Difference between revisions of "Expand"

From truxwiki.com
Jump to navigation Jump to search
Line 38: Line 38:
 
|-
 
|-
 
| [[Type_GIF]]
 
| [[Type_GIF]]
 +
| [[Type_File_Details|File Details]]
 +
|-
 +
| [[Type_PE]]
 
| [[Type_File_Details|File Details]]
 
| [[Type_File_Details|File Details]]
 
|-
 
|-
 
| [[Type_ZIP]]
 
| [[Type_ZIP]]
|  
+
| Files, [[Type_File_Details|File Details]]
 +
|-
 +
| [[Type_32bit_Windows_Executable]]
 +
| Files, [[Type_File_Details|File Details]]
 +
|-
 +
| [[Type_64bit_Windows_Executable]]
 +
| Files, [[Type_File_Details|File Details]]
 +
|-
 +
| [[Type_ROM_Windows_Executable]]
 +
| Files, [[Type_File_Details|File Details]]
 +
|-
 +
| [[Type_Word_2007]]
 +
| Artifacts, [[Type_File_Details|File Details]]
 +
|-
 +
| [[Type_Excel_2007]]
 +
| Artifacts, [[Type_File_Details|File Details]]
 +
|-
 +
| [[Type_PowerPoint_2007]]
 +
| Artifacts, [[Type_File_Details|File Details]]
 
|}
 
|}

Revision as of 10:33, 22 July 2020

Details
Executable Expand.exe
Stage 3
Percent Complete 48%
Message Queue expand

Expand is the most capable exploitation process. It produces files and artifacts.

Capabilities

Expand exploits the following file types.

File Type Produces
Type_Physical_Artifacts Artifacts
Type_ASCII_Text File Details
Type_JPEG Artifacts, File Details
Type_JPEGWithExif EXIF, Artifacts, File Details
Type_GIF File Details
Type_PE File Details
Type_ZIP Files, File Details
Type_32bit_Windows_Executable Files, File Details
Type_64bit_Windows_Executable Files, File Details
Type_ROM_Windows_Executable Files, File Details
Type_Word_2007 Artifacts, File Details
Type_Excel_2007 Artifacts, File Details
Type_PowerPoint_2007 Artifacts, File Details