Possibly tries to detect the presence of a debugger Source Hybrid Analysis Technology relevance 10/10 Which is directly followed by "cmp dword ptr, 05h" and "jnbe 0048A6EFh". Which is directly followed by "cmp dword ptr, 05h" and "jnbe 0012A6EFh". Reads information about supported from nchsetup.exe (PID: 952) ( Show from nchsetup.exe (PID: 952) ( Show from nchsetup.exe (PID: 952) ( Show from nchsetup.exe (PID: 952) ( Show from switch.exe (PID: 2720) ( Show from switch.exe (PID: 2720) ( Show from switch.exe (PID: 2720) ( Show from switch.exe (PID: 2720) ( Show from switch.exe (PID: 2720) ( Show from switch.exe (PID: 2720) ( Show at 49194-3672-004A0374 The ID below indicates app support for Windows Vista ->" (Indicator: "requestedExecutionLevel level="highestAvailable"") The ID below indicates app support for Windows 7 ->
The ID below indicates app support for Windows 8 ->
"xml version="1.0" encoding="UTF-8" standalone="yes"?>
0 kommentar(er)
