{"id":376,"date":"2012-01-15T07:18:45","date_gmt":"2012-01-15T07:18:45","guid":{"rendered":"http:\/\/www.hexacorn.com\/blog\/?p=376"},"modified":"2012-01-21T17:19:44","modified_gmt":"2012-01-21T17:19:44","slug":"forensic-riddle-8-answer","status":"publish","type":"post","link":"https:\/\/www.hexacorn.com\/blog\/2012\/01\/15\/forensic-riddle-8-answer\/","title":{"rendered":"Forensic Riddle #8 &#8211; Answer"},"content":{"rendered":"<p>There is a less known LoadModule API from kernel32.dll that can be used to launch applications the same way as WinExec and others.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>There is a less known LoadModule API from kernel32.dll that can be used to launch applications the same way as WinExec and others.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[11],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/376"}],"collection":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/comments?post=376"}],"version-history":[{"count":5,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/376\/revisions"}],"predecessor-version":[{"id":396,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/376\/revisions\/396"}],"wp:attachment":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/media?parent=376"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/categories?post=376"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/tags?post=376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}