Catalog LOLBAS

LOL · Binary

Eudcedit.exe

1 technique WindowsLOLBAS GPL-3.0

UAC Bypass

UAC BypassPrivilege Escalation Windows

Once executed, the Private Charecter Editor will be opened - click OK, then click File -> Font Links. In the next window choose the option "Link with Selected Fonts" and click on Save As, then in the opened enter the command you want to execute.

Use Execute a binary or script as a high-integrity process without a UAC prompt.

eudcedit
Context
admin
Native
UAC Bypass
Detection
IOC: Processes spawned by eudcedit.exe.