Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save api0cradle/7c774561d50dc50b67e072f49605f235 to your computer and use it in GitHub Desktop.
Save api0cradle/7c774561d50dc50b67e072f49605f235 to your computer and use it in GitHub Desktop.
List of applications for code execution via legit binaries
Rundll32.exe
Regsvr32.exe
Mshta.exe
Msbuild.exe
Cbd.exe
Csc.exe
Tracker.exe
Ntsd.exe
Bginfo.exe
Kd.exe
Rcsi.exe
Dnx.exe
Csi.exe
Certutil.exe
Certreq.exe
Dbghost.exe
InstallUtil.exe
Msxsl.exe
Regsvcs.exe
Regasm.exe
MSDT.exe
Dfsvc.exe
IEExec.exe
Control.exe
CMSTP.exe
Xwizard.exe
Fsi.exe
Obdconf.exe
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment