d100d1008e0d6fa1d15f6a200da348d66344e8bc53c6efa2646cf2d1c86677c7

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2015-Nov-09 13:59:45
Debug artifacts d:\HoanTran\C#\SessionManagement\SessionManagement\obj\Debug\MPManager.pdb
FileDescription Multi PuTTY Manager
FileVersion 1.0.0.0
InternalName MPManager.exe
LegalCopyright Copyright © 2015
OriginalFilename MPManager.exe
ProductName Multi PuTTY Manager
ProductVersion 1.0.0.0
Assembly Version 1.0.0.0

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
Info Interesting strings found in the binary: Contains domain names:
  • chiark.greenend.org.uk
  • greenend.org.uk
  • http://sourceforge.net
  • http://winscp.net
  • http://www.chiark.greenend.org.uk
  • http://www.chiark.greenend.org.uk/
  • http://www.iec.ch
  • sourceforge.net
  • winscp.net
  • www.chiark.greenend.org.uk
  • www.iec.ch
Safe VirusTotal score: 0/72 (Scanned on 2025-12-27 16:26:35) All the AVs think this file is safe.

Hashes

MD5 f8444acc5a1f47a4c75b8c3783035c54
SHA1 ef2ee86e724e3226989143e280eb4a47fdba83b4
SHA256 d100d1008e0d6fa1d15f6a200da348d66344e8bc53c6efa2646cf2d1c86677c7
SHA3 7e2014c4cd1f74c8ca332cfc5f7a3d6df5e951ca5cceaa9da8ca06f6427d28df
SSDeep 49152:HIVakiPEP2lIV7BwHm+lesBlIVfIVfIV5IVLCrOBffYoJuV:+afPEP2s7B0esCGG4LqOxgoq
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2015-Nov-09 13:59:45
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 11.0
SizeOfCode 0x2ffe00
SizeOfInitializedData 0x42e00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00301CBE (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x302000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x348000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 5008ac383884c83e8714a581129b2522
SHA1 c7583ee546d6928f9e60dd9ef4d0c3af343c028e
SHA256 cd248ecd494766fbcba66937aa5b60ad84c3886a4266c373998c3859c98c3549
SHA3 c81a3595421f0a50aeb51d4db3f91d99aaa1c73f8392579549212e87732f7006
VirtualSize 0x2ffcc4
VirtualAddress 0x2000
SizeOfRawData 0x2ffe00
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.59594

.rsrc

MD5 523278c91eb6bce65231f083dc864304
SHA1 a8d995cd671f16a7dc38668a25f9f377dbfcfe81
SHA256 0e539939d4b5868a0258d665f9ca0eabae0aabf76669ec37b05d826bea0c2e68
SHA3 dd4d05d62b46c6c827e547ac99864395e8641cfa8c0527e0bb841254904def3c
VirtualSize 0x42b78
VirtualAddress 0x302000
SizeOfRawData 0x42c00
PointerToRawData 0x300000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.86866

.reloc

MD5 54c26246309a4769039f84b81bb77af3
SHA1 a33177784fcb67792670f53e1bbe1a9f9a72f095
SHA256 11397ceb860dc48f613c00afae5506e921573b197f0ccc0ad4505e5dc93b1df0
SHA3 2f50d5fbb6df0fc84420863c305116597bef4845eee504070211b2d43bc86913
VirtualSize 0xc
VirtualAddress 0x346000
SizeOfRawData 0x200
PointerToRawData 0x342c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorExeMain

Delayed Imports

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x330
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.38905
MD5 7b3fa8406b6d37fe7e0f505c674f6d4b
SHA1 d5e3d99fed4ccdec97824f4710e30ad01420417c
SHA256 63924fcd48b5e5d7a6c99aff1b7dcd4dd28a57f4be4b25fa8a208a0b1996a11e
SHA3 aa3757422c06bd6f0162b4590bd3a95bbc527cba5266c0acbf2ea66d89a4cf64

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x130
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.98879
MD5 11daf1402d0873745cf1770aa2ae0a93
SHA1 905e52cf8dcdf23ed2e2c2eeb8137c510c943c7a
SHA256 e1b1d09f5d2a65a6a8499ac97f5b7642e5164abcea3b5ba5ee2f0de4a418d4d3
SHA3 44f171896eca00091029e5e13696d6dfd3799ecd9907136e24f8aac9357ee7c4

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0xb0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.86531
MD5 a186fa3c3a2cfa26a27b365c6861467c
SHA1 691645b4a3c4c95faea1605e72952c6361a237da
SHA256 8a9f4182fdb70685c988732a04d35fdb7db363e39950aa84ee19cf18f865b64f
SHA3 a196c7b26d7061af3580e22dc658a7ac4b82fdb75d8e6039c74aebe1462472e1

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4979
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.94734
Detected Filetype PNG graphic file
MD5 43bf64472112606ac62c3ba018791cf5
SHA1 856dcf26546b60a84ed55c34a4d0edef42416429
SHA256 26e60b1a46d1daf20588a272af1a7528e49a2905718ca13c50f482777d8bebe7
SHA3 1e3c9b005bab8f5dd33bb5b5b5d2579b3e728937247772acd4d0e48d07c2c772

6

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.98765
MD5 03c6f8376381edf2b4ba33840b7d909a
SHA1 8a2cd80a7d17b78066c22ffd7be5948022c2607a
SHA256 760fea100e121455dace1a29fef1a922200ff05fd245f7a72082ea91e33ed8bb
SHA3 64b47f9d3c974a22e1e976a9e44328c13bf246febdff11d3730caf7b74f7e7ad

7

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.28819
MD5 271205b59f0212e9fdb8eab17441c1ff
SHA1 1b89e4fd37be15f656d9e2610b03457cec349edb
SHA256 66808006144a569815ec5a88344af9ed5529a29df8bb186ee71bbe04b4fb6f7b
SHA3 d9430d779a92eb2ef70b29129da1a7cfccd12a46fd70acbffbf2c9633084ed5b

8

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.94911
MD5 6aa84b1d69938ceb6002421b08f3b7a2
SHA1 826b0fd33b94f4a9c3dc8fb0b29e69b2a86e6837
SHA256 e720d133eb89518173f8ed0eb758493dcebbbca6c4441bd29dc5a82099906a66
SHA3 090bf806ce50794ff5440ea0addf1fbe6be4a954ee4a5d8c1065cee17663eb7a

9

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.52604
MD5 b08b357578c53c4c6875ca95429bdbd3
SHA1 158594dc6b8499c2bd3cbcffb40132ca5400eac3
SHA256 3c6143dacc7c6f40bc9358b2da3dfc5fd174a448bf8ba24f960f6997f9584563
SHA3 1b2b36583f4e9f40c2c277c2f8cec51a7a01fdd2195a53aa2e03065ca4a2b98c

10

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x6b53
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.95053
Detected Filetype PNG graphic file
MD5 d8a6a8f02967843136d838e6fbaaee6f
SHA1 f47a9d4c1299f65197685f250f209aab6517a12e
SHA256 e641c01e16d2299637469c32c6e8661ddfde26f2f8c201375d09f30f675e6855
SHA3 af1a037ddb557a9754bb5bf5651a6950420553260987f4faac9352b777a36bfc

11

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.79967
MD5 574eb76f61f3b70daf96156a889f4c5b
SHA1 c6d363c31696c91d9ecd0d43b2ab5def0a1fdb86
SHA256 8bc16c23d954c763908e3eee6e1c035b4459b2a5df3503535b1c096f274c6e49
SHA3 0872e079b01c34e40b183dc19009601cfbbcbfdfbc9db05e51cdc552137605f3

12

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.58775
MD5 3e7fbb8b5afb2ca4202b6edf42b362b9
SHA1 b995517a8a3f08354f50f9650bd00b1463cf55e1
SHA256 c7de9857db41bc206195dd114fbe09f798414e0f06d07e55e32632090f197700
SHA3 28bfc4acfee2370f3c8569b477dc8cdcc4cfcfe347f5d04254a65975902819ec

13

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x6c8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.92699
MD5 3d3db6a49f518517ce68a617e0dfe950
SHA1 51fe8083f55929dae8b466a94b6fa664243e7299
SHA256 071dd65c09061567452f6aa890e20e9873efe8af99009af1f59470161a79da0f
SHA3 fc190c890f4440eeba40efe9e9e6ab3b8fdd6b6b3844045663ed1545078ec65e

14

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.80055
MD5 fd906c60a1e8a38ae7fce9e2222a5ac3
SHA1 b36ff8630bfaf81f21244d8dbde8acdac32332ee
SHA256 ef32fe302f4903e60b76ab702edd0ccff5f97a6744e2bd3be9c4c3a61dcc1e40
SHA3 5eda6078554f959e65cf61c25dbce0f6b97e171cbe5ae1debe337686f83311c8

15

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x56a3
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.9576
Detected Filetype PNG graphic file
MD5 712ecbd3d3b388ddea8a35d4002ff668
SHA1 919b97fee2bc7232e7a05f9a1960a89ffc0a6442
SHA256 cc34424e75852f9c9a53759d04383f7d1f674612c121f95246a25ec6ca4324b0
SHA3 08f62316697221262e4d94070bc93a4e0cf6151098ba02f38cd363bad0cf15a9

16

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.46809
MD5 ea131cefbfc5b30e17748abeebec04d7
SHA1 9acf0388e923763353829bfe5cddf51ad4f79bfd
SHA256 7c8990bc687a24b6a15963aa470e9b8b0ebfb5ebfa7bc68705e8c52e18764644
SHA3 67eb27a7aed21a3cb646f5d46d1fa5b5e73890c84fa31c68495c6f2ec1a1f75b

17

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.70225
MD5 378ce4be245d12b6e074055dd11d614b
SHA1 f79f4242a140b10803a65095ba9767a66b2601d2
SHA256 790a07d9fd4a5668f5a3cf6f9204bc6b4f353122d40b3fee6f5d2ff1282349d1
SHA3 abe8ebf3b266ca1b7b1612de997288dbacebe3d49a07908547fd725bbdcf691f

18

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x67e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.65873
MD5 332df0b37fc0df22dccac039f07d4e7d
SHA1 05668fa989dc5089b69fe07ce16e2d395fd0baa6
SHA256 b6c77b41165b8aea9051b6bec248a9593bd3d6ca42562aa0e1b86528f5d2a756
SHA3 deeabc6f0223013f10a86f3795ba8db7a7ab05bc882ebe0e199439fb7a76e2c0

19

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x5488
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.63929
MD5 9f7eb572e27331c895a13afb921bc6da
SHA1 eb4da88a9de579773ce96b35e553935b536389ad
SHA256 a7838096cd0b37789293f227fd1dfb568b415a0a2af75c66e0968abc8e3b14d1
SHA3 bb9b60e5aaa9cf1c48361abcd99d6e77ba12b612e059a4e098b84956b2585ac8

20

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.57981
MD5 c1e7d24c7f6931107c2860bdf740c497
SHA1 bcade2cd91c5ab1587ccc98f6d81490e6fd50717
SHA256 04cd929f0d23998ce2ab6a4d5b250a3ea394c0e826fb74a289a658fcb830810c
SHA3 26797cb4558bbe072e4df3d8443a880f7022e53ace300b9d596f86d6f3be18b7

21

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.7125
MD5 5df3e33efae2c2c128e0424b7fc77e51
SHA1 292a39a9aa519792cc0bc57eac744058fc9e3a6e
SHA256 fd0a9bd6b163cdfea31f34f68050b8fb6501cce2cab0f689d05005eb0254f47b
SHA3 55f7999a950ad4d8f1c0af65bb4a2f338fac978f3c6042dc3c7fb3bbc57243be

22

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.73257
MD5 ef394a1e90cd68ac51b240fe9c0d8fbe
SHA1 8e0e0985948c700ed7bb62ad5d9ef67545197e26
SHA256 37c6a1ea5b2485d7f37a2f05e1739ff78743bbd74a280ae69ff90c60d2bdb84b
SHA3 0b6a68105119a69e68905f569681387095a393668067775f8cc68bf4d516edd1

23

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.9438
MD5 c691440951ef2d0a2db52ba7966f9373
SHA1 163af9f5c63d14cebeb19213ed99bd6f7152c0ca
SHA256 e6caf8c829f1cfe653195459fb254f4dc35f207e6cdd9de700237a3095f748ba
SHA3 ed745a15b98f30f21e554911a1b1e3ea4221a37a8873c4ded0b87a2c0647fe4e

24

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.84861
MD5 4520f3edaa4fc5f5ed0ea52704385f3a
SHA1 e693abb4415658973db64c515911ac478b65b18a
SHA256 a51acdd8106d6218007017fb9b2c4f801f89b5e1cdf539ecea73268d0da23db7
SHA3 72e5c599ec11cf3fd7de8182e184e76889c1a5e450f3a6d0ea9fb56fafe53864

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x148
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33973
Detected Filetype Icon file
MD5 0698db048f7c0b1aa283210835be6d50
SHA1 b6068f4cb875b9edeef2bd2c38d2f1a6258eb7d1
SHA256 daf261d40348998fcbad12211ad02fe82188415d5d31424603407bb17f59ba8b
SHA3 9a01984aacee7f3c82f3f298ff44dc6a34890036bc52553c76c99c3facb17463

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x2d8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32154
MD5 36202be5c62479fb0715f5e50ae8a1c0
SHA1 f3d199729874f7adc7dafc1d3a70425c3b0cee86
SHA256 db4ce4662950202ec8a0d0ab3cdbc4caeb24f1637747bb8f477d59d3d831eda0
SHA3 f26e78236e22c3cbf1db72c48fcf7922a42554c6a3c56b54d48ff48e3167d0c3

1 (#2)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x1ea
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.00112
MD5 a19a2658ba69030c6ac9d11fd7d7e3c1
SHA1 879dcf690e5bf1941b27cf13c8bcf72f8356c650
SHA256 c0085eb467d2fc9c9f395047e057183b3cd1503a4087d0db565161c13527a76f
SHA3 93cbaf236d2d3870c1052716416ddf1c34f21532e56dd70144e9a01efcd0ce34

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.0.0
ProductVersion 1.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
FileDescription Multi PuTTY Manager
FileVersion (#2) 1.0.0.0
InternalName MPManager.exe
LegalCopyright Copyright © 2015
OriginalFilename MPManager.exe
ProductName Multi PuTTY Manager
ProductVersion (#2) 1.0.0.0
Assembly Version 1.0.0.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2015-Nov-09 13:59:45
Version 0.0
SizeofData 284
AddressOfRawData 0x301b54
PointerToRawData 0x2ffd54
Referenced File d:\HoanTran\C#\SessionManagement\SessionManagement\obj\Debug\MPManager.pdb

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.