Winword.exe.md

Winword.exe

winword.exe /l dllfile.dll
Executes dll using winword.exe. No commonly made DLL example file available

• Windows binary: False

• Bypasses Default AppLocker Rules: False

• Mitre: T1218

• Links:

  • https://twitter.com/vysecurity/status/884755482707210241
  • https://twitter.com/subTee/status/884615369511636992
  • https://twitter.com/Hexacorn/status/885258886428725250

• File path:

  • c:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

• Acknowledgement:

  • Name: Casey Smith
    • Twitter: @subtee
    • Blog: https://subt0x11.blogspot.com/

OS: