Quantcast
Channel: adam – Hexacorn
Browsing latest articles
Browse All 102 View Live

WerReportCreate API

The API I want to talk about today is called WerReportCreate. It takes a few arguments, but the most interesting is the first one, which is the Event Name. Looking at Windows OS binaries, we can see...

View Article


A few more protocol handlers :), Part 2

In 2018 I published this post. In 2022 I published this post and this post. @Radkeyboard7984 and I continue chatting about the new Windows 11 protocols and I just did a quick comparison between the...

View Article


Some unintelligent fun with ms-notepad protocol

In my previous post I have provided a list of ‘new’ protocols I noticed in the latest Windows 11 build. One that immediately caught my attention was “ms-notepad://”. You can use it to launch Notepad...

View Article

1 little known secret of forfiles.exe, part 2

In this old post I have demonstrated how to abuse forfiles.exe to run your ‘cmd.exe’ of choice. There is one more trick we can do with this tool. When forfiles.exe enumerates the files it executes a...

View Article

little secret of msconfig.exe

This post doesn’t include anything ground breaking, but is just yet another attempt to describe/document less-known command line arguments of many known, often native to the platform, Windows programs....

View Article

Browsing latest articles
Browse All 102 View Live


Latest Images