winfile.exe

type: OtherMSBinaries

Windows File Manager executable

Full path

C:\Windows\System32\winfile.exe
C:\Windows\winfile.exe
C:\Program Files\WinFile\winfile.exe
C:\Program Files (x86)\WinFile\winfile.exe
C:\Program Files\WindowsApps\Microsoft.WindowsFileManager_10.3.0.0_x64__8wekyb3d8bbwe\WinFile\winfile.exe

Commands

ExecuteUser T1202
Performs execution of specified file, can be used as a defense evasion
```
winfile.exe {PATH:.exe}
```
Execute an executable file with WinFile as a parent process.
os: Windows 10, Windows 11
Execute: EXE

Resources

https://github.com/microsoft/winfile

acknowledgement: Avihay Eldad @AvihayEldad