mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2024-10-23 09:09:02 +02:00
20 lines
616 B
Markdown
20 lines
616 B
Markdown
|
## InfDefaultInstall.exe
|
||
|
|
* Functions: Execute
|
||
|
|
```
|
||
|
|
|
||
|
|
InfDefaultInstall.exe Infdefaultinstall.inf
|
||
|
|
Executes SCT script using scrobj.dll from a command in entered into a specially prepared INF file.
|
||
|
|
```
|
||
|
|
|
||
|
|
* Resources:
|
||
|
|
* https://twitter.com/KyleHanslovan/status/911997635455852544
|
||
|
|
* https://gist.github.com/KyleHanslovan/5e0f00d331984c1fb5be32c40f3b265a
|
||
|
|
* https://blog.conscioushacker.io/index.php/2017/10/25/evading-microsofts-autoruns/
|
||
|
|
|
||
|
|
* Full path:
|
||
|
|
* c:\windows\system32\Infdefaultinstall.exe
|
||
|
|
* c:\windows\sysWOW64\Infdefaultinstall.exe
|
||
|
|
|
||
|
|
* Notes: Thanks to Kyle Hanslovan - @kylehanslovan
|
||
|
|
|