Adplus LOLBIN Config Sample

config-adplus.xml

<ADPlus Version='2'>
    <Settings>
        <Option> FullOnFirst </Option>
        <Runmode> Hang </Runmode>
        <!-- 
            If you want to run the binary and not dump anything. 
            Then this can be any process as long as it's running
        -->
        <ProcessName> notepad.exe </ProcessName> 
        <OutputDir>C:\temp\</OutputDir>
    </Settings>
    <PreCommands>
        <DebugActions>LoadedModules;Time</DebugActions>
        <!-- Insert Binary you want to launch-->
        <!-- You can also use the <Argument> tag to provide arguments -->
        <ShellSync>
            <Application> calc.exe </Application>
        </ShellSync>
    </PreCommands>
</ADPlus>