Jump to content

C:\Windows\System32\wuapihost.exe -Embedding


 Share

Recommended Posts

Why does autoit have this call in even a 1-liner program?

ttps://www.virustotal.com/gui/file/f45a20af6eeeee9aaea07d1fed27fc90ab3df006f1dd9c90c54f6fea67fedb39

It also has a useless SAMPLEPATH shell call

Here's the 1-liner that triggers all sorts of malware detections

MsgBox(0, "Version", @AutoItVersion)
 

https://www.virustotal.com/gui/file/f45a20af6eeeee9aaea07d1fed27fc90ab3df006f1dd9c90c54f6fea67fedb39

Shell Commands

  • "%SAMPLEPATH%\test.exe"
  • C:\Windows\System32\wuapihost.exe -Embedding

Processes Injected

  • \\?\C:\Windows\system32\wbem\WMIADAP.EXE
Link to comment
Share on other sites

  • Moderators

mdblack98,

Please see here.

M23

Public_Domain.png.2d871819fcb9957cf44f4514551a2935.png Any of my own code posted anywhere on the forum is available for use by others without any restriction of any kind

Open spoiler to see my UDFs:

Spoiler

ArrayMultiColSort ---- Sort arrays on multiple columns
ChooseFileFolder ---- Single and multiple selections from specified path treeview listing
Date_Time_Convert -- Easily convert date/time formats, including the language used
ExtMsgBox --------- A highly customisable replacement for MsgBox
GUIExtender -------- Extend and retract multiple sections within a GUI
GUIFrame ---------- Subdivide GUIs into many adjustable frames
GUIListViewEx ------- Insert, delete, move, drag, sort, edit and colour ListView items
GUITreeViewEx ------ Check/clear parent and child checkboxes in a TreeView
Marquee ----------- Scrolling tickertape GUIs
NoFocusLines ------- Remove the dotted focus lines from buttons, sliders, radios and checkboxes
Notify ------------- Small notifications on the edge of the display
Scrollbars ----------Automatically sized scrollbars with a single command
StringSize ---------- Automatically size controls to fit text
Toast -------------- Small GUIs which pop out of the notification area

 

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...