.. / AccCheckConsole.exe
Star

Verifies UI accessibility requirements

Paths:

C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\x86\AccChecker\AccCheckConsole.exe
C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\x64\AccChecker\AccCheckConsole.exe
C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\arm\AccChecker\AccCheckConsole.exe
C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\arm64\AccChecker\AccCheckConsole.exe

Resources:

Acknowledgements:

Detection:

Execute

Load a managed DLL in the context of AccCheckConsole.exe. The -window switch value can be set to an arbitrary active window name.

AccCheckConsole.exe -window "Untitled - Notepad" C:\path\to\your\lolbas.dll

Usecase: Local execution of managed code from assembly DLL.
Privileges required: User
OS: Windows
MITRE ATT&CK®: T1218

Load a managed DLL in the context of AccCheckConsole.exe. The -window switch value can be set to an arbitrary active window name.

AccCheckConsole.exe -window "Untitled - Notepad" C:\path\to\your\lolbas.dll

Usecase: Local execution of managed code to bypass AppLocker.
Privileges required: User
OS: Windows
MITRE ATT&CK®: T1218