Extracting of protected EXE-File possible without password

Paquet Builder
1

Hello,

we just found out that it is possible to extract a protected installer-exe just by
extracting it with 7-zip.

Is this a known Issue?

best Regards
Thomas

2

There is no issue. You must configure your settings like this:

Pasted image879×795 59 KB

As you can see, we encrypt files and filenames with a secret key that will be stored inside the package.

And we ask the users for a password (not the key itself, otherwise, it could be shared).

If you try to open the EXE file with 7-Zip, you will be prompted for the key:

Entering your password will fail because 7-Zip expects the secret key.