filenamegit-bash.exe
size140288 (0x22400)
md5cec6bcaf5dbbac4f464be39cb26c0193
typePE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections0xa
TimeDateStamp0x6b694
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22f
Magic0x20b
LinkerVersion2.25
SizeOfCode0x3e00
SizeOfInitializedData0x22000
SizeOfUninitializedData0x60c00
AddressOfEntryPoint0x14e0
BaseOfCode0x1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x8a000
SizeOfHeaders0x400
CheckSum0x27aa9
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x3ce80x3e00R-X CODE IDATA
.data0x50000xa80x200RW- IDATA
.rdata0x60000x11000x1200R-- IDATA
.pdata0x80000x2e80x400R-- IDATA
.xdata0x90000x28c0x400R-- IDATA
.bss0xa0000x60a300RW- UDATA
.idata0x6b0000xdac0xe00RW- IDATA
.CRT0x6c0000x680x200RW- IDATA
.tls0x6d0000x680x200RW- IDATA
.rsrc0x6e0000x1b3d80x1b400RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x6b0000xdac
RESOURCE0x6e0000x1b3d8
EXCEPTION0x80000x2e8
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x6d0200x28
LOAD_CONFIG00
Bound_IAT00
IAT0x6b3780x300
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x46d0000x46d0600x46a67c0x46c04000
typenamesizecp
RT_MANIFEST#19650
ICON#1169360
ICON#296400
ICON#342640
ICON#424400
ICON#564280
ICON#6676240
STRING#16440
GROUP_ICONMAINICON900
VERSION#15880
MANIFEST#111670
idlangstring
01033APP_ID=GitForWindows.Bash ALLOC_CONSOLE=1 usr\bin\mintty.exe -o AppID=GitForWindows.Bash -o RelaunchCommand="@@EXEPATH@@\git-bash.exe" -o RelaunchDisplayName="Git Bash" -i /mingw64/share/git/git-for-windows.ico /usr/bin/bash --login -i
11033SHOW_CONSOLE=1 @@COMSPEC@@ /C "@@EXEPATH@@\usr\bin\bash.exe" --login -i
module_namehintordfunction_name
KERNEL32.dll85CloseHandle
KERNEL32.dll148CreateFileW
KERNEL32.dll174CreateProcessW
KERNEL32.dll216DeleteCriticalSection
KERNEL32.dll248EnterCriticalSection
KERNEL32.dll293ExitProcess
KERNEL32.dll362FormatMessageW
KERNEL32.dll404GetCommandLineW
KERNEL32.dll461GetCurrentProcess
KERNEL32.dll462GetCurrentProcessId
KERNEL32.dll466GetCurrentThreadId
KERNEL32.dll491GetEnvironmentVariableW
KERNEL32.dll494GetExitCodeProcess
KERNEL32.dll505GetFileAttributesW
KERNEL32.dll528GetLastError
KERNEL32.dll547GetModuleFileNameW
KERNEL32.dll548GetModuleHandleA
KERNEL32.dll598GetProcAddress
KERNEL32.dll627GetStartupInfoA
KERNEL32.dll629GetStdHandle
KERNEL32.dll650GetSystemTimeAsFileTime
KERNEL32.dll677GetTickCount
KERNEL32.dll761InitializeCriticalSection
KERNEL32.dll843LeaveCriticalSection
KERNEL32.dll849LoadLibraryW
KERNEL32.dll859LocalFree
KERNEL32.dll955QueryPerformanceCounter
KERNEL32.dll1025RtlAddFunctionTable
KERNEL32.dll1026RtlCaptureContext
KERNEL32.dll1033RtlLookupFunctionEntry
KERNEL32.dll1040RtlVirtualUnwind
KERNEL32.dll1105SetEnvironmentVariableW
KERNEL32.dll1183SetUnhandledExceptionFilter
KERNEL32.dll1196Sleep
KERNEL32.dll1210TerminateProcess
KERNEL32.dll1217TlsGetValue
KERNEL32.dll1230UnhandledExceptionFilter
KERNEL32.dll1260VirtualProtect
KERNEL32.dll1262VirtualQuery
KERNEL32.dll1270WaitForSingleObject
msvcrt.dll55__C_specific_handler
msvcrt.dll78__dllonexit
msvcrt.dll81__getmainargs
msvcrt.dll82__initenv
msvcrt.dll83__iob_func
msvcrt.dll90__lconv_init
msvcrt.dll96__set_app_type
msvcrt.dll98__setusermatherr
msvcrt.dll115_acmdln
msvcrt.dll122_amsg_exit
msvcrt.dll140_cexit
msvcrt.dll251_fmode
msvcrt.dll330_initterm
msvcrt.dll439_lock
msvcrt.dll611_onexit
msvcrt.dll819_unlock
msvcrt.dll856_vsnwprintf
msvcrt.dll875_waccess
msvcrt.dll884_wcsdup
msvcrt.dll901_wcsicmp
msvcrt.dll936_wcsnicmp
msvcrt.dll1030abort
msvcrt.dll1047calloc
msvcrt.dll1060exit
msvcrt.dll1079fprintf
msvcrt.dll1086free
msvcrt.dll1095fwprintf
msvcrt.dll1097fwrite
msvcrt.dll1110isalpha
msvcrt.dll1118isspace
msvcrt.dll1145malloc
msvcrt.dll1153memcpy
msvcrt.dll1154memmove
msvcrt.dll1155memset
msvcrt.dll1173realloc
msvcrt.dll1183signal
msvcrt.dll1204strlen
msvcrt.dll1207strncmp
msvcrt.dll1214swprintf
msvcrt.dll1239vfprintf
msvcrt.dll1251wcscat
msvcrt.dll1253wcschr
msvcrt.dll1254wcscmp
msvcrt.dll1256wcscpy
msvcrt.dll1260wcslen
msvcrt.dll1263wcsncmp
msvcrt.dll1271wcsstr
SHELL32.dll10CommandLineToArgvW
SHLWAPI.dll52PathAppendW
SHLWAPI.dll139PathRemoveFileSpecW
USER32.dll470LoadStringW

StringTable 040904b0

CompanyNameThe Git Development Community
FileDescriptionGit for Windows
InternalNamegit
OriginalFilenamegit.exe
ProductNameGit
ProductVersion2.5.0.windows.1

VS_FIXEDFILEINFO

FileVersion2.5.0.0
ProductVersion2.5.0.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS0
FileType0
FileSubtype0
offsetsizetypecomment
15c115HTM#
f8a86428PNG(256 x 256)#
111c470204BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x6a67c