Remote App Creation And Modification Detection.

Publicated on : 1184915121
We all know that it's possible to check upon installed software inside MSIE. But little is known about the installed version of that software. This demo pings the creation and modification date on a bunch of installed apps on their images. It only shows the dates of images located inside the software folder. For convenience I only ping back the .ICO filetype. Logically it could be anything, only for MSIE of course.

MSIE is known as the feature machine, it has a great set of functions we can use. Among a few there are a couple that echo back the filetype information and the creation and modification date of images. This could come in useful for an attack, because now an attacker could determine the version of the installed software on the machine of it's victim. He could also check if the file has been changed or modified, in any case it could turn out useful intelligence.

the code below shows it's function, pretty straight forward. The demo shows a lot more apps.