7056ca2f6a9f3c525845b116c7bf564ced3284a4083ea80d7e9ef51a16f612c4

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-May-14 19:35:52
Detected languages English - United Kingdom
English - United States
CompanyName Simon Tatham
ProductName PuTTY suite
FileDescription SSH, Telnet, Rlogin, and SUPDUP client
InternalName PuTTY
OriginalFilename PuTTY
FileVersion Release 0.84 (with embedded help)
ProductVersion Release 0.84
LegalCopyright Copyright © 1997-2026 Simon Tatham.

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • chiark.greenend.org.uk
  • demo-server.example.com
  • example.com
  • greenend.org.uk
  • https://www.chiark.greenend.org.uk
  • https://www.chiark.greenend.org.uk/
  • libssh.org
  • lysator.liu.se
  • openssh.com
  • projects.tartarus.org
  • putty.projects.tartarus.org
  • server.example.com
  • tartarus.org
  • www.chiark.greenend.org.uk
Info Cryptographic algorithms detected in the binary: Uses constants related to MD5
Uses constants related to SHA1
Uses constants related to SHA256
Uses constants related to SHA512
Uses constants related to Blowfish
Uses known Diffie-Helman primes
Suspicious The PE is possibly packed. Unusual section name found: .gxfg
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryA
  • LoadLibraryExA
  • LoadLibraryExW
Functions which can be used for anti-debugging purposes:
  • FindWindowA
Can access the registry:
  • RegCloseKey
  • RegCreateKeyExA
  • RegDeleteKeyA
  • RegEnumKeyA
  • RegOpenKeyExA
  • RegQueryValueExA
  • RegSetValueExA
Possibly launches other programs:
  • CreateProcessA
  • ShellExecuteA
Can create temporary files:
  • CreateFileA
  • CreateFileW
  • GetTempPathA
Manipulates other processes:
  • OpenProcess
Can take screenshots:
  • BitBlt
  • CreateCompatibleDC
  • FindWindowA
  • GetDC
Reads the contents of the clipboard:
  • GetClipboardData
Info The PE is digitally signed. Signer: Simon Tatham
Issuer: Sectigo Public Code Signing CA R36
Safe VirusTotal score: 0/68 (Scanned on 2026-06-04 15:22:18) All the AVs think this file is safe.

Hashes

MD5 751adc0b31a17f79d479c3b7a274c6da
SHA1 5a6860bc33f3e965c333ae8c593b90ad6a9459f1
SHA256 7056ca2f6a9f3c525845b116c7bf564ced3284a4083ea80d7e9ef51a16f612c4
SHA3 a4c62e65b2519bbad0621847fa2615febe3fdd981e408bd70c63a7ea36277b34
SSDeep 49152:VOavQKlTbj+6dxyKUKtZGRXvWq/artnqoaaHSDwC:V1dqC1HtGT
Imports Hash b15607f10222dbea8c0557d3f0e79457

DOS Header

e_magic MZ
e_cblp 0x78
e_cp 0x1
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0
e_ss 0
e_sp 0
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x78

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 10
TimeDateStamp 2026-May-14 19:35:52
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xed000
SizeOfInitializedData 0xad800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00000000000BF894 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x1a5000
SizeOfHeaders 0x400
Checksum 0x1a8844
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 d9048b6a2f08395e9bb34011a6d3763f
SHA1 12f85f9e00c5fbdf9fd06cefc84540b5dc813617
SHA256 3af3cbbcad85b777eb32449a9c06cabf650f77b472ff13f462732d0709aa7565
SHA3 e4ab251b17f0aae4acfc6adf3a979d649d4d9974c3f943896e14512cf4421068
VirtualSize 0xecfb6
VirtualAddress 0x1000
SizeOfRawData 0xed000
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.44844

.rdata

MD5 ae46450562fde1a69b8641c4b35f06cb
SHA1 72d3619138014a442e756a0de3e28a98561546dc
SHA256 fbb4d35695f481fa0204167cd4f6b3bcf248bec442d585eede866a38db835539
SHA3 4126f4f37c4fe6019d9cea62bbcfc20a8fe4615e4cb375e69783749a8b058005
VirtualSize 0x44acc
VirtualAddress 0xee000
SizeOfRawData 0x44c00
PointerToRawData 0xed400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.40305

.data

MD5 f63852027322e062b574b977c413984a
SHA1 b6dc9a88ab1908a74fd51287b3a85038ce4bf671
SHA256 9943c2451fcd205449953a7c53cf1e8f5cefa3cdbdd606ee4171db2d35990e8d
SHA3 44b40737c9b3189ed711350aaf9ce7ec87ed7c8ab16fe796f7ce78b1ace17665
VirtualSize 0x420c
VirtualAddress 0x133000
SizeOfRawData 0x1000
PointerToRawData 0x132000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.078

.pdata

MD5 0267d89c92fd20939eccc7ff2c4ec5e8
SHA1 4ccfbdb272fcc4448f095b0c7ccc4aec1b850aae
SHA256 ff4f6d66d32bc4ff242bb31acf2521b663193b2831d324c2614cdef9238988cf
SHA3 859ce600a2fb4dbf053873486744334287870c08f99fa4b083d62b07f7fd6c98
VirtualSize 0x71dc
VirtualAddress 0x138000
SizeOfRawData 0x7200
PointerToRawData 0x133000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.9075

.00cfg

MD5 499b11704d1afb680f554ea88bba5e7a
SHA1 785bd9cbcd0d05eea3333bdd7509b4e232c01f77
SHA256 c4dd5c9126d4f6f62204a8d2ac0176232668a60f56271df799d9db8334a604fb
SHA3 4da6a6b40c7d3ba92f0b5faec89dea6037fff32890e3574eb5df77a0e0614909
VirtualSize 0x38
VirtualAddress 0x140000
SizeOfRawData 0x200
PointerToRawData 0x13a200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 0.509186

.gxfg

MD5 87d7f2c19d2f352f334a58576949bd1b
SHA1 c8a965bbaab6fb4c3565dcd8b35b8fd11f944005
SHA256 609cb6567b316d6689b46fb6ec7b6bf296515ec3b561a6a64917db8191f3f24a
SHA3 7f31adb810aa21350fdf7d7ec1ed182ce9886702ff4103d5707908187a531c1f
VirtualSize 0x2ae0
VirtualAddress 0x141000
SizeOfRawData 0x2c00
PointerToRawData 0x13a400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.14421

.tls

MD5 bf619eac0cdf3f68d496ea9344137e8b
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59
VirtualSize 0x11
VirtualAddress 0x144000
SizeOfRawData 0x200
PointerToRawData 0x13d000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

_RDATA

MD5 189b44fb5d0b4d10298f296572e6fe90
SHA1 cb0f77f32ae00738bf7c069a0d813a8e79ebaeab
SHA256 b769a8eed72ba0c65db8ec495131cba2fefb78b0a28c0c7e30f1f6c19bdac446
SHA3 5b6841895f78bcef28192cd487cd27f3b117af3c86b268d28d3d9bb84174d2f8
VirtualSize 0x15c
VirtualAddress 0x145000
SizeOfRawData 0x200
PointerToRawData 0x13d200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.24048

.rsrc

MD5 f0d69c7271e0f5dc9a69bc192aa0d0cd
SHA1 653a6ffcd94da24cc30a9650c0df083895f5b9cc
SHA256 4e90d2e55d222fdba52631e7ed9bc4dcc8677428c865b62e92ce013eac1988b9
SHA3 9ee0cfca1597633434f9348992e4e126f29891ef30bb3fc6a0bab9062b18db7f
VirtualSize 0x5b440
VirtualAddress 0x146000
SizeOfRawData 0x5b600
PointerToRawData 0x13d400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.82399

.reloc

MD5 986db7eb98f46bec31e041fd12fa1612
SHA1 21f7f1377e4bc668392963b37e28a24c483cc12a
SHA256 898540d4bdd906fd01f8c88da03b6632b81af1febfee1cd2e4bc037779a01fb3
SHA3 5fbdcfabc5d034b53258c266af46b580d7779ad6635095f40d1f284d52a964b5
VirtualSize 0x21f0
VirtualAddress 0x1a2000
SizeOfRawData 0x2200
PointerToRawData 0x198a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.43918

Imports

GDI32.dll BitBlt
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontA
CreateFontIndirectA
CreatePalette
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
ExcludeClipRect
ExtTextOutA
ExtTextOutW
GetBkMode
GetCharABCWidthsFloatA
GetCharWidth32A
GetCharWidth32W
GetCharWidthA
GetCharWidthW
GetCharacterPlacementW
GetCurrentObject
GetDIBits
GetDeviceCaps
GetObjectA
GetOutlineTextMetricsA
GetPixel
GetStockObject
GetTextExtentExPointA
GetTextExtentPoint32A
GetTextExtentPointA
GetTextMetricsA
IntersectClipRect
LineTo
MoveToEx
Polyline
RealizePalette
Rectangle
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetPaletteEntries
SetPixel
SetTextAlign
SetTextColor
TextOutA
TranslateCharsetInfo
UnrealizeObject
UpdateColors
IMM32.dll ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmSetCompositionFontA
ImmSetCompositionWindow
ole32.dll CoCreateInstance
CoInitialize
CoUninitialize
USER32.dll AppendMenuA
BeginPaint
CheckDlgButton
CheckMenuItem
CheckRadioButton
CloseClipboard
CreateCaret
CreateDialogParamA
CreateMenu
CreatePopupMenu
CreateWindowExA
CreateWindowExW
DefDlgProcA
DefWindowProcA
DefWindowProcW
DeleteMenu
DestroyCaret
DestroyIcon
DestroyWindow
DialogBoxParamA
DispatchMessageA
DispatchMessageW
DrawEdge
DrawIconEx
EmptyClipboard
EnableMenuItem
EnableWindow
EndDialog
EndPaint
FindWindowA
FlashWindow
GetCapture
GetCaretBlinkTime
GetClientRect
GetClipboardData
GetClipboardOwner
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDoubleClickTime
GetForegroundWindow
GetKeyboardLayout
GetKeyboardState
GetMessageA
GetMessageTime
GetParent
GetQueueStatus
GetScrollInfo
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindowLongPtrA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
HideCaret
InsertMenuA
InvalidateRect
IsDialogMessageA
IsDlgButtonChecked
IsIconic
IsWindow
IsZoomed
KillTimer
LoadCursorA
LoadIconA
LoadImageA
MapDialogRect
MessageBeep
MessageBoxA
MessageBoxIndirectW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClassW
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongPtrA
SetClipboardData
SetCursor
SetDlgItemTextA
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetKeyboardState
SetScrollInfo
SetTimer
SetWindowLongPtrA
SetWindowPlacement
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowCaret
ShowCursor
ShowWindow
SystemParametersInfoA
ToAsciiEx
TrackPopupMenu
TranslateMessage
UpdateWindow
KERNEL32.dll Beep
ClearCommBreak
CloseHandle
CompareStringW
ConnectNamedPipe
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
CreateMutexA
CreateNamedPipeA
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileA
FindFirstFileExW
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommState
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetExitCodeProcess
GetFileSizeEx
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTempPathA
GetThreadTimes
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDBCSLeadByteEx
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
MapViewOfFile
MulDiv
MultiByteToWideChar
OpenProcess
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseMutex
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetCommBreak
SetCommState
SetCommTimeouts
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetHandleInformation
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
WaitForSingleObject
WaitNamedPipeA
WideCharToMultiByte
WriteConsoleW
WriteFile
SHELL32.dll ShellExecuteA
COMDLG32.dll ChooseColorA
ChooseFontA
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW
ADVAPI32.dll AllocateAndInitializeSid
CopySid
EqualSid
GetLengthSid
GetUserNameA
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.74321
MD5 84660bec1eeebe3ad61960f5b6785077
SHA1 38a40c423383d9e79664115cf1bfea6369e82dad
SHA256 89101ef80cb32eccdb988e8ea35f93fe4c04923023ad5c9d09d6dbaadd238073
SHA3 c423144290bb9d9273fb83be08980440a3c2cbb0dca4e170f8a7db81b2bedbfb

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.98271
MD5 7d4cff360d2871fed319ecef64aa7d3d
SHA1 d7b7f55cbc2db4fad3018b6f068f1d56b1b2f88b
SHA256 8130832a780a7c334abfaaf3fce44fd99b2b8cff2e6d652764f4180472aeba74
SHA3 74045787c0b1a9cd244e4915f8121f761c4f3bd3afadaf720da5cef4eb4be380

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.67905
MD5 401c9b96e28a617d87b18f017e47e714
SHA1 15e92225acb8fb97731c2bf55b7ae535d1a04043
SHA256 fcab313f71a454c02f47579f088001b972056019c2077da20c54473def350549
SHA3 d464f12be5ff5584404967fabd1c380a396908062b4823eb99e7e122dbc236d7

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xb0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.38964
MD5 1899fdd1a312061843a64f2dc3fb9bd2
SHA1 5c81855117b20af2a5b7405a3a875564b7601d33
SHA256 549e2b61d82d10da12bc640ff22dbe352087d641c391fe382f7665847066c31a
SHA3 3909e0f0041a56a52ec3a2094d2fb33cd7389b68f551ce4b94300f66e5427bac

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x130
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.48609
MD5 ff8720e524b5fd54f831d5051e37017a
SHA1 eb680d020357a6a7aea93e8c617205a9bd673b58
SHA256 14528797e8c9c18854e9e5340c0453f608f83f63de0961e25c0528583c9fe781
SHA3 90860f98bb96b9bc2d537ab29e9063690a553019ceb55d6f2721edb5d06a9a7f

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x330
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.62978
MD5 cec32b23e7b9942c91b7d943369d82d3
SHA1 cc936495e775e943954d3e0209ec87c715abe110
SHA256 90ce310a4f670171b69ba82f780064dccd25c92ff92cfeebb41f69b19008111a
SHA3 6450647b46175493d84ba14b12f84928309b81f4618d95a94df980c75acd565a

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16607
MD5 24fa9e5d440f1eb2741c3ff69bcf0066
SHA1 176a233a5af1f19b578f4ff28b30abb5b35703fa
SHA256 ca6932144ee553c7df83805a932ca120d4a6458fda707ad92b758ade870bbff5
SHA3 7d89863c42b1bfcef049d2b1f9f3e295d8ad4d08d4d0b8f91ccdc89b8f2fd684

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.57192
MD5 88ae047b639324c0c2532300cce7761e
SHA1 db8418aeb902e55c805617aaca62b5148f25f385
SHA256 40d176e64a8772483202fa25b4d7ef89341ddfb3b0c168d762fc1f86c35abae7
SHA3 aff6159d87a79321c53dfba65f1fa7d25cf1cd9fbc98c136cef94bf0b69ef0f4

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.24629
MD5 d814ed55a8ec423c506a097ed5452e1c
SHA1 3199ef73669357b3176967cf729689ffdf506b12
SHA256 a8085f0bf68db8adc5aab891081cb87d3089a4dff05d3359047c503f17510559
SHA3 547ea078849cd72726d9b23aa04f61023fa4e6ae2796cacb09a42449f51eec44

10

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xb0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.59447
MD5 1bcd2ac1427e73b3a2616488fcb926e9
SHA1 41f1b135dba51510b2eb89108500a54d624107b9
SHA256 0fee484eb60dac53c69ca37b3d0fe76d75a1c927f5adc1db82949a3fd63c116c
SHA3 a94d7c044505574da9e6396e020e037b4ec017ea42434110be12eeba60cc7773

11

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x130
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.131
MD5 000e79a9829ed30a66c9e9f46b630867
SHA1 bb080b9a8f1c3e44cfc93651bc84841615278c5a
SHA256 09aeee834e20c34531786e0db7a69eb388d3365b1f06d2e9bfea30c6fe2a49e5
SHA3 d19f1f5d1aa0c4262c651cf72b30b46493c9f0e8451e57e795cb476c9e03a3c1

12

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x330
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.12285
MD5 6d9fd0eb34bb2598e10c2885d4c4a74e
SHA1 70a4473f857c959408dafba7a616c9baaf4626b7
SHA256 a0ac1114637fa796329b357fda4dcb1d6986ee0c8735b6072439322e86eb1a21
SHA3 a1d3545ab5b2416703e70ff48f8ecbca04edee92410cd2513444b4d7aded867d

102

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x76
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.03977
MD5 0a2c5ab8767275738e79922a882de64a
SHA1 31720966b798968da9f39f54de0ef3dd1ebc1f8a
SHA256 351948a69293ee808ea5d6189f242fc5789dd7dc7ecd64a4401c1d21bb35f16b
SHA3 826048c4e8bd66d10c2a5d9e048c341a3c7cc4f57e05b9ea0a727def01f9c4b1

110

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xba
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.31878
MD5 72f93af100ad8c97956db6faca6ed338
SHA1 1826803f0c61f1f5a0720c6b1efbebc497d683ef
SHA256 4ac0208197cc549fb3bc933f8e4749fb6d63d36bbff70d6c2c25e8548d17bbda
SHA3 21422328925af6b1414dcd2827a48c2aadb090d2bc73c538c61dc75e65b19b4d

111

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xfa
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.42355
MD5 940958bf7a44fe1b07800f9254d0e246
SHA1 0f1f143f42ad6fa17f488325753b8e4d2f4cb893
SHA256 9dd425f4a7be20de7b1ec5dbee63b3ab01863475847f68235e79c5b6656fe9de
SHA3 3c0b7b13f0f138095a4769703de13ea54499ac83107e4e00fc62e247c52c930b

113

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x8a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.27848
MD5 bbeef4707528834d9d145e7da5539109
SHA1 27a33fbb492a18eb28fd87f617cca24d26688257
SHA256 0e2ec7f3cf311724ba1021fc77efb9e95fa1f390a11cd830915b3b79ab8f843a
SHA3 ad1e6593041c8fd182db3b5628bb99cca61100e08f30890649334b0d1e8b7b1a

114

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x1ae
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.44456
MD5 d926af68d3f47fac953a171c70342146
SHA1 bc1436fcf202edd544b78ddf8a2a08192ca5efdd
SHA256 adf1c4c1ebbd6459d183b17f4f5d4c4198de4e894c5736c3f7877ca30ff4a2b2
SHA3 6cec50f0dd5c73f80a62d2c78c0b0c1c58454d6a06b2cc2c1726eeabfd862f04

116

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xde
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.43732
MD5 72838f04c596a295f460976cfe0042bf
SHA1 9586479afec0bd490fa0315856b0fc8de248d0e7
SHA256 1ab3e57d80640451d8a740855e7428cec54efc6e944f535050579553de386df4
SHA3 9544d2bad8448b93d80c44a9f8d21cf5f425a90e1abaea867109b125f73f4651

117

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xa8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.18061
MD5 a9296f891d93d8716dc4dd38fc5f7a91
SHA1 fc4c987dd4e9ed81e4bfdbc037d9f95b1e065cac
SHA256 339d96b395e4251932e37fa9a4626724f41bac230c4f06ce0179ee1d9b52c4fc
SHA3 1e9d0c1be773ecd9d4d67ae378aca1f8ff8f45bafa4301fdbd05533d1245a8e0

200

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.74417
Detected Filetype Icon file
MD5 d148c75e59377aa79c180396f45f355c
SHA1 b0b26cad3bc43856c4de4bcb92e54dce6bf1f6f7
SHA256 ef77555c4d1e769f6748372d39d8422b85e6af8f11c8a811c82ce78a87cc8c9d
SHA3 e87f2a758ae18abe7e030c83b7d0b1e53c08b6b448376f9e954b53967f547bf5

201

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.92968
Detected Filetype Icon file
MD5 9e81388befd1d4f93e209377728cb884
SHA1 4f7f26481375e507ac0045c531d8080586cc00f4
SHA256 383ca4cb5b95add3073e2cd86e4c5d62477d81bc80e0066da0919a1005f5033c
SHA3 29e35edf9c489ed74f8ae22c4e8ffc50cf11c6ca7607012da0ddcae96c53ba71

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x338
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.41938
MD5 b39bd8b4b119b8d878216e447b4f43b1
SHA1 cb0617e0bc3bd63e6741b5eeb802e5090d61cbf8
SHA256 2e4ac787790b7696332ce66852c80412db7155ee50b40f882cb0ae7ddf52d110
SHA3 f1933e406cf824333a23acd7ebd3ea2b32ca8a344af67d55eba87b8650f4c984

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x559
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.83039
MD5 30d8f5958f077d3bfa0c2a5a524e39cb
SHA1 330d87b5196ababbc9680cf74b38a9e283b7b449
SHA256 998b3d94f46beec7085a426a39f242ff732c689c73c74e4ee8bb171c5d70d183
SHA3 830938f58d0a5f9ddb477a1cc6f70753a845abc09e69bfedff5800a635da9fe0

2000

Type UNKNOWN
Language English - United States
Codepage UNKNOWN
Size 0x580b7
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.89179
Detected Filetype Microsoft Compiled HTML Help File
MD5 60a081c1138615a0e9264b13732e6585
SHA1 22599cd4109e67c162b5d8fc5a0838e2e3625cad
SHA256 d4520b1461d1292e90c645c01401a4754bc6452ae311d0bb447ae01c63ee8149
SHA3 1f4dad6b7bd93aa6ffedd73ba32c9759630f994645b201f44e825da2636d7efc

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 0.84.0.0
ProductVersion 0.84.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United Kingdom
CompanyName Simon Tatham
ProductName PuTTY suite
FileDescription SSH, Telnet, Rlogin, and SUPDUP client
InternalName PuTTY
OriginalFilename PuTTY
FileVersion (#2) Release 0.84 (with embedded help)
ProductVersion (#2) Release 0.84
LegalCopyright Copyright © 1997-2026 Simon Tatham.
Resource LangID English - United States

TLS Callbacks

StartAddressOfRawData 0x140144000
EndAddressOfRawData 0x140144010
AddressOfIndex 0x1401361b0
AddressOfCallbacks 0x14012c8b0
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_8BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140133040

RICH Header

Errors

Leave a comment

No comments yet.