mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-11-04 10:39:56 +01:00
27 lines
1.0 KiB
YAML
27 lines
1.0 KiB
YAML
---
|
|
Name: Nvudisp.exe
|
|
Description: Execute, Copy, Add registry, Create shortcut, kill process
|
|
Author: ''
|
|
Created: '2018-05-25'
|
|
Categories: []
|
|
Commands:
|
|
- Command: Nvudisp.exe System calc.exe
|
|
Description: Execute calc.exe as a subprocess.
|
|
- Command: Nvudisp.exe Copy test.txt,test-2.txt
|
|
Description: Copy fila A to file B.
|
|
- Command: Nvudisp.exe SetReg HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\malware=malware.exe
|
|
Description: Add/Edit a Registry key value.
|
|
- Command: Nvudisp.exe CreateShortcut test.lnk,"Test","c:\windows\system32\calc.exe\","","c:\windows\system32\"
|
|
Description: Create shortcut file.
|
|
- Command: Nvudisp.exe KillApp calculator.exe
|
|
Description: Kill a process.
|
|
- Command: Nvudisp.exe Run foo
|
|
Description: Run process
|
|
Full Path:
|
|
- C:\windows\system32\nvuDisp.exe
|
|
Code Sample: []
|
|
Detection: []
|
|
Resources:
|
|
- http://sysadminconcombre.blogspot.ca/2018/04/run-system-commands-through-nvidia.html
|
|
Notes: Thanks to Pierre-Alexandre Braeken - @pabraeken
|