ODBC Data Source Administrator to manage User/System DSNs and ODBC drivers. Located at: c:\windows\system32\odbcad32.exe; c:\windows\syswow64\odbcad32.exe.
odbcad32odbcad32Sandbox: execFile · Timeout: 30s
security.privilege-escalation.uac-bypass Outputs
process.output Command execution output
privilege_escalationprocess_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | low |
| Disk I/O | low |
Launch odbcad32.exe GUI, click 'Tracing' tab, click 'Browsing' button, enter abitrary command in the File Dialog's path, press enter. (Execute a binary as a high-integrity process without a UAC prompt.)
odbcad32.exe| Type | Rule / Indicator |
|---|---|
| ioc | odbcad32.exe spawning unexpected child processes. |
odbcad32 is a Windows LOLBin. ODBC Data Source Administrator to manage User/System DSNs and ODBC drivers. Located at: c:\windows\system32\odbcad32.exe; c:\windows\syswow64\odbcad32.exe.