Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Problem

I do not understand the file visualization image that appears in the 'File Details' section of an executable file.

Solution

The visualization feature can be found at the file details section:

...

The file visualization is based on the input file and the output of the PortEx java library (https://github.com/katjahahn/PortEx). It can be used to quickly identify malformed files, anomalies in the structure and pinpoint interesting code locations. In the above example, we can quickly identify packed code (highlighted in the middle section), which is placed in the 'Overlay' of the file.

Content by Label
showLabelsfalse
max5
spacesVSKB
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel in ("portex","file","visualization") and type = "page" and space = "VSKB"
labelsfile visualization portex

...