{"id":6718,"date":"2019-08-31T21:46:32","date_gmt":"2019-08-31T21:46:32","guid":{"rendered":"http:\/\/www.hexacorn.com\/blog\/?p=6718"},"modified":"2019-08-31T21:46:34","modified_gmt":"2019-08-31T21:46:34","slug":"sitting-on-the-lolbins-11","status":"publish","type":"post","link":"https:\/\/www.hexacorn.com\/blog\/2019\/08\/31\/sitting-on-the-lolbins-11\/","title":{"rendered":"Sitting on the Lolbins, 11"},"content":{"rendered":"\n<p>A programmer who wrote a lolbin I <a href=\"https:\/\/www.hexacorn.com\/blog\/2019\/08\/31\/sitting-on-the-lolbins-10\/\">presented<\/a> previously is probably the same coder that wrote another program for Dell &#8211; an application called <em>Dell WebUpdater Executable<\/em>.<\/p>\n\n\n\n<p>Same as in the previous example, one needs to create a DLL with a name that is using a file name of a main lolbinish executable, and suffixed with <em>wupd.dll<\/em>, i.e. test<em>wupd.dll<\/em> for <em>test.exe<\/em>.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Verified:       Signed\nSigning date:   04:38 2008-02-25\nPublisher:      Dell Inc.\nCompany:        n\/a\nDescription:    Dell WebUpdater Executable\nProduct:        Dell WebUpdater\nProd version:   1.95.0.0\nFile version:   1.95.0.0\nMachineType:    32-bit<\/code><\/pre>\n\n\n\n<p>Sample: 6FBD2979F6E8E7AE0A85AB20DADC7BD1BC70AD2F76B399F3CD287AE8D1B06BFE<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A programmer who wrote a lolbin I presented previously is probably the same coder that wrote another program for Dell &#8211; an application called Dell WebUpdater Executable. Same as in the previous example, one needs to create a DLL with &hellip; <a href=\"https:\/\/www.hexacorn.com\/blog\/2019\/08\/31\/sitting-on-the-lolbins-11\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[13,56,64,59],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/6718"}],"collection":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/comments?post=6718"}],"version-history":[{"count":2,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/6718\/revisions"}],"predecessor-version":[{"id":6720,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/6718\/revisions\/6720"}],"wp:attachment":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/media?parent=6718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/categories?post=6718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/tags?post=6718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}