diff --git a/atomics/T1117/T1117.md b/atomics/T1117/T1117.md index 3316c461..163acd0c 100644 --- a/atomics/T1117/T1117.md +++ b/atomics/T1117/T1117.md @@ -42,7 +42,7 @@ Regsvr32.exe is a command-line program used to register and unregister OLE contr #### Inputs | Name | Description | Type | Default Value | |------|-------------|------|---------------| -| filename | Name of the local file, include path. | Path | Regsvr32.sct| +| filename | Name of the local file, include path. | Path | C:\AtomicRedTeam\atomics\T1117\bin\Regsvr32.sct| #### Run it with `command_prompt`! ``` @@ -78,10 +78,10 @@ Regsvr32.exe is a command-line program used to register and unregister OLE contr #### Inputs | Name | Description | Type | Default Value | |------|-------------|------|---------------| -| dll_name | Name of DLL to Execute, DLL Should export DllRegisterServer | Path | payload.dll| +| dll_name | Name of DLL to Execute, DLL Should export DllRegisterServer | Path | C:\AtomicRedTeam\atomics\T1117\bin\AllTheThingsx86.dll| #### Run it with `command_prompt`! ``` -regsvr32.exe #{dll_name} +"IF "%PROCESSOR_ARCHITECTURE%"=="AMD64" (C:\Windows\syswow64\regsvr32.exe /s #{dll_name}) ELSE ( regsvr32.exe /s #{dll_name} )" ```