LOLBAS/Atbroker.exe.md at 5c46dd63f5e4e74a0522748f887d4c4fa7f331b8

mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2025-03-12 18:38:23 +01:00

Oddvar Moe 550263cd1e Removed MD files, we only use the webportal from now on. All MD files moved to archive

2018-10-25 18:31:11 +02:00

Atbroker.exe


ATBroker.exe /start malware
Start a registered Assistive Technology (AT).

Resources:
- http://www.hexacorn.com/blog/2016/07/22/beyond-good-ol-run-key-part-42/
Full path:
- C:\Windows\System32\Atbroker.exe
- C:\Windows\SysWOW64\Atbroker.exe
Notes: Thanks to Adam - @hexacorn Modifications must be made to the system registry to either register or modify an existing Assistibe Technology (AT) service entry.