I am playing with Philips DICOM Viewer - download version R3.0 SP3. This viewer can display DICOM information (press F9). Since the displayed strings are not stored in the DICOM file itself, I suspect they are stored somewhere in the binary (standalone binary, no extra DLL loaded):However I could not find it using strings and or:$ binwalk -M -X -e PmsDView.exeFollowed by:$ grep -r Manufacturer _PmsDView.exe.extractedand$ find _PmsDView.exe.extracted/ -exec strings -n 12 -e l {} \; | grep ManufacturerI picked Manufacturer since this is one of the longer string. Also I only used -e s and -e l as they make the more sense (eg: strings -e l PmsDView.exe and strings -e s PmsDView.exe). I've run -e b, -e B and -e L but they did not return anything.
Locate compressed section of executable
binary analysis;encryption