Create AppLauncher.yml (#465)

Co-authored-by: Wietze <wietze@users.noreply.github.com>
This commit is contained in:
Avihay Eldad
2025-09-29 23:50:52 +03:00
committed by GitHub
parent 7b44bd9ac6
commit 58a6ef8d1e

View File

@@ -0,0 +1,23 @@
---
Name: AppLauncher.exe
Description: User Experience Virtualization tool that launches applications under monitoring to capture and synchronize user settings.
Author: Avihay Eldad
Created: 2025-09-21
Commands:
- Command: AppLauncher.exe {PATH_ABSOLUTE:.exe}
Description: Launches an executable via User Experience Virtualization tool.
Usecase: Executes an executable under a trusted, Microsoft signed binary.
Category: Execute
Privileges: User
MitreID: T1127
OperatingSystem: Windows
Tags:
- Execute: EXE
Full_Path:
- Path: C:\Program Files\Windows Kits\10\Microsoft User Experience Virtualization\Management\AppLauncher.exe
- Path: C:\Program Files (x86)\Windows Kits\10\Microsoft User Experience Virtualization\Management\AppLauncher.exe
Resources:
- Link: https://learn.microsoft.com/en-us/microsoft-desktop-optimization-pack/ue-v/uev-getting-started
Acknowledgement:
- Person: Avihay Eldad
Handle: '@AvihayEldad'