Vault7: CIA Hacking Tools Revealed
Navigation: » Latest version
Owner: User #71468
Iperius Backup DLL Hijack
This program does not appear to be portable
Iperius.exe attempts to load the DLLDynamic Link Library "unicows.dll" adjacent to itself, but upon failing to find it, does not search for it further. Thus we can run whatever in PROCESS_ATTACH and return FALSE from DllMain
It is also worth noting, to get the window to pop-up, the exe expectsthe argument "show" — ie.: C:\folder\iperius.exe show
Without this argument, the program will start minimized to the tray