james-heinrich/getid3 v1.9.23
“PHP script that extracts useful information from popular multimedia file formats”
Packed PE combines process-memory writing with remote thread executionTen or more writable executable sections
SHA-256f73bbafc814cd30aae16ce044757d3afeb37fd7c8937a9b876563c3302273006
Evidence
No evidence locations were recorded for this file. Raw result