atomic-red-team/Windows/Persistence/Change_Default_File_Association.md

Change Default File Association

MITRE ATT&CK Technique: T1042

User file association preferences are stored under

[HKEY_CURRENT_USER]\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts

Changes to a user's preference will occur under this entry's subkeys.

Change association with assoc.exe

cmd.exe assoc .wav="C:\Program Files\Windows Media Player\wmplayer.exe"