Be careful when downloading random sources, just the one posted by AndrewWeb above. we don't know if it's safe to use but if you have a spare PC or laptop, make sure you run it offline and don't connect it to the internet if this involves importing a wallet file, and don't forget to format the PC once you've done something.
Actually, you don't need them if your purpose is just to dump keys from wallet.dat file. Pywallet should able to help you dumping these keys with your passphrase.
thank you for warning me, i couldn't tell if it's fake or real, how could i find out?
There's no easy way to tell, since Bitcoin Core website doesn't include SHA-256 hash or PGP signature for Bitcoin-Qt version 0.7.2. If you want to be sure and have some technical expertise, consider compile it from source code.