diff --git a/atomics/T1117/T1117.md b/atomics/T1117/T1117.md index b0239ffb..f45e1710 100644 --- a/atomics/T1117/T1117.md +++ b/atomics/T1117/T1117.md @@ -108,7 +108,7 @@ Regsvr32.exe is a command-line program used to register and unregister OLE contr ```cmd -"IF "%PROCESSOR_ARCHITECTURE%"=="AMD64" (C:\Windows\syswow64\regsvr32.exe /s #{dll_name}) ELSE ( regsvr32.exe /s #{dll_name} )" +IF "%PROCESSOR_ARCHITECTURE%"=="AMD64" (C:\Windows\syswow64\regsvr32.exe /s #{dll_name}) ELSE ( regsvr32.exe /s #{dll_name} ) ``` diff --git a/atomics/index.yaml b/atomics/index.yaml index 082a26bb..06c8e0da 100644 --- a/atomics/index.yaml +++ b/atomics/index.yaml @@ -11641,8 +11641,8 @@ defense-evasion: executor: name: command_prompt elevation_required: false - command: '"IF "%PROCESSOR_ARCHITECTURE%"=="AMD64" (C:\Windows\syswow64\regsvr32.exe - /s #{dll_name}) ELSE ( regsvr32.exe /s #{dll_name} )" + command: 'IF "%PROCESSOR_ARCHITECTURE%"=="AMD64" (C:\Windows\syswow64\regsvr32.exe + /s #{dll_name}) ELSE ( regsvr32.exe /s #{dll_name} ) ' T1014: @@ -23831,8 +23831,8 @@ execution: executor: name: command_prompt elevation_required: false - command: '"IF "%PROCESSOR_ARCHITECTURE%"=="AMD64" (C:\Windows\syswow64\regsvr32.exe - /s #{dll_name}) ELSE ( regsvr32.exe /s #{dll_name} )" + command: 'IF "%PROCESSOR_ARCHITECTURE%"=="AMD64" (C:\Windows\syswow64\regsvr32.exe + /s #{dll_name}) ELSE ( regsvr32.exe /s #{dll_name} ) ' T1085: