Batwoman S03e01 [RELIABLE ›]
: Mary Hamilton finally graduates from medical school, but the celebration is cut short by the Mad Hatter's attack. 🕵️ Character Status
: The fallout of Batman's missing villain trophies and Ryan Wilder’s search for her biological mother. 🔑 Plot Summary Batwoman s03e01
: Luke Fox officially takes on the mantle of Batwing , but his AI-driven suit is glitching due to his unresolved trauma from being shot. : Mary Hamilton finally graduates from medical school,
: Successfully gets a "day pass" from Arkham to assist the Bat Team, though her motives remain selfish. Batwoman s03e01
: A super-fan of Alice named Liam Crandle finds Jervis Tetch’s original mind-control hat. He uses it to take a medical graduation ceremony hostage, forcing the students to perform gruesome "surgeries" on each other.
Execution Graphs are highly condensed control flow graphs which give the user a synthetic view of the code detected during Hybrid Code Analysis. They include additional runtime information such as the execution status which is highlighted with different colors and shapes.
Entrypoint
Program entry point, most likely the entry point of the PE file.
Key Decision
A code location where a decision has been made to avoid execution of potentially malicious behavior.
Dynamic / Decrypted
Code which has been generated at runtime, often referred to as unpacked or self-modifying code.
Unpacker / Decrypter
Code section which is responsible for unpacking or decrypting a portion of dynamic code.
Executed
Code which has been executed at runtime.
Not Executed
Code which has not been executed at runtime.
Unknown
Code for which it is unknown if it has been executed or not at runtime.
Signature Matched
Code which matches a behavioral signature.
Rich Path
Path through the execution graph which shows a lot of behavior (e.g. with respect to called API functions).
Thread / callback entry
Code corresponding to a thread or callback entry point.
Thread / callback creation
Edges denoting either a thread creation (e.g. using CreateThread) or a callback registration (e.g. EnumWindows).