03 : /Privilege-escalation Windows#

~/ cat Ie4uinit.exe.md

Paths:

c:\windows\system32\ie4uinit.exe
c:\windows\sysWOW64\ie4uinit.exe
c:\windows\system32\ieuinit.inf
c:\windows\sysWOW64\ieuinit.inf

Detection: ie4uinit.exe loading a inf file from outside %windir%

Execute

Executes commands from a specially prepared ie4uinit.inf file.

ie4uinit.exe -BaseSettings