Source: C:\Windows \SysWOW64\ msiexec.ex eĬontains functionality to enumerate / list files inside a directory drĬhecks for available system drives (often done to infect USB drives) 2.drīinary string: c:\Dev\Llo yd.Nexygen Plus\setup \MTInstUti l\Release\ MTInstCA.p db` source : NEXYGEN Plus.msi.0. msi.0.drīinary string: d:\office1 1\Setup\X8 6\SHIP\cap dbs\vbaof1 11033.pdb source: VB AOF11.MSI. x86fre\bas e\wcp\tool s\msmcusto maction\ob jfre\i386\ msmcustoma ction.pdb source: NE XYGEN Plus. drīinary string: C:\CodeBas es\isdev\s rc\Runtime \MSI\Share d\Setup\Se tup_Win3 2_Release_ Prerequisi tes_Unicod e\setupPre ReqW.pdbIn stallShiel d source: NEXYGENPlu s4.0.1Setu p.exeīinary string: d:\office1 1\Setup\X8 6\SHIP\cap dbs\vbaof1 1i1036.pdb source: 1 036_VBAOF1 1I.MSI.2.d rīinary string: h:\nt.obj. 0.1Setup.e xeīinary string: c:\Dev\Llo yd.Nexygen Plus\setup \MTInstUti l\Release\ MTInstCA.p db source: NEXYGEN P lus.msi.0. 2.drīinary string: C:\CodeBas es\isdev\s rc\Runtime \MSI\Share d\Setup\Se tup_Win3 2_Release_ Prerequisi tes_Unicod e\setupPre ReqW.pdb s ource: NEX YGENPlus4. Static PE information: LOCAL_SYMS _STRIPPED, 32BIT_MAC HINE, EXEC UTABLE_IMA GE, LINE_N UMS_STRIPP ED, RELOCS _STRIPPEDīinary string: d:\office1 1\Setup\X8 6\SHIP\cap dbs\vbaof1 11033.pdbU source: V BAOF11.MSI.
0 Comments
Leave a Reply. |