2

I have an exe file that read and write from a local DB file. I checked this file with Detect It Easy and it shows that this is a mdb file.

I can open this file with microsoft access, and watch all the tables, but when I tried to view some table I see that I don't have permission to do so.

If I understand correctly, the executable needs to send to this mdb file a connection string that includes a user and a password when it initializes the connection. Is that true?

If yes, how can I sniff and observe this connection string as it sends it from the process to the mdb?

  • If the exe is not .NET and has a direct dependency on msjet.dll or similar then you could watch that with WinAPI Override. – Rup Jul 29 '18 at 10:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.