Deploy WMF5.0 on Windows 7
Tags
attack-pattern: Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 4865e567-0fdf-4a90-bbe8-c3e8349d46c3
Fingerprint 84ec4ded52744c4
Analysis status DONE
Considered CTI value 0
Text language
Published May 17, 2016, 10:46 p.m.
Added to db Jan. 18, 2023, 10:06 p.m.
Last updated Nov. 17, 2024, 6:30 p.m.
Headline >_
Title Deploy WMF5.0 on Windows 7
Detected Hints/Tags/Attributes 28/1/20
Source URLs
Redirection Url
Details Source https://p0w3rsh3ll.wordpress.com/2016/05/17/deploy-wmf5-0-on-windows-7/
URL Provider
Details Provider Source level domain
Details wordpress.com p0w3rsh3ll.wordpress.com
Attributes
Details Type #Events CTI Value
Details Domain 64 
go.microsoft.com
Details Domain 285 
microsoft.net
Details File 35 
'powershell.exe
Details File 13 
_.key
Details File 1 
nowmf5.dat
Details File 13 
psversiontable.ps
Details File 1 
ndp452-kb2901983-x86-x64-enu_0350e593835125031f36e846ff3b936c09b8d479.exe
Details File 41 
wusa.exe
Details File 13 
runtime.dll
Details File 1 
ndp452-kb2901983-x86-x64-enu.exe
Details File 4 
2.log
Details sha256 1 
077e864cc83739ac53750c97a506e1211f637c3cd6da320c53bb01ed1ef7a98b
Details sha256 1 
fbc0889528656a3bc096f27434249f94cba12e413142aa38946fcdd8edf6f4c5
Details sha256 1 
6c2c589132e830a185c5f40f82042bee3022e721a216680bd9b3995ba86f3781
Details Microsoft Patch Numbers 1 
KB2901983
Details Microsoft Patch Numbers 2 
KB2819745
Details Microsoft Patch Numbers 3 
KB3134760
Details Url 1 
http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/ftpk/2015/01/ndp452-kb2901983-x86-x64-enu_0350e593835125031f36e846ff3b936c09b8d479.exe
Details Url 1 
https://download.microsoft.com/download/3/d/6/3d61d262-8549-4769-a660-230b67e15b25/windows6.1-kb2819745-x64-multipkg.msu
Details Url 1 
http://go.microsoft.com/fwlink/?linkid=717504