filenameUnRAR SP.exe
size69120 (0x10e00)
md5ec38e8851f224abacae1b642a6ceec38
typePE32 executable (Windows CE) ARM, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
123507272
002
4897731
4996151
89306411
10152
4896155
109507259
110507252
110507274
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x1c0
NumberOfSections5
TimeDateStamp0x446cc25c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0xb600
SizeOfInitializedData0x5a00
SizeOfUninitializedData0
AddressOfEntryPoint0xb6f4
BaseOfCode0x1000
BaseOfData0xd000
ImageBase0x10000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.20
Reserved10
SizeOfImage0x15000
SizeOfHeaders0x400
CheckSum0
Subsystem9
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xb4280xb600R-X CODE
.rdata0xd0000x17d00x1800R-- IDATA
.data0xf0000x12dc0xe00RW- IDATA
.pdata0x110000x9280xa00R-- IDATA
.rsrc0x120000x23c80x2400R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xe3b80x8c
RESOURCE0x120000x23c8
EXCEPTION0x110000x928
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xf0000x268
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#122160
ICON#213840
MENU#1283920
MENU#201320
MENU#210620
MENU#211880
DIALOG#1003100
DIALOG#1073180
DIALOG#1081540
DIALOG#1095140
DIALOG#110780
DIALOG#1111760
STRING#13580
STRING#24680
STRING#73660
STRING#81020
RCDATA#128320
RCDATA#201320
RCDATA#210320
RCDATA#211320
GROUP_ICON#208200
GROUP_ICON#209200
VERSION#16600
idlangstring
101033End of archive.
111033Not enough memory to perform action.
121033Archive header CRC error.
131033Not a valid RAR Archive.
141033Unknown encryption used for archive headers.
151033Archive open error.
161033File create error.
171033File close error.
181033File read error.
191033File write error.
201033Buffer is too small, comments not completely read
211033Unknown RAR error
221033Error opening archive
231033Error extracting archive
241033Archive test failed
251033Archive test succeed
981033Action
991033Menu
1001033OK
1011033Cancel
1021033File Name
1031033Size
1041033Type
1051033Folder
1061033File
1071033..
1081033UNRAR SP
1091033Extract to
1101033tGetFile.DLL is missing.
1111033Unhandled exception has been detected. %s Contact author for more information
1121033Yes
1131033Can't view file larger than 64KB
module_namehintordfunction_name
COREDLL.dll464
COREDLL.dll874
COREDLL.dll69
COREDLL.dll1095
COREDLL.dll1094
COREDLL.dll11
COREDLL.dll1044
COREDLL.dll10
COREDLL.dll868
COREDLL.dll1047
COREDLL.dll529
COREDLL.dll858
COREDLL.dll528
COREDLL.dll61
COREDLL.dll537
COREDLL.dll494
COREDLL.dll265
COREDLL.dll1018
COREDLL.dll4
COREDLL.dll5
COREDLL.dll2
COREDLL.dll87
COREDLL.dll3
COREDLL.dll508
COREDLL.dll258
COREDLL.dll256
COREDLL.dll275
COREDLL.dll266
COREDLL.dll193
COREDLL.dll78
COREDLL.dll57
COREDLL.dll541
COREDLL.dll226
COREDLL.dll2008
COREDLL.dll884
COREDLL.dll859
COREDLL.dll870
COREDLL.dll861
COREDLL.dll864
COREDLL.dll2012
COREDLL.dll2048
COREDLL.dll2027
COREDLL.dll2046
COREDLL.dll691
COREDLL.dll257
COREDLL.dll692
COREDLL.dll197
COREDLL.dll196
COREDLL.dll495
COREDLL.dll553
COREDLL.dll1054
COREDLL.dll690
COREDLL.dll533
COREDLL.dll532
COREDLL.dll517
COREDLL.dll688
COREDLL.dll706
COREDLL.dll166
COREDLL.dll702
COREDLL.dll701
COREDLL.dll497
COREDLL.dll492
COREDLL.dll60
COREDLL.dll1092
COREDLL.dll456
COREDLL.dll59
COREDLL.dll1041
COREDLL.dll227
COREDLL.dll264
COREDLL.dll516
COREDLL.dll457
COREDLL.dll458
COREDLL.dll461
COREDLL.dll228
COREDLL.dll462
COREDLL.dll460
COREDLL.dll95
COREDLL.dll730
COREDLL.dll56
COREDLL.dll683
COREDLL.dll878
COREDLL.dll247
COREDLL.dll249
COREDLL.dll229
COREDLL.dll1068
COREDLL.dll246
COREDLL.dll640
COREDLL.dll1727
COREDLL.dll259
COREDLL.dll285
COREDLL.dll838
COREDLL.dll704
COREDLL.dll248
COREDLL.dll250
COREDLL.dll865
COREDLL.dll853
COREDLL.dll854
COREDLL.dll848
COREDLL.dll847
COREDLL.dll886
COREDLL.dll866
COREDLL.dll885
COREDLL.dll160
COREDLL.dll58
COREDLL.dll534
COREDLL.dll1241
COREDLL.dll1177
COREDLL.dll94
COREDLL.dll1066
COREDLL.dll66
COREDLL.dll1097
COREDLL.dll530
COREDLL.dll1046
COREDLL.dll2002
COREDLL.dll2003
COREDLL.dll34
COREDLL.dll33
COREDLL.dll35
COREDLL.dll1645
COREDLL.dll36
COREDLL.dll557
COREDLL.dll1474
COREDLL.dll544
COREDLL.dll496
COREDLL.dll1443
COREDLL.dll29
COREDLL.dll295
COREDLL.dll455
COREDLL.dll543
COREDLL.dll269
COREDLL.dll63
COREDLL.dll606
commctrl.dll2
ole32.dll11CoTaskMemAlloc
ole32.dll13CoTaskMemRealloc
ole32.dll12CoTaskMemFree
ole32.dll15CoUninitialize
ole32.dll8CoInitializeEx
OLEAUT32.dll216VarUI4FromStr
AYGSHELL.dll56
AYGSHELL.dll97
AYGSHELL.dll34
unrar.dll6RARProcessFileW
unrar.dll8RARReadHeaderEx
unrar.dll4RAROpenArchiveEx
unrar.dll9RARSetCallback
unrar.dll1RARCloseArchive
unrar.dllRARCEGetBuildInfo

StringTable 040904B0

FileDescriptionUnRAR SP Module
FileVersion1, 0, 0, 1
InternalNameUnRAR SP
LegalCopyrightCopyright 2006
OriginalFilenameUnRAR SP.exe
ProductNameUnRAR SP Module
ProductVersion1, 0, 0, 1

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
069120EXE05/18/2006 18:52:12#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK