 
| Binary | Functions | Type | ATT&CK® Techniques | 
|---|---|---|---|
| AddinUtil.exe | Binaries | T1218 | |
| AppInstaller.exe | Binaries | T1105 | |
| Aspnet_Compiler.exe | Binaries | T1127 | |
| At.exe | Binaries | T1053.002 | |
| Atbroker.exe | Binaries | T1218 | |
| Bash.exe | Binaries | T1202 | |
| Bitsadmin.exe | Binaries | T1564.004 T1105 T1218 | |
| CertOC.exe | Binaries | T1218 T1105 | |
| CertReq.exe | Binaries | T1105 | |
| Certutil.exe | Binaries | T1105 T1564.004 T1027.013 T1140 | |
| Change.exe | Binaries | T1218 | |
| Cipher.exe | Binaries | T1485 | |
| Cmd.exe | Binaries | T1564.004 T1059.003 T1105 T1048.003 | |
| Cmdkey.exe | Binaries | T1078 | |
| cmdl32.exe | Binaries | T1105 | |
| Cmstp.exe | Binaries | T1218.003 | |
| Colorcpl.exe | Binaries | T1036.005 | |
| ComputerDefaults.exe | Binaries | T1548.002 | |
| ConfigSecurityPolicy.exe | Binaries | T1567 T1105 | |
| Conhost.exe | Binaries | T1202 | |
| Control.exe | Binaries | T1218.002 | |
| Csc.exe | Binaries | T1127 | |
| Cscript.exe | Binaries | T1564.004 | |
| CustomShellHost.exe | Binaries | T1218 | |
| DataSvcUtil.exe | Binaries | T1567 | |
| Desktopimgdownldr.exe | Binaries | T1105 | |
| DeviceCredentialDeployment.exe | Binaries | T1564 | |
| Dfsvc.exe | Binaries | T1127.002 | |
| Diantz.exe | Binaries | T1564.004 T1105 T1036 | |
| Diskshadow.exe | Binaries | T1003.003 T1202 | |
| Dnscmd.exe | Binaries | T1543.003 | |
| Esentutl.exe | Binaries | T1105 T1564.004 T1003.003 | |
| Eudcedit.exe | Binaries | T1548.002 | |
| Eventvwr.exe | Binaries | T1548.002 | |
| Expand.exe | Binaries | T1105 T1564.004 | |
| Explorer.exe | Binaries | T1202 | |
| Extexport.exe | Binaries | T1218 | |
| Extrac32.exe | Binaries | T1564.004 T1105 | |
| Findstr.exe | Binaries | T1564.004 T1552.001 T1105 | |
| Finger.exe | Binaries | T1105 | |
| fltMC.exe | Binaries | T1562.001 | |
| Forfiles.exe | Binaries | T1202 T1564.004 | |
| Fsutil.exe | Binaries | T1485 T1218 | |
| Ftp.exe | Binaries | T1202 T1105 | |
| Gpscript.exe | Binaries | T1218 | |
| Hh.exe | Binaries | T1105 T1218.001 | |
| IMEWDBLD.exe | Binaries | T1105 | |
| Ie4uinit.exe | Binaries | T1218 | |
| iediagcmd.exe | Binaries | T1218 | |
| Ieexec.exe | Binaries | T1105 T1218 | |
| Ilasm.exe | Binaries | T1127 | |
| Infdefaultinstall.exe | Binaries | T1218 | |
| Installutil.exe | Binaries | T1218.004 T1105 | |
| iscsicpl.exe | Binaries | T1548.002 | |
| Jsc.exe | Binaries | T1127 | |
| Ldifde.exe | Binaries | T1105 | |
| Makecab.exe | Binaries | T1564.004 T1105 T1036 | |
| Mavinject.exe | Binaries | T1218.013 T1564.004 | |
| Microsoft.Workflow.Compiler.exe | Binaries | T1127 | |
| Mmc.exe | Binaries | T1218.014 | |
| MpCmdRun.exe | Binaries | T1105 T1564.004 | |
| Msbuild.exe | Binaries | T1127.001 T1036 | |
| Msconfig.exe | Binaries | T1218 | |
| Msdt.exe | Binaries | T1218 T1202 | |
| Msedge.exe | Binaries | T1105 T1218.015 | |
| Mshta.exe | Binaries | T1218.005 T1105 | |
| Msiexec.exe | Binaries | T1218.007 | |
| Netsh.exe | Binaries | T1546.007 | |
| Ngen.exe | Binaries | T1105 | |
| Odbcconf.exe | Binaries | T1218.008 | |
| OfflineScannerShell.exe | Binaries | T1218 | |
| OneDriveStandaloneUpdater.exe | Binaries | T1105 | |
| Pcalua.exe | Binaries | T1202 | |
| Pcwrun.exe | Binaries | T1218 T1202 | |
| Pktmon.exe | Binaries | T1040 | |
| Pnputil.exe | Binaries | T1547 | |
| Presentationhost.exe | Binaries | T1218 T1105 | |
| Print.exe | Binaries | T1564.004 T1105 | |
| PrintBrm.exe | Binaries | T1105 T1564.004 | |
| Provlaunch.exe | Binaries | T1218 | |
| Psr.exe | Binaries | T1113 | |
| Query.exe | Binaries | T1218 | |
| Rasautou.exe | Binaries | T1218 | |
| rdrleakdiag.exe | Binaries | T1003 T1003.001 | |
| Reg.exe | Binaries | T1564.004 T1003.002 | |
| Regasm.exe | Binaries | T1218.009 | |
| Regedit.exe | Binaries | T1564.004 | |
| Regini.exe | Binaries | T1564.004 | |
| Register-cimprovider.exe | Binaries | T1218 | |
| Regsvcs.exe | Binaries | T1218.009 | |
| Regsvr32.exe | Binaries | T1218.010 | |
| Replace.exe | Binaries | T1105 | |
| Reset.exe | Binaries | T1218 | |
| Rpcping.exe | Binaries | T1003 T1187 | |
| Rundll32.exe | Binaries | T1218.011 T1564.004 | |
| Runexehelper.exe | Binaries | T1218 | |
| Runonce.exe | Binaries | T1218 | |
| Runscripthelper.exe | Binaries | T1218 | |
| Sc.exe | Binaries | T1564.004 | |
| Schtasks.exe | Binaries | T1053.005 | |
| Scriptrunner.exe | Binaries | T1202 T1218 | |
| Setres.exe | Binaries | T1218 | |
| SettingSyncHost.exe | Binaries | T1218 | |
| Sftp.exe | Binaries | T1202 | |
| ssh.exe | Binaries | T1202 | |
| Stordiag.exe | Binaries | T1218 | |
| SyncAppvPublishingServer.exe | Binaries | T1218 | |
| Tar.exe | Binaries | T1564.004 T1105 | |
| Ttdinject.exe | Binaries | T1127 | |
| Tttracer.exe | Binaries | T1127 T1003 | |
| Unregmp2.exe | Binaries | T1202 | |
| vbc.exe | Binaries | T1127 | |
| Verclsid.exe | Binaries | T1218.012 | |
| Wab.exe | Binaries | T1218 | |
| wbadmin.exe | Binaries | T1003.003 | |
| wbemtest.exe | Binaries | T1047 | |
| winget.exe | Binaries | T1105 | |
| Wlrmdr.exe | Binaries | T1202 | |
| Wmic.exe | Binaries | T1564.004 T1218 T1105 | |
| WorkFolders.exe | Binaries | T1218 | |
| Wscript.exe | Binaries | T1564.004 | |
| Wsreset.exe | Binaries | T1548.002 | |
| wuauclt.exe | Binaries | T1218 | |
| Xwizard.exe | Binaries | T1218 T1105 | |
| msedge_proxy.exe | Binaries | T1105 T1218.015 | |
| msedgewebview2.exe | Binaries | T1218.015 | |
| wt.exe | Binaries | T1202 | |
| Advpack.dll | Libraries | T1218.011 | |
| Desk.cpl | Libraries | T1218.011 | |
| Dfshim.dll | Libraries | T1127.002 | |
| Ieadvpack.dll | Libraries | T1218.011 | |
| Ieframe.dll | Libraries | T1218.011 | |
| Mshtml.dll | Libraries | T1218.011 | |
| Pcwutl.dll | Libraries | T1218.011 | |
| PhotoViewer.dll | Libraries | T1105 | |
| Scrobj.dll | Libraries | T1105 | |
| Setupapi.dll | Libraries | T1218.011 | |
| Shdocvw.dll | Libraries | T1218.011 | |
| Shell32.dll | Libraries | T1218.011 | |
| Shimgvw.dll | Libraries | T1105 | |
| Syssetup.dll | Libraries | T1218.011 | |
| Url.dll | Libraries | T1218.011 | |
| Zipfldr.dll | Libraries | T1218.011 | |
| Comsvcs.dll | Libraries | T1003.001 | |
| AccCheckConsole.exe | OtherMSBinaries | T1218 | |
| adplus.exe | OtherMSBinaries | T1003.001 T1127 | |
| AgentExecutor.exe | OtherMSBinaries | T1218 | |
| AppLauncher.exe | OtherMSBinaries | T1127 | |
| AppCert.exe | OtherMSBinaries | T1127 T1218.007 | |
| Appvlp.exe | OtherMSBinaries | T1218 | |
| Bginfo.exe | OtherMSBinaries | T1218 | |
| Cdb.exe | OtherMSBinaries | T1127 | |
| coregen.exe | OtherMSBinaries | T1055 T1218 | |
| Createdump.exe | OtherMSBinaries | T1003 | |
| csi.exe | OtherMSBinaries | T1127 | |
| DefaultPack.EXE | OtherMSBinaries | T1218 | |
| Devinit.exe | OtherMSBinaries | T1218.007 | |
| Devtoolslauncher.exe | OtherMSBinaries | T1127 | |
| dnx.exe | OtherMSBinaries | T1127 | |
| Dotnet.exe | OtherMSBinaries | T1218 T1059 | |
| dsdbutil.exe | OtherMSBinaries | T1003.003 | |
| dtutil.exe | OtherMSBinaries | T1105 | |
| Dump64.exe | OtherMSBinaries | T1003.001 | |
| DumpMinitool.exe | OtherMSBinaries | T1003.001 | |
| Dxcap.exe | OtherMSBinaries | T1127 | |
| ECMangen.exe | OtherMSBinaries | T1105 | |
| Excel.exe | OtherMSBinaries | T1105 | |
| Fsi.exe | OtherMSBinaries | T1059 | |
| FsiAnyCpu.exe | OtherMSBinaries | T1059 | |
| Mftrace.exe | OtherMSBinaries | T1127 | |
| Microsoft.NodejsTools.PressAnyKey.exe | OtherMSBinaries | T1127 | |
| Mpiexec.exe | OtherMSBinaries | T1127 | |
| MSAccess.exe | OtherMSBinaries | T1105 | |
| Msdeploy.exe | OtherMSBinaries | T1218 T1105 | |
| MsoHtmEd.exe | OtherMSBinaries | T1105 | |
| Mspub.exe | OtherMSBinaries | T1105 | |
| msxsl.exe | OtherMSBinaries | T1220 T1105 T1564 | |
| ntdsutil.exe | OtherMSBinaries | T1003.003 | |
| Ntsd.exe | OtherMSBinaries | T1127 | |
| OpenConsole.exe | OtherMSBinaries | T1202 | |
| Pixtool.exe | OtherMSBinaries | T1127 | |
| Powerpnt.exe | OtherMSBinaries | T1105 | |
| Procdump.exe | OtherMSBinaries | T1202 | |
| ProtocolHandler.exe | OtherMSBinaries | T1105 | |
| rcsi.exe | OtherMSBinaries | T1127 | |
| Remote.exe | OtherMSBinaries | T1127 | |
| Sqldumper.exe | OtherMSBinaries | T1003 T1003.001 | |
| Sqlps.exe | OtherMSBinaries | T1218 | |
| SQLToolsPS.exe | OtherMSBinaries | T1218 | |
| Squirrel.exe | OtherMSBinaries | T1218 | |
| te.exe | OtherMSBinaries | T1127 | |
| Teams.exe | OtherMSBinaries | T1218.015 | |
| TestWindowRemoteAgent.exe | OtherMSBinaries | T1048 | |
| Tracker.exe | OtherMSBinaries | T1127 | |
| Update.exe | OtherMSBinaries | T1218 T1547 T1070 | |
| VSDiagnostics.exe | OtherMSBinaries | T1127 | |
| VSIISExeLauncher.exe | OtherMSBinaries | T1218 | |
| Visio.exe | OtherMSBinaries | T1105 | |
| VisualUiaVerifyNative.exe | OtherMSBinaries | T1218 | |
| VSLaunchBrowser.exe | OtherMSBinaries | T1105 T1127 | |
| Vshadow.exe | OtherMSBinaries | T1202 | |
| vsjitdebugger.exe | OtherMSBinaries | T1127 | |
| WFMFormat.exe | OtherMSBinaries | T1127 | |
| Wfc.exe | OtherMSBinaries | T1127 | |
| WinDbg.exe | OtherMSBinaries | T1127 | |
| WinProj.exe | OtherMSBinaries | T1105 | |
| Winword.exe | OtherMSBinaries | T1105 | |
| Wsl.exe | OtherMSBinaries | T1202 T1105 | |
| XBootMgr.exe | OtherMSBinaries | T1202 | |
| XBootMgrSleep.exe | OtherMSBinaries | T1202 | |
| devtunnel.exe | OtherMSBinaries | T1105 | |
| vsls-agent.exe | OtherMSBinaries | T1218 | |
| vstest.console.exe | OtherMSBinaries | T1127 | |
| winfile.exe | OtherMSBinaries | T1202 | |
| xsd.exe | OtherMSBinaries | T1105 | |
| CL_LoadAssembly.ps1 | Scripts | T1216 | |
| CL_Mutexverifiers.ps1 | Scripts | T1216 | |
| CL_Invocation.ps1 | Scripts | T1216 | |
| Launch-VsDevShell.ps1 | Scripts | T1216 | |
| Manage-bde.wsf | Scripts | T1216 | |
| Pubprn.vbs | Scripts | T1216.001 | |
| Syncappvpublishingserver.vbs | Scripts | T1216.002 | |
| UtilityFunctions.ps1 | Scripts | T1216 | |
| winrm.vbs | Scripts | T1216 T1220 | |
| Pester.bat | Scripts | T1216 | |
| No binary matches… | |||