Hexacorn Ltd

站点链接：http://www.hexacorn.com/blog

Hexacorn Ltd 2026-01-04 autostart (persistence) · lolbins 阅读缓存

Beyond good ol’ Run key, Part 156

收藏阅读缓存
Hexacorn Ltd 2026-01-04 autostart (persistence) 阅读缓存

Beyond good ol’ Run key, Part 155

收藏阅读缓存
Hexacorn Ltd 2026-01-02 autostart (persistence) · lolbins 阅读缓存

Beyond good ol’ Run key, Part 154

收藏阅读缓存
Hexacorn Ltd 2026-01-01 autostart (persistence) 阅读缓存

Beyond good ol’ Run key, Part 152

收藏阅读缓存
Hexacorn Ltd 2025-12-31 autostart (persistence) 阅读缓存

Beyond good ol’ Run key, Part 149 – update

收藏阅读缓存
Hexacorn Ltd 2025-12-07 little known secrets · living off the land · lolbins 阅读缓存

1 little secret of sqlsrv32.dll

收藏阅读缓存
Hexacorn Ltd 2025-12-06 phantom dll · sideloading 阅读缓存

1 little secret of cliconfg.dll

收藏阅读缓存
Hexacorn Ltd 2025-12-06 living off the land · lolbins · phantom dll 阅读缓存

1 little secret of mapi32.dll

收藏阅读缓存
Hexacorn Ltd 2025-12-04 dexray · software releases 阅读缓存

DeXRAY v2.36

收藏阅读缓存
Hexacorn Ltd 2025-11-29 phantom dll · sideloading 阅读缓存

More hidden Phantom DLLs

收藏阅读缓存
Hexacorn Ltd 2025-11-28 archaeology 阅读缓存

A silly rundll-ish feature of ShellAbout function…

收藏阅读缓存
Hexacorn Ltd 2025-11-26 sandboxing 阅读缓存

Enter Sandbox 31: Web Shells

收藏阅读缓存
Hexacorn Ltd 2025-11-17 archaeology 阅读缓存

Some unusual run-time rundll32.exe artifacts

收藏阅读缓存
Hexacorn Ltd 2025-11-16 archaeology 阅读缓存

1 or more little secrets of disksnapshot.exe

收藏阅读缓存
Hexacorn Ltd 2025-11-04 little known secrets · living off the land · lolbins 阅读缓存

1 little known secret of cliconfg.exe

收藏阅读缓存
Hexacorn Ltd 2025-10-25 autostart (persistence) 阅读缓存

Beyond good ol’ Run key, Part 153

收藏阅读缓存
Hexacorn Ltd 2025-10-21 scam 阅读缓存

China Domain Name Scammers target Hexacorn

收藏阅读缓存
Hexacorn Ltd 2025-10-19 little known secrets · living off the land · lolbins 阅读缓存

1 little known secret of help.exe

收藏阅读缓存
Hexacorn Ltd 2025-10-19 living off the land · lolbins 阅读缓存

1 little known secret of nslookup.exe, part 2

收藏阅读缓存
Hexacorn Ltd 2025-10-19 living off the land · lolbins 阅读缓存

1 little known secret of wsreset.exe

收藏阅读缓存
Hexacorn Ltd 2025-10-18 archaeology · forensic analysis 阅读缓存

Forensics of the past

收藏阅读缓存
Hexacorn Ltd 2025-10-06 living off the land · lolbins 阅读缓存

ntprint.exe lolbin

收藏阅读缓存
Hexacorn Ltd 2025-10-05 archaeology · living off the land 阅读缓存

Using .LNK files as lolbins

收藏阅读缓存
Hexacorn Ltd 2025-09-20 archaeology · dll analysis · file formats zoo 阅读缓存

RunDll Exporters

收藏阅读缓存
Hexacorn Ltd 2025-09-20 sandboxing 阅读缓存

Enter Sandbox 30: Static Analysis gone wrong

收藏阅读缓存
Hexacorn Ltd 2025-09-09 autostart (persistence) 阅读缓存

Beyond good ol’ Run key, Part 151

收藏阅读缓存
Hexacorn Ltd 2025-09-04 dll forwardsideloading · living off the land · lolbins 阅读缓存

DLL ForwardSideloading, Part 2

收藏阅读缓存
Hexacorn Ltd 2025-08-20 living off the land · lolbins · sideloading 阅读缓存

DLL ForwardSideloading

收藏阅读缓存
Hexacorn Ltd 2025-08-17 autostart (persistence) · lolbins 阅读缓存

Beyond good ol’ Run key, Part 150

收藏阅读缓存
Hexacorn Ltd 2025-07-13 little known secrets · living off the land · lolbins 阅读缓存

1 little known secret of advpack.dll, LaunchINFSection

收藏阅读缓存