Expand

Details

Executable	Expand.exe
Stage	3
Percent Complete	48%
Message Queue	expand

Expand is the most capable exploitation process. It produces files and artifacts.

Capabilities

Expand exploits the following file types.

File Type	Produces
Type_Physical_Artifacts	Artifacts
Type_ASCII_Text	File Details
Type_JPEG	Artifacts, File Details
Type_JPEGWithExif	Artifacts, EXIF, File Details
Type_GIF	File Details
Type_PE	File Details
Type_ZIP	Files, File Details
Type_32bit_Windows_Executable	Files, File Details
Type_64bit_Windows_Executable	Files, File Details
Type_ROM_Windows_Executable	Files, File Details
Type_Word_2007	Artifacts, File Details
Type_Excel_2007	Artifacts, File Details
Type_PowerPoint_2007	Artifacts, File Details
Type_Microsoft_ESE	File Details
Type_MPEG4Video	Artifacts, EXIF, File Details, Locations
Type_Adobe_PDF	Artifacts
Type_Internet_Explorer_History	Artifacts, File Details
Type_SQLite_Database	Artifacts, Files, File Details
Type_PNG	File Details
Type_Firefox_Form_History	Artifacts, File Details
Type_Firefox_Downloads	File Details
Type_Firefox_Web_Sites_Visited	Artifacts, File Details
Type_Chrome_Archived_History	File Details
Type_Chrome_Cookies	File Details
Type_Chrome_History	Artifacts, File Details
Type_Chrome_History_Index	File Details
Type_Chrome_Thumbnails	File Details
Type_Chrome_Web_Data	File Details
Type_Zip_Fragment	Files, File Details
Type_RichText	Artifacts, File Details
Type_Java_Archive	Files, File Details
Type_XP_Prefetch	Artifacts, File Details
Type_Vista7_Prefetch	Artifacts, File Details
Type_Binary_PList	Files
Type_3GP_Video	File Details
Type_BZip_Archive	Files
Type_TrueType_Font	File Details
Type_OpenType_Font	File Details
Type_KMZ	File Details