LOLBAS/OSBinaries/Qprocess.md

Qprocess.exe

• Functions: Credentials

qprocess /SERVER:RemoteServer

Acknowledgements:

• Rahmat Nurfauzi - @infosecn1nja

Code sample: *

Resources:

• https://twitter.com/infosecn1nja/status/987268926139592706

Full path:

c:\windows\system32\Qprocess.exe

Notes: Some specific details about the binary file.

Detection: Details about detection. IOC, Behaviour , User Agents etc