issues
search
mttaggart
/
wtfbins
WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.
MIT License
142
stars
10
forks
source link
[New WTFBin]: WTFBIN Here
#53
Open
ThureinOo
opened
3 months ago
ThureinOo
commented
3 months ago
Contributor Name:
Thurein Oo
Application/Executable:
draw.io.exe
WTF Behavior Description:
draw.io.exe uses attrib.exe to hide the file .dtmp using the command
attrib +h filename.dtmp
.
Link to Documentation of Behavior:
https://github.com/jgraph/drawio-desktop/issues/1194
https://github.com/jgraph/drawio-desktop/discussions/1535
Please provide any images for additional evidence.
attrib +h filename.dtmp.