generic_cmstp_file

Table of Contents

Description

Generates a CMSTP Setup Information (.INF) file that executes a command via cmstp.exe.

Generates a CMSTP INF file. Execute via: cmstp.exe /s /ns evil.inf. cmstp.exe is a signed Microsoft binary that can bypass AppLocker.

Name	Type	Description
Command	string	The command to execute.
ServiceName	string	Service name in the INF. Default: SpecterInsight.