LOLBAS. GitHub
LIVING OFF THE LAND / OS BINARIES

Ie4uinit.exe

View source

Executes commands from a specially prepared ie4uinit.inf file.

Execute
01COMMAND EXAMPLES
01ATT&CK TECHNIQUES
01DETECTION RESOURCES
01CAPABILITIES
01 / TRADECRAFT

Command reference

1 examples

Execute1

EXAMPLE 01T1218

Executes commands from a specially prepared ie4uinit.inf file.

COMMAND
ie4uinit.exe -BaseSettings
USE CASE
Get code execution by copy files to another location
PRIVILEGES
User
OPERATING SYSTEM
Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
Execute · INF
02 / ON DISK

Known paths

c:\windows\system32\ie4uinit.exe
c:\windows\sysWOW64\ie4uinit.exe
c:\windows\system32\ieuinit.inf
c:\windows\sysWOW64\ieuinit.inf
03 / DEFENSIVE INTELLIGENCE

Detection & indicators

1 resources

Indicators & detection notes

  • IOC

    ie4uinit.exe copied outside of %windir%

  • IOC

    ie4uinit.exe loading an inf file (ieuinit.inf) from outside %windir%

FURTHER READING

Research & resources

COMMUNITY RESEARCH

Acknowledgements

Jimmy@bohops