exeīinary string: ract.pdb s ource: vcr edist_x86. Static PE information: TERMINAL_S ERVER_AWAR E, DYNAMIC _BASE, NX_ COMPATīinary string: wextract.p db source: vcredist_ x86.exe, V CREDI~3.EX E, vcredis t_x86.exe, 00000025.
Source: C:\Windows \System32\ msiexec.ex eįile opened: C:\Windows \WinSxS\In stallTemp\ 2021021219 4555556.0\ msvcr80.dl lĬontains modern PE file flags such as dynamic base (ASLR) or NX Static PE information: certificat e valid
Uses Microsoft's Enhanced Cryptographic Provider
