Confirming that launching Cylera's polyglot pedicom-cylera.dcm file from cmd.exe actually runs it as an executable (!), although it's unrecognized format on the machine. This is a really weird behavior and could indicate something worse in the way Windows are "launching" files.https://twitter.com/Cylera_/status/1118262328313692160 …
-
-
IMO having security tools look for MZ header in files with non-exe extensions would be a bad move. There must be a bunch of rare file formats out there that can legitimately contain something resembling a MZ header.
-
I'm wondering if removing the CreateProcess step from cmd.exe and just going with ShellExecute would break anything. Would be nice to have someone from MS chime in.
- 5 more replies
New conversation -
-
-
One does not "open files" from the console, you invoke commands.
-
Technically correct but the distinction blurs when faced with reality :)
- 2 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.