Additional expected paths for mscorsvc.dll, d3dcompiler_47.dll (#63)

wietze · Oct 21, 2023 · ada06c6 · ada06c6
1 parent 9e52118
commit ada06c6
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/yml/microsoft/built-in/d3dcompiler_47.yml b/yml/microsoft/built-in/d3dcompiler_47.yml
@@ -11,6 +11,7 @@ ExpectedLocations:
 - '%PROGRAMFILES%\wireshark'
 - '%PROGRAMFILES%\cisco systems\cisco jabber'
 - '%PROGRAMFILES%\microsoft\edge\application\%VERSION%'
+- '%PROGRAMFILES%\Google\Chrome\Application\%VERSION%'
 - '%SYSTEM32%'
 - '%SYSWOW64%'
 ExpectedSignatureInformation:

diff --git a/yml/microsoft/built-in/mscorsvc.yml b/yml/microsoft/built-in/mscorsvc.yml
@@ -5,6 +5,7 @@ Created: 2023-04-04
 Vendor: Microsoft
 ExpectedLocations:
 - '%WINDIR%\Microsoft.NET\Framework\v%VERSION%'
+- '%WINDIR%\Microsoft.NET\Framework64\v%VERSION%'
 VulnerableExecutables:
 - Path: '%WINDIR%\Microsoft.NET\Framework\v%VERSION%\mscorsvw.exe'
   Type: Sideloading