Jump to content

msfntor

Member
  • Posts

    1,732
  • Joined

  • Last visited

  • Days Won

    38
  • Donations

    0.00 USD 
  • Country

    France

Everything posted by msfntor

  1. "So to sum up, I think that rebasing isn't worth the trouble except for special cases like the system DLLs." - here, question on stackoverflow.com: "Is rebasing DLLs (or providing an appropriate default load address) worth the trouble?": https://stackoverflow.com/questions/3969190/is-rebasing-dlls-or-providing-an-appropriate-default-load-address-worth-the-tr
  2. Found these two tools, hope this helps: DLL Relocation Finder (by SecurityXploded): https://securityxploded.com/dll-relocation-finder.php About: DLL Relocation Finder is the command-line Tool to detect and list Relocated DLLs in the Process. Every DLL specifies a base address where it should be mapped during load time. However if that address is occupied by some other DLL then this DLL has to be relocated to new base address. This is called DLL Relocation or DLL Rebasing. This relocation process also happens for ASLR enabled modules. In such cases, DLL Relocation Finder helps you to find these relocated DLLs and their new addresses. It also provides option to list only relocated or non-relocated or both type of DLLs. Massive Rebase: DLL Sharing and ASLR Investigation This tool was written to demonstrate the positive effect of dll sharing by the operating system and the negative effect of dynamic dll rebasing. It is also useful when investigating software, such as application virtualization software and other filter drivers, that might interfere with this important memory sharing. As explained my the book “Windows System Performance Through Caching”, the Microsoft operating system cache tries to save memory by allowing multiple processes to share executable file images in RAM. DLL files are commonly used by numerous applications and by having a single instance of them in RAM, considerable memory is saved. Sometimes, however, a dll cannot be loaded into the process memory location that the developer intended, causing the OS to "rebase" the dll on the fly. The OS accomplishes this by using "copy on write" memory and when the rebase fixups are applied, the process gets a new copy of those memory pages. About Dll Base Address and Rebasing: read more and download (on tmurgent.com): https://www.tmurgent.com/appv/index.php/en/resources/tools/137-massive-rebase
  3. RAM used: Ancient version: 190 MB. NEW version: 187 MB. So 3 MB better in Memory use! Thank you, @Humming Owl, best gift for Christmas 2022! - downloaded only this file: DCB_4.0.7.22_Modified.7z I've changed the name of this new DCBrowser folder by adding 2022 (DCB_4.0.7.22_Modified2022) so WinRAR extraction was possible. I've my all bookmarks and extensions here automatically with this extra easy download, thanks! (I use WinRAR Unplugged 3.9.1.1) PS. But now, in Process Hacker modules of DCBrowser.exe in job process (Working Set so memory: ancient:16.0 MB, new: 17.4 MB approx.), these modules are highlighted in "Relocated Dll's" light brown color (carrot color): ESENT.dll* mswsock.dll NETAPI32.dll Normaliz.dll (like before, in ancient version..) SAMLIB.dll WS2HELP.dll WS2_32.dll wshtcpip.dll ...and why this browser has dual-core ... could you delete IE core maybe, please?.. Could you change ecosia.org for swisscows.com, please?
  4. Peace ️+ Love ️+ and Joy! "The most beautiful Christmas music I ever heard. It reminds me of the days when Christmas was being with Family, .. nothing compares to the joy of being with Dear Family......" "...every time I feel so weary with the world, this kind music really resets me in some way I can't explain. nothing can compare Christmas." "This was just what I needed tonight. I was feeling bad & sad , listening to a video, saw 3 hrs of relaxing Christmas songs, I knew that's perfect. It was so relaxing for real. Thanks!!! I felt like a kid again. Merry Christmas"!.. "Perfect relaxing music ! I love Christmas music ANY time of the year."
  5. Relaxing Christmas Music | 3 Hours | Calm, Relax | Instrumental Music LADOREMI 11,896,165 views Dec 10, 2019 Hi! I'm Ava Lee. I made Relaxing Christmas music this time. Calm and Relaxing Christmas music. If you are looking for a quiet and peaceful Christmas carol, I hope you find comfort and relaxation. Also, I hope it will be helpful to everyone who needs peace of mind and healing such as sleep, study, reading, prayer, meditation, and work. Have a great time! Thank you. - For all of you!.
  6. Salvatore you are so nice, too bad you don't live closer... of course you are very nice, we all love you! It's the family that came to us, very happy to see them all and to spend pleasant moments, second day already!
  7. Yes, I've this same version. It's not orange, but "Relocated Dll's" light brown color (carrot color), like other Dll's we've talked about...... Its Module size by Process Hacker: 36 KB, but in windows32 folder: 23 KB compressed by Windows surely file size...
  8. Check out this crazy footage of an Alaskan moose shedding his antlers in this lucky guy's backyard by Harambe https://www.newsweek.com/d288c19f-477d-4b1b-9d7c-a52069eab44d Here: https://notthebee.com/article/watch-once-in-a-lifetime-footage-of-an-alaskan-moose-shedding-his-antlers ..and here: https://www.newsweek.com/shocking-moment-moose-sheds-antlers-camera-alaska-1769232
  9. Snowstorm in the USA: Apocalyptic Scenes on the Cow Pasture Created: 2022-12-24 05:01 By: Victoria Krumbeck A blizzard in the north of the USA caused snow-covered roads and cars. Cows also fell victim to the snow, as a farm showed in a video... Here (but no video...): https://newsrnd.com/news/2022-12-24-snowstorm-in-the-usa--apocalyptic-scenes-on-the-cow-pasture.HJVlixEKj.html
  10. Chris Norman Christmas Song Chris Norman - That's Christmas [Official Music Video] Boney M. - Mary's Boy Child (Officical Video)
  11. Rapapampam Christmas Song Little Drummer Boy - Boney M Ruff & Reddy Band Feat. Little Drummer Boy - Rapapam Pam ( Christmas Music ) HQ Audio
  12. Of course, ArticFoxie, but you've NOT read my next post above, please?.. file is compressed so smaller, that's all. Of course...
  13. Christmas Vacation: Hap Hap Happiest Christmas! Mavis Staples | Christmas Vacation 🎄 (HQ) Christmas oldies "I am 66, and grew up with these songs in my heart, and now they bring tears of joy to my eyes. Thank you."
  14. In my link above about packed executables, we read: "packed executables are a great way to save space and secure files" ... " "Conclusion In short, packed executables are executable files that have been compressed. While the reasons for needing to compress an executable file vary, “packing” always has a similar end result. A packed file is smaller..."
  15. In DCBrowser, I've only one DCBrowser.exe process in job (so highlighted in brown) - with Normaliz.dll (36 KB) module highlighted in orange.
  16. In Process Hacker, 360Chrome.exe in job process (highlighted in brown) is in bad condition, because it's not done, so it takes resources. That's why it's profitable to finish this job. That's how I understand this. And 360Loader.exe (from latest 13.5 version browser, AND from 13 latest too) 800 KB module is packed here...why, please?.. About packed executables read here: https://resources.infosecinstitute.com/topic/what-are-packed-executables/
  17. ...and REAL, here too...
  18. Here are the top Christmas movies of all time, in my eminently correct opinion. You're welcome. Harris Rigby ··Dec 23, 2022 · NottheBee.com "I know that everyone who reads Not the Bee always looks forward to our lists that give you the definitive non-opinion-based rankings of things like music, movies, and food. So in the spirit of the holidays, I want to give you a definitive list of all the Christmas movies worth watching. I won't rank them in any particular order (although there is one movie that is THE best) but just know, if it's on my list it's a keeper. And if it's not on my list, well, there are better uses of your time. Without further adieu, the best Christmas movies of all time. National Lampoon's Christmas Vacation Okay, after this they are in no particular order. But there is no doubt in my mind that the funniest, most enjoyable, and best Christmas movie of all time is from the rowdy bunch at the Griswold house. Here's a small sample, my favorite moment of the movie: If you can only watch one Christmas movie, make it this one. If you have time for more, there are lots of good ones...." ... HERE: https://notthebee.com/article/the-top-christmas-movies-of-all-time
  19. I see in Process Hacker (in 360Chrome 13.5.2022r3 regular latest version browser): In my two 360Chrome.exe and too in 360Loader.exe (is packed process here) - I've Normaliz.dll in orange in Process Hacker... then in one another 360Chrome.exe I see libegl.dll (360 KB), libglesv2.dll (2.66 MB), and mfplat.dll (124 KB)- in orange ... - and this same in 360Chrome 13.0.2170 r1ung. In 360Chrome 13.5.1030 r 5 - from five 360Chrome.exe processes only (so 360Loader.exe NOT present), have two only with Normaliz.dll in orange. That's all.
  20. Latest in space @latestinspace It’s now estimated the Milky Way is no longer visible to one-third of humanity Including 60% of Europe and 80% of North America 12:29 AM · Dec 17, 2022 Here: https://twitter.com/latestinspace/status/1603895073716211712/
  21. Lidl customer can't believe the amount for a "small purchase" - "Almost cried when I was out" 12/22/2022 By: Armin T. Linder After her purchase, a Lidl customer is downright shocked at the amount she was supposed to pay at the discount store. She almost cried. Ludwigshafen – The rising prices in supermarkets are causing problems for many people. Some simply accept them without complaint and shop as usual. Others are quietly limiting themselves and are more likely to use their own brands or remove one or the other product from the shopping list. On the other hand, those who have to turn over every cent twice have an even harder time dealing with inflation – and thus sometimes dare to go public: A poor woman recently complained about the price of three simple products at Rewe. The tweet from a woman who claims to be a single mother of two children from the Palatinate goes in a similar direction. She has already tweeted several times under the hashtag #ichbinarmutsaffected and has now also spoken out after visiting the supermarket. According to the Lidl customer, she pays 82 euros for a “small purchase” The user posted a photo of her almost complete purchase. For this she was, as the own brands show, at the discounter Lidl.... MORE: https://newsrnd.com/life/2022-12-22-lidl-customer-can-t-believe-the-amount-for-a-"small-purchase"---"almost-cried-when-i-was-out".rJZneiTbFj.html
  22. Triangle of Sadness Star Charlbi Dean’s Cause of Death Confirmed Charlbi Dean, the 32-year-old South African model and actress most recently known for starring in Ruben Östlund’s film Triangle of Sadness, died from bacterial sepsis, a spokesperson for the New York City Office of Chief Medical Examiner told People. Dean died in August, and though she was known to have died from an illness, the specific cause of death was not confirmed. The sepsis “was a complication from asplenia (the absence of a spleen) due to ‘remote blunt trauma to her torso.’” In 2009, at age 18, Dean was in a near-fatal car accident, according to the South African Sunday Times. The crash resulted in two damaged vertebrae; a broken wrist, elbow, and four ribs; as well as internal injuries like a collapsed left lung. Her spleen was removed following the accident. Her sepsis was caused by the bacteria Capnocytophaga, which typically resides in the mouths of animals such as dogs and cats as well as people, according to the CDC.... MORE: https://www.vulture.com/2022/12/charlbi-dean-death-bacterial-sepsis-triangle-of-sadness.html Bacterial Infection Here: https://my.clevelandclinic.org/health/diseases/24189-bacterial-infection Bacterial Infections Here: https://www.sepsis.org/sepsisand/bacterial-infections/ Sepsis Sepsis is a serious medical condition caused by the body's response to an infection. Bacterial infections are the most common cause of sepsis. Sepsis can be life-threatening.... Here: https://my.clevelandclinic.org/health/diseases/12361-sepsis
  23. Scott Duncan @ScottDuncanWX Brace yourself. One of the most brutal Arctic cold outbreaks on record is gathering momentum and moving through North America right now. Wind chills are hitting extremely dangerous levels of -70°F (-57°C) in Wyoming.
  24. Be careful to touch only clean, disinfected surfaces with your face! Otherwise you could catch the odd bacteria...
  25. @XPerceniol, I see that in your Windows XP x32 Professional v5.01 Build 2600 SP3 (have this same but SP2) - you have only two svchost.exe -that's very good, I always had 3 svchost.exe, but I see 4 these now? One for WIA, then other for many general processes, then other for RPC, then latest - for DCOM launch...total 4 these... hmm
×
×
  • Create New...