/
dll.trid.xml
138 lines (138 loc) · 2.63 KB
/
dll.trid.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
<TrID ver="2.00">
<Info>
<FileType>Win32 Dynamic Link Library (generic)</FileType>
<Ext>DLL</Ext>
<Mime>application/octet-stream</Mime>
<ExtraInfo>
<Rem></Rem>
<RefURL>http://en.wikipedia.org/wiki/Dynamic-link_library</RefURL>
</ExtraInfo>
<User>Marco Pontello</User>
<E-Mail>marcopon@gmail.com</E-Mail>
<Home>http://mark0.net</Home>
</Info>
<General>
<FileNum>203</FileNum>
<Refine>19 by Marco Pontello</Refine>
<CheckStrings>True</CheckStrings>
<Date>
<Year>2015</Year>
<Month>3</Month>
<Day>20</Day>
</Date>
<Time>
<Hour>21</Hour>
<Min>15</Min>
<Sec>1</Sec>
</Time>
<Creator>TrIDScan/Py v2.00</Creator>
</General>
<FrontBlock>
<Pattern>
<Bytes>4D5A</Bytes>
<ASCII> M Z</ASCII>
<Pos>0</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>3</Pos>
</Pattern>
<Pattern>
<Bytes>0000000400</Bytes>
<Pos>5</Pos>
</Pattern>
<Pattern>
<Bytes>00FFFF0000</Bytes>
<Pos>11</Pos>
</Pattern>
<Pattern>
<Bytes>000000000000004000</Bytes>
<ASCII> . . . . . . . @</ASCII>
<Pos>17</Pos>
</Pattern>
<Pattern>
<Bytes>000000000000000000000000000000000000000000000000000000000000000000</Bytes>
<Pos>27</Pos>
</Pattern>
<Pattern>
<Bytes>0000</Bytes>
<Pos>62</Pos>
</Pattern>
<Pattern>
<Bytes>0000</Bytes>
<Pos>121</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>124</Pos>
</Pattern>
<Pattern>
<Bytes>0000</Bytes>
<Pos>126</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>315</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>331</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>347</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>363</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>371</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>375</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>391</Pos>
</Pattern>
<Pattern>
<Bytes>0000</Bytes>
<Pos>398</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>403</Pos>
</Pattern>
<Pattern>
<Bytes>0000</Bytes>
<Pos>406</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>411</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>431</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>439</Pos>
</Pattern>
<Pattern>
<Bytes>0000</Bytes>
<Pos>446</Pos>
</Pattern>
<Pattern>
<Bytes>00</Bytes>
<Pos>471</Pos>
</Pattern>
</FrontBlock>
<GlobalStrings>
<String>PE''L</String>
<String>.DLL</String>
</GlobalStrings>
</TrID>