Windows File Manager executable Located at: C:\Windows\System32\winfile.exe; C:\Windows\winfile.exe; C:\Program Files\WinFile\winfile.exe.
winfilewinfileSandbox: execFile · Timeout: 30s
security.execution.command Outputs
process.output Command execution output
process_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | low |
| Disk I/O | low |
Execute an executable file with WinFile as a parent process. (Performs execution of specified file, can be used as a defense evasion)
winfile.exe {PATH:.exe}winfile is a Windows LOLBin. Windows File Manager executable Located at: C:\Windows\System32\winfile.exe; C:\Windows\winfile.exe; C:\Program Files\WinFile\winfile.exe.