.. /Tracker.exe
Star

Tool included with Microsoft .Net Framework.


Paths:

Resources:
Acknowledgements:

Detection:

Execute

Use tracker.exe to proxy execution of an arbitrary DLL into another process. Since tracker.exe is also signed it can be used to bypass application whitelisting solutions.
Tracker.exe /d .\calc.dll /c C:\Windows\write.exe
Usecase: Injection of locally stored DLL file into target process.
Privileges required: User
OS: Windows
MITRE ATT&CK®: T1127



AWL bypass

Use tracker.exe to proxy execution of an arbitrary DLL into another process. Since tracker.exe is also signed it can be used to bypass application whitelisting solutions.
Tracker.exe /d .\calc.dll /c C:\Windows\write.exe
Usecase: Injection of locally stored DLL file into target process.
Privileges required: User
OS: Windows
MITRE ATT&CK®: T1127