windows enabled community high v1.0.0

winget

Windows Package Manager tool Located at: C:\Users\user\AppData\Local\Microsoft\WindowsApps\winget.exe.

📋 Live Preview
winget
winget

Sandbox: execFile · Timeout: 30s

Capabilities

security.execution.command
network.transfer.download
security.defense-evasion.bypass

Contract

Outputs

process.output

Command execution output

Side effects: network_trafficprocess_spawn

Workflow Edges

Produces

process.output

Resource Profile

ResourceValue
CPUlow
Memory16 MB
Networkmedium
Disk I/Olow

Examples

Downloads a file from the web address specified in .yml file and executes it on the system. Local manifest setting must be enabled in winget for it to work: `winget settings --enable LocalManifestFiles` (Download and execute an arbitrary file from the internet)

winget.exe install --manifest {PATH:.yml}

Download and install any software from the Microsoft Store using its name or Store ID, even if the Microsoft Store App itself is blocked on the machine. For example, use "Sysinternals Suite" or `9p7knl5rwt25` for obtaining ProcDump, PsExec via the Sysinternals Suite. Note: a Microsoft account is required for this. (Download and install software from Microsoft Store, even if Microsoft Store App is blocked)

winget.exe install --accept-package-agreements -s msstore {name or ID}

Download and install any software from the Microsoft Store using its name or Store ID, even if the Microsoft Store App itself is blocked on the machine, and even if AppLocker is active on the machine. For example, use "Sysinternals Suite" or `9p7knl5rwt25` for obtaining ProcDump, PsExec via the Sysinternals Suite. Note: a Microsoft account is required for this. (Download and install software from Microsoft Store, even if Microsoft Store App is blocked, and AppLocker is activated on the machine)

winget.exe install --accept-package-agreements -s msstore {name or ID}

Detection

Documentation

winget

winget is a Windows LOLBin. Windows Package Manager tool Located at: C:\Users\user\AppData\Local\Microsoft\WindowsApps\winget.exe.

References