{"id":4371,"date":"2017-10-25T18:47:43","date_gmt":"2017-10-25T18:47:43","guid":{"rendered":"http:\/\/www.hexacorn.com\/blog\/?p=4371"},"modified":"2017-10-25T20:20:07","modified_gmt":"2017-10-25T20:20:07","slug":"downloading-off-the-land","status":"publish","type":"post","link":"https:\/\/www.hexacorn.com\/blog\/2017\/10\/25\/downloading-off-the-land\/","title":{"rendered":"Downloading off the land"},"content":{"rendered":"<p>There are many documented ways to use legitimate applications to download stuff from the net.<\/p>\n<p>Here are two more:<\/p>\n<ul>\n<li>wmplayer.exe &lt;URL&gt;<\/li>\n<li>FlashPla.exe &lt;URL&gt;<\/li>\n<\/ul>\n<p>when executed they will download the file pointed by URLs, save them to the browser cache folder e.g.\u00a0%USERPROFILE%\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE, and .. fail playing them as media.<\/p>\n<p>But the files will remain on the system&#8230;<\/p>\n<p>The first one is a pretty obvious one &#8211;\u00a0 it&#8217;s just a Windows Media Player and it&#8217;s present natively on many systems.<\/p>\n<p>The second one &#8211; FlashPla.exe &#8211; is your good ol&#8217; Adobe Flash Player; you will find it all over the place as it&#8217;s being shipped with many drivers and tools accompanying various peripheral devices. It may not be called FlashPla (another name I came across is CL_Gallery.exe, FlashPlayer.exe, cs3flashplayer.exe,SAFlashPlayer.exe), but it&#8217;s pretty easy to find.<\/p>\n<p>Example locations:<\/p>\n<ul>\n<li>c:\\Program Files (x86)\\CyberLink\\Power2Go\\Gallery\\CL_Gallery.exe<\/li>\n<li>c:\\Program Files (x86)\\HP\\Digital Imaging\\help\\player\\FlashPla.exe<\/li>\n<li>C:\\Program Files\\HP\\Digital Imaging\\help\\player\\FlashPla.exe<\/li>\n<li>C:\\ProgramData\\LG\\LG LIP2230\\Help\\flash\\FlashPla.exe<\/li>\n<li>C:\\Program Files\\Macromedia\\Flash 5\\Players\\FlashPla.exe<\/li>\n<li>C:\\Program Files\\FlashJester\\Jugglor v30\\Projector Files\\CS3FlashPlayer.exe<\/li>\n<\/ul>\n<p>Both players open windows and are pretty noisy (e.g. in Registry), but it&#8217;s always worth documenting the possibilities&#8230;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>There are many documented ways to use legitimate applications to download stuff from the net. Here are two more: wmplayer.exe &lt;URL&gt; FlashPla.exe &lt;URL&gt; when executed they will download the file pointed by URLs, save them to the browser cache folder &hellip; <a href=\"https:\/\/www.hexacorn.com\/blog\/2017\/10\/25\/downloading-off-the-land\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[43,13,15,46,56],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/4371"}],"collection":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/comments?post=4371"}],"version-history":[{"count":5,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/4371\/revisions"}],"predecessor-version":[{"id":4376,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/4371\/revisions\/4376"}],"wp:attachment":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/media?parent=4371"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/categories?post=4371"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/tags?post=4371"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}