0b4035a50ae9fc81f555eea32b29f2e03a67b395aa1f5faa06a7c5f0c99fa277

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2024-Nov-15 09:42:58
Detected languages English - United States
Debug artifacts C:\jenkins\workspace\CommonTools\RazerInstaller_Master\SafeExtractor\Release\SafeExtractor.pdb
CompanyName Razer Inc.
FileVersion 1.22.0.737
InternalName Razer Installer.exe
LegalCopyright Copyright 2024 Razer Inc. All rights reserved.
OriginalFilename Razer Installer.exe
ProductName Razer Installer
ProductVersion 1.22.0.737

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Microsoft Visual C# v7.0 / Basic .NET
.NET DLL -> Microsoft
.NET executable -> Microsoft
Suspicious PEiD Signature: UPolyX V0.1 -> Delikon
Suspicious Strings found in the binary may indicate undesirable behavior: Contains another PE executable:
  • This program cannot be run in DOS mode.
 Contains domain names:
  • DotNetZip.codeplex.com
  • cacerts.digicert.com
  • codeplex.com
  • crl3.digicert.com
  • crl4.digicert.com
  • digicert.com
  • http://DotNetZip.codeplex.com
  • http://DotNetZip.codeplex.com/
  • http://cacerts.digicert.com
  • http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
  • http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
  • http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
  • http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
  • http://crl3.digicert.com
  • http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
  • http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
  • http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
  • http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
  • http://crl4.digicert.com
  • http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
  • http://ocsp.digicert.com0
  • http://ocsp.digicert.com0A
  • http://ocsp.digicert.com0C
  • http://ocsp.digicert.com0X
  • http://ocsp.digicert.com0\
  • http://www.codeplex.com
  • http://www.codeplex.com/DotNetZip
  • http://www.digicert.com
  • http://www.digicert.com/CPS0
  • http://www.w3.org
  • http://www.w3.org/2001/XMLSchema-instance
  • www.codeplex.com
  • www.digicert.com
  • www.w3.org
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA256
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
 Possibly launches other programs:
  • CreateProcessW
Malicious The PE is possibly a dropper. Resource 1337 detected as a PE Executable.
Resources amount for 97.1983% of the executable.
Info The PE is digitally signed. Signer: Razer USA Ltd.
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Safe VirusTotal score: 0/69 (Scanned on 2026-08-24 17:58:34) All the AVs think this file is safe.

Hashes

MD5 f1f5e5db1cc67053fc0b90c79d158b0b 🔍
SHA1 c5680766c3401ed5cdbea13c78b528e9064b971a 🔍
SHA256 0b4035a50ae9fc81f555eea32b29f2e03a67b395aa1f5faa06a7c5f0c99fa277 🔍
SHA3 4f50aa767076e93f055f0b511766ff3eba22a11a9609b2cddb9f47c0177a1702 🔍
SSDeep 196608:TpQLh26iZrVG5Jf8e2uQw8Dzp5HqwxuphzyvC9MP:dQLhDEkf8eCwMHqYuphWJP 🔍
Imports Hash cba6c57e12ae94ace270fe6678a80a9f 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 7
TimeDateStamp 2024-Nov-15 09:42:58
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0x24200
SizeOfInitializedData 0x806a00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000098B3 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x26000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x831000
SizeOfHeaders 0x400
Checksum 0x83294b
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 8e86e6e7fcd0d45083e704ede1fa8b54 🔍
SHA1 fd38d70a6e3adf64e06c7b5eff5caa5c72e65df8 🔍
SHA256 f065cfe25f80e068c12de4fb509af00e67ba8f40713f4bb054bc949ae01bd73d 🔍
SHA3 662e25c59ad02ed2692a316927cb6220df3c20f2fbd9fdc6c804111e62071175 🔍
VirtualSize 0x24169
VirtualAddress 0x1000
SizeOfRawData 0x24200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.66376

.rdata

MD5 b2500f908d1d87a3127230eba074cc7e 🔍
SHA1 8ab46a2fab0a944f52b7639242b59e398fc97669 🔍
SHA256 6898a27ef9cf64a34f79c3786f3d3fc02a1ea203aa7ba5575bb063475051b2ba 🔍
SHA3 3c4891db52a073d05c3078f27efd8f348498a9c9326169d52470d44c45eb4c2f 🔍
VirtualSize 0xf8f6
VirtualAddress 0x26000
SizeOfRawData 0xfa00
PointerToRawData 0x24600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.49747

.data

MD5 28e7856f7282cad2b2e423dcc3d52fb4 🔍
SHA1 5c6a29bec4a19d33081ba11b06abb50bc97ab30e 🔍
SHA256 5c987d69e36c18f7d0d355d4186b23966640b3e5b33759425f3b6ac38dd59884 🔍
SHA3 8e38d50d45845fdbc4dd72903c08424680a102fd1d4159bad2c5c33cba3e6629 🔍
VirtualSize 0x20c0
VirtualAddress 0x36000
SizeOfRawData 0x1200
PointerToRawData 0x34000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.817

.gfids

MD5 d78dce83c2c5378d2a9a484e960b9b18 🔍
SHA1 34081b152a07a6bd92941e10582146edf7dde762 🔍
SHA256 22a4b8f2f341d93fae7e1a24b2b28a88e1c20d48135ea0ac1ccb38d9709d8c46 🔍
SHA3 2f0a10581ef4416a6bf2aa1335c0f7d3e1e67d4e5ce736187c823c7cc8a7f0aa 🔍
VirtualSize 0x288
VirtualAddress 0x39000
SizeOfRawData 0x400
PointerToRawData 0x35200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.66182

.tls

MD5 1f354d76203061bfdd5a53dae48d5435 🔍
SHA1 aa0d33a0c854e073439067876e932688b65cb6a9 🔍
SHA256 4c6474903705cb450bb6434c29e8854f17d8324efca1fdb9ee9008599060883a 🔍
SHA3 991fbbd46bbd69198269fe6c247d440e0f8a7d38259b7a1e04b74790301d1d2b 🔍
VirtualSize 0x9
VirtualAddress 0x3a000
SizeOfRawData 0x200
PointerToRawData 0x35600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.0203931

.rsrc

MD5 a0b1088ef3dad695d6cc6961ad8449a7 🔍
SHA1 c8db1d03243910b2d88d04d5f0171b4f510271a3 🔍
SHA256 52d8189c57706e7bdaf1e1fe588217468d9d642e84461a1b4e2ee5a2e28c8302 🔍
SHA3 f137c6a962cbbf276b4e7a5e5f6d5a5289d4cd4e2c0724501c0510b577ef1bc7 🔍
VirtualSize 0x7f2100
VirtualAddress 0x3b000
SizeOfRawData 0x7f2200
PointerToRawData 0x35800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.91785

.reloc

MD5 36e4ced029872016f6d14fbd7bfe49d1 🔍
SHA1 32e8f5155a70ba7fe1aa43b48d656ad9e680009f 🔍
SHA256 287bfb3b2d5ed9f06e1de2effe68cd24d5105a929d22632a9b223590b82766c2 🔍
SHA3 afbc91fde43423317ca8003cb36d34831fec7eedb1230d77d1fa33cf338eb4ac 🔍
VirtualSize 0x2574
VirtualAddress 0x82e000
SizeOfRawData 0x2600
PointerToRawData 0x827a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.52673

Imports

KERNEL32.dll GetWindowsDirectoryW
FindResourceW
GetLastError
LoadResource
LockResource
SizeofResource
lstrcpynW
CreateProcessW
CloseHandle
HeapSize
CreateFileW
WriteConsoleW
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
FreeLibrary
LoadLibraryExW
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetACP
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
ReadConsoleW
SetEndOfFile
SHELL32.dll SHCreateDirectoryExW

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4454
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96941
Detected Filetype PNG graphic file
MD5 bc6a8301539a6fc8b10db3c72ef4ef88 🔍
SHA1 547131225c31b5fefd7ef442ce7e85d697c537b6 🔍
SHA256 2cf271223464f4f5026096c1efcf374cd90630452dc7cd489c22b19a17fcc3b1 🔍
SHA3 b923ea665396e802a5be65868b4fd05d806331cb616725625d3d5430dcd7b7b0 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.96891
MD5 e07dfb1bedcc354817c7c31a4e98fea0 🔍
SHA1 fb33cf2487d982dc9c813ecc7b0f6c1061881039 🔍
SHA256 84720fa5ee5e696fb277aef68aa474eb37e1efba7419ece9fecb38a6cce531dc 🔍
SHA3 ca3843886fd7ece407afd437a9589fbdb51d4964be7029bc010ce41f80aaa596 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.07406
MD5 9708b4cb9c3235ed7315304ac921a1c2 🔍
SHA1 55e0a935af0b9c1fb4ce70ecbdb3ad356c277be6 🔍
SHA256 f5838a048ba684e639ec0c8e07848156295769b1e56e2a10161017285c9546fc 🔍
SHA3 cf07b60ec5c36d238a135664ba096eb46133e8091c470cea4585937e710282ff 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x67e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16626
MD5 6a2e12969da1712b50925eea970ea3d8 🔍
SHA1 2889bc7fed56a9836c86814b2375d7b1dda813ae 🔍
SHA256 f1bdd67074d3cdd6e6a1b1471b66f037726be5dca603cba6efb1cf4089204bc3 🔍
SHA3 dfeb040f857ecf099c4ad84d0e547e428453ba3c6414b961a49af613cd465976 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5488
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.20563
MD5 1ebdd4d8f54d8510182879629039791b 🔍
SHA1 3ce8b00e129aadba660821834b3d787a68cef6d6 🔍
SHA256 919d5e450057bd63031ccb3c7ab1757185cf4a139af5d0d622d125e0053cb873 🔍
SHA3 5598886d8cdb8063a8331ec6141b8d7f5065628b5d4c0e2b330bf4e04e3a902e 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54238
MD5 6903e3342df9b514d583dc8ca50a487b 🔍
SHA1 d32dc5413522978433160bad36cbc885e5ca571f 🔍
SHA256 37bd3928406a8f7314bd3ce9627414763f08af3ab681874caa7d204776ed47da 🔍
SHA3 c854d7e4cfd427e0cb70928ed715b45e6bee1e93aeec37a3301c9f0e8d29737a 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x32e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.59474
MD5 6ad34f692d453d6d3621769d31b00601 🔍
SHA1 55b207e186314a22772bb23b596493a1e9caa0e6 🔍
SHA256 f03d4ecd2ca79982b2cf11013a67a2a40689fa4278fd9179e9c0b2947515243e 🔍
SHA3 a6060353da134d2f1b78ac49f4fcbce45c7b84e05502a36f39fe69f92e930e41 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.65651
MD5 f91de62dc6d2d1d23514c1ae97102beb 🔍
SHA1 26207514f72d06207f7ffcc7ba1011c575d0ffea 🔍
SHA256 8af560a06f75f695bc9124ea84df37e70e2318c511e2bc780cbec9354d55603b 🔍
SHA3 c83a47147c6e259378bca84d352ab33a6a193980f8bcb5c353ee0ee33727b9c9 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1a68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.46338
MD5 cb58d9c2f72a9c9804b095a138ae8d08 🔍
SHA1 1e8815b0bf1bbdf40a3357fe74cd23552b4a4ae0 🔍
SHA256 d89c2e5479726f69399f49c7190d983afb46a5f4c977e94d667ec2cbd15b94fe 🔍
SHA3 3a495b3305e4989df4d495fc0bd8bd5c819ea6fbf3a62af80d812481bd3c747f 🔍

10

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1588
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.4811
MD5 17a0121dff3c0164ade24500d601d34c 🔍
SHA1 9e5d94eec71976feef1187e0da2fcf77d24e02ff 🔍
SHA256 121e658121ab8a9a3a51628904aa462d427c2be70c955a0e32dab10bb0f3b764 🔍
SHA3 a99739cd2dd9e06f829e3dca263ec290fb31d933573c3014ce74818414146cb7 🔍

11

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.47862
MD5 f797db8020dbbbd215dd9c22752d5ca5 🔍
SHA1 6e4321d35fd78f07efb8f9b64bd4a61b379811f6 🔍
SHA256 439fbec3c4ec0cbe2500f731fa45b2a711743579052698a941dca15684bf20c6 🔍
SHA3 a56f6b7e59d43ee65b5655d823bdd27a7b8d9f29a90b9296d8e6654eb1d73909 🔍

12

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.81084
MD5 d80da5dbf663345a8482c6d237d5b97c 🔍
SHA1 4e7f439df6a26c681946a5546a55397500e3c3da 🔍
SHA256 4e7950082a3b6489982ad8d85ef749f174b4934363e0d4b745b8394495b4fbeb 🔍
SHA3 76426f274bb52d87ea9c09b821a4c00502f3d04a43d605edc00936631648f402 🔍

13

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x6b8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.01119
MD5 022e106ad93a9cccd407961f60d625c0 🔍
SHA1 95e11a12a34f9df1a7b93168de8c1aa51312da40 🔍
SHA256 cbb44a293ae9ef989f7c4b6aaebb0948a8adb77e08d5e381a3018ed082adce92 🔍
SHA3 579807cf1a091b3230b49b47e558212f8690b0626651501d278cd328e6e711a6 🔍

14

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.69753
MD5 cf6cbb3cade52c05144033c078205545 🔍
SHA1 8bf8506dce8a635381a1b3b57b6bf1558629c773 🔍
SHA256 cc9455e5527f9b47530be76d27003827f006e8c41f7f85df2189bddb813e98d6 🔍
SHA3 7fade1afa22c3daa940e53ee63e43bcabe9bceb45dbc62ee5c3a022f23c61bf4 🔍

1337

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x7b8a40
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.95631
Detected Filetype PE Executable
MD5 634cb3410ee0c98d24fe353918feb61c 🔍
SHA1 cb1c40dcd335d4adbbbc7af8be114376b616c4f0 🔍
SHA256 a876ee15092606a8e51ac08790bb8dd3068d0e093d11bd2b37c5fc95f913819c 🔍
SHA3 2b1583e8ad2da53dbc6c92203912eff4483e0b5910448e944275bae8bdde318e 🔍

101

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0xca
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.29949
Detected Filetype Icon file
MD5 375ecee0fcfce31df4f8a49b86e9357d 🔍
SHA1 19c092bc62eaa020eed6ed7307b29a398deb2cf4 🔍
SHA256 8b3115f6b416d36329f4f6a30de59955d0f3f93d5ffa9db9aff42f3c7dcf7808 🔍
SHA3 86a2ac10c4ddb466747cb7e2b3cb26d5133e42a47144c1087d2438021bcd88d0 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.41679
MD5 5646b91a6fc25ff6a0897e6148c4be60 🔍
SHA1 d290e55d001ff82a1a4419653c5d6ab3e857c758 🔍
SHA256 2430ffcf737b46ae48ee42ff57c80cbff1e5d27ae264f42761408361f91ac488 🔍
SHA3 cd96bded8bf2ac4a4ada2e29c79644c6d7b0a17f304b3585b0b1fc0aa6024b69 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x188
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.89623
MD5 b8e76ddb52d0eb41e972599ff3ca431b 🔍
SHA1 fc12d7ad112ddabfcd8f82f290d84e637a4d62f8 🔍
SHA256 165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8 🔍
SHA3 37f83338b28cb102b1b14f27280ba1aa3fffb17f7bf165cb7b675b7e8eb7cddd 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.22.0.737
ProductVersion 1.22.0.737
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName Razer Inc.
FileVersion (#2) 1.22.0.737
InternalName Razer Installer.exe
LegalCopyright Copyright 2024 Razer Inc. All rights reserved.
OriginalFilename Razer Installer.exe
ProductName Razer Installer
ProductVersion (#2) 1.22.0.737
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2024-Nov-15 09:42:58
Version 0.0
SizeofData 119
AddressOfRawData 0x33888
PointerToRawData 0x31e88
Referenced File C:\jenkins\workspace\CommonTools\RazerInstaller_Master\SafeExtractor\Release\SafeExtractor.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2024-Nov-15 09:42:58
Version 0.0
SizeofData 20
AddressOfRawData 0x33900
PointerToRawData 0x31f00

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2024-Nov-15 09:42:58
Version 0.0
SizeofData 940
AddressOfRawData 0x33914
PointerToRawData 0x31f14

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2024-Nov-15 09:42:58
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

StartAddressOfRawData 0x43a000
EndAddressOfRawData 0x43a008
AddressOfIndex 0x4377c8
AddressOfCallbacks 0x4261ac
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_4BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x5c
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x436070
SEHandlerTable 0x4337c0
SEHandlerCount 50

RICH Header

XOR Key 0xc22f3670
Unmarked objects 0
241 (40116) 13
243 (40116) 151
242 (40116) 29
ASM objects (VS2015 UPD3 build 24123) 22
C++ objects (VS2015 UPD3 build 24123) 57
C objects (VS2015 UPD3 build 24123) 34
Imports (65501) 5
Total imports 103
C++ objects (LTCG) (VS2015 UPD3.1 build 24215) 2
Resource objects (VS2015 UPD3 build 24210) 1
151 1
Linker (VS2015 UPD3.1 build 24215) 1

Errors

Leave a comment

No comments yet.