Dfsvc.exe.md

Dfsvc.exe

Missing example

• Windows binary: True

• Bypasses Default AppLocker Rules: False

• Mitre:

• Links:

  • https://github.com/api0cradle/ShmooCon-2015/blob/master/ShmooCon-2015-Simple-WLEvasion.pdf

• File path:

  • C:\Windows\Microsoft.NET\Framework\v2.0.50727\Dfsvc.exe
  • C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Dfsvc.exe
  • C:\Windows\Microsoft.NET\Framework\v4.0.30319\Dfsvc.exe
  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Dfsvc.exe

• Acknowledgement:

  • Name: Casey Smith
    • Twitter: @Subtee
    • Blog: https://subt0x11.blogspot.com/

OS: