investigative reversing 3

This commit is contained in:
Maxime Vorwerk
2024-06-10 12:37:35 +02:00
parent 51f73a6584
commit 882f478c94
15 changed files with 35 additions and 13 deletions

View File

@@ -1,9 +0,0 @@
#Ghidra Lock File
#Mon Jun 10 10:48:05 CEST 2024
OS\ Name=Windows 11
OS\ Version=10.0
Username=Maxime Vorwerk
Hostname=MAXIMESLAPTOP
<META>\ Supports\ File\ Channel\ Locking=File Lock
OS\ Architecture=amd64
Timestamp=6/10/24, 10\:48 AM

View File

@@ -1,4 +1,5 @@
VERSION=1 VERSION=1
/ /
NEXT-ID:0 00000000:mystery:c0a8b2a0d1e93211312676400
NEXT-ID:1
MD5:d41d8cd98f00b204e9800998ecf8427e MD5:d41d8cd98f00b204e9800998ecf8427e

View File

@@ -1,2 +0,0 @@
IADD:00000000:/mystery
IDSET:/mystery:c0a8b2a0d1e93211312676400

View File

@@ -0,0 +1,10 @@
<?xml version="1.0" encoding="UTF-8"?>
<PROJECT>
<PROJECT_DATA_XML_NAME NAME="DISPLAY_DATA">
<SAVE_STATE />
</PROJECT_DATA_XML_NAME>
<TOOL_MANAGER ACTIVE_WORKSPACE="Workspace">
<WORKSPACE NAME="Workspace" ACTIVE="true" />
</TOOL_MANAGER>
</PROJECT>

View File

@@ -0,0 +1,11 @@
<?xml version="1.0" encoding="UTF-8"?>
<FILE_INFO>
<BASIC_INFO>
<STATE NAME="CONTENT_TYPE" TYPE="string" VALUE="ProgramUserData" />
<STATE NAME="PARENT" TYPE="string" VALUE="/" />
<STATE NAME="FILE_ID" TYPE="string" VALUE="c0a8b2a0d9347077734067700" />
<STATE NAME="FILE_TYPE" TYPE="int" VALUE="0" />
<STATE NAME="READ_ONLY" TYPE="boolean" VALUE="false" />
<STATE NAME="NAME" TYPE="string" VALUE="udf_c0a8b2a0d1e93211312676400" />
</BASIC_INFO>
</FILE_INFO>

View File

@@ -0,0 +1,4 @@
VERSION=1
/
NEXT-ID:0
MD5:d41d8cd98f00b204e9800998ecf8427e

View File

@@ -1,4 +1,5 @@
VERSION=1 VERSION=1
/ /
NEXT-ID:0 00000000:udf_c0a8b2a0d1e93211312676400:c0a8b2a0d9347077734067700
NEXT-ID:1
MD5:d41d8cd98f00b204e9800998ecf8427e MD5:d41d8cd98f00b204e9800998ecf8427e

View File

@@ -0,0 +1,2 @@
IADD:00000000:/udf_c0a8b2a0d1e93211312676400
IDSET:/udf_c0a8b2a0d1e93211312676400:c0a8b2a0d9347077734067700

View File

@@ -0,0 +1,4 @@
VERSION=1
/
NEXT-ID:0
MD5:d41d8cd98f00b204e9800998ecf8427e