#214034 - 2021-11-1801:08 PMExtract kixtart script from an executable
CoCo
MM club member
Registered: 2000-11-20
Posts: 1341
Loc: NL
All,
It's been ages ago since I created my last Kixtart script. I now come across compiled Kixtart scripts. As often, the administrator has left the company. How can I extract the script from this executable and find out what the script does?
#214036 - 2021-11-1802:39 PMRe: Extract kixtart script from an executable
[Re: Allen]
CoCo
MM club member
Registered: 2000-11-20
Posts: 1341
Loc: NL
Thanks Allen,
I had a nice time here on the Kixtart forum. Unfortunately I hardly come across Kixtart at companies anymore. with that, the visit to this forum has slowly become less and less and Before you know it, it's been over 10 years since my last here...
I was already afraid that the executables would not be extractable. Now I have to somehow figure out, what these executables do.
Again, I'm guessing Kix2Exe, but if it is K2E, monitor the temp directory while the exe is running. It creates a folder to drop the kix32.exe and script in. The file will most likely be tokenized, but if not, you would have the script.
#214038 - 2021-11-1809:51 PMRe: Extract kixtart script from an executable
[Re: Allen]
ShaneEPShaneEP MM club member
Registered: 2002-11-29
Posts: 2125
Loc: Tulsa, OK
Also just an idea...I believe there was a program called RegShot that I have used in the past to find before and after changes to registry. Might be worth a shot, in the case you think the script may be making registry edits.
