![]() ![]() net frame work 3.5 s p1 (window s feature). String found in binary or memory: urn.instal m/devstudi o/setupreq uirements/ Microsoft ![]() ![]() ![]() net framew ork 3.5 sp 1 (windows feature). NET Frame work 3.5.p rq.0.dr, m icrosoft. Source: C:\Users\u ser\Deskto p\NEXYGENP lus4.0.1Se tup.exeĬode function: 0_2_004451 EF FindFir stFileW,Ge tFileAttri butesW,Set FileAttrib utesW,Dele teFileW,Fi ndClose,Ĭode function: 0_2_004217 71 _EH_pr olog,GetTe mpPathW,Fi ndFirstFil eW,Compare FileTime,D eleteFileW ,FindNextF ileW,FindC lose, Source: C:\Windows \SysWOW64\ msiexec.ex eĬontains functionality to enumerate / list files inside a directory drĬhecks for available system drives (often done to infect USB drives) 2.drīinary string: c:\Dev\Llo yd.Nexygen Plus\setup \MTInstUti l\Release\ MTInstCA.p db` source : NEXYGEN Plus.msi.0. msi.0.drīinary string: d:\office1 1\Setup\X8 6\SHIP\cap dbs\vbaof1 11033.pdb source: VB AOF11.MSI. x86fre\bas e\wcp\tool s\msmcusto maction\ob jfre\i386\ msmcustoma ction.pdb source: NE XYGEN Plus. drīinary string: C:\CodeBas es\isdev\s rc\Runtime \MSI\Share d\Setup\Se tup_Win3 2_Release_ Prerequisi tes_Unicod e\setupPre ReqW.pdbIn stallShiel d source: NEXYGENPlu s4.0.1Setu p.exeīinary string: d:\office1 1\Setup\X8 6\SHIP\cap dbs\vbaof1 1i1036.pdb source: 1 036_VBAOF1 1I.MSI.2.d rīinary string: h:\nt.obj. 0.1Setup.e xeīinary string: c:\Dev\Llo yd.Nexygen Plus\setup \MTInstUti l\Release\ MTInstCA.p db source: NEXYGEN P lus.msi.0. 2.drīinary string: C:\CodeBas es\isdev\s rc\Runtime \MSI\Share d\Setup\Se tup_Win3 2_Release_ Prerequisi tes_Unicod e\setupPre ReqW.pdb s ource: NEX YGENPlus4. Static PE information: LOCAL_SYMS _STRIPPED, 32BIT_MAC HINE, EXEC UTABLE_IMA GE, LINE_N UMS_STRIPP ED, RELOCS _STRIPPEDīinary string: d:\office1 1\Setup\X8 6\SHIP\cap dbs\vbaof1 11033.pdbU source: V BAOF11.MSI. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |