diff --git a/yml/OtherMSBinaries/Winword.yml b/yml/OtherMSBinaries/Winword.yml index b39a89f..e8373f4 100644 --- a/yml/OtherMSBinaries/Winword.yml +++ b/yml/OtherMSBinaries/Winword.yml @@ -13,6 +13,7 @@ Commands: MitreLink: https://attack.mitre.org/wiki/Technique/T1105 OperatingSystem: Windows Full_Path: + - Path: C:\Program Files\Microsoft Office\root\Office16\winword.exe - Path: C:\Program Files (x86)\Microsoft Office 16\ClientX86\Root\Office16\winword.exe - Path: C:\Program Files\Microsoft Office 16\ClientX64\Root\Office16\winword.exe - Path: C:\Program Files (x86)\Microsoft Office\Office16\winword.exe @@ -38,4 +39,4 @@ Resources: Acknowledgement: - Person: 'Reegun J (OCBC Bank)' Handle: '@reegun21' ---- \ No newline at end of file +---