Skip to content

Latest commit

 

History

History
84 lines (69 loc) · 2.69 KB

SAMPLE.md

File metadata and controls

84 lines (69 loc) · 2.69 KB

Magic

Field Value
Mime application/x-dosexec
Description PE32 executable (GUI) Intel 80386, for MS Windows

SSDeep

  • 768:15jQ4nVHQaeO379u4XckKVCsknBN9A4hUnDxDiNZ957ZpK0IUUiM95Zdz:15jQ4nVHQaeO9uwckKuBN9A4UnDxcbFi

TRiD

  • 26.2% (. EXE) Win32 Executable MS Visual C+ + (generic) (31206/45/13)
  • 23.2% (. EXE) Win64 Executable (generic) (27624/17/4)
  • 22.3% (. EXE) Win32 EXE Yoda' s Crypter (26569/9/4)
  • 13.8% (. EXE) Microsoft Visual C+ + compiled executable (generic) (16529/12/5)
  • 5.5% (. DLL) Win32 Dynamic Link Library (generic) (6578/25/2)

Exiftool

Field Value
CharacterSet Unicode
CodeSize 20480
Comments
CompanyName Microsoft Corporation
EntryPoint 0x5a46
ExifToolVersionNumber 11.65
FileDescription Internet Explorer
FileFlags Private build
FileFlagsMask 0x003f
FileOS Unknown (0)
FileSize 40 kB
FileSubtype 0
FileType Win32 EXE
FileTypeExtension exe
FileVersion 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
FileVersionNumber 6.0.2930.2180
ImageFileCharacteristics No relocs, Executable, No line numbers, No symbols, 32-bit
ImageVersion 0.0
InitializedDataSize 20480
InternalName iexplore
LanguageCode Neutral
LegalCopyright (C) Microsoft Corporation. All rights reserved.
LegalTrademarks
LinkerVersion 6.0
MIMEType application/octet-stream
MachineType Intel 386 or later, and compatibles
OSVersion 4.0
ObjectFileType Unknown
OriginalFileName IEXPLORE. EXE
PEType PE32
PrivateBuild
ProductName Microsoft(R) Windows(R) Operating System
ProductVersion 6.00.2900.2180
ProductVersionNumber 6.0.2930.2180
SpecialBuild
Subsystem Windows GUI
SubsystemVersion 4.0
UninitializedDataSize 0

Magic

Field Value
Mime text/plain
Description ASCII text

SSDeep

  • 3:P:P

TRiD

  • Warning: file seems to be plain text/ASCII
  • TrID is best suited to analyze binary files!
  • Unknown!

Exiftool

Field Value
error exit status 1