From 7e1b09413f3a70c378d1654b541064cdba356574 Mon Sep 17 00:00:00 2001
From: tbaker57 <tim.h.baker@gmail.com>
Date: Thu, 5 Dec 2024 06:51:05 +1000
Subject: [PATCH] Update WFMFormat.yml

---
 yml/OtherMSBinaries/WFMFormat.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/yml/OtherMSBinaries/WFMFormat.yml b/yml/OtherMSBinaries/WFMFormat.yml
index e08f15c..8cb874f 100644
--- a/yml/OtherMSBinaries/WFMFormat.yml
+++ b/yml/OtherMSBinaries/WFMFormat.yml
@@ -12,7 +12,7 @@ Commands:
     MitreID: T1127
     OperatingSystem: Windows 10
 Full_Path:
-  - Path: C:\there\is\no\default\installation\path
+  - Path: C:\there\is\no\default\installation\path\WFMFormat.exe
 Detection:
   - IOC: Child process from WFMFormat.exe
 Resources: