ATT&CK ReferencesMicrosoft Expand Utility

Microsoft Expand Utility

Microsoft. (2017, October 15). Expand. Retrieved February 19, 2019.

Techniques0

Not cited by any technique.

None recorded.

None recorded.

Technique	Used by	Procedure example
T1140 Deobfuscate/Decode Files or Information	ToolExpand	Expand can be used to decompress a local or remote CAB file into an executable. Microsoft Expand Utility

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.