03 : /Privilege-escalation Windows#

~/ cat Infdefaultinstall.exe.md

Binary used to perform installation based on content inside inf files

Paths:

C:\Windows\System32\Infdefaultinstall.exe
C:\Windows\SysWOW64\Infdefaultinstall.exe

Detection:

Execute

Executes SCT script using scrobj.dll from a command in entered into a specially prepared INF file.

InfDefaultInstall.exe Infdefaultinstall.inf