Installers – Interactive Lolbins, Part 2

April 19, 2019 in File Formats ZOO, Living off the land, LOLBins

In my previous post I forgot to mention one important type of installers – Portable Apps.

Their main .exes are signed, and they launch a very specific application from a predictable folder. So, all you have to do is for e.g. Portable Firefox:

  • Drop legitimate signed FirefoxPortable.exe
  • Then add App\firefox\firefox.exe of your choice

and then launch the signed portable .exe.

Comments are closed.