SystemSettings.exe – yet another Lolbin for loading DLLs

August 12, 2018 in Living off the land, LOLBins

This is another quickie. Only noticed this one after posting the previous post (hint: look for .exe files that include ‘StartApplication’ in their strings).

\WINDOWS\ImmersiveControlPanel\SystemSettings.exe uses LoadLibrary to load SystemSettings.dll, so if you copy it to a different folder and drop your own SystemSettings.dll there you will be able to load it via a signed .exe once you execute SystemSettings.exe.

 

Share this :)

Comments are closed.