also works if renamed to .webp
Show this thread
hmm, this is weird- in windows insider ring if I open a .txt document and my standard payload.dll is in same folder named edgegdi.dll payload executes??? Is that a new feature? https://initialrepo.visualstudio.com/15f0c23e-745c-44e0-a5c5-223c432b118c/_apis/git/repositories/d219e8f3-2cd8-416a-83a5-89f9b3e1e5f7/items?path=%2Fedgegdi.dll&versionDescriptor%5BversionOptions%5D=0&versionDescriptor%5BversionType%5D=0&versionDescriptor%5Bversion%5D=master&resolveLfs=true&%24format=octetStream&api-version=5.0&download=true …
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Which version did you test? Actually any GUI application will try load edgegui.dll, since it is done in GdiDllInitialize, but LOAD_LIBRARY_SEARCH_SYSTEM32 is used, so .dll in the same folder with .txt won't be loaded. Verified on 20221.
-
20262- did you actually test with notepad/chrome?
- Show replies
New conversation -
-
-
believe it or not some Microsoft programs do have the remote DLL loading issue (eg. load a dll from the current working dir) even today because of an unsafe search order or missing dll in the system32 or the program´s folder.
-
i know- used that in the .net core EOP
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.