
10281033Comment
10291033Position
10301033Path Prefix
10311033Folders
10321033Files
10331033Version
10341033Volume
10351033Multivolume
10361033Offset
10371033Links
10381033Blocks
10391033Volumes
1041103364-bit
10421033Big-endian
10431033CPU
10441033Physical Size
10451033Headers Size
10461033Checksum
10471033Characteristics
10481033Virtual Address
10491033ID
10501033Short Name
10511033Creator Application
10521033Sector Size
10531033Mode
10541033Symbolic Link
10551033Error
10561033Total Size
10571033Free Space
10581033Cluster Size
10591033Label
10601033Local Name
10611033Provider
10621033NT Security
10631033Alternate Stream
10641033Aux
10651033Deleted
10661033Is Tree
10671033SHA-1
10681033SHA-256
10691033Error Type
10701033Errors
10711033Errors
10721033Warnings
10731033Warning
10741033Streams
10751033Alternate Streams
10761033Alternate Streams Size
10771033Virtual Size
10781033Unpack Size
10791033Total Physical Size
10801033Volume Index
10811033SubType
10821033Short Comment
10831033Code Page
10841033Is not archive type
10851033Physical Size can't be detected
10861033Zeros Tail Is Allowed
10871033Tail Size
10881033Embedded Stub Size
10891033Link
10901033Hard Link
10911033iNode
10921033Stream ID
10931033Read-only
10941033Out Name
10951033Copy Link
21001033Options
22021033All users
23201033<Folder>
23211033<Archive>
23221033Open archive
23231033Extract files...
23241033Add to archive...
23251033Test archive
23261033Extract Here
23271033Extract to {0}
23281033Add to {0}
23291033Compress and email...
23301033Compress to {0} and email
24061033Specify a location for temporary archive files.
30001033The system cannot allocate the required amount of memory
30011033There are no errors
30021033{0} object(s) selected
30031033Cannot create folder '{0}'
30041033Update operations are not supported for this archive.
30051033Can not open file '{0}' as archive
30061033Can not open encrypted archive '{0}'. Wrong password?
30071033Unsupported archive type
30081033File {0} is already exist
30091033File '{0}' was modified. Do you want to update it in the archive?
30101033Can not update file '{0}'
30111033Cannot start editor.
30121033The file looks like a virus (the file name contains long spaces in name).
30131033The operation cannot be called from a folder that has a long path.
30141033You must select one file
30151033You must select one or more files
30161033Too many items
30171033Can not open the file as {0} archive
30181033The file is open as {0} archive
30191033The archive is open with offset
33001033Extracting
33021033Testing
33031033Opening...
33041033Scanning...
33051033Removing
33201033Adding
33211033Updating
33221033Analyzing
33231033Replicating
33241033Repacking
33251033Skipping
33261033Deleting
33271033Header creating
34021033Specify a location for extracted files.
34111033Full pathnames
34121033No pathnames
34131033Absolute pathnames
34141033Relative pathnames
34211033Ask before overwrite
34221033Overwrite without prompt
34231033Skip existing files
34241033Auto rename
34251033Auto rename existing files
35041033{0} bytes
37001033Unsupported compression method for '{0}'.
37011033Data error in '{0}'. File is broken
37021033CRC failed in '{0}'. File is broken.
37031033Data error in encrypted file '{0}'. Wrong password?
37041033CRC failed in encrypted file '{0}'. Wrong password?
37101033Wrong password?
37211033Unsupported compression method
37221033Data error
37231033CRC failed
37241033Unavailable data
37251033Unexpected end of data
37261033There are some data after the end of the payload data
37271033Is not archive
37281033Headers Error
37291033Wrong password
37631033Unavailable start of archive
37641033Unconfirmed start of archive
37681033Unsupported feature
60001033Copy
60011033Move
60021033Copy to:
60031033Move to:
60041033Copying...
60051033Moving...
60061033Renaming...
60081033Operation is not supported.
60091033Error Renaming File or Folder
60101033Confirm File Copy
60111033Are you sure you want to copy files to archive
61001033Confirm File Delete
61011033Confirm Folder Delete
61021033Confirm Multiple File Delete
61031033Are you sure you want to delete '{0}'?
61041033Are you sure you want to delete the folder '{0}' and all its contents?
61051033Are you sure you want to delete these {0} items?
61061033Deleting...
61071033Error Deleting File or Folder
61081033The system cannot move a file with long path to the Recycle Bin
63001033Create Folder
63011033Create File
63021033Folder name:
63031033File Name:
63041033New Folder
63051033New File
63061033Error Creating Folder
63071033Error Creating File
64001033Comment
64011033&Comment:
64021033Select
64031033Deselect
64041033Mask:
66001033Properties
66011033Folders History
71001033Computer
71011033Network
71021033Documents
71031033System
72001033Add
72011033Extract
72021033Test
72031033Copy
72041033Move
72051033Delete
72061033Info
73031033Splitting...
73041033Confirm Splitting
73051033Are you sure you want to split file into {0} volumes?
73061033Volume size must be smaller than size of original file
73071033Incorrect volume size
74001033Combine Files
74011033&Combine to:
74021033Combining...
74031033Select only first part of split file
74041033Can not detect file as split file
74051033Can not find more than one part of split file
75001033Checksum calculating...
75011033Checksum information
75021033CRC checksum for data:
75031033CRC checksum for data and names:
75041033CRC checksum for streams and names:
module_namehintordfunction_name
COMCTL32.dll82ImageList_ReplaceIcon
COMCTL32.dll93InitCommonControlsEx
COMCTL32.dll10CreateToolbarEx
COMCTL32.dll8CreateStatusWindowW
COMCTL32.dll17
COMCTL32.dll71ImageList_GetImageCount
COMCTL32.dll52ImageList_AddMasked
COMCTL32.dll55ImageList_Create
COMCTL32.dll56ImageList_Destroy
COMCTL32.dll101PropertySheetW
comdlg32.dll4CommDlgExtendedError
comdlg32.dll10GetOpenFileNameW
MPR.dll65WNetOpenEnumW
MPR.dll29WNetEnumResourceW
MPR.dll57WNetGetResourceParentW
MPR.dll55WNetGetResourceInformationW
MPR.dll7WNetAddConnection2W
MPR.dll17WNetCloseEnum
GDI32.dll143DeleteObject
OLEAUT32.dll149
OLEAUT32.dll10
OLEAUT32.dll9
OLEAUT32.dll2
OLEAUT32.dll4
OLEAUT32.dll7
OLEAUT32.dll6
ole32.dll100CoTaskMemFree
ole32.dll260OleUninitialize
ole32.dll237OleInitialize
ole32.dll99CoTaskMemAlloc
ole32.dll276RevokeDragDrop
ole32.dll136DoDragDrop
ole32.dll16CoCreateInstance
ole32.dll275ReleaseStgMedium
ole32.dll58CoInitialize
ole32.dll274RegisterDragDrop
ole32.dll104CoUninitialize
USER32.dll554RemoveMenu
USER32.dll58CheckMenuRadioItem
USER32.dll57CheckMenuItem
USER32.dll9AppendMenuW
USER32.dll300GetMenu
USER32.dll456LoadMenuW
USER32.dll604SetMenu
USER32.dll184DrawMenuBar
USER32.dll345GetSubMenu
USER32.dll194EnableMenuItem
USER32.dll419IsDlgButtonChecked
USER32.dll56CheckDlgButton
USER32.dll59CheckRadioButton
USER32.dll434IsZoomed
USER32.dll255GetClientRect
USER32.dll552ReleaseCapture
USER32.dll579SetCapture
USER32.dll243GetCapture
USER32.dll446LoadIconW
USER32.dll371GetWindowPlacement
USER32.dll641SetWindowPlacement
USER32.dll438LoadAcceleratorsW
USER32.dll318GetMessageW
USER32.dll679TranslateAcceleratorW
USER32.dll681TranslateMessage
USER32.dll162DispatchMessageW
USER32.dll515PostQuitMessage
USER32.dll595SetDlgItemTextW
USER32.dll278GetFocus
USER32.dll289GetKeyState
USER32.dll403InvalidateRect
USER32.dll514PostMessageW
USER32.dll646SetWindowTextW
USER32.dll198EndDialog
USER32.dll196EnableWindow
USER32.dll153DestroyWindow
USER32.dll597SetFocus
USER32.dll94CreatePopupMenu
USER32.dll151DestroyMenu
USER32.dll440LoadBitmapW
USER32.dll485MessageBoxW
USER32.dll143DefWindowProcW
USER32.dll249GetClassInfoW
USER32.dll444LoadCursorW
USER32.dll536RegisterClassW
USER32.dll28CallWindowProcW
USER32.dll97CreateWindowExW
USER32.dll159DialogBoxParamW
USER32.dll640SetWindowLongW
USER32.dll367GetWindowLongW
USER32.dll657ShowWindow
USER32.dll491MoveWindow
USER32.dll560ScreenToClient
USER32.dll273GetDlgItem
USER32.dll372GetWindowRect
USER32.dll468MapDialogRect
USER32.dll665SystemParametersInfoW
USER32.dll271GetDialogBaseUnits
USER32.dll377GetWindowTextLengthW
USER32.dll378GetWindowTextW
USER32.dll575SendMessageW
USER32.dll459LoadStringW
USER32.dll399InsertMenuItemW
USER32.dll610SetMenuItemInfoW
USER32.dll309GetMenuItemInfoW
USER32.dll585SetClipboardData
USER32.dll193EmptyClipboard
USER32.dll66CloseClipboard
USER32.dll501OpenClipboard
USER32.dll55CharUpperW
USER32.dll472MapVirtualKeyW
USER32.dll633SetTimer
USER32.dll698UpdateWindow
USER32.dll538RegisterClipboardFormatW
USER32.dll722WindowFromPoint
USER32.dll61ChildWindowFromPointEx
USER32.dll430IsWindowEnabled
USER32.dll267GetCursorPos
USER32.dll676TrackPopupMenuEx
USER32.dll306GetMenuItemCount
USER32.dll64ClientToScreen
USER32.dll588SetCursor
USER32.dll436KillTimer
USER32.dll150DestroyIcon
USER32.dll325GetParent
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll482RegOpenKeyExA
ADVAPI32.dll492RegQueryValueExA
ADVAPI32.dll240GetFileSecurityW
ADVAPI32.dll548SetFileSecurityW
ADVAPI32.dll493RegQueryValueExW
ADVAPI32.dll506RegSetValueExW
ADVAPI32.dll471RegEnumKeyExW
ADVAPI32.dll465RegDeleteKeyW
ADVAPI32.dll457RegCloseKey
ADVAPI32.dll326LookupAccountNameW
ADVAPI32.dll371LsaOpenPolicy
ADVAPI32.dll292GetUserNameW
ADVAPI32.dll340LsaClose
ADVAPI32.dll337LsaAddAccountRights
ADVAPI32.dll334LookupPrivilegeValueW
ADVAPI32.dll426OpenProcessToken
ADVAPI32.dll462RegCreateKeyExW
ADVAPI32.dll483RegOpenKeyExW
SHELL32.dll173SHGetFileInfoW
SHELL32.dll122SHBrowseForFolderW
SHELL32.dll266ShellExecuteExW
SHELL32.dll35DragQueryFileW
SHELL32.dll31DragFinish
SHELL32.dll183SHGetMalloc
SHELL32.dll167SHGetDesktopFolder
SHELL32.dll155SHFileOperationW
SHELL32.dll195SHGetSpecialFolderLocation
SHELL32.dll267ShellExecuteW
SHELL32.dll46ExtractIconExW
SHELL32.dll126SHChangeNotify
SHELL32.dll189SHGetPathFromIDListW
MSVCRT.dll157_adjust_fdiv
MSVCRT.dll106__p__commode
MSVCRT.dll111__p__fmode
MSVCRT.dll129__set_app_type
MSVCRT.dll271_initterm
MSVCRT.dll131__setusermatherr
MSVCRT.dll88__getmainargs
MSVCRT.dll143_acmdln
MSVCRT.dll585exit
MSVCRT.dll72_XcptFilter
MSVCRT.dll211_exit
MSVCRT.dll390_onexit
MSVCRT.dll85__dllonexit
MSVCRT.dll46void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCRT.dll14public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCRT.dll202_except_handler3
MSVCRT.dll166_beginthreadex
MSVCRT.dll735wcscat
MSVCRT.dll490_wcsicmp
MSVCRT.dll73__CxxFrameHandler
MSVCRT.dll737wcscmp
MSVCRT.dll663memcpy
MSVCRT.dll664memmove
MSVCRT.dll65_CxxThrowException
MSVCRT.dll183_controlfp
MSVCRT.dll696strcmp
MSVCRT.dll749wcsstr
MSVCRT.dll657malloc
MSVCRT.dll606free
MSVCRT.dll692srand
MSVCRT.dll678rand
MSVCRT.dll665memset
MSVCRT.dll742wcslen
MSVCRT.dll662memcmp
MSVCRT.dll702strlen
MSVCRT.dll402_purecall
KERNEL32.dll267GetCompressedFileSizeW
KERNEL32.dll265GetCommandLineW
KERNEL32.dll480GetVersionExW
KERNEL32.dll542InterlockedDecrement
KERNEL32.dll546InterlockedIncrement
KERNEL32.dll11AreFileApisANSI
KERNEL32.dll143EnterCriticalSection
KERNEL32.dll583LeaveCriticalSection
KERNEL32.dll122DeleteCriticalSection
KERNEL32.dll187FileTimeToLocalFileTime
KERNEL32.dll74CreateEventW
KERNEL32.dll79CreateFileMappingW
KERNEL32.dll606MapViewOfFile
KERNEL32.dll869UnmapViewOfFile
KERNEL32.dll901WaitForSingleObject
KERNEL32.dll899WaitForMultipleObjects
KERNEL32.dll433GetStdHandle
KERNEL32.dll448GetSystemTimeAsFileTime
KERNEL32.dll186FileTimeToDosDateTime
KERNEL32.dll506GlobalMemoryStatus
KERNEL32.dll960lstrlenW
KERNEL32.dll188FileTimeToSystemTime
KERNEL32.dll51CompareFileTime
KERNEL32.dll99CreateProcessW
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll501GlobalFree
KERNEL32.dll494GlobalAlloc
KERNEL32.dll346GetFileInformationByHandle
KERNEL32.dll773SetEndOfFile
KERNEL32.dll919WriteFile
KERNEL32.dll683ReadFile
KERNEL32.dll474GetUserDefaultLangID
KERNEL32.dll784SetFilePointer
KERNEL32.dll347GetFileSize
KERNEL32.dll367GetLogicalDriveStringsW
KERNEL32.dll200FindFirstChangeNotificationW
KERNEL32.dll198FindCloseChangeNotification
KERNEL32.dll345GetFileAttributesW
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll212FindNextFileW
KERNEL32.dll204FindFirstFileW
KERNEL32.dll210FindNextChangeNotification
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll315GetCurrentProcessId
KERNEL32.dll460GetTempPathW
KERNEL32.dll313GetCurrentDirectoryW
KERNEL32.dll797SetLastError
KERNEL32.dll125DeleteFileW
KERNEL32.dll72CreateDirectoryW
KERNEL32.dll615MoveFileW
KERNEL32.dll699RemoveDirectoryW
KERNEL32.dll783SetFileAttributesW
KERNEL32.dll80CreateFileW
KERNEL32.dll788SetFileTime
KERNEL32.dll46CloseHandle
KERNEL32.dll490GetWindowsDirectoryW
KERNEL32.dll235FormatMessageW
KERNEL32.dll594LocalFree
KERNEL32.dll374GetModuleFileNameW
KERNEL32.dll587LoadLibraryW
KERNEL32.dll586LoadLibraryExW
KERNEL32.dll239FreeLibrary
KERNEL32.dll505GlobalLock
KERNEL32.dll512GlobalUnlock
KERNEL32.dll518HeapAlloc
KERNEL32.dll411GetProcessHeap
KERNEL32.dll524HeapFree
KERNEL32.dll378GetModuleHandleW
KERNEL32.dll408GetProcAddress
KERNEL32.dll328GetDiskFreeSpaceW
KERNEL32.dll332GetDriveTypeW
KERNEL32.dll482GetVolumeInformationW
KERNEL32.dll905WideCharToMultiByte
KERNEL32.dll619MultiByteToWideChar
KERNEL32.dll361GetLastError
KERNEL32.dll469GetTickCount
KERNEL32.dll439GetSystemDefaultLangID
KERNEL32.dll509GlobalSize
KERNEL32.dll636OpenProcess
KERNEL32.dll655Process32NextW
KERNEL32.dll653Process32FirstW
KERNEL32.dll108CreateToolhelp32Snapshot
KERNEL32.dll841Sleep
KERNEL32.dll806SetPriorityClass
KERNEL32.dll197FindClose
KERNEL32.dll64CopyFileW
KERNEL32.dll179ExpandEnvironmentStringsW
KERNEL32.dll885VirtualAlloc
KERNEL32.dll888VirtualFree
KERNEL32.dll779SetEvent
KERNEL32.dll537InitializeCriticalSection
KERNEL32.dll584LoadLibraryA
KERNEL32.dll431GetStartupInfoA
KERNEL32.dll131DeviceIoControl

StringTable 040904b0

CompanyNameIgor Pavlov
FileDescription7-Zip File Manager
FileVersion16.04
InternalName7zFM
LegalCopyrightCopyright (c) 1999-2016 Igor Pavlov
OriginalFilename7zFM.exe
ProductName7-Zip
ProductVersion16.04

VS_FIXEDFILEINFO

FileVersion16.4.0.0
ProductVersion16.4.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0495104EXE10/04/2016 15:12:25#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK