Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 770870" data-attributes="member: 32260">Did I really write &quot;This image is wrapped and uses unwrapped imaged&quot;????<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite124" alt=":love:" title="Love&nbsp; &nbsp; :love:" loading="lazy" data-shortname=":love:" />It is simple. Developers can hide one or more applications inside another program (wrapper).&nbsp; In the case of the wrapped procexp.exe, it contains two applications for 32-bit and 64-bit versions of Windows. If you are using 32-bit Windows, then only 32-bit application will be extracted into Temp folder and executed. If you are using 64-bit Windows, then 64-bit application will be extracted into Temp folder and executed. Sysinternals suite usually has two Process Explorer applications:<ol>
<li data-xf-list-type="ol">procexp.exe - wrapped (can be run both on 32-bit and 64-bit Windows).</li>
<li data-xf-list-type="ol">procexp64.exe - unwrapped for 64-bit Windows only.</li>
</ol>------------------------------------------------------------------------------------------------------------------------------------------------------------------------In Hard_Configurator the Autoruns program is used only for:<ol>
<li data-xf-list-type="ol">Whitelisting applications and scripts from the Userspace which can start with Windows.</li>
<li data-xf-list-type="ol">Viewing scripts from all locations, which can start with Windows.</li>
</ol>The second can be useful when the user wants to block the scripts completely in all locations, for example by blocking script interpreters or when &lt;Disable Win. Script Host&gt; = ON .</blockquote>

[QUOTE="Andy Ful, post: 770870, member: 32260"] Did I really write "This image is wrapped and uses unwrapped imaged"????:love: It is simple. Developers can hide one or more applications inside another program (wrapper). In the case of the [COLOR=rgb(41, 105, 176)][B]wrapped procexp.exe[/B][/COLOR], it contains two applications for 32-bit and 64-bit versions of Windows. If you are using 32-bit Windows, then only 32-bit application will be extracted into Temp folder and executed. If you are using 64-bit Windows, then 64-bit application will be extracted into Temp folder and executed. Sysinternals suite usually has two Process Explorer applications: [LIST=1] [*]procexp.exe - wrapped (can be run both on 32-bit and 64-bit Windows). [*]procexp64.exe - unwrapped for 64-bit Windows only. [/LIST] ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ In Hard_Configurator the Autoruns program is used only for: [LIST=1] [*][B][COLOR=rgb(184, 49, 47)]Whitelisting[/COLOR][/B] applications and scripts from the [COLOR=rgb(184, 49, 47)][B]Userspace[/B][/COLOR] which can start with Windows. [*][B][COLOR=rgb(0, 168, 133)]Viewing[/COLOR][/B] scripts from [B][COLOR=rgb(0, 168, 133)]all locations[/COLOR][/B], which can start with Windows. [/LIST] The second can be useful when the user wants to block the scripts completely in all locations, for example by blocking script interpreters or when <Disable Win. Script Host> = ON . [/QUOTE]

Verification