caseysmithrc
14 lines
440 B
Markdown
14 lines
440 B
Markdown
# Change Default File Association
|
|
|
|
MITRE ATT&CK Technique: [T1042](https://attack.mitre.org/wiki/Technique/T1042)
|
|
|
|
## User file association preferences are stored under
|
|
|
|
[HKEY_CURRENT_USER]\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts
|
|
|
|
Changes to a user's preference will occur under this entry's subkeys.
|
|
|
|
## Change association with assoc.exe
|
|
|
|
cmd.exe assoc .wav="C:\Program Files\Windows Media Player\wmplayer.exe"
|