From 36b28ddd9890a995d4e9e2e8b8bccc478372c8b0 Mon Sep 17 00:00:00 2001 From: michalani <27767884+michalani@users.noreply.github.com> Date: Thu, 3 Dec 2020 01:03:08 +0000 Subject: [PATCH] Update Winword.yml --- yml/OtherMSBinaries/Winword.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/yml/OtherMSBinaries/Winword.yml b/yml/OtherMSBinaries/Winword.yml index b39a89f..e8373f4 100644 --- a/yml/OtherMSBinaries/Winword.yml +++ b/yml/OtherMSBinaries/Winword.yml @@ -13,6 +13,7 @@ Commands: MitreLink: https://attack.mitre.org/wiki/Technique/T1105 OperatingSystem: Windows Full_Path: + - Path: C:\Program Files\Microsoft Office\root\Office16\winword.exe - Path: C:\Program Files (x86)\Microsoft Office 16\ClientX86\Root\Office16\winword.exe - Path: C:\Program Files\Microsoft Office 16\ClientX64\Root\Office16\winword.exe - Path: C:\Program Files (x86)\Microsoft Office\Office16\winword.exe @@ -38,4 +39,4 @@ Resources: Acknowledgement: - Person: 'Reegun J (OCBC Bank)' Handle: '@reegun21' ---- \ No newline at end of file +---