fc2c152aa41c5d1893b26279b1db2e118a9c35b1c533923438577c7c27acac5a

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-Mar-02 21:41:12
Detected languages English - United States
Debug artifacts C:\projects\github-release\teraterm\Release\ttpmacro.pdb
CompanyName T. Teranishi, TeraTerm Project
FileDescription Tera Term Macro Interpreter
FileVersion 5, 4, 0, 0
InternalName TTPMACRO
LegalCopyright Copyright (C) 1994-1998 T. Teranishi, (C) 2004-2025 TeraTerm Project
OriginalFilename TTPMACRO.EXE
ProductName Tera Term
ProductVersion 5.4.0 9694ce3f1

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ v6.0 DLL
Microsoft Visual C++ 6.0 - 8.0
MASM/TASM - sig2(h)
Info Interesting strings found in the binary: Contains domain names:
  • https://teratermproject.github.io
  • https://teratermproject.github.io/manual/5/ja/reference/develop.html
Info Cryptographic algorithms detected in the binary: Uses constants related to MD5
Uses constants related to SHA1
Uses constants related to SHA256
Uses constants related to SHA512
Uses constants related to AES
Uses constants related to Blowfish
Suspicious The PE is possibly packed. Unusual section name found: .fptable
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryW
  • LoadLibraryExA
  • LoadLibraryExW
Functions which can be used for anti-debugging purposes:
  • FindWindowA
Code injection capabilities (PowerLoader):
  • GetWindowLongA
  • FindWindowA
  • GetWindowLongW
Can access the registry:
  • RegQueryValueExW
Possibly launches other programs:
  • CreateProcessW
  • ShellExecuteW
Can create temporary files:
  • CreateFileA
  • CreateFileW
  • GetTempPathW
Uses functions commonly found in keyloggers:
  • AttachThreadInput
  • GetForegroundWindow
Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
Leverages the raw socket API to access the Internet:
  • closesocket
  • WSAIoctl
  • inet_ntoa
  • WSAStartup
  • connect
  • getsockopt
  • WSACleanup
  • recv
  • send
  • WSASocketA
  • setsockopt
  • WSAGetLastError
  • ntohl
  • htonl
  • inet_pton
Enumerates local disk drives:
  • GetDriveTypeW
Can take screenshots:
  • CreateCompatibleDC
  • BitBlt
  • GetDC
  • FindWindowA
Reads the contents of the clipboard:
  • GetClipboardData
Suspicious VirusTotal score: 1/68 (Scanned on 2026-03-30 02:53:18) Trapmine: suspicious.low.ml.score

Hashes

MD5 0a7823f64d052e29035f4f747b895453
SHA1 f2b78a0b5ff7d69673f0744689c96a8378c46635
SHA256 fc2c152aa41c5d1893b26279b1db2e118a9c35b1c533923438577c7c27acac5a
SHA3 dabc61c4c815a4fe53e7cb73085408013bdb3d252a88986676e9b9e48278b83e
SSDeep 49152:4buaouf1DHLnNOG1hlV5ZD/drjP1cEbd:vef1jLR1hlV51/dVcE
Imports Hash 18380f712b816e3a6b6569134b354539

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x130

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 6
TimeDateStamp 2025-Mar-02 21:41:12
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0x174600
SizeOfInitializedData 0xe8e00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000DEA03 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x176000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x262000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 453365995a12a5f09db51955d7ee765c
SHA1 158b695a63ffaa408e9ea98834cd0295051bfa97
SHA256 54ed0507f5f9f0fe35e3bdb71869785feff4085d72ec82357431299d2d1f9b23
SHA3 199bec4db2510a2321795924af6dc47cb49b0974ce448cbceeeb4411a2b21504
VirtualSize 0x174485
VirtualAddress 0x1000
SizeOfRawData 0x174600
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.63716

.rdata

MD5 87f7aef0bc25ab54012b7ff435aa39b4
SHA1 c335a6cd324df9d6c42d58dd3832dd2a998fea67
SHA256 9451026750f3eafc35c721c73e639be44700410de604aabd5c5208e3f6cf9a15
SHA3 71fdba316c7d629348a358e17bea45643ad7e80b3b669193a407168ca9736524
VirtualSize 0xa8960
VirtualAddress 0x176000
SizeOfRawData 0xa8a00
PointerToRawData 0x174a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.05423

.data

MD5 5c0933b1e9daddb0820d5d84fd310087
SHA1 d5eaf8e5b503311377daa113c47fa05072d84e64
SHA256 a31dbaa06acb22d90833b770f5e26b273a72343432cece76bfb4542c8a3078a2
SHA3 b62f6b32087e2f31d7dacdeba54f9e2fd73218e8480f9bbf22baa29c5e3e2ed0
VirtualSize 0x18104
VirtualAddress 0x21f000
SizeOfRawData 0xe600
PointerToRawData 0x21d400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.10429

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59
VirtualSize 0x80
VirtualAddress 0x238000
SizeOfRawData 0x200
PointerToRawData 0x22ba00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 87c251a3bf2a111cfd7fca588632cae9
SHA1 21fb08f0cd1f9c0a65b4a9f9d27cfa1d35d18c3f
SHA256 ee117da6ce963abbf636ec2bc37b2ff1070ec1a76015867645db2eb5dd9164da
SHA3 1d233340ad0cf7884edd57e62b68f84cacea2d6f91f04b987ac7b711eb41f84c
VirtualSize 0x19148
VirtualAddress 0x239000
SizeOfRawData 0x19200
PointerToRawData 0x22bc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.05871

.reloc

MD5 53afc0f9010c909868c3514b1243762c
SHA1 2042a7293735810fbff74bbaba99d8130f0e9e5f
SHA256 441caf6cf6587a191cc453b563c4f65bd3d1f2c62ace1be8cbc17dd7eb2e25a2
SHA3 7132df86375840f0729c87c7ba9dcc0034ecea1b8f897696d4c821bb825fb969
VirtualSize 0xed74
VirtualAddress 0x253000
SizeOfRawData 0xee00
PointerToRawData 0x244e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.62271

Imports

COMCTL32.dll #6
WS2_32.dll closesocket
WSAIoctl
inet_ntoa
WSAStartup
connect
getsockopt
WSACleanup
recv
send
WSASocketA
setsockopt
WSAGetLastError
ntohl
htonl
inet_pton
imagehlp.dll SymGetModuleBase
SymInitialize
SymGetSymFromAddr
StackWalk
SymGetModuleInfo
SymFunctionTableAccess
SymCleanup
bcrypt.dll BCryptGenRandom
KERNEL32.dll IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
InitializeCriticalSectionEx
IsThreadAFiber
FlsFree
SetCurrentDirectoryW
CreateDirectoryW
CreateFileA
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFileSize
GetFileTime
LockFile
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
UnlockFile
WriteFile
CloseHandle
GetLastError
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetLocalTime
SetLocalTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
CreateFileMappingA
GetPrivateProfileStringW
WritePrivateProfileStringW
CopyFileW
MoveFileW
GetCommandLineW
GetCurrentDirectoryW
ReleaseMutex
CreateMutexA
OpenMutexA
OutputDebugStringW
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultLCID
GetStartupInfoW
OutputDebugStringA
GetSystemTime
GetModuleHandleA
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
GetSystemDirectoryW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
LoadLibraryW
ExpandEnvironmentStringsW
GetFullPathNameW
SetLastError
LocalFree
FormatMessageW
FileTimeToSystemTime
GetConsoleTitleA
SetConsoleTitleA
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentThread
GlobalFree
AllocConsole
FreeResource
LoadResource
LockResource
FindResourceW
MoveFileExA
SystemTimeToFileTime
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitOnceExecuteOnce
TerminateProcess
VirtualAlloc
VirtualFree
GetSystemInfo
GetStdHandle
GetFileType
GetConsoleMode
SetConsoleMode
UnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
FlsSetValue
EnumSystemLocalesW
GetCPInfo
HeapReAlloc
SetConsoleCtrlHandler
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
FindFirstFileExW
IsValidCodePage
GetCommandLineA
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
HeapSize
GetProcessHeap
GetACP
FlsGetValue
FlsAlloc
GetTempPathW
SetEnvironmentVariableW
HeapAlloc
HeapFree
GetConsoleOutputCP
ReadConsoleW
WriteConsoleW
SetStdHandle
GetModuleHandleExW
ExitProcess
TzSpecificLocalTimeToSystemTime
SetFileTime
SystemTimeToTzSpecificLocalTime
RaiseException
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetTimeZoneInformation
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
DecodePointer
GDI32.dll EnumFontFamiliesExW
EnumFontFamiliesExA
CreateDIBSection
DeleteObject
DeleteDC
CreateCompatibleDC
BitBlt
GetDeviceCaps
SelectObject
GetTextExtentPoint32W
COMDLG32.dll GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW
ADVAPI32.dll RegQueryValueExW
SHELL32.dll SHGetPathFromIDListW
ShellExecuteW
SHGetPathFromIDListEx
SHBrowseForFolderW
SHGetSpecialFolderLocation
DragQueryFileW
ole32.dll CoTaskMemFree
CoCreateInstance
ttpcmn.dll #61
SETUPAPI.dll SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceRegistryPropertyA
USER32.dll (delay-loaded) SendMessageA
SetClassLongA
MoveWindow
SetWindowPos
GetDlgItem
GetDC
ReleaseDC
InvalidateRect
GetClientRect
GetWindowRect
SetForegroundWindow
ShowWindow
AttachThreadInput
BringWindowToTop
GetSystemMenu
RemoveMenu
GetForegroundWindow
GetWindowThreadProcessId
PostMessageA
SetTimer
KillTimer
MessageBeep
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
IsDialogMessageA
DdeInitializeA
DdeUninitialize
DdeConnect
DdeClientTransaction
DdeAccessData
DdeUnaccessData
DdeFreeDataHandle
DdeCreateStringHandleA
DdeFreeStringHandle
DdeCmpStringHandles
GetTabbedTextExtentA
GetTabbedTextExtentW
PostQuitMessage
DestroyWindow
ClientToScreen
ScreenToClient
LoadIconA
DefWindowProcW
CreateDialogIndirectParamW
EndDialog
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextA
SetDlgItemTextW
GetDlgItemTextA
GetDlgItemTextW
IsDlgButtonChecked
SendDlgItemMessageA
SendDlgItemMessageW
SetFocus
EnableWindow
BeginPaint
EndPaint
SetWindowTextA
SetWindowTextW
MessageBoxA
GetWindowLongA
SetWindowLongA
GetClassNameA
IsWindowVisible
IsIconic
SystemParametersInfoA
SendMessageW
CallWindowProcA
DialogBoxIndirectParamW
GetSystemMetrics
SetWindowLongW
GetDesktopWindow
DestroyIcon
LoadImageW
CharNextA
CharPrevA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetPriorityClipboardFormat
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
MessageBoxW
GetParent
SystemParametersInfoW
SetWinEventHook
UnhookWinEvent
GetMenuStringW
GetWindowTextW
GetWindowTextLengthW
ModifyMenuW
wsprintfA
FindWindowA
PostMessageW
CallWindowProcW
GetKeyState
GetWindowLongW
GetClassLongA
GetWindow

Delayed Imports

Attributes 0x1
Name USER32.dll
ModuleHandle 0x235ee8
DelayImportAddressTable 0x22d3f4
DelayImportNameTable 0x21ace4
BoundDelayImportTable 0x21b5cc
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

_DequoteParam@12

Ordinal 1
Address 0x20320

ExtractDirName

Ordinal 2
Address 0x20460

ExtractFileName

Ordinal 3
Address 0x204b0

_GetI18nLogfont@20

Ordinal 4
Address 0x288f0

_GetI18nStr@24

Ordinal 5
Address 0x28910

_GetI18nStrW@24

Ordinal 6
Address 0x289a0

GetMessageboxFont

Ordinal 7
Address 0x20700

_GetParam@12

Ordinal 8
Address 0x20850

HasBalloonTipSupport

Ordinal 9
Address 0x20900

HasDnsQuery

Ordinal 10
Address 0x20920

HasMultiMonitorSupport

Ordinal 11
Address 0x20950

IsWindows2000

Ordinal 12
Address 0x20a30

IsWindows2000OrLater

Ordinal 13
Address 0x20a40

IsWindows7OrLater

Ordinal 14
Address 0x20a50

IsWindows95

Ordinal 15
Address 0x20a60

IsWindowsMe

Ordinal 16
Address 0x20a70

IsWindowsNT4

Ordinal 17
Address 0x20a80

IsWindowsNTKernel

Ordinal 18
Address 0x20a90

IsWindowsVistaOrLater

Ordinal 19
Address 0x20b00

OnigDefaultCaseFoldFlag

Ordinal 20
Address 0x21f640

OnigDefaultSyntax

Ordinal 21
Address 0x2202b0

OnigEncodingASCII

Ordinal 22
Address 0x21f668

OnigEncodingBIG5

Ordinal 23
Address 0x220020

OnigEncodingCP1251

Ordinal 24
Address 0x21ffc8

OnigEncodingEUC_CN

Ordinal 25
Address 0x21feb8

OnigEncodingEUC_JP

Ordinal 26
Address 0x21fda8

OnigEncodingEUC_KR

Ordinal 27
Address 0x21fe60

OnigEncodingEUC_TW

Ordinal 28
Address 0x21fe08

OnigEncodingGB18030

Ordinal 29
Address 0x220078

OnigEncodingISO_8859_1

Ordinal 30
Address 0x21f6c0

OnigEncodingISO_8859_10

Ordinal 31
Address 0x21f9e0

OnigEncodingISO_8859_11

Ordinal 32
Address 0x21fa38

OnigEncodingISO_8859_13

Ordinal 33
Address 0x21fa90

OnigEncodingISO_8859_14

Ordinal 34
Address 0x21fae8

OnigEncodingISO_8859_15

Ordinal 35
Address 0x21fb40

OnigEncodingISO_8859_16

Ordinal 36
Address 0x21fb98

OnigEncodingISO_8859_2

Ordinal 37
Address 0x21f720

OnigEncodingISO_8859_3

Ordinal 38
Address 0x21f778

OnigEncodingISO_8859_4

Ordinal 39
Address 0x21f7d0

OnigEncodingISO_8859_5

Ordinal 40
Address 0x21f828

OnigEncodingISO_8859_6

Ordinal 41
Address 0x21f880

OnigEncodingISO_8859_7

Ordinal 42
Address 0x21f8d8

OnigEncodingISO_8859_8

Ordinal 43
Address 0x21f930

OnigEncodingISO_8859_9

Ordinal 44
Address 0x21f988

OnigEncodingKOI8_R

Ordinal 45
Address 0x21ff70

OnigEncodingSJIS

Ordinal 46
Address 0x21ff10

OnigEncodingUTF16_BE

Ordinal 47
Address 0x21fc48

OnigEncodingUTF16_LE

Ordinal 48
Address 0x21fca0

OnigEncodingUTF32_BE

Ordinal 49
Address 0x21fcf8

OnigEncodingUTF32_LE

Ordinal 50
Address 0x21fd50

OnigEncodingUTF8

Ordinal 51
Address 0x21fbf0

OnigSyntaxASIS

Ordinal 52
Address 0x2200d0

OnigSyntaxEmacs

Ordinal 53
Address 0x220148

OnigSyntaxGnuRegex

Ordinal 54
Address 0x220198

OnigSyntaxGrep

Ordinal 55
Address 0x220170

OnigSyntaxJava

Ordinal 56
Address 0x2201c0

OnigSyntaxOniguruma

Ordinal 57
Address 0x220288

OnigSyntaxPerl

Ordinal 58
Address 0x2201e8

OnigSyntaxPerl_NG

Ordinal 59
Address 0x220210

OnigSyntaxPosixBasic

Ordinal 60
Address 0x2200f8

OnigSyntaxPosixExtended

Ordinal 61
Address 0x220120

OnigSyntaxPython

Ordinal 62
Address 0x220238

OnigSyntaxRuby

Ordinal 63
Address 0x220260

OutputDebugPrintf

Ordinal 64
Address 0x20b10

_SetI18nDlgStrs@20

Ordinal 65
Address 0x28a30

_SetI18nMenuStrs@20

Ordinal 66
Address 0x28a50

b64decode

Ordinal 67
Address 0x20eb0

doSelectFolder

Ordinal 68
Address 0x21140

get_OPENFILENAME_SIZEA

Ordinal 69
Address 0x211b0

get_OPENFILENAME_SIZEW

Ordinal 70
Address 0x211c0

mctimelocal

Ordinal 71
Address 0x21270

onig_builtin_cmp

Ordinal 72
Address 0xef5c0

onig_builtin_count

Ordinal 73
Address 0xef920

onig_builtin_error

Ordinal 74
Address 0xef970

onig_builtin_fail

Ordinal 75
Address 0xef9d0

onig_builtin_max

Ordinal 76
Address 0xef9e0

onig_builtin_mismatch

Ordinal 77
Address 0xefb60

onig_builtin_skip

Ordinal 78
Address 0xefcf0

onig_builtin_total_count

Ordinal 79
Address 0xefd10

onig_callout_tag_is_exist_at_callout_num

Ordinal 80
Address 0xff4b0

onig_copy_encoding

Ordinal 81
Address 0xefe70

onig_copy_syntax

Ordinal 82
Address 0xf60c0

onig_end

Ordinal 83
Address 0xe7110

onig_error_code_to_str

Ordinal 84
Address 0xe00b0

onig_foreach_name

Ordinal 85
Address 0xff510

onig_free

Ordinal 86
Address 0xe71e0

onig_free_body

Ordinal 87
Address 0xe7200

onig_free_match_param

Ordinal 88
Address 0xefeb0

onig_free_match_param_content

Ordinal 89
Address 0xefee0

onig_get_arg_by_callout_args

Ordinal 90
Address 0xeff00

onig_get_args_num_by_callout_args

Ordinal 91
Address 0xeff50

onig_get_callback_each_match

Ordinal 92
Address 0xeff80

onig_get_callout_data

Ordinal 93
Address 0xeff90

onig_get_callout_data_by_callout_args

Ordinal 94
Address 0xf0000

onig_get_callout_data_by_callout_args_self

Ordinal 95
Address 0xf0070

onig_get_callout_data_by_callout_args_self_dont_clear_old

Ordinal 96
Address 0xf00f0

onig_get_callout_data_by_tag

Ordinal 97
Address 0xf0150

onig_get_callout_data_by_tag_dont_clear_old

Ordinal 98
Address 0xf01e0

onig_get_callout_data_dont_clear_old

Ordinal 99
Address 0xf0250

onig_get_callout_in_by_callout_args

Ordinal 100
Address 0xf02a0

onig_get_callout_name_by_name_id

Ordinal 101
Address 0xff630

onig_get_callout_num_by_callout_args

Ordinal 102
Address 0xf02b0

onig_get_callout_num_by_tag

Ordinal 103
Address 0xff650

onig_get_callout_tag_end

Ordinal 104
Address 0xff6f0

onig_get_callout_tag_start

Ordinal 105
Address 0xff720

onig_get_capture_range_in_callout

Ordinal 106
Address 0xf02c0

onig_get_capture_tree

Ordinal 107
Address 0xf0380

onig_get_case_fold_flag

Ordinal 108
Address 0xf0390

onig_get_contents_by_callout_args

Ordinal 109
Address 0xf03a0

onig_get_contents_end_by_callout_args

Ordinal 110
Address 0xf03d0

onig_get_current_by_callout_args

Ordinal 111
Address 0xf0400

onig_get_default_case_fold_flag

Ordinal 112
Address 0xe7380

onig_get_encoding

Ordinal 113
Address 0xf0410

onig_get_match_stack_limit_size

Ordinal 114
Address 0xf0420

onig_get_name_id_by_callout_args

Ordinal 115
Address 0xf0430

onig_get_options

Ordinal 116
Address 0xf0440

onig_get_parse_depth_limit

Ordinal 117
Address 0xff770

onig_get_passed_args_num_by_callout_args

Ordinal 118
Address 0xf0450

onig_get_progress_callout

Ordinal 119
Address 0xf0480

onig_get_regex_by_callout_args

Ordinal 120
Address 0xf0490

onig_get_retraction_callout

Ordinal 121
Address 0xf04a0

onig_get_retry_counter_by_callout_args

Ordinal 122
Address 0xf04b0

onig_get_retry_limit_in_match

Ordinal 123
Address 0xf04c0

onig_get_retry_limit_in_search

Ordinal 124
Address 0xf04d0

onig_get_right_range_by_callout_args

Ordinal 125
Address 0xf04e0

onig_get_start_by_callout_args

Ordinal 126
Address 0xf04f0

onig_get_string_by_callout_args

Ordinal 127
Address 0xf0500

onig_get_string_end_by_callout_args

Ordinal 128
Address 0xf0510

onig_get_subexp_call_limit_in_search

Ordinal 129
Address 0xf0520

onig_get_subexp_call_max_nest_level

Ordinal 130
Address 0xf0530

onig_get_syntax

Ordinal 131
Address 0xf0540

onig_get_syntax_behavior

Ordinal 132
Address 0xf60f0

onig_get_syntax_op

Ordinal 133
Address 0xf6100

onig_get_syntax_op2

Ordinal 134
Address 0xf6110

onig_get_syntax_options

Ordinal 135
Address 0xf6120

onig_get_used_stack_size_in_callout

Ordinal 136
Address 0xf0550

onig_initialize

Ordinal 137
Address 0xe73e0

onig_initialize_encoding

Ordinal 138
Address 0x105ce0

onig_initialize_match_param

Ordinal 139
Address 0xf0590

onig_is_error_code_needs_param

Ordinal 140
Address 0xe01d0

onig_match

Ordinal 141
Address 0xf05e0

onig_match_with_param

Ordinal 142
Address 0xf0670

onig_name_to_backref_number

Ordinal 143
Address 0xff880

onig_name_to_group_numbers

Ordinal 144
Address 0xff8f0

onig_new

Ordinal 145
Address 0xe7640

onig_new_match_param

Ordinal 146
Address 0xf0790

onig_noname_group_capture_is_active

Ordinal 147
Address 0xffe90

onig_number_of_capture_histories

Ordinal 148
Address 0xf07f0

onig_number_of_captures

Ordinal 149
Address 0xf0820

onig_number_of_names

Ordinal 150
Address 0xffed0

onig_reg_init

Ordinal 151
Address 0xe78c0

onig_region_clear

Ordinal 152
Address 0xf0830

onig_region_copy

Ordinal 153
Address 0xf08a0

onig_region_free

Ordinal 154
Address 0xf09c0

onig_region_init

Ordinal 155
Address 0xf0a40

onig_region_new

Ordinal 156
Address 0xf0a70

onig_region_resize

Ordinal 157
Address 0xf0ab0

onig_region_set

Ordinal 158
Address 0xf0b60

onig_regset_add

Ordinal 159
Address 0xf0bb0

onig_regset_free

Ordinal 160
Address 0xf0c70

onig_regset_get_regex

Ordinal 161
Address 0xf0d40

onig_regset_get_region

Ordinal 162
Address 0xf0d60

onig_regset_new

Ordinal 163
Address 0xf0d80

onig_regset_number_of_regex

Ordinal 164
Address 0xf0ed0

onig_regset_replace

Ordinal 165
Address 0xf0ee0

onig_regset_search

Ordinal 166
Address 0xf1010

onig_regset_search_with_param

Ordinal 167
Address 0xf1120

onig_scan

Ordinal 168
Address 0xf16d0

onig_search

Ordinal 169
Address 0xf1820

onig_search_with_param

Ordinal 170
Address 0xf18c0

onig_set_callback_each_match

Ordinal 171
Address 0xf1900

onig_set_callout_data

Ordinal 172
Address 0xf1910

onig_set_callout_data_by_callout_args

Ordinal 173
Address 0xf1960

onig_set_callout_data_by_callout_args_self

Ordinal 174
Address 0xf19b0

onig_set_callout_data_by_tag

Ordinal 175
Address 0xf1a00

onig_set_callout_of_name

Ordinal 176
Address 0x1004d0

onig_set_callout_user_data_of_match_param

Ordinal 177
Address 0xf1a40

onig_set_capture_num_limit

Ordinal 178
Address 0x100840

onig_set_default_case_fold_flag

Ordinal 179
Address 0xe79d0

onig_set_default_syntax

Ordinal 180
Address 0xf6130

onig_set_match_stack_limit_size

Ordinal 181
Address 0xf1a50

onig_set_match_stack_limit_size_of_match_param

Ordinal 182
Address 0xf1a60

onig_set_meta_char

Ordinal 183
Address 0xf6150

onig_set_parse_depth_limit

Ordinal 184
Address 0x100860

onig_set_progress_callout

Ordinal 185
Address 0xf1a70

onig_set_progress_callout_of_match_param

Ordinal 186
Address 0xf1a80

onig_set_retraction_callout

Ordinal 187
Address 0xf1a90

onig_set_retraction_callout_of_match_param

Ordinal 188
Address 0xf1aa0

onig_set_retry_limit_in_match

Ordinal 189
Address 0xf1ab0

onig_set_retry_limit_in_match_of_match_param

Ordinal 190
Address 0xf1ac0

onig_set_retry_limit_in_search

Ordinal 191
Address 0xf1ad0

onig_set_retry_limit_in_search_of_match_param

Ordinal 192
Address 0xf1ae0

onig_set_subexp_call_limit_in_search

Ordinal 193
Address 0xf1af0

onig_set_subexp_call_max_nest_level

Ordinal 194
Address 0xf1b00

onig_set_syntax_behavior

Ordinal 195
Address 0xf61e0

onig_set_syntax_op

Ordinal 196
Address 0xf61f0

onig_set_syntax_op2

Ordinal 197
Address 0xf6200

onig_set_syntax_options

Ordinal 198
Address 0xf6210

onig_set_verb_warn_func

Ordinal 199
Address 0x100880

onig_set_warn_func

Ordinal 200
Address 0x100890

onig_setup_builtin_monitors_by_ascii_encoded_name

Ordinal 201
Address 0xf1b10

onig_unicode_define_user_property

Ordinal 202
Address 0x106e20

onigenc_get_default_encoding

Ordinal 203
Address 0x106220

onigenc_get_left_adjust_char_head

Ordinal 204
Address 0x106230

onigenc_get_prev_char_head

Ordinal 205
Address 0x106250

onigenc_get_right_adjust_char_head

Ordinal 206
Address 0x106270

onigenc_get_right_adjust_char_head_with_prev

Ordinal 207
Address 0x1062a0

onigenc_init

Ordinal 208
Address 0x106310

onigenc_is_valid_mbc_string

Ordinal 209
Address 0x106380

onigenc_set_default_caseconv_table

Ordinal 210
Address 0x1066d0

onigenc_set_default_encoding

Ordinal 211
Address 0x1066e0

onigenc_step_back

Ordinal 212
Address 0x106780

onigenc_str_bytelen_null

Ordinal 213
Address 0x1067c0

onigenc_strdup

Ordinal 214
Address 0x106810

onigenc_strlen

Ordinal 215
Address 0x106860

onigenc_strlen_null

Ordinal 216
Address 0x106890

replaceInvalidFileNameChar

Ordinal 217
Address 0x21480

600

Type AFX_DIALOG_LAYOUT
Language English - United States
Codepage UNKNOWN
Size 0x2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 c4103f122d27677c9db144cae1394a66
SHA1 1489f923c4dca729178b3e3233458550d8dddf29
SHA256 96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7
SHA3 762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.44268
MD5 7bee521fbc17bf8519a8805934faa194
SHA1 46cac8547b939d0446874a11bb59d4321239ab14
SHA256 188f5e59c3b661c6ec4e5a09d7bd52ebd1582e87ce9ed030819a5d5c33fd6b39
SHA3 d2cd25c756e939f40126659faca5884cd170a1ac91ee360d3b571c2ad85355a3

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.99645
MD5 0cd0718bb407284d75448ba6509d9ea0
SHA1 d0b96150bbf137bab5a7d38b6426d950557ceabb
SHA256 99fe4d548ce2495582ab31ca5faec85523c8fa46660563d0c1abb031bdfbe692
SHA3 5827a85015a2d487a44887f085e370b4ac79aace9df1c2919dfcd47e2bf7ee1b

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x19d7
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.71951
Detected Filetype PNG graphic file
MD5 443b385504472e2cd6ec5d76413afe5c
SHA1 005267820f64da2813687fdadeb5103a9927d6e2
SHA256 14376bb1f12a828b20f4408e348a1c3b47fd54536ce508b36b2bdb410000097e
SHA3 c8330ad3670d6ff46510b79b1640d59152cfd34a49f1f60e1d654febb96594db

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.69727
MD5 c5c758d1090fb1c382f0b8246cb40dd8
SHA1 ddd4e8de620757d6aa8dcfea20350d1c8c9bc979
SHA256 36696173fb76c710c03402e5134d1d42b1ced6834373733f6c34c279b0afed69
SHA3 f6b351b7942e5f35bed2d43d6ecd46bfe8e50e2351ef9286542a377f9fa241d4

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.10755
MD5 fd938c3bc419657b460fcd8b0d3cbede
SHA1 e6a6eb3d63457a40862e4b044bd52e76a4a7a13a
SHA256 78188a1d24e6fc53ddc3e8af068ee0a26f2a2249cef86d38ee4bec36587991fd
SHA3 d63b8564dfb4507cee08f593a844f737e291ad4948e10e9e413ae43b16fee3fe

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.75805
MD5 5b47cd13ec90daa6361ddc7cb817d89f
SHA1 96d29aebe1058c1f57be7252dbda0f23ca2f4760
SHA256 9a90f6cf0badae001ce65919ae9a023c134376e7118b9900a061fe0e218f7b1e
SHA3 3bf7e99e79b0dab98b9cd7a25efab9068001b3311e421d3f7ccda14d5eb2aa9a

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.96885
MD5 408b13c0fe1bceae1a1bc1134b927fbf
SHA1 dcdf20bb67015fb1805d9488f9fb0849accb34c2
SHA256 c995f45cdfd8b293ede867691f3292e9263ec49ba8d384e5cdd09624a28c2a8c
SHA3 7b6c628444cec980d51a780539c39eb9ed4587aca52da9e3af883467ad4fdbe2

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.22558
MD5 58aba273a271858d985a6cd22c36016c
SHA1 c0726b424538194175493de22943b866e04cc12d
SHA256 e8b32158b563a04bd17d424a30f2f2dddb40ad94cdff81389231443f7df15459
SHA3 b946769e5a2c576612e9d9daf2624f2a7e5fb393aa38eac30043ecdbee8fb27f

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2ebc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.88836
Detected Filetype PNG graphic file
MD5 f5aaf31d627b4b3788f3f5ab3a913aa8
SHA1 8c2422746dc8c01f0fa346aa712d299a19c66e0f
SHA256 ce2fd6f25d7b8dc4bf07fdc4560f3ae18d7baca2538502134ff21037086787e6
SHA3 f68275de903d2546d3ef2d3cb44cc97b68ee7ae184964c1b4f169337304bf937

10

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.17855
MD5 d977e877f61516e2ad12b38cb2acedc0
SHA1 41b8ab17dbc36a4767b4d3ad9c5b1db357738808
SHA256 affa980c6419c77e87d2c12772ce9b8c7eac8e4fc0bda6b844e4afd63a01906b
SHA3 ef89ee9e388886f81038f4f2a1fd69a0426636d242901d99833a64a31528e9f6

11

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.55299
MD5 2c3758e49af4b220f2e849b6a4a4181c
SHA1 791198cd121e785a851cb7f7bd207ea88ecd1344
SHA256 3987f3a2337e3d4c268b40bb94dbeb77c0ea5cb10cc325783ce8c62c7afdf14a
SHA3 f6ab732f75d7de22a5ecb84e1159356f9d3734f47e1847e4f6ee9a2393319f35

12

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.8367
MD5 a2e937869e2ce9166c2c33b25453e0d4
SHA1 6ea3c3b2655f53a8d37a65e2aea6cbee1ef94589
SHA256 e3cca0c86f73f549649f4d1663777471073962210cf56e2e918cbf7cfa657ad8
SHA3 4a9da7693f7278c1b0e8e308d18a12bd532cca5bfb3c20b6da0c8c43ffcdf258

13

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.74155
MD5 f2861669ffe09948f6b61fcbcdc3988c
SHA1 c9e08b845bf0daacd45531271f9d06a0673b1151
SHA256 ac28dc4b16df124b85aed56600212d5d40ff0bf330c4046708f8da2bb1f16932
SHA3 ba084bcb741308f5f4c91e56e3f655fd21bcbc36473a1d48aeb63d61510b311d

14

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.62519
MD5 e8343ef0013a692a8793518b00a8b859
SHA1 bf7a57d56bf86fab8ddb19f54e56e9735ce27924
SHA256 1321e2bc6c119b616ba39542f7a556c8c6d09ddc47138e6db9d9efefbf3674fa
SHA3 65b0f8eba88cfe626d12b4a7f18f2c568d23f58b573ea8419ebd1c31d5aa29b9

15

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1b8d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.72955
Detected Filetype PNG graphic file
MD5 6655b783bd46e6c5434887726d5c3135
SHA1 df96061e9e760321342df1dfb8f568105578ce60
SHA256 6fda778f7c25816ceddfdea1f42307c8a181362b3a4f167f6daa4165cd5247d4
SHA3 95373a94d7ebeec7b3819767b5b26b8a7c99f775bbfa3a6ade6d7c86e2d7abff

16

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.71957
MD5 d15fb70163e5a56b6a1e52ae9fcf36a9
SHA1 8fbd5e33f7b65875265a0352e2c67ff4aaca0ad3
SHA256 faec1c6fc567f0d52fe19481a41b66fa92fa43d749ab5d263ab2e9a8a1b98d63
SHA3 c97ef6c8d839f51764e68180af3a7e92faacc13952df9bf081f668ed9b9c5119

17

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.96921
MD5 ee203679bcad26eccfc263cdd784790f
SHA1 9e44cd8f2d0a7d5592c9b72be39509055b7b6be2
SHA256 46f5e82305f6dab68b6c5bdd6a3966518e1c5d43efca0eea148f90f47e05a0ba
SHA3 721cfed8b3abd498116fabee1f58e24c23f3c79b0f3efaafcc5a9e9b12d49955

18

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33158
MD5 df09478e8591d351b292056d1ff3ee2a
SHA1 96f59c3b8ecaa493e148266c3bb4891f1bbbcbc7
SHA256 187406c95b595c4b3bed1b9e5440c62b51a852ff268128a871228240a11caced
SHA3 daa1e17bae47e0a4c69da10c979c0d353eb734d6926840038aebb78cae09c9cd

19

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.26041
MD5 435264bbaba4c35fa00dcf512dad5b7d
SHA1 ac52757b54e1640f3a6a27beb79cdbe371cdebdc
SHA256 1d4147ef6dbbad3ff70ba13614a8037c43842836900d98f6a7b3fb4a6770cc8c
SHA3 43675066906cde5693a2bf24a5db551c15e23fd4278b9502b1054a547a4eefcb

20

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.88554
MD5 8c8608709fe6fb89990a6188c2efd465
SHA1 24c58825f12d02deccf10f1ac59b97de8d7ba4a9
SHA256 30cc2082c257b868f83976a50803f7134f28eac8f859d9feb60915645736c69f
SHA3 400b278f33b52a2ce1f9236eada95836667e4e3ceeba3890f7be7d5ae0df2b44

21

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x15f5
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.67018
Detected Filetype PNG graphic file
MD5 8da67880f5a560cf540395ef0a455806
SHA1 c0b7d2d94335a48f29a7dd81797110662d8937d9
SHA256 f78daae32f5794b6924f9d2845362d244758b337bb5fff6f4707102c0c9029ce
SHA3 71bc664124112ffb7bbb1ef20740d93e86aa7c8f1332dc9d6764ea7c19f03f38

22

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.27772
MD5 4ac1149fbedea64516dfff93596fde5c
SHA1 7bd16d1da6dd257b6b814ec75d9d1c5fa839514a
SHA256 92a6a06c2db97c7edffbb7f4910b60514130c95a1f0e540017326c21b2ea80d6
SHA3 59a57161fe6269faf634c3744914bcc7597313c569745ef0683d8ee5adf9d3f0

23

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.46962
MD5 88eec20ab70208e889e654fd410d0f91
SHA1 756b123f82647c1d04480ff6b91747d01434c45b
SHA256 3435d53f93e3cc5a7deff8fa992b3747d5edf21665f930622d16ffc3ed99f6da
SHA3 e8db7ee92ded78c1410fbfee8de5c417255326ddb724d53f9d15fb94e3497d5a

24

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.10403
MD5 499ad7f37b6aea297a33c02261cfc6ea
SHA1 e3227454e029eb5d21aff81230ecd7939f74691d
SHA256 bdda36c02a4646b472f85f8007e375d2c78cda13241493fd3a7a9c976a89929a
SHA3 8f7dcace9d473ee26ac69fd344bbf098444608db980d606ed3884e42a3b27b4a

100

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xf8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.90536
MD5 7fa356fe4d04f565d113087d4593a031
SHA1 6afd6e4d2c57a8f3afac2753c871aa2032b53076
SHA256 63cd3901aa077d97e57cd4ae363808ee8aa7da398452edc0eeb0c0c790368963
SHA3 fef774fc9ba77f592cd24a476cff9395ebe734c343d2401119db5c36192a7b87

200

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x158
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.03824
MD5 626a6100dbff2f7b5c889f87b5a7cfa8
SHA1 7e85eedebcfba30ece79f1ae20e2676928cc1b4c
SHA256 f883ad59d9ec6f9f1557db8cfc0227df9c9d79f08d3ff6198cfe76eaae8ddf4f
SHA3 880fff183b8b281483ef411c510d0ea03162432a3d4a06dd16ec9dd1e4404480

300

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x98
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.64289
MD5 db7b61bf871ca5812ab37434e1f9a200
SHA1 659e9faa6628d6c1bd0068aeb9c84addb9c97700
SHA256 ba2eb13b239036b19d52a6f9b46570ce0a7eacb17a24ddc130537edf55b28501
SHA3 a5d676a4218e9a7e7bc35e2050215625ec3a0e899a526290d89ee7509584c5d4

400

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x9c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.37989
MD5 c1b50e67e1a453b28750688df509ca21
SHA1 0004c8d009c87e71c8e09d008324ed439563eac4
SHA256 7feaac6df12d87beae87e9123cc29561a01d5f39a7efa3fdfb57fae3161b0c45
SHA3 a89bc3d1dfe0911573a38496df193bf0be3b970d466353f436990d84b498c111

500

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.41221
MD5 3a7adffeac0831ad50d9547d760b1a39
SHA1 43e21cff27481cfcfac66e87be6694ffafd2811e
SHA256 5ad5b1680d2781823546e0cae0e43b60516b73b2d7693f07d84dd14a71606e84
SHA3 d7b298681e2c50c5b61a6307d1cd83eb1d75dadb5931404dfd412285a0aedc18

600 (#2)

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xdc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.79372
MD5 158a6183a8857ca8e66396235ab86adb
SHA1 814260459d0c66ee191250cd31aa8ad9f55710f2
SHA256 0f0ca901cf231ddb89cdd463fc2e414d5977a50a9795ab78e5b7daeecf681ac6
SHA3 b3a42eeae04a0a91a3422ce95b8def442c85c5183c9138d89e2758e5c1877e19

100 (#2)

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.68891
Detected Filetype Icon file
MD5 fa632727973abb6ce90fb8173f389b79
SHA1 a78d3583083f88c7d24941eddc6a3a4f638cffd4
SHA256 1cb589aa244794dd873a02ad30d9137c97da59e22eae0491bcaf8c1107cd3515
SHA3 909d0fe9813515a13303b7deaa2ab438678d9657a47334f398d8fbeee03892d2

601

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.81974
Detected Filetype Icon file
MD5 63eff0d878ebbfccd0489131d3d19187
SHA1 eabbb49caea52bf6690b2eecb773476f9a30eed8
SHA256 4e20871a09cdc6d57d1b6620e2977955e34e1fbc6b086a86f5dd8129362d3f50
SHA3 51b713ac630dbd3632d5ef02c0febb82865c7952b6e01b8f8a016d1541d3938f

607

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.77142
Detected Filetype Icon file
MD5 806372e5b21a0e250e8aed1e87682ad4
SHA1 9224ca72a80eafa86c64c568627a96609c57489b
SHA256 9e4ed52901647ae7fe580030de051980d493e7f50ba3c1711450be96a3d4455d
SHA3 4015916b1cefc5b92b5f77bc3a70293d937c7ee80a7aae4eb601ef5e8ee7c5e4

608

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.79752
Detected Filetype Icon file
MD5 d51f2b4276f4d999a4771778cfa157bf
SHA1 b3ade253e529dd5017b3b6b1c1dfb5dc6389e7e2
SHA256 5a782f8580da8a9d063689ca7755787dd7b7ace31564dd7a457deeafdab60c86
SHA3 8748ca63335b66c8549b21b820d0e7aefd8b39dc0efdb032819db928e2ffb2e4

VS_VERSION_INFO

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x374
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.45461
MD5 4a0bc66b5361b5d80963632e28590f06
SHA1 181dbe399b4b34dd43bb2376ec58fb0a19d0623a
SHA256 c06987717b176e31b5b82130afa6dde857aba89eca0287fc9f3ed7840c92bf73
SHA3 ec5f3d046691aca7db17dab1dd5fe9ce6e4094b95be2b399cf0bd8b737ccbd87

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x374
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.45461
MD5 4a0bc66b5361b5d80963632e28590f06
SHA1 181dbe399b4b34dd43bb2376ec58fb0a19d0623a
SHA256 c06987717b176e31b5b82130afa6dde857aba89eca0287fc9f3ed7840c92bf73
SHA3 ec5f3d046691aca7db17dab1dd5fe9ce6e4094b95be2b399cf0bd8b737ccbd87

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x6b3
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.20099
MD5 c0f2042a546322f5fc0bd40e8cf2748f
SHA1 55a7dc7fc9f3d5186f365e6983df78647f8826fd
SHA256 0567bdd270808342fc60bb70f9de27fd25c2e3dc88f07475070564e00362b62b
SHA3 9647baa684b437bbb047cf9f00a579df7620fbc9770872497d191c57299635e7

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-Mar-02 21:41:12
Version 0.0
SizeofData 81
AddressOfRawData 0x218b60
PointerToRawData 0x217560
Referenced File C:\projects\github-release\teraterm\Release\ttpmacro.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-Mar-02 21:41:12
Version 0.0
SizeofData 20
AddressOfRawData 0x218bb4
PointerToRawData 0x2175b4

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-Mar-02 21:41:12
Version 0.0
SizeofData 1136
AddressOfRawData 0x218bc8
PointerToRawData 0x2175c8

TLS Callbacks

StartAddressOfRawData 0x619048
EndAddressOfRawData 0x619049
AddressOfIndex 0x635d30
AddressOfCallbacks 0x5763bc
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_1BYTES
Callbacks (EMPTY)

Load Configuration

Size 0xc0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x61f5c0
SEHandlerTable 0x6187f4
SEHandlerCount 91

RICH Header

XOR Key 0x8619977c
Unmarked objects 0
ASM objects (33138) 14
C++ objects (33138) 195
253 (34321) 5
Imports (34435) 2
C objects (33138) 20
Imports (33138) 23
Total imports 316
ASM objects (34321) 23
C objects (34321) 18
C++ objects (34321) 45
C++ objects (34435) 25
C objects (34435) 407
Exports (34435) 1
Resource objects (34435) 1
151 2
Linker (34435) 1

Errors

[*] Warning: Multiple nodes using the name Version Info in a dictionary.
Leave a comment

No comments yet.