Gridinsoft Logo
File Icon

The 2000rtp.exe (WinSFX32M Self Extractor for Win32) File Analysis

Updated 1 month ago
Checked by Malware Check
2000rtp.exe

Technical Analysis

File Name 2000rtp.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, LHa self-extracting archive
Scanner Version 1.0.229.174
Database Version 2025-11-14 23:00:16 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
12,316,713
File Size (bytes)
2025-11-14
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ddb454db47ff5449ce8dfd13005d8b81
SHA1
06bfb70b5af8b2d395f74060ef91f23c2e1ffe16
SHA256
7b3bc74428c449c99835824ba41beec2a83d537428051d233274a08e1965644a
SHA512
d95b5f391f039d142c9121923f3fddc13e849a1e928133501098de2ea45a22159904d729a629504a08bc4b2564b3d0dcd21ddd107eb5627415d0349ec256c613
ImpHash
aea4d89278459d638b4a1067f747e414

PE Analysis

Basic Information

▼
Icon
Hash: f7881b594f51bb29255beaf819bd2e4f
Fuzzy: c2c337ba5389f66e928812c77cdd04d0
dHash: 01c4f4eac2caf200
Image Base 0x00400000
Entry Point 0x004056e8
Compilation Time 2001-08-22 03:25:15
Checksum 0x00000000 (Actual: 0x00bc9500)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, LHa self-extracting archive
Digital Signature No valid SignedData structure was found.
Imports 7 libraries
KERNEL32, USER32, GDI32, comdlg32, ADVAPI32, SHELL32, CRTDLL
Exports 0 functions
Resources 6 Resources
Sections 7 Sections

Version Information

▼
CompanyName
FileDescription WinSFX32M Self Extractor for Win32
FileVersion 2.71.3.12
InternalName WINSFX32M
LegalCopyright (C)Micco 1997-2001 All rights reserved.
OriginalFilename LZHSFX32.EXE
ProductName WinSFX32M for Win32
ProductVersion 2.71.3.12
Translation 0x0411 0x03a4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 18,702 bytes 18,944 bytes 6.38 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 25BB98DDFA50E54D8A685E2A71A5AA8A
.rdata 0x00006000 197 bytes 512 bytes 2.36 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 115FA6A782D1A8504CCAA201B3126ABC
.data 0x00007000 1,988 bytes 2,048 bytes 5.53 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C70E071910D873A6BDA089BF72EE3AD6
.idata 0x00008000 2,892 bytes 3,072 bytes 4.94 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 3447B7E8CFA48360BFEAD9EE84BE07A1
.CRT 0x00009000 8 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x0000a000 3,044 bytes 3,072 bytes 3.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6762A266E76560BFA0BC75AEB1AAEDDB
.reloc 0x0000b000 2,022 bytes 2,048 bytes 6.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 29F8527D88E8ABB794D8D2055CE3930A

Resource Analysis

▼
Total Resources: 6 (2,558 bytes)
Resource Type Count Total Size Percentage
RT_ICON 2 1,040 bytes
40.7%
RT_DIALOG 2 704 bytes
27.5%
RT_GROUP_ICON 1 34 bytes
1.3%
RT_VERSION 1 780 bytes
30.5%

Certificate Chain Analysis

▼
Certificate Information
Product WinSFX32M for Win32
Description WinSFX32M Self Extractor for Win32
File Version 2.71.3.12
Original Name LZHSFX32.EXE
Internal Name WINSFX32M
Copyright (C)Micco 1997-2001 All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware