mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2024-12-26 14:59:03 +01:00
441 B
441 B
AcroRd32.exe
- Functions: Execute
Replace C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe by your binary
Hijack RdrCEF.exe with a payload executable to launch when opening Adobe
-
Resources:
-
Full path:
- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\
-
Notes: Thanks to Pierre-Alexandre Braeken - @pabraeken