Update: oledump.py Version 0.0.73

A small update to plugin_msi_info to provide extra info on streams.

Indicator ! marks PE and CAB files.

Indicator ? marks files that are not images (and are not marked with !).

The idea is to first inspect streams marked with ! and ?.

The plugin also provides an overview of the files contained inside the CAB file.

oledump_V0_0_73.zip (http)
MD5: 0CAFC87E62E5BC069568B78C1CEE720D
SHA256: CA67FCFA1F4C79668C9ED0C791AFA9D5EEF370AD58DDC542E2204A080A58F9A5

Article Link: Update: oledump.py Version 0.0.73 | Didier Stevens

1 post - 1 participant …

article didier didier stevens files http images info link malware analysis md5 oledump plugin update version zip