LOLBAS/Atbroker.exe.md at 12165e0db019d320fc5f0fedea23a09e24e34122

mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2024-12-30 16:54:00 +01:00

Oddvar Moe 550263cd1e Removed MD files, we only use the webportal from now on. All MD files moved to archive

2018-10-25 18:31:11 +02:00

Atbroker.exe


ATBroker.exe /start malware
Start a registered Assistive Technology (AT).

Resources:
- http://www.hexacorn.com/blog/2016/07/22/beyond-good-ol-run-key-part-42/
Full path:
- C:\Windows\System32\Atbroker.exe
- C:\Windows\SysWOW64\Atbroker.exe
Notes: Thanks to Adam - @hexacorn Modifications must be made to the system registry to either register or modify an existing Assistibe Technology (AT) service entry.