You are browsing the archive for Forensic Riddles – Answers.

Forensic Riddle #12 – Answer

July 8, 2012 in Forensic Riddles - Answers

There are many answers to this one. For starters, consider triplet A, W, UTF8 instead of usual A,W in: DnsQueryExA DnsQueryExUTF8 DnsQueryExW or DnsQuery_A DnsQuery_UTF8 DnsQuery_W Other examples include: RunDll32ShimW […]

Forensic Riddle #11 – Answer

May 2, 2012 in Forensic Riddles - Answers

The answer to the #11 is simple – it was an open-ended question really as it could be any executable file really that is dependent on configuration, config file, etc. […]