

Which is directly followed by "cmp dword ptr, 02h" and "xor ecx, ebp". Which is directly followed by "cmp dword ptr, 05h" and "jne 00AF6AE5h".

"VMware Workstation" (Indicator: "vmware") "%s\VMware\logs\%s" (Indicator: "vmware") "SOFTWARE\VMware, Inc.\NeedReboot" (Indicator: "vmware") "SOFTWARE\VMware, Inc." (Indicator: "vmware") "SOFTWARE\VMware, Inc.\" (Indicator: "vmware") "Performing VMware Tools style install/upgrade" (Indicator: "vmware") "VerifyPackageSignature: %s is not a VMware's App - skipping" (Indicator: "vmware") "VerifyPackageSignature: %s is VMware's App - continue verification" (Indicator: "vmware")
