"" created file "%TEMP%\SETUP_28515\Ei-logo-color-transp.bmp" "" created file "%TEMP%\SETUP_28515\Ensoft-license-disclaimer.txt" "" created file "%TEMP%\SETUP_28515\Modern_Icon.bmp" "" created file "%TEMP%\SETUP_28515\Modern_Setup.bmp" "" created file "%TEMP%\SETUP_28515\lp9-installer.qsp" "" created file "%TEMP%\SETUP_28515\Engine.exe" Reads the registry for installed applications Source Hybrid Analysis Technology relevance 10/10 from Engine.exe (PID: 3836) ( Show Stream) Which is directly followed by "cmp dword ptr, 00000000h" and "je 00534FB2h". Which is directly followed by "cmp ax, 0004h" and "jc 00479F06h".
Which is directly followed by "cmp ax, 0004h" and "setnb byte ptr ". Which is directly followed by "cmp eax, 01h" and "jne 00438F0Bh". Which is directly followed by "cmp ax, 0005h" and "jc 0049B1C8h". Which is directly followed by "cmp eax, 01h" and "jne 0041B493h". Which is directly followed by "cmp dword ptr, 06h" and "jc 00418325h".
0 kommentar(er)
