Binary files - hegusung/Windows-Initial-Access GitHub Wiki

EXE/SCR/PIF

Input

• Click !
• ClickOnce
• MSI

Output

• Windows APIs
• COM objects

DLL/XLL

Input

• rundll32.exe
• COM object (XLL only)
• MSI

Output

• Windows APIs
• COM objects

.Net EXE

Input

• Click !
• ClickOnce
• COM Object
• InstallUtil.exe

Output

• Windows APIs
• COM objects

.Net DLL

Input

• Click !
• ClickOnce
• COM Object
• InstallUtil.exe
• regasm.exe
• regsvcs.exe

Output

• Windows APIs
• COM objects

JNLP

Input

• Click !

Output

• Windows APIs
• COM objects

LNK

Input

• Click !

Output

• Command execution