Add wbemcomn.yml (#96)

Co-authored-by: Wietze <[email protected]>
wietze · Jan 23, 2025 · fad3d11 · fad3d11
1 parent dd8964a
commit fad3d11
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/yml/microsoft/built-in/wbemcomn.yml b/yml/microsoft/built-in/wbemcomn.yml
@@ -0,0 +1,16 @@
+---
+Name: wbemcomn.dll
+Author: v1stra
+Created: 2024-12-12
+Vendor: Microsoft
+ExpectedLocations:
+  - '%SYSTEM32%'
+  - '%SYSWOW64%'
+VulnerableExecutables:
+  - Path: '%SYSTEM32%\Wbem\WmiApSrv.exe'
+    Type: Search Order
+Resources:
+  - https://gist.github.com/v1stra/7a13f2a27a1c9b97778d12e13a3d53c2
+Acknowledgements:
+  - Name: v1stra
+    Twitter: '@_v1stra'