~/bokkapig
hack the box machine writeups

AppLauncher.exe

type: OtherMSBinaries
User Experience Virtualization tool that launches applications under monitoring to capture and synchronize user settings.

Full path

C:\Program Files\Windows Kits\10\Microsoft User Experience Virtualization\Management\AppLauncher.exe
C:\Program Files (x86)\Windows Kits\10\Microsoft User Experience Virtualization\Management\AppLauncher.exe

Commands

  1. ExecuteUser T1127

    Executes an executable under a trusted, Microsoft signed binary.

    AppLauncher.exe {PATH_ABSOLUTE:.exe}

    Launches an executable via User Experience Virtualization tool.

    os: Windows

    Execute: EXE

Resources

acknowledgement: Avihay Eldad @AvihayEldad