Added mftrace, extexport++

master
api0cradle 2018-04-25 22:47:50 +02:00
parent f3e2157dd6
commit cdd4e39fc5
2 changed files with 35 additions and 1 deletions

View File

@ -22,7 +22,10 @@ C:\Windows\SysWOW64\Atbroker.exe
```
Notes:
Not certain if it works on Windows 10.
In Windows 10 you need to add registry keys under:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Accessibility\ATs

31
OSBinaries/Extexport.md Normal file
View File

@ -0,0 +1,31 @@
## Extexport.exe
* Functions: Execute
```
Extexport.exe c:\test foo bar
```
Acknowledgements:
* Adam - @hexacorn
Code sample:
*
Resources:
* http://www.hexacorn.com/blog/2018/04/24/extexport-yet-another-lolbin/
Full path:
```
C:\Program Files\Internet Explorer\Extexport.exe
C:\Program Files\Internet Explorer(x86)\Extexport.exe
```
Notes:
Place mozcrt19.dll, mozsqlite3.dll, sqlite3.dll inside the c:\test folder
Detection: