2018-04-18 16:33:16 +00:00
|
|
|
## Ie4unit.exe
|
2018-04-18 13:41:44 +00:00
|
|
|
|
|
|
|
|
* Functions: Execute
|
|
|
|
|
|
|
|
|
|
```
|
2018-04-18 16:33:16 +00:00
|
|
|
ie4unit.exe -BaseSettings
|
2018-04-18 13:41:44 +00:00
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Acknowledgements:
|
|
|
|
|
* Jimmy - @bohops
|
2018-04-18 16:33:16 +00:00
|
|
|
|
|
|
|
|
Code sample:
|
|
|
|
|
*
|
|
|
|
|
|
|
|
|
|
Resources:
|
|
|
|
|
* https://bohops.com/2018/03/10/leveraging-inf-sct-fetch-execute-techniques-for-bypass-evasion-persistence-part-2/
|
|
|
|
|
|
|
|
|
|
Full path:
|
|
|
|
|
```
|
|
|
|
|
c:\windows\system32\ie4unit.exe
|
|
|
|
|
c:\windows\sysWOW64\ie4unit.exe
|
|
|
|
|
c:\windows\system32\ieuinit.inf
|
|
|
|
|
c:\windows\sysWOW64\ieuinit.inf
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Notes:
|
|
|
|
|
copy out ie4unit.exe and ieuinit.inf - add SCT in the MSIE4RegisterOCX.Windows7 section
|
|
|
|
|
|
|
|
|
|
|
