public-mirrors/LOLBAS
1
0
Fork 0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2024-12-27 07:18:05 +01:00
Code Issues Projects Releases Wiki Activity

Add Winfile.yml (#374)

Browse Source 
Co-authored-by: Wietze <wietze@users.noreply.github.com>
This commit is contained in:
Avihay Eldad 2024-05-23 02:02:56 +03:00 committed by GitHub
parent 2185ade1f2
commit 78fa7b550e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
yml/OtherMSBinaries/winfile.yml Normal file
View File

@ -0,0 +1,24 @@
---
Name: winfile.exe
Description: Windows File Manager executable
Author: Avihay Eldad
Created: 2024-04-30
Commands:
- Command: winfile.exe calc.exe
Description: Execute an executable file with WinFile as a parent process.
Usecase: Performs execution of specified file, can be used as a defense evasion
Category: Execute
Privileges: User
MitreID: T1202
OperatingSystem: Windows 10, Windows 11
Full_Path:
- Path: C:\Windows\System32\winfile.exe
- Path: C:\Windows\winfile.exe
- Path: C:\Program Files\WinFile\winfile.exe
- Path: C:\Program Files (x86)\WinFile\winfile.exe
- Path: C:\Program Files\WindowsApps\Microsoft.WindowsFileManager_10.3.0.0_x64__8wekyb3d8bbwe\WinFile\winfile.exe
Resources:
- Link: https://github.com/microsoft/winfile
Acknowledgement:
- Person: Avihay Eldad
Handle: '@AvihayEldad'