{"id":839,"date":"2012-04-27T16:29:10","date_gmt":"2012-04-27T16:29:10","guid":{"rendered":"http:\/\/www.hexacorn.com\/blog\/?p=839"},"modified":"2013-03-15T05:26:05","modified_gmt":"2013-03-15T05:26:05","slug":"forensic-riddle-11","status":"publish","type":"post","link":"https:\/\/www.hexacorn.com\/blog\/2012\/04\/27\/forensic-riddle-11\/","title":{"rendered":"Forensic Riddle #11"},"content":{"rendered":"<p>It&#8217;s been a while since I posted a riddle, so here is a new one &#8211; this should be an easy one:<\/p>\n<p>Two different Windows executables have been executed on the same version of Windows system and under identical (ideal) conditions. Dynamic analysis shown that each of them produces completely different artefacts\u00a0 on a test system, but the in-depth code analysis shown that they have an identical source code. What files are these?<\/p>\n<p>Answer <a title=\"Forensic Riddle #11 \u2013 Answer\" href=\"https:\/\/www.hexacorn.com\/blog\/2012\/05\/02\/forensic-riddle-11-answer\/\">here<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It&#8217;s been a while since I posted a riddle, so here is a new one &#8211; this should be an easy one: Two different Windows executables have been executed on the same version of Windows system and under identical (ideal) &hellip; <a href=\"https:\/\/www.hexacorn.com\/blog\/2012\/04\/27\/forensic-riddle-11\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[7],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/839"}],"collection":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/comments?post=839"}],"version-history":[{"count":7,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/839\/revisions"}],"predecessor-version":[{"id":1777,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/839\/revisions\/1777"}],"wp:attachment":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/media?parent=839"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/categories?post=839"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/tags?post=839"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}